Trojaner-Board - Probleme mit TR/ATRAPS.GEN

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - Probleme mit TR/ATRAPS.GEN (https://www.trojaner-board.de/120980-probleme-tr-atraps-gen.html)

Probleme mit TR/ATRAPS.GEN

Liebe Experten,

ich hatte ein Problem mit Live security.
Nachdem mein Virenscanner (antivir) 2 "Probleme" beseitigt hatte, unterblieben die Meldungen von Live security.
Nun erhalte ich aber dauernd Meldungen des Virenscanners über Dateien mit Namen "TR/ATRAPS.GEN".

Eure Anweisungen für Neulinge habe ich nach bestem Wissen durchgeführt.
Hier sind die dort genannten Dateien (s.a. Anhang):

defogger_disable: Anfang

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 15:05 on 01/08/2012 (Hp)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...

-=E.O.F=-

defogger_disable: Ende

OTL: Anfang

OTL logfile created on: 01.08.2012 15:07:07 - Run 1
OTL by OldTimer - Version 3.2.55.0 Folder = C:\Dokumente und Einstellungen\Hp\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

958,73 Mb Total Physical Memory | 455,19 Mb Available Physical Memory | 47,48% Memory free
2,26 Gb Paging File | 1,52 Gb Available in Paging File | 67,39% Paging File free
Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 19,53 Gb Total Space | 6,83 Gb Free Space | 34,98% Space Free | Partition Type: NTFS
Drive D: | 54,99 Gb Total Space | 23,67 Gb Free Space | 43,05% Space Free | Partition Type: NTFS
Drive G: | 7,31 Gb Total Space | 3,95 Gb Free Space | 53,97% Space Free | Partition Type: FAT32

Computer Name: HPE | User Name: Hp | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.08.01 15:06:29 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe
PRC - [2012.08.01 15:04:15 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Defogger.exe
PRC - [2012.07.19 12:04:24 | 000,913,888 | ---- | M] (Mozilla Corporation) -- D:\Programme\Mozilla Firefox\firefox.exe
PRC - [2012.07.19 11:41:14 | 000,400,352 | ---- | M] (Mozilla Corporation) -- D:\Programme\Mozilla Thunderbird\thunderbird.exe
PRC - [2012.07.11 16:57:30 | 000,935,008 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe
PRC - [2012.07.11 16:57:11 | 001,107,552 | ---- | M] () -- C:\Programme\AVG Secure Search\vprot.exe
PRC - [2012.05.14 15:04:50 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.14 15:04:49 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2012.05.14 15:04:49 | 000,391,632 | ---- | M] (Avira Operations GmbH & Co. KG) -- c:\Programme\Avira\AntiVir Desktop\avcenter.exe
PRC - [2012.05.14 15:04:49 | 000,375,760 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe
PRC - [2012.05.14 15:04:49 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.14 15:04:49 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.05.14 15:04:49 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.12.14 13:23:34 | 001,212,224 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe
PRC - [2011.12.14 13:23:32 | 001,514,304 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe
PRC - [2011.11.09 21:05:42 | 002,420,616 | ---- | M] (Check Point Software Technologies LTD) -- D:\Programme\CheckPoint\CheckPoint\ZoneAlarm\vsmon.exe
PRC - [2011.11.09 21:01:38 | 000,073,360 | ---- | M] (Check Point Software Technologies LTD) -- D:\Programme\CheckPoint\CheckPoint\ZoneAlarm\zatray.exe
PRC - [2011.11.03 16:44:28 | 000,497,280 | ---- | M] (Check Point Software Technologies) -- C:\Programme\CheckPoint\ZAForceField\ISWSVC.exe
PRC - [2011.11.03 16:44:24 | 000,738,944 | ---- | M] (Check Point Software Technologies) -- C:\Programme\CheckPoint\ZAForceField\ForceField.exe
PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

========== Modules (No Company Name) ==========

MOD - [2012.08.01 15:04:15 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Defogger.exe
MOD - [2012.07.19 12:04:22 | 002,003,424 | ---- | M] () -- D:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2012.07.19 11:41:19 | 001,936,352 | ---- | M] () -- D:\Programme\Mozilla Thunderbird\mozjs.dll
MOD - [2012.07.19 11:41:19 | 000,162,784 | ---- | M] () -- D:\Programme\Mozilla Thunderbird\nsldap32v60.dll
MOD - [2012.07.19 11:41:19 | 000,021,984 | ---- | M] () -- D:\Programme\Mozilla Thunderbird\nsldappr32v60.dll
MOD - [2012.07.11 16:57:40 | 000,132,704 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\AVG Secure Search\SiteSafetyInstaller\11.2.0\SiteSafety.dll
MOD - [2012.07.11 16:57:30 | 000,935,008 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe
MOD - [2012.07.11 16:57:11 | 001,107,552 | ---- | M] () -- C:\Programme\AVG Secure Search\vprot.exe
MOD - [2012.05.14 15:04:50 | 000,398,288 | ---- | M] () -- C:\Programme\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2009.02.27 17:41:26 | 000,311,296 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU
MOD - [2001.10.28 18:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012.07.29 13:01:47 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.07.19 12:04:23 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012.07.11 16:57:30 | 000,935,008 | ---- | M] () [Auto | Running] -- C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\11.2.0\ToolbarUpdater.exe -- (vToolbarUpdater11.2.0)
SRV - [2012.05.14 15:04:50 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.14 15:04:49 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)
SRV - [2012.05.14 15:04:49 | 000,375,760 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)
SRV - [2012.05.14 15:04:49 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.12.14 13:23:32 | 001,514,304 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2011.11.09 21:05:42 | 002,420,616 | ---- | M] (Check Point Software Technologies LTD) [Auto | Running] -- D:\Programme\CheckPoint\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon)
SRV - [2011.11.03 16:44:28 | 000,497,280 | ---- | M] (Check Point Software Technologies) [Auto | Running] -- C:\Programme\CheckPoint\ZAForceField\ISWSVC.exe -- (IswSvc)
SRV - [2011.06.24 17:30:48 | 000,393,112 | ---- | M] (Spigot, Inc.) [Disabled | Stopped] -- C:\Programme\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Disabled | Stopped] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010.03.29 08:53:22 | 000,068,000 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Programme\NOS\bin\getPlus_Helper.dll -- (getPlusHelper)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2012.05.14 15:04:50 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.14 15:04:50 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2012.03.24 18:02:36 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2012.03.24 18:02:36 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2011.12.12 20:31:38 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2011.11.09 21:01:38 | 000,525,840 | ---- | M] (Check Point Software Technologies LTD) [Kernel | System | Running] -- C:\WINDOWS\system32\vsdatant.sys -- (Vsdatant)
DRV - [2011.11.03 16:44:20 | 000,027,016 | ---- | M] (Check Point Software Technologies) [Kernel | Auto | Running] -- C:\Programme\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)
DRV - [2011.05.07 10:34:11 | 000,097,792 | ---- | M] (Protect Software GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ACEDRV05.sys -- (ACEDRV05)
DRV - [2008.09.24 11:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM)
DRV - [2005.03.09 15:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)
DRV - [2003.07.02 04:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\VIAAGP1.SYS -- (viaagp1)
DRV - [2000.07.24 01:01:00 | 000,019,537 | ---- | M] (Brother Industries Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\BRPAR.SYS -- (BrPar)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050
IE - HKCU\..\URLSearchHook: {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Programme\Winload\prxtbWin0.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD2.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\IE\4.5\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKCU\..\URLSearchHook: {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Programme\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = hxxp://isearch.avg.com/search?cid={758F62B8-C216-4913-9265-96C03CB09346}&mid=6dcf566e154e47d1a54cd15a92956b58-6835479ae09fc5296a25f06ad21fc3ac79e5a147&lang=de&ds=tt014&pr=sa&d=2011-12-10 14:38:33&v=10.0.0.7&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2613550
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="
FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"
FF - prefs.js..browser.startup.homepage: "hxxp://isearch.avg.com/?cid={7ECDEDD5-CF89-4DCF-A825-170331E0DA68}&mid=6dcf566e154e47d1a54cd15a92956b58-6835479ae09fc5296a25f06ad21fc3ac79e5a147&lang=de&ds=tt014&pr=sa&d=&v=&sap=hp"
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p="
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316"

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_268.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Programme\Gemeinsame Dateien\AVG Secure Search\SiteSafetyInstaller\11.2.0\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Programme\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Programme\CheckPoint\ZAForceField\TrustChecker [2012.03.09 17:50:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: D:\Programme\Mozilla Firefox\components [2012.07.19 12:04:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2012.05.05 14:47:43 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Components: D:\Programme\Mozilla Thunderbird\components [2012.06.21 16:36:51 | 000,000,000 | ---D | M]

[2010.08.06 18:14:53 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Extensions
[2010.08.06 18:14:53 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.07.26 09:36:27 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions
[2012.06.27 18:16:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.07.26 19:06:43 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.03.30 15:52:02 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010.06.24 13:31:50 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2012.07.15 11:47:34 | 000,000,000 | ---D | M] (ZoneAlarm-Sicherheit Community Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}
[2011.12.10 15:38:40 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\avg@toolbar
[2011.03.25 16:05:11 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\engine@conduit.com
[2011.12.10 15:38:42 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions
[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (FlashGot) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}
[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010.03.28 19:40:35 | 000,000,000 | ---D | M] (Winload Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{40c3cc16-7269-4b32-9531-17f2950fb06f}
[2008.08.09 13:46:26 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2008.08.09 13:46:27 | 000,000,000 | ---D | M] (IE Tab [de]) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}
[2010.07.26 19:06:44 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2008.08.09 13:46:27 | 000,000,000 | ---D | M] ("BugMeNot") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{987311C6-B504-4aa2-90BF-60CC49808D42}
[2010.07.26 19:06:43 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2008.08.09 13:46:27 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010.04.02 14:05:04 | 000,000,000 | ---D | M] (DVDVideoSoft Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}
[2008.10.16 17:18:58 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}
[2011.12.10 15:38:42 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\avg@toolbar
[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (Deutsches WÃ¶rterbuch) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2010.03.28 19:40:12 | 000,000,000 | ---D | M] (WINLOAD-Gutschein-Alarm) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\sparweltgutscheinewl@sparwelt.de
[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
[2012.04.09 14:36:36 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\ffxtlbr@babylon.com
[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\staged

O1 HOSTS File: ([2004.08.04 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Programme\Winload\prxtbWin0.dll (Conduit Ltd.)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD2.dll (Conduit Ltd.)
O2 - BHO: (ZoneAlarm Security Engine Registrar) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Programme\DealPly\DealPlyIE.dll (DealPly Technologies Ltd)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\IE\4.5\pdfforgeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Programme\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
O2 - BHO: (ZoneAlarm-Sicherheit Toolbar) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Winload Toolbar) - {40c3cc16-7269-4b32-9531-17f2950fb06f} - C:\Programme\Winload\prxtbWin0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\11.1.0.12\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Programme\pdfforge Toolbar\IE\4.5\pdfforgeToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Programme\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKLM\..\Toolbar: (ZoneAlarm-Sicherheit Toolbar) - {fc2b76fc-2132-4d80-a9a3-1f5c6e49066b} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\ShellBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (Winload Toolbar) - {40C3CC16-7269-4B32-9531-17F2950FB06F} - C:\Programme\Winload\prxtbWin0.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\prxtbDVD2.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - C:\Programme\DVDVideoSoft\prxtbDVD2.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm Security Engine) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - C:\Programme\CheckPoint\ZAForceField\Trustchecker\bin\TrustCheckerIEPlugin.dll (Check Point Software Technologies)
O3 - HKCU\..\Toolbar\WebBrowser: (ZoneAlarm-Sicherheit Toolbar) - {FC2B76FC-2132-4D80-A9A3-1F5C6E49066B} - C:\Programme\ZoneAlarm-Sicherheit\prxtbZone.dll (Conduit Ltd.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [ISW] C:\Programme\CheckPoint\ZAForceField\ForceField.exe (Check Point Software Technologies)
O4 - HKLM..\Run: [ZoneAlarm] D:\Programme\CheckPoint\CheckPoint\ZoneAlarm\zatray.exe (Check Point Software Technologies LTD)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_24.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\Programme\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Programme\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe File not found
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe File not found
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 78.42.43.62 82.212.62.62
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C8F73863-7C45-4B79-A886-BD0BD32B351C}: DhcpNameServer = 78.42.43.62 82.212.62.62
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Programme\Gemeinsame Dateien\AVG Secure Search\ViProtocolInstaller\11.2.0\ViProtocol.dll ()
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008.08.09 09:32:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{b9b63eb3-d60b-11de-8507-0013d47182ab}\Shell\AutoRun\command - "" = G:\StartPortableApps.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012.08.01 15:06:28 | 000,597,504 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe
[2012.08.01 14:27:10 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Hp\Recent
[2012.08.01 09:17:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Startmenü\Programme\Live Security Platinum
[2012.08.01 09:16:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\6F63A56600001AB8000019DD7B07D287
[2012.07.16 13:27:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WISO Steuer 2012
[2012.07.16 13:26:01 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2008.05.30 14:37:10 | 001,694,728 | ---- | C] (Microsoft Corporation) -- C:\Programme\dsetup32.dll
[2008.05.30 14:35:56 | 000,097,288 | ---- | C] (Microsoft Corporation) -- C:\Programme\DSETUP.dll
[2008.05.30 14:34:50 | 000,528,392 | ---- | C] (Microsoft Corporation) -- C:\Programme\DXSETUP.exe
[11 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012.08.01 15:12:24 | 000,302,592 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\x0g99d80.exe
[2012.08.01 15:10:56 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.08.01 15:06:29 | 000,597,504 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe
[2012.08.01 15:05:28 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\defogger_reenable
[2012.08.01 15:04:15 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Defogger.exe
[2012.08.01 15:01:05 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012.08.01 14:20:00 | 000,001,082 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.08.01 14:07:42 | 000,001,078 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.08.01 14:07:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.08.01 09:24:46 | 000,000,038 | ---- | M] () -- C:\WINDOWS\System32\mscandc.ini
[2012.07.31 16:12:08 | 000,000,424 | ---- | M] () -- C:\WINDOWS\zipgenius.xml
[2012.07.31 11:12:20 | 000,000,035 | ---- | M] () -- C:\WINDOWS\Ulead32.INI
[2012.07.30 10:26:27 | 000,459,588 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.07.30 10:26:27 | 000,441,696 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.07.30 10:26:27 | 000,084,960 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.07.30 10:26:27 | 000,071,632 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.07.16 18:03:19 | 000,000,930 | ---- | M] () -- C:\WINDOWS\wiso.ini
[2012.07.12 13:46:08 | 000,003,827 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Maple9.5.ini
[2012.07.12 11:25:24 | 000,345,345 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Untitled5_MAS.bak
[2012.07.12 08:28:59 | 000,215,264 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.07.11 18:18:49 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[11 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012.08.01 15:12:23 | 000,302,592 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\x0g99d80.exe
[2012.08.01 15:05:28 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\defogger_reenable
[2012.08.01 15:04:14 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Defogger.exe
[2012.08.01 14:33:46 | 000,001,712 | ---- | C] () -- C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\U\00000001.@
[2012.05.19 11:49:34 | 000,044,098 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\usrlgo.bmp
[2012.02.25 11:25:12 | 000,345,345 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled5_MAS.bak
[2012.02.14 21:48:58 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.01.20 19:44:14 | 000,222,089 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled3_MAS.bak
[2011.12.16 20:56:31 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2011.11.29 22:13:18 | 000,000,849 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\.recently-used.xbel
[2011.10.20 13:24:23 | 000,067,320 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled1_MAS.bak
[2011.08.08 17:33:00 | 000,003,163 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled10_MAS.bak
[2011.08.08 17:28:22 | 000,155,546 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled4_MAS.bak
[2011.08.08 17:18:34 | 000,367,598 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled2_MAS.bak
[2011.03.20 11:17:59 | 000,823,296 | ---- | C] () -- C:\WINDOWS\j3dcore-d3d.dll
[2011.03.20 11:17:59 | 000,163,840 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl.dll
[2011.03.20 11:17:59 | 000,049,152 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl-chk.dll
[2011.03.20 11:17:59 | 000,040,960 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl-cg.dll
[2010.12.25 11:21:50 | 001,456,640 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Falk Navi-Manager.msi
[2010.12.25 11:21:27 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\$_hpcst$.hpc
[2010.05.05 18:06:55 | 000,499,743 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled0_MAS.bak
[2009.11.20 09:28:25 | 000,005,943 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\mainhst.zgh
[2009.01.03 12:32:49 | 000,003,827 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Maple9.5.ini
[2008.09.10 17:02:04 | 000,008,810 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\gsview32.ini
[2008.08.10 17:40:41 | 000,007,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.05.30 14:38:30 | 001,158,739 | ---- | C] () -- C:\Programme\BDANT.cab
[2008.05.30 14:38:30 | 001,130,465 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x86.cab
[2008.05.30 14:38:30 | 001,118,469 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x86.cab
[2008.05.30 14:38:30 | 001,087,968 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x86.cab
[2008.05.30 14:38:30 | 001,082,704 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x86.cab
[2008.05.30 14:38:30 | 001,082,210 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x86.cab
[2008.05.30 14:38:28 | 001,080,892 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x86.cab
[2008.05.30 14:38:26 | 001,068,173 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x86.cab
[2008.05.30 14:38:26 | 001,016,473 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x86.cab
[2008.05.30 14:38:26 | 000,978,396 | ---- | C] () -- C:\Programme\BDAXP.cab
[2008.05.30 14:38:26 | 000,919,678 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86.cab
[2008.05.30 14:38:26 | 000,867,848 | ---- | C] () -- C:\Programme\Nov2007_d3dx10_36_x64.cab
[2008.05.30 14:38:26 | 000,855,534 | ---- | C] () -- C:\Programme\AUG2007_d3dx10_35_x64.cab
[2008.05.30 14:38:24 | 000,871,076 | ---- | C] () -- C:\Programme\Jun2008_d3dx10_38_x64.cab
[2008.05.30 14:38:24 | 000,853,167 | ---- | C] () -- C:\Programme\Jun2008_d3dx10_38_x86.cab
[2008.05.30 14:38:24 | 000,848,132 | ---- | C] () -- C:\Programme\Mar2008_d3dx10_37_x64.cab
[2008.05.30 14:38:24 | 000,807,132 | ---- | C] () -- C:\Programme\Nov2007_d3dx10_36_x86.cab
[2008.05.30 14:38:24 | 000,702,292 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x64.cab
[2008.05.30 14:38:22 | 000,821,508 | ---- | C] () -- C:\Programme\Mar2008_d3dx10_37_x86.cab
[2008.05.30 14:38:22 | 000,800,115 | ---- | C] () -- C:\Programme\AUG2007_d3dx10_35_x86.cab
[2008.05.30 14:38:22 | 000,701,860 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x64.cab
[2008.05.30 14:38:20 | 000,701,720 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x86.cab
[2008.05.30 14:38:18 | 000,272,876 | ---- | C] () -- C:\Programme\Jun2008_XAudio_x64.cab
[2008.05.30 14:38:16 | 000,699,113 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x86.cab
[2008.05.30 14:38:16 | 000,254,442 | ---- | C] () -- C:\Programme\Mar2008_XAudio_x64.cab
[2008.05.30 14:38:14 | 000,272,272 | ---- | C] () -- C:\Programme\Jun2008_XAudio_x86.cab
[2008.05.30 14:38:14 | 000,229,498 | ---- | C] () -- C:\Programme\Mar2008_XAudio_x86.cab
[2008.05.30 14:38:14 | 000,216,055 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x64.cab
[2008.05.30 14:38:12 | 000,201,344 | ---- | C] () -- C:\Programme\AUG2007_XACT_x64.cab
[2008.05.30 14:38:12 | 000,200,370 | ---- | C] () -- C:\Programme\JUN2007_XACT_x64.cab
[2008.05.30 14:38:12 | 000,200,010 | ---- | C] () -- C:\Programme\NOV2007_XACT_x64.cab
[2008.05.30 14:38:12 | 000,197,923 | ---- | C] () -- C:\Programme\FEB2007_XACT_x64.cab
[2008.05.30 14:38:10 | 000,186,151 | ---- | C] () -- C:\Programme\AUG2006_XACT_x64.cab
[2008.05.30 14:38:10 | 000,185,609 | ---- | C] () -- C:\Programme\OCT2006_XACT_x64.cab
[2008.05.30 14:38:08 | 000,199,014 | ---- | C] () -- C:\Programme\APR2007_XACT_x64.cab
[2008.05.30 14:38:08 | 000,194,968 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x86.cab
[2008.05.30 14:38:06 | 000,195,723 | ---- | C] () -- C:\Programme\DEC2006_XACT_x64.cab
[2008.05.30 14:38:06 | 000,184,033 | ---- | C] () -- C:\Programme\JUN2006_XACT_x64.cab
[2008.05.30 14:38:04 | 000,182,381 | ---- | C] () -- C:\Programme\Apr2006_XACT_x64.cab
[2008.05.30 14:38:04 | 000,181,607 | ---- | C] () -- C:\Programme\Feb2006_XACT_x64.cab
[2008.05.30 14:38:04 | 000,156,157 | ---- | C] () -- C:\Programme\JUN2007_XACT_x86.cab
[2008.05.30 14:38:04 | 000,151,512 | ---- | C] () -- C:\Programme\NOV2007_XACT_x86.cab
[2008.05.30 14:38:04 | 000,151,231 | ---- | C] () -- C:\Programme\FEB2007_XACT_x86.cab
[2008.05.30 14:38:02 | 000,156,260 | ---- | C] () -- C:\Programme\AUG2007_XACT_x86.cab
[2008.05.30 14:38:00 | 000,154,473 | ---- | C] () -- C:\Programme\APR2007_XACT_x86.cab
[2008.05.30 14:38:00 | 000,136,351 | ---- | C] () -- C:\Programme\Apr2006_XACT_x86.cab
[2008.05.30 14:37:58 | 000,148,847 | ---- | C] () -- C:\Programme\DEC2006_XACT_x86.cab
[2008.05.30 14:37:58 | 000,135,657 | ---- | C] () -- C:\Programme\Feb2006_XACT_x86.cab
[2008.05.30 14:37:56 | 000,141,265 | ---- | C] () -- C:\Programme\OCT2006_XACT_x86.cab
[2008.05.30 14:37:56 | 000,140,483 | ---- | C] () -- C:\Programme\AUG2006_XACT_x86.cab
[2008.05.30 14:37:56 | 000,136,919 | ---- | C] () -- C:\Programme\JUN2006_XACT_x86.cab
[2008.05.30 14:37:54 | 000,056,550 | ---- | C] () -- C:\Programme\APR2007_xinput_x86.cab
[2008.05.30 14:37:52 | 000,125,584 | ---- | C] () -- C:\Programme\Mar2008_XACT_x64.cab
[2008.05.30 14:37:52 | 000,124,302 | ---- | C] () -- C:\Programme\Jun2008_XACT_x64.cab
[2008.05.30 14:37:52 | 000,100,065 | ---- | C] () -- C:\Programme\APR2007_xinput_x64.cab
[2008.05.30 14:37:52 | 000,058,402 | ---- | C] () -- C:\Programme\Jun2008_X3DAudio_x64.cab
[2008.05.30 14:37:52 | 000,049,306 | ---- | C] () -- C:\Programme\AUG2006_xinput_x86.cab
[2008.05.30 14:37:50 | 000,058,306 | ---- | C] () -- C:\Programme\Mar2008_X3DAudio_x64.cab
[2008.05.30 14:37:50 | 000,025,153 | ---- | C] () -- C:\Programme\Jun2008_X3DAudio_x86.cab
[2008.05.30 14:37:48 | 000,097,916 | ---- | C] () -- C:\Programme\dxupdate.cab
[2008.05.30 14:37:48 | 000,049,258 | ---- | C] () -- C:\Programme\Apr2006_xinput_x86.cab
[2008.05.30 14:37:48 | 000,048,607 | ---- | C] () -- C:\Programme\Oct2005_xinput_x86.cab
[2008.05.30 14:37:46 | 000,090,390 | ---- | C] () -- C:\Programme\AUG2006_xinput_x64.cab
[2008.05.30 14:37:46 | 000,090,349 | ---- | C] () -- C:\Programme\Apr2006_xinput_x64.cab
[2008.05.30 14:37:46 | 000,047,700 | ---- | C] () -- C:\Programme\dxdllreg_x86.cab
[2008.05.30 14:37:44 | 000,049,392 | ---- | C] () -- C:\Programme\NOV2007_X3DAudio_x64.cab
[2008.05.30 14:37:42 | 000,096,982 | ---- | C] () -- C:\Programme\Mar2008_XACT_x86.cab
[2008.05.30 14:37:42 | 000,096,376 | ---- | C] () -- C:\Programme\Jun2008_XACT_x86.cab
[2008.05.30 14:37:42 | 000,089,285 | ---- | C] () -- C:\Programme\Oct2005_xinput_x64.cab
[2008.05.30 14:37:42 | 000,025,115 | ---- | C] () -- C:\Programme\Mar2008_X3DAudio_x86.cab
[2008.05.30 14:37:42 | 000,021,744 | ---- | C] () -- C:\Programme\NOV2007_X3DAudio_x86.cab
[2008.05.30 14:36:04 | 013,267,416 | ---- | C] () -- C:\Programme\dxnt.cab
[2008.05.30 14:36:02 | 004,165,878 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86_Archive.cab
[2008.05.30 14:36:02 | 001,805,306 | ---- | C] () -- C:\Programme\Nov2007_d3dx9_36_x64.cab
[2008.05.30 14:36:00 | 001,803,408 | ---- | C] () -- C:\Programme\AUG2007_d3dx9_35_x64.cab
[2008.05.30 14:35:56 | 001,795,856 | ---- | C] () -- C:\Programme\Jun2008_d3dx9_38_x64.cab
[2008.05.30 14:35:56 | 001,773,110 | ---- | C] () -- C:\Programme\Mar2008_d3dx9_37_x64.cab
[2008.05.30 14:35:56 | 001,712,608 | ---- | C] () -- C:\Programme\Nov2007_d3dx9_36_x86.cab
[2008.05.30 14:35:56 | 001,711,400 | ---- | C] () -- C:\Programme\AUG2007_d3dx9_35_x86.cab
[2008.05.30 14:35:56 | 001,611,022 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x64.cab
[2008.05.30 14:35:56 | 001,610,606 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x64.cab
[2008.05.30 14:35:56 | 001,610,534 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x86.cab
[2008.05.30 14:35:56 | 001,609,287 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x86.cab
[2008.05.30 14:35:56 | 001,577,624 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x86.cab
[2008.05.30 14:35:56 | 001,574,402 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x64.cab
[2008.05.30 14:35:56 | 001,467,126 | ---- | C] () -- C:\Programme\Jun2008_d3dx9_38_x86.cab
[2008.05.30 14:35:56 | 001,446,530 | ---- | C] () -- C:\Programme\Mar2008_d3dx9_37_x86.cab
[2008.05.30 14:35:56 | 001,416,150 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x64.cab
[2008.05.30 14:35:56 | 001,401,078 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x64.cab
[2008.05.30 14:35:56 | 001,361,224 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x64.cab
[2008.05.30 14:35:56 | 001,339,250 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x64.cab
[2008.05.30 14:35:54 | 001,366,044 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x64.cab
[2008.05.30 14:35:54 | 001,353,790 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x64.cab
[2008.05.30 14:35:54 | 001,350,602 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x64.cab
[2008.05.30 14:35:54 | 001,250,747 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x64.cab
[2004.08.04 14:00:00 | 000,002,048 | -HS- | C] () -- C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\@
[2004.08.04 14:00:00 | 000,002,048 | -HS- | C] () -- C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\{170ff124-1ba0-a426-70fe-860c313d0703}\@

========== LOP Check ==========

[2012.08.01 14:19:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\6F63A56600001AB8000019DD7B07D287
[2012.07.16 13:41:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG Secure Search
[2012.04.09 14:36:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2012.07.16 14:01:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Buhl Data Service GmbH
[2011.11.12 09:11:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CheckPoint
[2011.12.10 15:38:17 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2008.12.06 20:31:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF 4
[2008.08.09 10:37:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier
[2011.08.29 18:37:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Power Soft
[2011.10.14 17:43:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2010.10.29 15:20:21 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2011.10.14 17:41:49 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2010.04.30 08:27:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2009.01.30 14:54:34 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{55A29068-F2CE-456C-9148-C869879E2357}
[2009.10.31 14:57:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2009.10.30 19:26:51 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}

========== Purity Check ==========

< End of report >

OTL: Ende

Vielen Dank für Eure Hilfe.

Herzliche Grüße
Hanspeter

Zitat:

Nachdem mein Virenscanner (antivir) 2 "Probleme" beseitigt hatte, unterblieben die Meldungen von Live security.
Nun erhalte ich aber dauernd Meldungen des Virenscanners über Dateien mit Namen "TR/ATRAPS.GEN".

Schön und wo sind die Logs dazu? http://cosgan.de/images/midi/boese/a040.gif

Solche Angaben reichen nicht, bitte poste die vollständigen Angaben/Logs der Virenscanner.

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

Zitat:

(Check Point Software Technologies LTD) [Auto | Running] -- D:\Programme\CheckPoint\CheckPoint\ZoneAlarm\vsmon.exe -- (vsmon)

ZoneAlarm ist kontraproduktiver Müll, Finger weg davon!
bitte umgehend deinstallieren und die Windows-Firewall einschalten!

Lieber Arne,
vielen Dank für die Hilfe.
Ich hoffe, dass die folgenden Informationen die gewünschten sind:

Code:


 

Avira Antivirus Premium 2012

Erstellungsdatum der Reportdatei: Donnerstag, 2. August 2012  15:46
 

Es wird nach 4044902 Virenstämmen gesucht.
 

Das Programm läuft als uneingeschränkte Vollversion.

Online-Dienste stehen zur Verfügung.
 

Lizenznehmer   : Hanspeter Eichhorn

Seriennummer   : 2218436276-PEPWE-0000001

Plattform      : Microsoft Windows XP

Windowsversion : (Service Pack 3)  [5.1.2600]

Boot Modus     : Normal gebootet

Benutzername   : SYSTEM

Computername   : HPE
 

Versionsinformationen:

BUILD.DAT      : 12.0.0.1145    42650 Bytes  23.05.2012 17:04:00

AVSCAN.EXE     : 12.3.0.15     466896 Bytes  14.05.2012 13:04:49

AVSCAN.DLL     : 12.3.0.15      66256 Bytes  14.05.2012 13:04:49

LUKE.DLL       : 12.3.0.15      68304 Bytes  14.05.2012 13:04:50

AVSCPLR.DLL    : 12.3.0.14      97032 Bytes  08.05.2012 13:02:24

AVREG.DLL      : 12.3.0.17     232200 Bytes  10.05.2012 17:02:44

VBASE000.VDF   : 7.10.0.0    19875328 Bytes  06.11.2009 15:43:17

VBASE001.VDF   : 7.11.0.0    13342208 Bytes  14.12.2010 18:52:21

VBASE002.VDF   : 7.11.19.170 14374912 Bytes  20.12.2011 17:45:31

VBASE003.VDF   : 7.11.21.238  4472832 Bytes  01.02.2012 09:48:14

VBASE004.VDF   : 7.11.26.44   4329472 Bytes  28.03.2012 10:51:56

VBASE005.VDF   : 7.11.34.116  4034048 Bytes  29.06.2012 15:43:15

VBASE006.VDF   : 7.11.34.117     2048 Bytes  29.06.2012 15:43:15

VBASE007.VDF   : 7.11.34.118     2048 Bytes  29.06.2012 15:43:15

VBASE008.VDF   : 7.11.34.119     2048 Bytes  29.06.2012 15:43:15

VBASE009.VDF   : 7.11.34.120     2048 Bytes  29.06.2012 15:43:15

VBASE010.VDF   : 7.11.34.121     2048 Bytes  29.06.2012 15:43:15

VBASE011.VDF   : 7.11.34.122     2048 Bytes  29.06.2012 15:43:15

VBASE012.VDF   : 7.11.34.123     2048 Bytes  29.06.2012 15:43:15

VBASE013.VDF   : 7.11.34.124     2048 Bytes  29.06.2012 15:43:15

VBASE014.VDF   : 7.11.38.18   2554880 Bytes  30.07.2012 15:47:13

VBASE015.VDF   : 7.11.38.70    556032 Bytes  31.07.2012 14:06:11

VBASE016.VDF   : 7.11.38.71      2048 Bytes  31.07.2012 14:06:11

VBASE017.VDF   : 7.11.38.72      2048 Bytes  31.07.2012 14:06:11

VBASE018.VDF   : 7.11.38.73      2048 Bytes  31.07.2012 14:06:11

VBASE019.VDF   : 7.11.38.74      2048 Bytes  31.07.2012 14:06:11

VBASE020.VDF   : 7.11.38.75      2048 Bytes  31.07.2012 14:06:11

VBASE021.VDF   : 7.11.38.76      2048 Bytes  31.07.2012 14:06:11

VBASE022.VDF   : 7.11.38.77      2048 Bytes  31.07.2012 14:06:11

VBASE023.VDF   : 7.11.38.78      2048 Bytes  31.07.2012 14:06:11

VBASE024.VDF   : 7.11.38.79      2048 Bytes  31.07.2012 14:06:11

VBASE025.VDF   : 7.11.38.80      2048 Bytes  31.07.2012 14:06:12

VBASE026.VDF   : 7.11.38.81      2048 Bytes  31.07.2012 14:06:12

VBASE027.VDF   : 7.11.38.82      2048 Bytes  31.07.2012 14:06:12

VBASE028.VDF   : 7.11.38.83      2048 Bytes  31.07.2012 14:06:12

VBASE029.VDF   : 7.11.38.84      2048 Bytes  31.07.2012 14:06:12

VBASE030.VDF   : 7.11.38.85      2048 Bytes  31.07.2012 14:06:12

VBASE031.VDF   : 7.11.38.120    87040 Bytes  01.08.2012 12:35:28

Engineversion  : 8.2.10.120

AEVDF.DLL      : 8.1.2.10      102772 Bytes  11.07.2012 15:45:28

AESCRIPT.DLL   : 8.1.4.36      459131 Bytes  27.07.2012 13:46:57

AESCN.DLL      : 8.1.8.2       131444 Bytes  27.01.2012 14:00:18

AESBX.DLL      : 8.2.5.12      606578 Bytes  14.06.2012 13:05:15

AERDL.DLL      : 8.1.9.15      639348 Bytes  11.09.2011 10:38:08

AEPACK.DLL     : 8.3.0.18      807287 Bytes  27.07.2012 13:46:56

AEOFFICE.DLL   : 8.1.2.42      201083 Bytes  21.07.2012 11:47:55

AEHEUR.DLL     : 8.1.4.80     5075318 Bytes  27.07.2012 13:46:55

AEHELP.DLL     : 8.1.23.2      258422 Bytes  28.06.2012 11:42:52

AEGEN.DLL      : 8.1.5.34      434548 Bytes  21.07.2012 11:47:44

AEEXP.DLL      : 8.1.0.72       86389 Bytes  27.07.2012 13:46:57

AEEMU.DLL      : 8.1.3.2       393587 Bytes  11.07.2012 15:45:27

AECORE.DLL     : 8.1.27.2      201078 Bytes  11.07.2012 15:45:26

AEBB.DLL       : 8.1.1.0        53618 Bytes  24.04.2010 14:57:51

AVWINLL.DLL    : 12.3.0.15      27344 Bytes  14.05.2012 13:04:48

AVPREF.DLL     : 12.3.0.15      51920 Bytes  14.05.2012 13:04:49

AVREP.DLL      : 12.3.0.15     179208 Bytes  08.05.2012 13:02:23

AVARKT.DLL     : 12.3.0.15     211408 Bytes  14.05.2012 13:04:49

AVEVTLOG.DLL   : 12.3.0.15     169168 Bytes  14.05.2012 13:04:49

SQLITE3.DLL    : 3.7.0.1       398288 Bytes  14.05.2012 13:04:50

AVSMTP.DLL     : 12.3.0.15      63952 Bytes  14.05.2012 13:04:49

NETNT.DLL      : 12.3.0.15      17104 Bytes  14.05.2012 13:04:50

RCIMAGE.DLL    : 12.3.0.15    4491472 Bytes  14.05.2012 13:04:48

RCTEXT.DLL     : 12.3.0.15      98512 Bytes  14.05.2012 13:04:48
 

Konfiguration für den aktuellen Suchlauf:

Job Name..............................: AVGuardAsyncScan

Konfigurationsdatei...................: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira\AntiVir Desktop\TEMP\AVGUARD_501a396d\guard_slideup.avp

Protokollierung.......................: standard

Primäre Aktion........................: reparieren

Sekundäre Aktion......................: quarantäne

Durchsuche Masterbootsektoren.........: ein

Durchsuche Bootsektoren...............: aus

Durchsuche aktive Programme...........: ein

Durchsuche Registrierung..............: aus

Suche nach Rootkits...................: aus

Integritätsprüfung von Systemdateien..: aus

Datei Suchmodus.......................: Alle Dateien

Durchsuche Archive....................: ein

Rekursionstiefe einschränken..........: 20

Archiv Smart Extensions...............: ein

Makrovirenheuristik...................: ein

Dateiheuristik........................: vollständig
 

Beginn des Suchlaufs: Donnerstag, 2. August 2012  15:46
 

Der Suchlauf über gestartete Prozesse wird begonnen:

Durchsuche Prozess 'avscan.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'WINWORD.EXE' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'msdtc.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'dllhost.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'AcroRd32.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'wmiapsrv.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'TuneUpUtilitiesApp32.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'AVWEBGRD.EXE' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'avmailc.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'avshadow.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'ToolbarUpdater.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'TuneUpUtilitiesService32.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'jqs.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'avguard.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'avgnt.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'ForceField.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'sched.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'spoolsv.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'brss01a.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'brsvc01a.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'IswSvc.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'Explorer.EXE' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'svchost.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'lsass.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'services.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'winlogon.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'csrss.exe' - '1' Modul(e) wurden durchsucht

Durchsuche Prozess 'smss.exe' - '1' Modul(e) wurden durchsucht
 

Der Suchlauf über die ausgewählten Dateien wird begonnen:
 

Beginne mit der Suche in 'C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\U\80000000.@'

C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\U\80000000.@

  [FUND]      Ist das Trojanische Pferd TR/ATRAPS.Gen

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '52112470.qua' verschoben!

Beginne mit der Suche in 'C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\U\800000cb.@'

C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\U\800000cb.@

  [FUND]      Ist das Trojanische Pferd TR/ATRAPS.Gen2

  [HINWEIS]   Die Datei wurde ins Quarantäneverzeichnis unter dem Namen '4a860bd7.qua' verschoben!
 
 

Ende des Suchlaufs: Donnerstag, 2. August 2012  15:47

Benötigte Zeit: 00:12 Minute(n)
 

Der Suchlauf wurde vollständig durchgeführt.
 

      0 Verzeichnisse wurden überprüft

     36 Dateien wurden geprüft

      2 Viren bzw. unerwünschte Programme wurden gefunden

      0 Dateien wurden als verdächtig eingestuft

      0 Dateien wurden gelöscht

      0 Viren bzw. unerwünschte Programme wurden repariert

      2 Dateien wurden in die Quarantäne verschoben

      0 Dateien wurden umbenannt

      0 Dateien konnten nicht durchsucht werden

     34 Dateien ohne Befall

      0 Archive wurden durchsucht

      0 Warnungen

      2 Hinweise

Ich bin - was die PC-Innereien anbetrifft - Laie und hoffe auf weitere Hilfe.
Wenn Sie ein bißchen Zeit haben könnten Sie vielleicht auch die Äußerung "Zonealarm ist kontraproduktiver Müll" etwas näher erläutern.

Vielen Dank und herzliche Grüße
HanspeterE

Lies einfach mal hier, ich denke dann sollte es etwas klarer werden:

Die Vertrauensbrecher c't Editorial über Internet Security Suites und warum sie idR nichts taugen
Oberthal online: Personal Firewalls: Sinnvoll oder sinnfrei?
personal firewalls ? Wiki ? ubuntuusers.de

Dann wirst Du feststellen, dass es einfach nur unnötig ist, sich das System mit einer weiteren "Schutzkomponente" zu verhunzen... :rolleyes:

Malwarebefall vermeiden kannst Du sowieso nur, wenn Du selbst Dein verhalten in den Griff bekommst => Kompromittierung unvermeidbar?

Hallo Arne,
vielen Dank für die grundsätzlichen Informationen.
Könnten Sie mir bitte noch Hinweise zur Beseitigung meines aktuellen Problems TR/ATRAPS.GEN geben.
Vielen Dank.
Herzliche Grüße
HanspeterE

Deinstalliere erst ZoneAlarm
Mach dann mit Malwarebytes und ESET weiter:

Bitte erstmal routinemäßig einen Vollscan mit malwarebytes machen und Log posten. =>ALLE lokalen Datenträger (außer CD/DVD) überprüfen lassen!
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Die Funde mit Malwarebytes bitte alle entfernen, sodass sie in der Quarantäne von Malwarebytes aufgehoben werden! NICHTS voreilig aus der Quarantäne entfernen!

Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

Hallo Arne,
vielen DanK!
Hier die geforderten Logs:

Malwarebytes:

Code:

Malwarebytes Anti-Malware (Test) 1.62.0.1300

www.malwarebytes.org
 

Datenbank Version: v2012.08.05.07
 

Windows XP Service Pack 3 x86 NTFS

Internet Explorer 6.0.2900.5512

Hp :: HPE [Administrator]
 

Schutz: Aktiviert
 

05.08.2012 19:03:15

mbam-log-2012-08-05 (19-03-15).txt
 

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|G:\|)

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 343586

Laufzeit: 3 Stunde(n), 16 Minute(n), 27 Sekunde(n)
 

Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateiobjekte der Registrierung: 1

HKCR\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32| (Trojan.Zaccess) -> Bösartig: (\\.\globalroot\systemroot\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\n.) Gut: (wbemess.dll) -> Erfolgreich ersetzt und in Quarantäne gestellt.
 

Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)
 

Infizierte Dateien: 1

D:\Programme\ClearProg\eBay\eBayShortcuts.exe (Adware.ADON) -> Erfolgreich gelöscht und in Quarantäne gestellt.
 

(Ende)

Noch mal Malwarebytes:

Code:

2012/08/05 19:00:14 +0200        HPE        Hp        MESSAGE        Starting protection

2012/08/05 19:00:23 +0200        HPE        Hp        MESSAGE        Protection started successfully

2012/08/05 19:00:26 +0200        HPE        Hp        MESSAGE        Starting IP protection

2012/08/05 19:00:41 +0200        HPE        Hp        MESSAGE        IP Protection started successfully

2012/08/05 19:01:24 +0200        HPE        Hp        MESSAGE        Starting database refresh

2012/08/05 19:01:24 +0200        HPE        Hp        MESSAGE        Stopping IP protection

2012/08/05 19:01:24 +0200        HPE        Hp        MESSAGE        IP Protection stopped

2012/08/05 19:01:45 +0200        HPE        Hp        MESSAGE        Database refreshed successfully

2012/08/05 19:01:45 +0200        HPE        Hp        MESSAGE        Starting IP protection

2012/08/05 19:02:01 +0200        HPE        Hp        MESSAGE        IP Protection started successfully

2012/08/05 22:24:06 +0200        HPE        Hp        MESSAGE        Starting protection

2012/08/05 22:24:20 +0200        HPE        Hp        MESSAGE        Protection started successfully

2012/08/05 22:24:23 +0200        HPE        Hp        MESSAGE        Starting IP protection

2012/08/05 22:24:36 +0200        HPE        Hp        MESSAGE        IP Protection started successfully

2012/08/05 22:47:56 +0200        HPE        Hp        MESSAGE        Executing scheduled update:  Daily

2012/08/05 22:48:11 +0200        HPE        Hp        MESSAGE        Scheduled update executed successfully:  database updated from version v2012.08.05.07 to version v2012.08.05.08

2012/08/05 22:48:11 +0200        HPE        Hp        MESSAGE        Starting database refresh

2012/08/05 22:48:11 +0200        HPE        Hp        MESSAGE        Stopping IP protection

2012/08/05 22:48:11 +0200        HPE        Hp        MESSAGE        IP Protection stopped

2012/08/05 22:48:20 +0200        HPE        Hp        MESSAGE        Database refreshed successfully

2012/08/05 22:48:20 +0200        HPE        Hp        MESSAGE        Starting IP protection

2012/08/05 22:48:33 +0200        HPE        Hp        MESSAGE        IP Protection started successfully

Eset:

Code:

ESETSmartInstaller@High as downloader log:

all ok

# version=7

# OnlineScannerApp.exe=1.0.0.1

# OnlineScanner.ocx=1.0.0.6583

# api_version=3.0.2

# EOSSerial=5fc3bc8b54046a4c852454b32c09a7a2

# end=finished

# remove_checked=false

# archives_checked=true

# unwanted_checked=true

# unsafe_checked=false

# antistealth_checked=true

# utc_time=2012-08-05 10:52:51

# local_time=2012-08-06 12:52:51 (+0100, Westeuropäische Sommerzeit)

# country="Germany"

# lang=1033

# osver=5.1.2600 NT Service Pack 3

# compatibility_mode=1792 16777175 100 0 11597149 11597149 0 0

# compatibility_mode=8192 67108863 100 0 528 528 0 0

# compatibility_mode=9217 16777214 0 9 12978865 12978867 0 0

# scanned=111370

# found=12

# cleaned=0

# scan_time=8024

C:\Dokumente und Einstellungen\Gast1\Eigene Dateien\Downloads\SweetImSetup.exe        a variant of Win32/SweetIM.B application (unable to clean)        00000000000000000000000000000000        I

C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Sun\Java\Deployment\cache\6.0\24\766972d8-66ea8ae2        Java/Exploit.CVE-2012-1723.AB trojan (unable to clean)        00000000000000000000000000000000        I

C:\Programme\Application Updater\ApplicationUpdater.exe        probably a variant of Win32/Toolbar.Widgi application (unable to clean)        00000000000000000000000000000000        I

C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarApp.dll        a variant of Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I

C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarEng.dll        Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I

C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarsrv.exe        probably a variant of Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I

C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll        Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I

C:\Programme\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll        Win32/Toolbar.Babylon application (unable to clean)        00000000000000000000000000000000        I

C:\Programme\Gemeinsame Dateien\Spigot\Search Settings\SearchSettings.exe        a variant of Win32/Toolbar.Widgi application (unable to clean)        00000000000000000000000000000000        I

C:\Programme\Gemeinsame Dateien\Spigot\wtxpcom\components\WidgiToolbarFF.dll        a variant of Win32/Toolbar.Widgi application (unable to clean)        00000000000000000000000000000000        I

C:\Programme\pdfforge Toolbar\IE\4.5\pdfforgeToolbarIE.dll        a variant of Win32/Toolbar.Widgi application (unable to clean)        00000000000000000000000000000000        I

D:\Programme\PDFCreator\Toolbar\pdfforge Toolbar_setup.exe        Win32/Toolbar.Widgi application (unable to clean)        00000000000000000000000000000000        I

Mit der Bitte um Hilfe und freundlichen Grüßen

HanspeterE

adwCleaner - Toolbars und ungewollte Start-/Suchseiten aufspüren

Downloade Dir bitte AdwCleaner auf deinen Desktop.

Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Search.
Nach Ende des Suchlaufs öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

Hallo Arne,
weiter geht's mit AdwCleaner:

Code:

# AdwCleaner v1.800 - Logfile created 08/06/2012 at 19:37:07

# Updated 01/08/2012 by Xplode

# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)

# User : Hp - HPE

# Running from : C:\Dokumente und Einstellungen\Hp\Desktop\adwcleaner.exe

# Option [Search]
 
 

***** [Services] *****
 

Found : Application Updater

Found : vToolbarUpdater11.2.0
 

***** [Files / Folders] *****
 

Folder Found : C:\DVDVideoSoft

Folder Found : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\AVG Secure Search

Folder Found : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Babylon

Folder Found : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\BabylonToolbar

Folder Found : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoft

Folder Found : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\pdfforge

Folder Found : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\PriceGong

Folder Found : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Search Settings

Folder Found : C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\pdfforge

Folder Found : C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\Search Settings

Folder Found : C:\Dokumente und Einstellungen\Hp\Eigene Dateien\DVDVideoSoft

Folder Found : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG Secure Search

Folder Found : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon

Folder Found : C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DealPly

Folder Found : C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DVDVideoSoft

Folder Found : C:\Programme\Application Updater

Folder Found : C:\Programme\AskBarDis

Folder Found : C:\Programme\AskSearch

Folder Found : C:\Programme\AVG Secure Search

Folder Found : C:\Programme\BabylonToolbar

Folder Found : C:\Programme\Conduit

Folder Found : C:\Programme\DealPly

Folder Found : C:\Programme\DVDVideoSoft

Folder Found : C:\Programme\DVDVideoSoftTB

Folder Found : C:\Programme\pdfforge Toolbar

Folder Found : C:\Programme\Winload

Folder Found : C:\Programme\ZoneAlarm-Sicherheit

Folder Found : C:\Programme\Gemeinsame Dateien\AVG Secure Search

Folder Found : C:\Programme\Gemeinsame Dateien\DVDVideoSoft

Folder Found : C:\Programme\Gemeinsame Dateien\spigot

Folder Found : C:\WINDOWS\Installer\{638482BC-3092-42DC-AEA1-735264911A77}

File Found : C:\Programme\Mozilla FireFox\Components\AskSearch.js

File Found : C:\WINDOWS\system32\conduitEngine.tmp
 

***** [Registry] *****

[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2269050[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2319825[*] Key Found : HKLM\SOFTWARE\Classes\Toolbar.CT2613550

Key Found : HKCU\Software\AppDataLow\AskBarDis

Key Found : HKCU\Software\AppDataLow\AskSA

Key Found : HKCU\Software\AVG Secure Search

Key Found : HKCU\Software\BabylonToolbar

Key Found : HKCU\Software\Conduit

Key Found : HKCU\Software\DealPly

Key Found : HKCU\Software\DVDVideoSoft

Key Found : HKCU\Software\DVDVideoSoftTB

Key Found : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje

Key Found : HKCU\Software\pdfforge

Key Found : HKCU\Software\PriceGong

Key Found : HKCU\Software\Search Settings

Key Found : HKCU\Software\Softonic

Key Found : HKCU\Software\Winload

Key Found : HKCU\Software\ZoneAlarm-Sicherheit

Key Found : HKCU\Toolbar

Key Found : HKLM\SOFTWARE\Application Updater

Key Found : HKLM\SOFTWARE\AskBarDis

Key Found : HKLM\SOFTWARE\AVG Secure Search

Key Found : HKLM\SOFTWARE\Babylon

Key Found : HKLM\SOFTWARE\BabylonToolbar

Key Found : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Key Found : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Key Found : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE

Key Found : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI

Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1

Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj

Key Found : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1

Key Found : HKLM\SOFTWARE\Classes\b

Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd

Key Found : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore

Key Found : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

Key Found : HKLM\SOFTWARE\Classes\Conduit.Engine

Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane

Key Found : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Key Found : HKLM\SOFTWARE\Classes\escort.escrtBtn.1

Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc

Key Found : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

Key Found : HKLM\SOFTWARE\Classes\Installer\Features\CB2848362903CD24EA1A37254619A177

Key Found : HKLM\SOFTWARE\Classes\Installer\Products\CB2848362903CD24EA1A37254619A177

Key Found : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol

Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

Key Found : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

Key Found : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

Key Found : HKLM\SOFTWARE\Conduit

Key Found : HKLM\SOFTWARE\DealPly

Key Found : HKLM\SOFTWARE\DVDVideoSoft

Key Found : HKLM\SOFTWARE\DVDVideoSoftTB

Key Found : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{638482BC-3092-42DC-AEA1-735264911A77}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoft Toolbar

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winload Toolbar

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm-Sicherheit Toolbar

Key Found : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Key Found : HKLM\SOFTWARE\pdfforge

Key Found : HKLM\SOFTWARE\Search Settings

Key Found : HKLM\SOFTWARE\Winload

Key Found : HKLM\SOFTWARE\ZoneAlarm-Sicherheit
 

***** [Registre - GUID] *****
 

Key Found : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Key Found : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Key Found : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

Key Found : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Key Found : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Key Found : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Key Found : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Key Found : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{0702A2B6-13AA-4090-9E01-BCDC85DD933F}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{08993A7C-E764-4172-9627-BFB5EA6897B2}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{128A6C66-AC6A-4617-8268-AB7F47B7215E}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{201F27D4-3704-41D6-89C1-AA35E39143ED}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{571715D7-3395-4DF0-B43C-784836209E60}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{622FD888-4E91-4D68-84D4-7262FD0811BF}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{B0DE3308-5D5A-470D-81B9-634FC078393B}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{C94E154B-1459-4A47-966B-4B843BEFC7DB}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{F47FA7D6-CD65-4ADF-9DB2-674D146D4E24}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{B1D9723C-3216-4892-BCD5-B97E3B35BA4E}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{07EF6E96-0BCA-4ECF-99AF-C23908ECE54D}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{BDEFD635-F125-48C2-AAEF-714FC22E365E}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{3299AD6E-F4BF-49C6-9AF6-138227D007E5}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{D4175524-FF45-48A7-A9BE-92A377C547B4}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{3654B83F-264E-4646-861E-1498BB139256}

Key Found : HKLM\SOFTWARE\Classes\CLSID\{A29413B9-7926-423A-9D8E-ADEEA0C91CD9}

Key Found : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Key Found : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

Key Found : HKLM\SOFTWARE\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}

Key Found : HKLM\SOFTWARE\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}

Key Found : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

Key Found : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Key Found : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

Key Found : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

Key Found : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

Key Found : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Key Found : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

Key Found : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

Key Found : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

Key Found : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}

Key Found : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

Key Found : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

Key Found : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Key Found : HKLM\SOFTWARE\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}

Key Found : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

Key Found : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

Key Found : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

Key Found : HKLM\SOFTWARE\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}

Key Found : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}

Key Found : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41B7F301-5636-4E48-A8BF-EC5BD1D8A86E}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0DE48723-5713-42D8-8CDA-5055F39A0AE6}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E3CF422-505E-457B-8BE5-E744D11098F0}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DF2AE65-8F3F-4DB1-8DFD-91C29205CF15}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01B21C84-9A4E-4CDA-9755-366FA1273C68}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{236E3511-B836-44A7-A14F-076A43425912}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD0A88F7-FF66-4BC7-B4D2-42FC7F81DCFC}

Key Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AD19E9-D736-4D7E-9AA9-AB89E88F9ADC}

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Found : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201F27D4-3704-41D6-89C1-AA35E39143ED}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B1D9723C-3216-4892-BCD5-B97E3B35BA4E}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BDEFD635-F125-48C2-AAEF-714FC22E365E}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4175524-FF45-48A7-A9BE-92A377C547B4}

Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A29413B9-7926-423A-9D8E-ADEEA0C91CD9}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}

Key Found : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{3041D03E-FD4B-44E0-B742-2D9B88305F98}]

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{B922D405-6D13-4A2B-AE89-08A030DA4402}]

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}]

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Value Found : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{3041D03E-FD4B-44E0-B742-2D9B88305F98}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{B922D405-6D13-4A2B-AE89-08A030DA4402}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Value Found : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}]
 

***** [Internet Browsers] *****
 

-\\ Internet Explorer v6.0.2900.5512
 

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=

[HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050

[HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={758F62B8-C216-4913-9265-96C03CB09346}&mid=6dcf566e154e47d1a54cd15a92956b58-6835479ae09fc5296a25f06ad21fc3ac79e5a147&lang=de&ds=tt014&pr=sa&d=2011-12-10 14:38:33&v=11.1.0.12&sap=nt

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q=
 

*************************
 

AdwCleaner[R1].txt - [19771 octets] - [06/08/2012 19:37:07]
 

########## EOF - C:\AdwCleaner[R1].txt - [19900 octets] ##########

Vielen Dank.
Gruß
HanspeterE

adwCleaner - Toolbars und ungewollte Start-/Suchseiten entfernen

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Klicke auf Delete.
Bestätige jeweils mit Ok.
Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
Poste mir den Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.

Hallo Arne,
vielen Dank. Hier ist die geforderte Datei

Code:

# AdwCleaner v1.800 - Logfile created 08/07/2012 at 19:11:55

# Updated 01/08/2012 by Xplode

# Operating system : Microsoft Windows XP Service Pack 3 (32 bits)

# User : Hp - HPE

# Running from : C:\Dokumente und Einstellungen\Hp\Desktop\adwcleaner.exe

# Option [Delete]
 
 

***** [Services] *****
 

Stopped & Deleted : Application Updater

Stopped & Deleted : vToolbarUpdater11.2.0
 

***** [Files / Folders] *****
 

Folder Deleted : C:\DVDVideoSoft

Folder Deleted : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\AVG Secure Search

Folder Deleted : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Babylon

Folder Deleted : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\BabylonToolbar

Folder Deleted : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoft

Folder Deleted : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\pdfforge

Folder Deleted : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\PriceGong

Folder Deleted : C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Search Settings

Folder Deleted : C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\pdfforge

Folder Deleted : C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\Search Settings

Folder Deleted : C:\Dokumente und Einstellungen\Hp\Eigene Dateien\DVDVideoSoft

Folder Deleted : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG Secure Search

Folder Deleted : C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon

Folder Deleted : C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DealPly

Folder Deleted : C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\DVDVideoSoft

Folder Deleted : C:\Programme\Application Updater

Folder Deleted : C:\Programme\AskBarDis

Folder Deleted : C:\Programme\AskSearch

Folder Deleted : C:\Programme\AVG Secure Search

Folder Deleted : C:\Programme\BabylonToolbar

Folder Deleted : C:\Programme\Conduit

Folder Deleted : C:\Programme\DealPly

Folder Deleted : C:\Programme\DVDVideoSoft

Folder Deleted : C:\Programme\DVDVideoSoftTB

Folder Deleted : C:\Programme\pdfforge Toolbar

Folder Deleted : C:\Programme\Winload

Folder Deleted : C:\Programme\ZoneAlarm-Sicherheit

Folder Deleted : C:\Programme\Gemeinsame Dateien\AVG Secure Search

Folder Deleted : C:\Programme\Gemeinsame Dateien\DVDVideoSoft

Folder Deleted : C:\Programme\Gemeinsame Dateien\spigot

Folder Deleted : C:\WINDOWS\Installer\{638482BC-3092-42DC-AEA1-735264911A77}

File Deleted : C:\Programme\Mozilla FireFox\Components\AskSearch.js

File Deleted : C:\WINDOWS\system32\conduitEngine.tmp
 

***** [Registry] *****

[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2269050[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2319825[*] Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT2613550

Key Deleted : HKCU\Software\AppDataLow\AskBarDis

Key Deleted : HKCU\Software\AppDataLow\AskSA

Key Deleted : HKCU\Software\AVG Secure Search

Key Deleted : HKCU\Software\BabylonToolbar

Key Deleted : HKCU\Software\Conduit

Key Deleted : HKCU\Software\DealPly

Key Deleted : HKCU\Software\DVDVideoSoft

Key Deleted : HKCU\Software\DVDVideoSoftTB

Key Deleted : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje

Key Deleted : HKCU\Software\pdfforge

Key Deleted : HKCU\Software\PriceGong

Key Deleted : HKCU\Software\Search Settings

Key Deleted : HKCU\Software\Softonic

Key Deleted : HKCU\Software\Winload

Key Deleted : HKCU\Software\ZoneAlarm-Sicherheit

Key Deleted : HKCU\Toolbar

Key Deleted : HKLM\SOFTWARE\Application Updater

Key Deleted : HKLM\SOFTWARE\AskBarDis

Key Deleted : HKLM\SOFTWARE\AVG Secure Search

Key Deleted : HKLM\SOFTWARE\Babylon

Key Deleted : HKLM\SOFTWARE\BabylonToolbar

Key Deleted : HKLM\SOFTWARE\Classes\AppID\escort.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortApp.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\escortEng.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AppID\esrv.EXE

Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE

Key Deleted : HKLM\SOFTWARE\Classes\AppID\ViProtocol.DLL

Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI

Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.BrowserWndAPI.1

Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj

Key Deleted : HKLM\SOFTWARE\Classes\AVG Secure Search.PugiObj.1

Key Deleted : HKLM\SOFTWARE\Classes\b

Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd

Key Deleted : HKLM\SOFTWARE\Classes\Babylon.dskBnd.1

Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore

Key Deleted : HKLM\SOFTWARE\Classes\bbylnApp.appCore.1

Key Deleted : HKLM\SOFTWARE\Classes\Conduit.Engine

Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane

Key Deleted : HKLM\SOFTWARE\Classes\escort.escortIEPane.1

Key Deleted : HKLM\SOFTWARE\Classes\escort.escrtBtn.1

Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc

Key Deleted : HKLM\SOFTWARE\Classes\esrv.BabylonESrvc.1

Key Deleted : HKLM\SOFTWARE\Classes\Installer\Features\CB2848362903CD24EA1A37254619A177

Key Deleted : HKLM\SOFTWARE\Classes\Installer\Products\CB2848362903CD24EA1A37254619A177

Key Deleted : HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\viprotocol

Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi

Key Deleted : HKLM\SOFTWARE\Classes\ScriptHelper.ScriptHelperApi.1

Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE

Key Deleted : HKLM\SOFTWARE\Classes\ViProtocol.ViProtocolOLE.1

Key Deleted : HKLM\SOFTWARE\Conduit

Key Deleted : HKLM\SOFTWARE\DealPly

Key Deleted : HKLM\SOFTWARE\DVDVideoSoft

Key Deleted : HKLM\SOFTWARE\DVDVideoSoftTB

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{638482BC-3092-42DC-AEA1-735264911A77}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AVG Secure Search

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BabylonToolbar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DealPly

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoft Toolbar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DVDVideoSoftTB Toolbar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winload Toolbar

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ZoneAlarm-Sicherheit Toolbar

Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin

Key Deleted : HKLM\SOFTWARE\pdfforge

Key Deleted : HKLM\SOFTWARE\Search Settings

Key Deleted : HKLM\SOFTWARE\Winload

Key Deleted : HKLM\SOFTWARE\ZoneAlarm-Sicherheit
 

***** [Registre - GUID] *****
 

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1FDFF5A2-7BB1-48E1-8081-7236812B12B2}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}

Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0702A2B6-13AA-4090-9E01-BCDC85DD933F}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{08993A7C-E764-4172-9627-BFB5EA6897B2}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{128A6C66-AC6A-4617-8268-AB7F47B7215E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{201F27D4-3704-41D6-89C1-AA35E39143ED}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{291BCCC1-6890-484A-89D3-318C928DAC1B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2EECD738-5844-4A99-B4B6-146BF802613B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3041D03E-FD4B-44E0-B742-2D9B88305F98}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{571715D7-3395-4DF0-B43C-784836209E60}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{622FD888-4E91-4D68-84D4-7262FD0811BF}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{97F2FF5B-260C-4CCF-834A-2DDA4E29E39E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{98889811-442D-49DD-99D7-DC866BE87DBC}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B0DE3308-5D5A-470D-81B9-634FC078393B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B658800C-F66E-4EF3-AB85-6C0C227862A9}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B8276A94-891D-453C-9FF3-715C042A2575}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C94E154B-1459-4A47-966B-4B843BEFC7DB}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E46C8196-B634-44A1-AF6E-957C64278AB1}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FFB9ADCB-8C79-4C29-81D3-74D46A93D370}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F47FA7D6-CD65-4ADF-9DB2-674D146D4E24}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B1D9723C-3216-4892-BCD5-B97E3B35BA4E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{07EF6E96-0BCA-4ECF-99AF-C23908ECE54D}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BDEFD635-F125-48C2-AAEF-714FC22E365E}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3299AD6E-F4BF-49C6-9AF6-138227D007E5}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4175524-FF45-48A7-A9BE-92A377C547B4}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3654B83F-264E-4646-861E-1498BB139256}

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A29413B9-7926-423A-9D8E-ADEEA0C91CD9}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44C3C1DB-2127-433C-98EC-4C9412B5FC3A}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4634804A-F0B0-4A74-A550-FC0EEF8A4362}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4C07EA4F-5F52-4222-B170-4CD9ED33BAEA}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4D5132DD-BB2B-4249-B5E0-D145A8C982E1}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{706D4A4B-184A-4434-B331-296B07493D2D}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8BE10F21-185F-4CA0-B789-9921674C3993}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{94C0B25D-3359-4B10-B227-F96A77DB773F}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B0B75FBA-7288-4FD3-A9EB-7EE27FA65599}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B173667F-8395-4317-8DD6-45AD1FE00047}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{B32672B3-F656-46E0-B584-FE61C0BB6037}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BFE569F7-646C-4512-969B-9BE3E580D393}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2434722-5C85-4CA0-BA69-1B67E7AB3D68}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C2996524-2187-441F-A398-CD6CB6B3D020}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C44FEFF4-EF0C-4CF7-83D0-92B4266A32B9}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E047E227-5342-4D94-80F7-CFB154BF55BD}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F79BE9-24D4-4F4D-8C13-DF2C9899F82E}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E77EEF95-3E83-4BB8-9C0D-4A5163774997}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{F131923C-381D-4E4C-A472-4A17118FD742}

Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{35C1605E-438B-4D64-AAB1-8885F097A9B1}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4B1C1E16-6B34-430E-B074-5928ECA4C150}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6E8BF012-2C85-4834-B10A-1B31AF173D70}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74FB6AFD-DD77-4CEB-83BD-AB2B63E63C93}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{C2AC8A0E-E48E-484B-A71C-C7A937FAAB94}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D2E5FA06-DCC7-46F9-BEFF-BFD06F69B9B2}

Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8375D9C8-634F-4ECB-8CF5-C7416BA5D542}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{41B7F301-5636-4E48-A8BF-EC5BD1D8A86E}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0DE48723-5713-42D8-8CDA-5055F39A0AE6}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6E3CF422-505E-457B-8BE5-E744D11098F0}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8DF2AE65-8F3F-4DB1-8DFD-91C29205CF15}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{01B21C84-9A4E-4CDA-9755-366FA1273C68}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{236E3511-B836-44A7-A14F-076A43425912}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DD0A88F7-FF66-4BC7-B4D2-42FC7F81DCFC}

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2AD19E9-D736-4D7E-9AA9-AB89E88F9ADC}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{201F27D4-3704-41D6-89C1-AA35E39143ED}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4A99-B4B6-146BF802613B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{40C3CC16-7269-4B32-9531-17F2950FB06F}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C6FDD0C3-266A-4DC3-B459-28C697C44CDC}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F25AF245-4A81-40DC-92F9-E9021F207706}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{B1D9723C-3216-4892-BCD5-B97E3B35BA4E}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BDEFD635-F125-48C2-AAEF-714FC22E365E}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D4175524-FF45-48A7-A9BE-92A377C547B4}

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A29413B9-7926-423A-9D8E-ADEEA0C91CD9}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{201F27D4-3704-41D6-89C1-AA35E39143ED}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3041D03E-FD4B-44E0-B742-2D9B88305F98}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B922D405-6D13-4A2B-AE89-08A030DA4402}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}

Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{3041D03E-FD4B-44E0-B742-2D9B88305F98}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{95B7759C-8C7F-4BF1-B163-73684A933233}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{98889811-442D-49DD-99D7-DC866BE87DBC}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{B922D405-6D13-4A2B-AE89-08A030DA4402}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{3041D03E-FD4B-44E0-B742-2D9B88305F98}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{B922D405-6D13-4A2B-AE89-08A030DA4402}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{E9911EC6-1BCC-40B0-9993-E0EEA7F6953F}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{40C3CC16-7269-4B32-9531-17F2950FB06F}]

Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{FC2B76FC-2132-4D80-A9A3-1F5C6E49066B}]
 

***** [Internet Browsers] *****
 

-\\ Internet Explorer v6.0.2900.5512
 

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main - Default_Search_URL] = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q= --> hxxp://www.google.com

Replaced : [HKCU\Software\Microsoft\Internet Explorer\Main - Start Page] = hxxp://search.conduit.com?SearchSource=10&ctid=CT2269050 --> hxxp://www.google.com

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls - Tabs] = hxxp://isearch.avg.com/tab?cid={758F62B8-C216-4913-9265-96C03CB09346}&mid=6dcf566e154e47d1a54cd15a92956b58-6835479ae09fc5296a25f06ad21fc3ac79e5a147&lang=de&ds=tt014&pr=sa&d=2011-12-10 14:38:33&v=11.1.0.12&sap=nt --> hxxp://www.google.com

Replaced : [HKLM\SOFTWARE\Microsoft\Internet Explorer\Search - Default_Search_URL] = hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q= --> hxxp://www.google.com
 

*************************
 

AdwCleaner[R1].txt - [19902 octets] - [06/08/2012 19:37:07]

AdwCleaner[S1].txt - [20472 octets] - [07/08/2012 19:11:55]
 

########## EOF - C:\AdwCleaner[S1].txt - [20601 octets] ##########

Herzliche Grüße
HanspeterE

Hätte da mal zwei Fragen bevor es weiter geht

1.) Geht der normale Modus von Windows (wieder) uneingeschränkt?
2.) Vermisst du irgendwas im Startmenü? Sind da leere Ordner unter alle Programme oder ist alles vorhanden?

Hallo,
hier sind die Antworten auf folgende Fragen:
Zitat Anfang:
Dies ist der Beitrag, der gerade geschrieben wurde:
***************
Hätte da mal zwei Fragen bevor es weiter geht

1.) Geht der normale Modus von Windows (wieder) uneingeschränkt?
2.) Vermisst du irgendwas im Startmenü? Sind da leere Ordner unter alle Programme
oder ist alles vorhanden?
***************
Zitat Ende.

Antworten:
1) Normaler Modus von Windows läuft nach meiner Einschätzung wieder uneingeschränkt.
Es gab auch keine Warnmeldungen des Anti-Viren-Programmes mehr. Alles scheint normal zu funktionieren.
2) Ich vermisse keine Programme. Im Startmenü befinden sich folgende leere Ordner:
Autostart und Live Security Platinum.

Vielen Dank für weitere Hilfe, herzliche Grüße
HanspeterE

Hier gibt es eine Zitatsfunktion! Du musst das Rad nicht neu erfinden um Zitate zu kennzeichnen!

Zitat:

Zitat von HanspeterE

1) Normaler Modus von Windows läuft nach meiner Einschätzung wieder uneingeschränkt.
Es gab auch keine Warnmeldungen des Anti-Viren-Programmes mehr. Alles scheint normal zu funktionieren.
2) Ich vermisse keine Programme. Im Startmenü befinden sich folgende leere Ordner:
Autostart und Live Security Platinum.

Mach bitte ein neues OTL-Log. Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:

hier steht das Log

CustomScan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop. Falls schon vorhanden, bitte die ältere vorhandene Datei durch die neu heruntergeladene Datei ersetzen, damit du auch wirklich mit einer aktuellen Version von OTL arbeitest.

Starte bitte die OTL.exe.
Vista und Win7 User mit Rechtsklick "als Administrator starten"
Setze oben mittig den Haken bei Scanne alle Benutzer
Kopiere nun den kompletten Inhalt aus der untenstehenden Codebox in die http://billy-oneal.com/Canned%20Spee.../customFix.png Textbox von OTL - wenn OTL auf deutsch ist wird sie mit http://larusso.trojaner-board.de/Images/otlfix.jpg beschriftet

Code:

netsvcs

msconfig

safebootminimal

safebootnetwork

activex

drivers32

%ALLUSERSPROFILE%\Application Data\*.

%ALLUSERSPROFILE%\Application Data\*.exe /s

%APPDATA%\*.

%APPDATA%\*.exe /s

%SYSTEMDRIVE%\*.exe

/md5start

wininit.exe

userinit.exe

eventlog.dll

scecli.dll

netlogon.dll

cngaudit.dll

ws2ifsl.sys

sceclt.dll

ntelogon.dll

winlogon.exe

logevent.dll

user32.DLL

iaStor.sys

nvstor.sys

atapi.sys

IdeChnDr.sys

viasraid.sys

AGP440.sys

vaxscsi.sys

nvatabus.sys

viamraid.sys

nvata.sys

nvgts.sys

iastorv.sys

ViPrt.sys

eNetHook.dll

ahcix86.sys

KR10N.sys

nvstor32.sys

ahcix86s.sys

/md5stop

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\System32\config\*.sav

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

CREATERESTOREPOINT

Schliesse bitte nun alle Programme. (Wichtig)
Klicke nun bitte auf den Quick Scan Button.
Klick auf http://billy-oneal.com/Canned%20Spee.../OTL/btnOK.png.
Kopiere nun den Inhalt aus OTL.txt hier in Deinen Thread

Hallo Arne,
hier ist der Inhalt aus OTL.Txt:

OTL Logfile:

Code:

OTL logfile created on: 10.08.2012 14:23:34 - Run 2

OTL by OldTimer - Version 3.2.56.0     Folder = C:\Dokumente und Einstellungen\Hp\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.5512)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

958,73 Mb Total Physical Memory | 519,18 Mb Available Physical Memory | 54,15% Memory free

2,26 Gb Paging File | 1,83 Gb Available in Paging File | 80,96% Paging File free

Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 19,53 Gb Total Space | 7,03 Gb Free Space | 35,99% Space Free | Partition Type: NTFS

Drive D: | 54,99 Gb Total Space | 23,65 Gb Free Space | 43,01% Space Free | Partition Type: NTFS

Drive G: | 7,31 Gb Total Space | 3,37 Gb Free Space | 46,08% Space Free | Partition Type: FAT32

 

Computer Name: HPE | User Name: Hp | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.08.10 14:20:39 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe

PRC - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- d:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe

PRC - [2012.07.03 13:46:44 | 000,462,920 | ---- | M] (Malwarebytes Corporation) -- D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe

PRC - [2012.05.14 15:04:50 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe

PRC - [2012.05.14 15:04:49 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe

PRC - [2012.05.14 15:04:49 | 000,375,760 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe

PRC - [2012.05.14 15:04:49 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe

PRC - [2012.05.14 15:04:49 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe

PRC - [2012.05.14 15:04:49 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe

PRC - [2011.12.14 13:23:34 | 001,212,224 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe

PRC - [2011.12.14 13:23:32 | 001,514,304 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe

PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2012.05.14 15:04:50 | 000,398,288 | ---- | M] () -- C:\Programme\Avira\AntiVir Desktop\sqlite3.dll

MOD - [2009.02.27 17:41:26 | 000,311,296 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU

MOD - [2001.10.28 18:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - File not found [Auto | Stopped] -- C:\Programme\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc)

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)

SRV - [2012.08.05 20:01:32 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012.07.19 12:04:23 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- d:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2012.05.14 15:04:50 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2012.05.14 15:04:49 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)

SRV - [2012.05.14 15:04:49 | 000,375,760 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)

SRV - [2012.05.14 15:04:49 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2011.12.14 13:23:32 | 001,514,304 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)

SRV - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Disabled | Stopped] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)

SRV - [2010.03.29 08:53:22 | 000,068,000 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Programme\NOS\bin\getPlus_Helper.dll -- (getPlusHelper)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)

DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)

DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)

DRV - File not found [Kernel | Auto | Stopped] -- C:\Programme\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)

DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)

DRV - File not found [Kernel | System | Stopped] --  -- (Changer)

DRV - [2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2012.05.14 15:04:50 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)

DRV - [2012.05.14 15:04:50 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)

DRV - [2012.03.24 18:02:36 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)

DRV - [2012.03.24 18:02:36 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)

DRV - [2011.12.12 20:31:38 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)

DRV - [2011.05.07 10:34:11 | 000,097,792 | ---- | M] (Protect Software GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ACEDRV05.sys -- (ACEDRV05)

DRV - [2008.09.24 11:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM)

DRV - [2005.03.09 15:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)

DRV - [2003.07.02 04:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\VIAAGP1.SYS -- (viaagp1)

DRV - [2000.07.24 01:01:00 | 000,019,537 | ---- | M] (Brother Industries Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\BRPAR.SYS -- (BrPar)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

 

IE - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

IE - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}

IE - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"

FF - prefs.js..browser.search.defaulturl: "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="

FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"

FF - prefs.js..browser.startup.homepage: "hxxp://isearch.avg.com/?cid={7ECDEDD5-CF89-4DCF-A825-170331E0DA68}&mid=6dcf566e154e47d1a54cd15a92956b58-6835479ae09fc5296a25f06ad21fc3ac79e5a147&lang=de&ds=tt014&pr=sa&d=&v=&sap=hp"

FF - prefs.js..browser.search.defaultenginename: "Yahoo"

FF - prefs.js..browser.search.selectedEngine: "Yahoo"

FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p="

FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316"

 

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Programme\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll File not found

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Programme\CheckPoint\ZAForceField\TrustChecker

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: D:\Programme\Mozilla Firefox\components [2012.07.19 12:04:25 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2012.05.05 14:47:43 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Components: D:\Programme\Mozilla Thunderbird\components [2012.06.21 16:36:51 | 000,000,000 | ---D | M]

 

[2010.08.06 18:14:53 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Extensions

[2010.08.06 18:14:53 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

[2012.07.26 09:36:27 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions

[2012.06.27 18:16:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}

[2010.07.26 19:06:43 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2012.03.30 15:52:02 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2010.06.24 13:31:50 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}

[2012.07.15 11:47:34 | 000,000,000 | ---D | M] (ZoneAlarm-Sicherheit Community Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}

[2011.12.10 15:38:40 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\avg@toolbar

[2011.03.25 16:05:11 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\engine@conduit.com

[2011.12.10 15:38:42 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions

[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (FlashGot) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}

[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}

[2010.03.28 19:40:35 | 000,000,000 | ---D | M] (Winload Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{40c3cc16-7269-4b32-9531-17f2950fb06f}

[2008.08.09 13:46:26 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

[2008.08.09 13:46:27 | 000,000,000 | ---D | M] (IE Tab [de]) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}

[2010.07.26 19:06:44 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}

[2008.08.09 13:46:27 | 000,000,000 | ---D | M] ("BugMeNot") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{987311C6-B504-4aa2-90BF-60CC49808D42}

[2010.07.26 19:06:43 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2008.08.09 13:46:27 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2010.04.02 14:05:04 | 000,000,000 | ---D | M] (DVDVideoSoft Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}

[2008.10.16 17:18:58 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}

[2011.12.10 15:38:42 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\avg@toolbar

[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (Deutsches WÃ¶rterbuch) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\de-DE@dictionaries.addons.mozilla.org

[2010.03.28 19:40:12 | 000,000,000 | ---D | M] (WINLOAD-Gutschein-Alarm) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\sparweltgutscheinewl@sparwelt.de

[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}

[2012.04.09 14:36:36 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\ffxtlbr@babylon.com

[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\staged

 

O1 HOSTS File: ([2004.08.04 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (no name) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - No CLSID value found.

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.

O3 - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\..\Toolbar\ShellBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.

O3 - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.

O4 - HKLM..\Run: []  File not found

O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] d:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()

O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()

O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_24.dll (Sun Microsystems, Inc.)

O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\Programme\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Programme\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)

O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe File not found

O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe File not found

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 78.42.43.62 82.212.62.62

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C8F73863-7C45-4B79-A886-BD0BD32B351C}: DhcpNameServer = 78.42.43.62 82.212.62.62

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2008.08.09 09:32:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O33 - MountPoints2\{b9b63eb3-d60b-11de-8507-0013d47182ab}\Shell\AutoRun\command - "" = G:\StartPortableApps.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 

NetSvcs: 6to4 -  File not found

NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found

NetSvcs: Ias -  File not found

NetSvcs: Iprip -  File not found

NetSvcs: Irmon -  File not found

NetSvcs: NWCWorkstation -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: Sharedaccess -  File not found

NetSvcs: WmdmPmSp -  File not found

 

 

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: sermouse.sys - Driver

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vds - Service

SafeBootMin: vga.sys - Driver

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

 

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: sermouse.sys - Driver

SafeBootNet: SharedAccess -  File not found

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: vga.sys - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

 

ActiveX: {0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - Microsoft .NET Framework 1.1 Security Update (KB2656353)

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)

ActiveX: {1897C549-AE52-4571-8996-44854F5612B2} - Microsoft .NET Framework 1.1 Security Update (KB2656370)

ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4

ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation

ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offlinebrowsingpaket

ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe

ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)

ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer-Hilfe

ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Sicherheitsupdate für Windows XP (KB923789)

ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsererweiterungen

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Zugang zu MSN Site

ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML-Datenbindung

ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework

ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer-Hauptschriftarten

ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework

ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner

ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1

ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML-Hilfe

ActiveX: {E78BFA60-5393-4C38-82AB-E8019E464EB4} - .NET Framework

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

 

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)

Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)

Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)

Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)

Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()

Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()

Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)

Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.08.10 14:20:36 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe

[2012.08.06 08:45:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Desktop\TroBoard

[2012.08.05 22:30:27 | 000,000,000 | ---D | C] -- C:\Programme\ESET

[2012.08.05 22:30:07 | 002,322,184 | ---- | C] (ESET) -- C:\Dokumente und Einstellungen\Hp\Desktop\esetsmartinstaller_enu.exe

[2012.08.05 19:00:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Malwarebytes

[2012.08.05 18:59:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware

[2012.08.05 18:59:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

[2012.08.05 18:59:45 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2012.08.05 18:58:17 | 010,652,120 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\Hp\Desktop\mbam-setup-1.62.0.1300.exe

[2012.08.01 16:28:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Desktop\Neuer Ordner

[2012.08.01 15:19:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Desktop\69886-alle-hilfesuchenden-eroeffnung-themas-beachten-Dateien

[2012.08.01 14:27:10 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Hp\Recent

[2012.08.01 09:17:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Startmenü\Programme\Live Security Platinum

[2012.08.01 09:16:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\6F63A56600001AB8000019DD7B07D287

[2012.07.16 13:27:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WISO Steuer 2012

[2008.05.30 14:37:10 | 001,694,728 | ---- | C] (Microsoft Corporation) -- C:\Programme\dsetup32.dll

[2008.05.30 14:35:56 | 000,097,288 | ---- | C] (Microsoft Corporation) -- C:\Programme\DSETUP.dll

[2008.05.30 14:34:50 | 000,528,392 | ---- | C] (Microsoft Corporation) -- C:\Programme\DXSETUP.exe

[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\*.tmp files -> C:\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.08.10 14:20:39 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe

[2012.08.10 14:20:01 | 000,001,082 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2012.08.10 14:17:26 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2012.08.10 14:16:50 | 000,000,040 | ---- | M] () -- C:\WINDOWS\System32\mscandc.ini

[2012.08.10 14:16:48 | 000,001,078 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2012.08.10 14:16:30 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2012.08.09 13:33:20 | 000,000,424 | ---- | M] () -- C:\WINDOWS\zipgenius.xml

[2012.08.09 13:01:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job

[2012.08.06 19:36:33 | 000,614,903 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\adwcleaner.exe

[2012.08.05 22:30:08 | 002,322,184 | ---- | M] (ESET) -- C:\Dokumente und Einstellungen\Hp\Desktop\esetsmartinstaller_enu.exe

[2012.08.05 18:59:47 | 000,000,630 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.05 18:58:35 | 010,652,120 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\Hp\Desktop\mbam-setup-1.62.0.1300.exe

[2012.08.03 12:42:54 | 000,000,035 | ---- | M] () -- C:\WINDOWS\Ulead32.INI

[2012.08.01 16:29:23 | 000,010,541 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Logfile.zip

[2012.08.01 15:19:24 | 000,074,704 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\69886-alle-hilfesuchenden-eroeffnung-themas-beachten.html

[2012.08.01 15:12:24 | 000,302,592 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\x0g99d80.exe

[2012.08.01 15:05:28 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\defogger_reenable

[2012.08.01 15:04:15 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Defogger.exe

[2012.07.30 10:26:27 | 000,459,588 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat

[2012.07.30 10:26:27 | 000,441,696 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2012.07.30 10:26:27 | 000,084,960 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat

[2012.07.30 10:26:27 | 000,071,632 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2012.07.16 18:03:19 | 000,000,930 | ---- | M] () -- C:\WINDOWS\wiso.ini

[2012.07.12 13:46:08 | 000,003,827 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Maple9.5.ini

[2012.07.12 11:25:24 | 000,345,345 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Untitled5_MAS.bak

[2012.07.12 08:28:59 | 000,215,264 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2012.07.11 18:18:49 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\*.tmp files -> C:\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012.08.06 19:36:33 | 000,614,903 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\adwcleaner.exe

[2012.08.05 18:59:47 | 000,000,630 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.01 16:29:21 | 000,010,541 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Logfile.zip

[2012.08.01 15:19:17 | 000,074,704 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\69886-alle-hilfesuchenden-eroeffnung-themas-beachten.html

[2012.08.01 15:12:23 | 000,302,592 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\x0g99d80.exe

[2012.08.01 15:05:28 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\defogger_reenable

[2012.08.01 15:04:14 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Defogger.exe

[2012.08.01 14:33:46 | 000,001,712 | ---- | C] () -- C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\U\00000001.@

[2012.05.19 11:49:34 | 000,044,098 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\usrlgo.bmp

[2012.02.25 11:25:12 | 000,345,345 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled5_MAS.bak

[2012.02.14 21:48:58 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll

[2012.01.20 19:44:14 | 000,222,089 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled3_MAS.bak

[2011.12.16 20:56:31 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll

[2011.11.29 22:13:18 | 000,000,849 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\.recently-used.xbel

[2011.10.20 13:24:23 | 000,067,320 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled1_MAS.bak

[2011.08.08 17:33:00 | 000,003,163 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled10_MAS.bak

[2011.08.08 17:28:22 | 000,155,546 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled4_MAS.bak

[2011.08.08 17:18:34 | 000,367,598 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled2_MAS.bak

[2011.03.20 11:17:59 | 000,823,296 | ---- | C] () -- C:\WINDOWS\j3dcore-d3d.dll

[2011.03.20 11:17:59 | 000,163,840 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl.dll

[2011.03.20 11:17:59 | 000,049,152 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl-chk.dll

[2011.03.20 11:17:59 | 000,040,960 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl-cg.dll

[2010.12.25 11:21:50 | 001,456,640 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Falk Navi-Manager.msi

[2010.12.25 11:21:27 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\$_hpcst$.hpc

[2010.05.05 18:06:55 | 000,499,743 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled0_MAS.bak

[2009.11.20 09:28:25 | 000,005,943 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\mainhst.zgh

[2009.01.03 12:32:49 | 000,003,827 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Maple9.5.ini

[2008.09.10 17:02:04 | 000,008,810 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\gsview32.ini

[2008.08.10 17:40:41 | 000,007,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2008.05.30 14:38:30 | 001,158,739 | ---- | C] () -- C:\Programme\BDANT.cab

[2008.05.30 14:38:30 | 001,130,465 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x86.cab

[2008.05.30 14:38:30 | 001,118,469 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x86.cab

[2008.05.30 14:38:30 | 001,087,968 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x86.cab

[2008.05.30 14:38:30 | 001,082,704 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x86.cab

[2008.05.30 14:38:30 | 001,082,210 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x86.cab

[2008.05.30 14:38:28 | 001,080,892 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x86.cab

[2008.05.30 14:38:26 | 001,068,173 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x86.cab

[2008.05.30 14:38:26 | 001,016,473 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x86.cab

[2008.05.30 14:38:26 | 000,978,396 | ---- | C] () -- C:\Programme\BDAXP.cab

[2008.05.30 14:38:26 | 000,919,678 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86.cab

[2008.05.30 14:38:26 | 000,867,848 | ---- | C] () -- C:\Programme\Nov2007_d3dx10_36_x64.cab

[2008.05.30 14:38:26 | 000,855,534 | ---- | C] () -- C:\Programme\AUG2007_d3dx10_35_x64.cab

[2008.05.30 14:38:24 | 000,871,076 | ---- | C] () -- C:\Programme\Jun2008_d3dx10_38_x64.cab

[2008.05.30 14:38:24 | 000,853,167 | ---- | C] () -- C:\Programme\Jun2008_d3dx10_38_x86.cab

[2008.05.30 14:38:24 | 000,848,132 | ---- | C] () -- C:\Programme\Mar2008_d3dx10_37_x64.cab

[2008.05.30 14:38:24 | 000,807,132 | ---- | C] () -- C:\Programme\Nov2007_d3dx10_36_x86.cab

[2008.05.30 14:38:24 | 000,702,292 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x64.cab

[2008.05.30 14:38:22 | 000,821,508 | ---- | C] () -- C:\Programme\Mar2008_d3dx10_37_x86.cab

[2008.05.30 14:38:22 | 000,800,115 | ---- | C] () -- C:\Programme\AUG2007_d3dx10_35_x86.cab

[2008.05.30 14:38:22 | 000,701,860 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x64.cab

[2008.05.30 14:38:20 | 000,701,720 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x86.cab

[2008.05.30 14:38:18 | 000,272,876 | ---- | C] () -- C:\Programme\Jun2008_XAudio_x64.cab

[2008.05.30 14:38:16 | 000,699,113 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x86.cab

[2008.05.30 14:38:16 | 000,254,442 | ---- | C] () -- C:\Programme\Mar2008_XAudio_x64.cab

[2008.05.30 14:38:14 | 000,272,272 | ---- | C] () -- C:\Programme\Jun2008_XAudio_x86.cab

[2008.05.30 14:38:14 | 000,229,498 | ---- | C] () -- C:\Programme\Mar2008_XAudio_x86.cab

[2008.05.30 14:38:14 | 000,216,055 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x64.cab

[2008.05.30 14:38:12 | 000,201,344 | ---- | C] () -- C:\Programme\AUG2007_XACT_x64.cab

[2008.05.30 14:38:12 | 000,200,370 | ---- | C] () -- C:\Programme\JUN2007_XACT_x64.cab

[2008.05.30 14:38:12 | 000,200,010 | ---- | C] () -- C:\Programme\NOV2007_XACT_x64.cab

[2008.05.30 14:38:12 | 000,197,923 | ---- | C] () -- C:\Programme\FEB2007_XACT_x64.cab

[2008.05.30 14:38:10 | 000,186,151 | ---- | C] () -- C:\Programme\AUG2006_XACT_x64.cab

[2008.05.30 14:38:10 | 000,185,609 | ---- | C] () -- C:\Programme\OCT2006_XACT_x64.cab

[2008.05.30 14:38:08 | 000,199,014 | ---- | C] () -- C:\Programme\APR2007_XACT_x64.cab

[2008.05.30 14:38:08 | 000,194,968 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x86.cab

[2008.05.30 14:38:06 | 000,195,723 | ---- | C] () -- C:\Programme\DEC2006_XACT_x64.cab

[2008.05.30 14:38:06 | 000,184,033 | ---- | C] () -- C:\Programme\JUN2006_XACT_x64.cab

[2008.05.30 14:38:04 | 000,182,381 | ---- | C] () -- C:\Programme\Apr2006_XACT_x64.cab

[2008.05.30 14:38:04 | 000,181,607 | ---- | C] () -- C:\Programme\Feb2006_XACT_x64.cab

[2008.05.30 14:38:04 | 000,156,157 | ---- | C] () -- C:\Programme\JUN2007_XACT_x86.cab

[2008.05.30 14:38:04 | 000,151,512 | ---- | C] () -- C:\Programme\NOV2007_XACT_x86.cab

[2008.05.30 14:38:04 | 000,151,231 | ---- | C] () -- C:\Programme\FEB2007_XACT_x86.cab

[2008.05.30 14:38:02 | 000,156,260 | ---- | C] () -- C:\Programme\AUG2007_XACT_x86.cab

[2008.05.30 14:38:00 | 000,154,473 | ---- | C] () -- C:\Programme\APR2007_XACT_x86.cab

[2008.05.30 14:38:00 | 000,136,351 | ---- | C] () -- C:\Programme\Apr2006_XACT_x86.cab

[2008.05.30 14:37:58 | 000,148,847 | ---- | C] () -- C:\Programme\DEC2006_XACT_x86.cab

[2008.05.30 14:37:58 | 000,135,657 | ---- | C] () -- C:\Programme\Feb2006_XACT_x86.cab

[2008.05.30 14:37:56 | 000,141,265 | ---- | C] () -- C:\Programme\OCT2006_XACT_x86.cab

[2008.05.30 14:37:56 | 000,140,483 | ---- | C] () -- C:\Programme\AUG2006_XACT_x86.cab

[2008.05.30 14:37:56 | 000,136,919 | ---- | C] () -- C:\Programme\JUN2006_XACT_x86.cab

[2008.05.30 14:37:54 | 000,056,550 | ---- | C] () -- C:\Programme\APR2007_xinput_x86.cab

[2008.05.30 14:37:52 | 000,125,584 | ---- | C] () -- C:\Programme\Mar2008_XACT_x64.cab

[2008.05.30 14:37:52 | 000,124,302 | ---- | C] () -- C:\Programme\Jun2008_XACT_x64.cab

[2008.05.30 14:37:52 | 000,100,065 | ---- | C] () -- C:\Programme\APR2007_xinput_x64.cab

[2008.05.30 14:37:52 | 000,058,402 | ---- | C] () -- C:\Programme\Jun2008_X3DAudio_x64.cab

[2008.05.30 14:37:52 | 000,049,306 | ---- | C] () -- C:\Programme\AUG2006_xinput_x86.cab

[2008.05.30 14:37:50 | 000,058,306 | ---- | C] () -- C:\Programme\Mar2008_X3DAudio_x64.cab

[2008.05.30 14:37:50 | 000,025,153 | ---- | C] () -- C:\Programme\Jun2008_X3DAudio_x86.cab

[2008.05.30 14:37:48 | 000,097,916 | ---- | C] () -- C:\Programme\dxupdate.cab

[2008.05.30 14:37:48 | 000,049,258 | ---- | C] () -- C:\Programme\Apr2006_xinput_x86.cab

[2008.05.30 14:37:48 | 000,048,607 | ---- | C] () -- C:\Programme\Oct2005_xinput_x86.cab

[2008.05.30 14:37:46 | 000,090,390 | ---- | C] () -- C:\Programme\AUG2006_xinput_x64.cab

[2008.05.30 14:37:46 | 000,090,349 | ---- | C] () -- C:\Programme\Apr2006_xinput_x64.cab

[2008.05.30 14:37:46 | 000,047,700 | ---- | C] () -- C:\Programme\dxdllreg_x86.cab

[2008.05.30 14:37:44 | 000,049,392 | ---- | C] () -- C:\Programme\NOV2007_X3DAudio_x64.cab

[2008.05.30 14:37:42 | 000,096,982 | ---- | C] () -- C:\Programme\Mar2008_XACT_x86.cab

[2008.05.30 14:37:42 | 000,096,376 | ---- | C] () -- C:\Programme\Jun2008_XACT_x86.cab

[2008.05.30 14:37:42 | 000,089,285 | ---- | C] () -- C:\Programme\Oct2005_xinput_x64.cab

[2008.05.30 14:37:42 | 000,025,115 | ---- | C] () -- C:\Programme\Mar2008_X3DAudio_x86.cab

[2008.05.30 14:37:42 | 000,021,744 | ---- | C] () -- C:\Programme\NOV2007_X3DAudio_x86.cab

[2008.05.30 14:36:04 | 013,267,416 | ---- | C] () -- C:\Programme\dxnt.cab

[2008.05.30 14:36:02 | 004,165,878 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86_Archive.cab

[2008.05.30 14:36:02 | 001,805,306 | ---- | C] () -- C:\Programme\Nov2007_d3dx9_36_x64.cab

[2008.05.30 14:36:00 | 001,803,408 | ---- | C] () -- C:\Programme\AUG2007_d3dx9_35_x64.cab

[2008.05.30 14:35:56 | 001,795,856 | ---- | C] () -- C:\Programme\Jun2008_d3dx9_38_x64.cab

[2008.05.30 14:35:56 | 001,773,110 | ---- | C] () -- C:\Programme\Mar2008_d3dx9_37_x64.cab

[2008.05.30 14:35:56 | 001,712,608 | ---- | C] () -- C:\Programme\Nov2007_d3dx9_36_x86.cab

[2008.05.30 14:35:56 | 001,711,400 | ---- | C] () -- C:\Programme\AUG2007_d3dx9_35_x86.cab

[2008.05.30 14:35:56 | 001,611,022 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x64.cab

[2008.05.30 14:35:56 | 001,610,606 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x64.cab

[2008.05.30 14:35:56 | 001,610,534 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x86.cab

[2008.05.30 14:35:56 | 001,609,287 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x86.cab

[2008.05.30 14:35:56 | 001,577,624 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x86.cab

[2008.05.30 14:35:56 | 001,574,402 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x64.cab

[2008.05.30 14:35:56 | 001,467,126 | ---- | C] () -- C:\Programme\Jun2008_d3dx9_38_x86.cab

[2008.05.30 14:35:56 | 001,446,530 | ---- | C] () -- C:\Programme\Mar2008_d3dx9_37_x86.cab

[2008.05.30 14:35:56 | 001,416,150 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x64.cab

[2008.05.30 14:35:56 | 001,401,078 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x64.cab

[2008.05.30 14:35:56 | 001,361,224 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x64.cab

[2008.05.30 14:35:56 | 001,339,250 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x64.cab

[2008.05.30 14:35:54 | 001,366,044 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x64.cab

[2008.05.30 14:35:54 | 001,353,790 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x64.cab

[2008.05.30 14:35:54 | 001,350,602 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x64.cab

[2008.05.30 14:35:54 | 001,250,747 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x64.cab

[2004.08.04 14:00:00 | 000,002,048 | -HS- | C] () -- C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\@

[2004.08.04 14:00:00 | 000,002,048 | -HS- | C] () -- C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\{170ff124-1ba0-a426-70fe-860c313d0703}\@

 
 ========== LOP Check ==========

 

[2012.08.01 14:19:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\6F63A56600001AB8000019DD7B07D287

[2012.07.16 14:01:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Buhl Data Service GmbH

[2011.11.12 09:11:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CheckPoint

[2011.12.10 15:38:17 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files

[2008.12.06 20:31:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF 4

[2008.08.09 10:37:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier

[2011.08.29 18:37:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Power Soft

[2011.10.14 17:43:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software

[2010.10.29 15:20:21 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}

[2011.10.14 17:41:49 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936}

[2010.04.30 08:27:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

[2009.01.30 14:54:34 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{55A29068-F2CE-456C-9148-C869879E2357}

[2009.10.31 14:57:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}

[2009.10.30 19:26:51 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}

[2010.08.03 18:25:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\CheckPoint

[2010.11.19 12:56:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\Thunderbird

[2011.11.09 12:23:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\TuneUp Software

[2011.10.22 09:24:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\TuneUp Software

[2010.10.29 16:00:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\TuneUp Software

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < %ALLUSERSPROFILE%\Application Data\*. >

 
 < %ALLUSERSPROFILE%\Application Data\*.exe /s >

 
 < %APPDATA%\*. >

[2008.09.02 10:31:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\ABBYY

[2010.12.01 20:46:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Adobe

[2011.07.18 12:28:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Apple Computer

[2012.03.24 18:19:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Avira

[2008.12.13 21:05:26 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Brother

[2010.06.03 10:28:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Buhl Data Service

[2011.03.03 17:37:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\CheckPoint

[2010.12.02 21:01:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1

[2008.08.11 16:26:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Design Science

[2012.06.03 13:44:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Dropbox

[2011.09.12 16:40:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoftIEHelpers

[2009.03.27 16:32:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\eXPert PDF Editor

[2008.11.30 14:31:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Google

[2011.11.29 22:13:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\gtk-2.0

[2008.09.10 17:05:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Help

[2008.08.09 09:44:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Identities

[2008.09.04 09:47:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\InterVideo

[2008.09.06 09:16:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\IrfanView

[2010.12.01 20:54:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\JacquieLawsonAdventCalendar

[2011.11.12 22:23:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\JLAdventCalendarLondon2011

[2011.05.07 10:34:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Klett

[2009.04.14 10:25:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\KnotPlot

[2010.05.02 11:10:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Macromedia

[2012.08.05 19:00:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Malwarebytes

[2010.12.30 13:25:52 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Microsoft

[2008.08.09 12:18:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Microsoft Web Folders

[2010.10.21 17:28:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla

[2009.09.14 18:20:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\OpenOffice.org

[2008.08.09 13:11:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Sun

[2008.08.09 11:01:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Talkback

[2011.01.03 14:34:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Thunderbird

[2011.10.14 17:43:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\TuneUp Software

[2010.03.28 19:47:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Youtube Downloader HD

[2012.05.19 12:07:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\ZipGenius

 
 < %APPDATA%\*.exe /s >

[2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Dropbox\bin\Dropbox.exe

[2012.05.24 20:39:24 | 000,872,144 | ---- | M] (Dropbox, Inc.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Dropbox\bin\DropboxUpdateHelper.exe

[2012.05.24 20:39:30 | 000,177,280 | ---- | M] (Dropbox, Inc.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Dropbox\bin\Uninstall.exe

[2011.11.12 22:21:02 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe

[2011.05.19 09:02:53 | 000,188,152 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\FlashGot.exe

[2010.03.29 08:53:22 | 000,029,984 | ---- | M] (NOS Microsystems Ltd.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\chrome\content\getPlusPlus_Adobe_reg.exe

[2008.05.29 17:35:44 | 000,167,336 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\FlashGot.exe

[2011.06.11 17:00:48 | 000,617,472 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\uno_packages\11.tmp_\oracle-pdfimport.oxt\xpdfimport.exe

 
 < %SYSTEMDRIVE%\*.exe >

 
 < MD5 for: AGP440.SYS  >

[2004.08.04 14:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys

[2008.10.15 22:18:19 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys

[2004.08.04 01:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys

[2008.10.15 22:18:19 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys

[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys

[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

 
 < MD5 for: ATAPI.SYS  >

[2004.08.04 14:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys

[2008.10.15 22:18:19 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys

[2004.08.04 01:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys

[2008.10.15 22:18:19 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys

[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys

[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

 
 < MD5 for: EVENTLOG.DLL  >

[2008.04.14 04:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll

[2008.04.14 04:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll

 
 < MD5 for: IASTOR.SYS  >

[2004.09.26 15:24:54 | 000,477,952 | ---- | M] (Intel Corporation) MD5=DD19FDD8BB262F64A11C50CC23FC6F70 -- C:\WINDOWS\OEM\iaStor\iaStor.sys

 
 < MD5 for: NETLOGON.DLL  >

[2008.04.14 04:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll

[2008.04.14 04:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll

 
 < MD5 for: NVATABUS.SYS  >

[2004.09.02 09:24:38 | 000,082,816 | ---- | M] (NVIDIA Corporation) MD5=EEABD98AA887DD923546F20D400B2907 -- C:\WINDOWS\OEM\nvatabus\nvatabus.sys

 
 < MD5 for: SCECLI.DLL  >

[2008.04.14 04:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll

[2008.04.14 04:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2008.04.14 04:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\ServicePackFiles\i386\user32.dll

[2008.04.14 04:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2008.04.14 04:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe

[2008.04.14 04:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe

 
 < MD5 for: VIAMRAID.SYS  >

[2004.05.18 15:55:26 | 000,074,112 | ---- | M] (VIA Technologies inc,.ltd) MD5=F199939205DCCC7836AE5AB8B5DD5E83 -- C:\WINDOWS\OEM\viapdsk\viamraid.sys

[2004.05.18 15:55:26 | 000,074,112 | ---- | M] (VIA Technologies inc,.ltd) MD5=F199939205DCCC7836AE5AB8B5DD5E83 -- C:\WINDOWS\system32\drivers\viamraid.sys

 
 < MD5 for: WINLOGON.EXE  >

[2008.04.14 04:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe

[2008.04.14 04:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2004.08.04 14:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys

[2004.08.04 14:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

[2008.08.09 11:19:30 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav

[2008.08.09 11:19:29 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav

[2008.08.09 11:19:29 | 000,442,368 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

 
 < %systemroot%\*. /mp /s >

 
 < %systemroot%\system32\*.dll /lockedfiles >

[10 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

 
 <           >
 

< End of report >

--- --- ---

Vielen Dank.
Herzliche Grüße
HanspeterE

Hallo Arne,
hier ist der Inhalt aus OTL.Txt:

OTL Logfile:

Code:

OTL logfile created on: 10.08.2012 14:23:34 - Run 2

OTL by OldTimer - Version 3.2.56.0     Folder = C:\Dokumente und Einstellungen\Hp\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.5512)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

958,73 Mb Total Physical Memory | 519,18 Mb Available Physical Memory | 54,15% Memory free

2,26 Gb Paging File | 1,83 Gb Available in Paging File | 80,96% Paging File free

Paging file location(s): C:\pagefile.sys 1440 2880 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 19,53 Gb Total Space | 7,03 Gb Free Space | 35,99% Space Free | Partition Type: NTFS

Drive D: | 54,99 Gb Total Space | 23,65 Gb Free Space | 43,01% Space Free | Partition Type: NTFS

Drive G: | 7,31 Gb Total Space | 3,37 Gb Free Space | 46,08% Space Free | Partition Type: FAT32

 

Computer Name: HPE | User Name: Hp | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: All users | Quick Scan

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.08.10 14:20:39 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe

PRC - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) -- d:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe

PRC - [2012.07.03 13:46:44 | 000,462,920 | ---- | M] (Malwarebytes Corporation) -- D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe

PRC - [2012.05.14 15:04:50 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe

PRC - [2012.05.14 15:04:49 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe

PRC - [2012.05.14 15:04:49 | 000,375,760 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe

PRC - [2012.05.14 15:04:49 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe

PRC - [2012.05.14 15:04:49 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe

PRC - [2012.05.14 15:04:49 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe

PRC - [2011.12.14 13:23:34 | 001,212,224 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesApp32.exe

PRC - [2011.12.14 13:23:32 | 001,514,304 | ---- | M] (TuneUp Software) -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe

PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2012.05.14 15:04:50 | 000,398,288 | ---- | M] () -- C:\Programme\Avira\AntiVir Desktop\sqlite3.dll

MOD - [2009.02.27 17:41:26 | 000,311,296 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU

MOD - [2001.10.28 18:42:30 | 000,116,224 | ---- | M] () -- C:\WINDOWS\system32\pdfcmnnt.dll

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - File not found [Auto | Stopped] -- C:\Programme\CheckPoint\ZAForceField\IswSvc.exe -- (IswSvc)

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)

SRV - [2012.08.05 20:01:32 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012.07.19 12:04:23 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- d:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)

SRV - [2012.05.14 15:04:50 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)

SRV - [2012.05.14 15:04:49 | 000,465,360 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avwebgrd.exe -- (AntiVirWebService)

SRV - [2012.05.14 15:04:49 | 000,375,760 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)

SRV - [2012.05.14 15:04:49 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)

SRV - [2011.12.14 13:23:32 | 001,514,304 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)

SRV - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Disabled | Stopped] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)

SRV - [2010.03.29 08:53:22 | 000,068,000 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Programme\NOS\bin\getPlus_Helper.dll -- (getPlusHelper)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)

DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)

DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)

DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)

DRV - File not found [Kernel | Auto | Stopped] -- C:\Programme\CheckPoint\ZAForceField\ISWKL.sys -- (ISWKL)

DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)

DRV - File not found [Kernel | System | Stopped] --  -- (Changer)

DRV - [2012.07.03 13:46:44 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)

DRV - [2012.05.14 15:04:50 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)

DRV - [2012.05.14 15:04:50 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)

DRV - [2012.03.24 18:02:36 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)

DRV - [2012.03.24 18:02:36 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)

DRV - [2011.12.12 20:31:38 | 000,010,064 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Programme\TuneUp Utilities 2012\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)

DRV - [2011.05.07 10:34:11 | 000,097,792 | ---- | M] (Protect Software GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ACEDRV05.sys -- (ACEDRV05)

DRV - [2008.09.24 11:40:22 | 004,122,368 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM)

DRV - [2005.03.09 15:53:00 | 000,043,008 | ---- | M] (Advanced Micro Devices) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AmdK8.sys -- (AmdK8)

DRV - [2003.07.02 04:42:00 | 000,027,904 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\VIAAGP1.SYS -- (viaagp1)

DRV - [2000.07.24 01:01:00 | 000,019,537 | ---- | M] (Brother Industries Ltd.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\BRPAR.SYS -- (BrPar)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com

 

 

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 

 

 

IE - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

IE - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\..\SearchScopes,DefaultScope = {95B7759C-8C7F-4BF1-B163-73684A933233}

IE - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultenginename: "AVG Secure Search"

FF - prefs.js..browser.search.defaulturl: "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q="

FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"

FF - prefs.js..browser.startup.homepage: "hxxp://isearch.avg.com/?cid={7ECDEDD5-CF89-4DCF-A825-170331E0DA68}&mid=6dcf566e154e47d1a54cd15a92956b58-6835479ae09fc5296a25f06ad21fc3ac79e5a147&lang=de&ds=tt014&pr=sa&d=&v=&sap=hp"

FF - prefs.js..browser.search.defaultenginename: "Yahoo"

FF - prefs.js..browser.search.selectedEngine: "Yahoo"

FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=827316&p="

FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=827316"

 

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_270.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: C:\Programme\CheckPoint\ZAForceField\TrustChecker\bin\npFFApi.dll File not found

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Programme\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{FFB96CC1-7EB3-449D-B827-DB661701C6BB}: C:\Programme\CheckPoint\ZAForceField\TrustChecker

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: D:\Programme\Mozilla Firefox\components [2012.07.19 12:04:25 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2012.05.05 14:47:43 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Components: D:\Programme\Mozilla Thunderbird\components [2012.06.21 16:36:51 | 000,000,000 | ---D | M]

 

[2010.08.06 18:14:53 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Extensions

[2010.08.06 18:14:53 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

[2012.07.26 09:36:27 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions

[2012.06.27 18:16:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}

[2010.07.26 19:06:43 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2012.03.30 15:52:02 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2010.06.24 13:31:50 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}

[2012.07.15 11:47:34 | 000,000,000 | ---D | M] (ZoneAlarm-Sicherheit Community Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{fc2b76fc-2132-4d80-a9a3-1f5c6e49066b}

[2011.12.10 15:38:40 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\avg@toolbar

[2011.03.25 16:05:11 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\engine@conduit.com

[2011.12.10 15:38:42 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions

[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (FlashGot) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}

[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}

[2010.03.28 19:40:35 | 000,000,000 | ---D | M] (Winload Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{40c3cc16-7269-4b32-9531-17f2950fb06f}

[2008.08.09 13:46:26 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

[2008.08.09 13:46:27 | 000,000,000 | ---D | M] (IE Tab [de]) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{77b819fa-95ad-4f2c-ac7c-486b356188a9}

[2010.07.26 19:06:44 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}

[2008.08.09 13:46:27 | 000,000,000 | ---D | M] ("BugMeNot") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{987311C6-B504-4aa2-90BF-60CC49808D42}

[2010.07.26 19:06:43 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2008.08.09 13:46:27 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2010.04.02 14:05:04 | 000,000,000 | ---D | M] (DVDVideoSoft Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}

[2008.10.16 17:18:58 | 000,000,000 | ---D | M] ("Ask Toolbar for Firefox") -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\{E9A1DEE0-C623-4439-8932-001E7D17607D}

[2011.12.10 15:38:42 | 000,000,000 | ---D | M] (AVG Security Toolbar) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\avg@toolbar

[2008.08.09 13:46:25 | 000,000,000 | ---D | M] (Deutsches WÃ¶rterbuch) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\de-DE@dictionaries.addons.mozilla.org

[2010.03.28 19:40:12 | 000,000,000 | ---D | M] (WINLOAD-Gutschein-Alarm) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\extensions\sparweltgutscheinewl@sparwelt.de

[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}

[2012.04.09 14:36:36 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\ffxtlbr@babylon.com

[2012.04.09 14:46:10 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\staged

 

O1 HOSTS File: ([2004.08.04 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)

O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)

O2 - BHO: (no name) - {8A4A36C2-0535-4D2C-BD3D-496CB7EED6E3} - No CLSID value found.

O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.

O3 - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\..\Toolbar\ShellBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.

O3 - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\..\Toolbar\WebBrowser: (no name) - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No CLSID value found.

O4 - HKLM..\Run: []  File not found

O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)

O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] d:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKU\S-1-5-21-839522115-1935655697-2147179587-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()

O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()

O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_24.dll (Sun Microsystems, Inc.)

O9 - Extra Button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - D:\Programme\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Mobilen Favoriten erstellen... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - D:\Programme\Microsoft ActiveSync\INetRepl.dll (Microsoft Corporation)

O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe File not found

O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe File not found

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Programme\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-0015-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0-windows-i586.cab (Reg Error: Key error.)

O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 78.42.43.62 82.212.62.62

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C8F73863-7C45-4B79-A886-BD0BD32B351C}: DhcpNameServer = 78.42.43.62 82.212.62.62

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2008.08.09 09:32:24 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O33 - MountPoints2\{b9b63eb3-d60b-11de-8507-0013d47182ab}\Shell\AutoRun\command - "" = G:\StartPortableApps.exe

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

 

NetSvcs: 6to4 -  File not found

NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found

NetSvcs: Ias -  File not found

NetSvcs: Iprip -  File not found

NetSvcs: Irmon -  File not found

NetSvcs: NWCWorkstation -  File not found

NetSvcs: Nwsapagent -  File not found

NetSvcs: Sharedaccess -  File not found

NetSvcs: WmdmPmSp -  File not found

 

 

SafeBootMin: Base - Driver Group

SafeBootMin: Boot Bus Extender - Driver Group

SafeBootMin: Boot file system - Driver Group

SafeBootMin: File system - Driver Group

SafeBootMin: Filter - Driver Group

SafeBootMin: PCI Configuration - Driver Group

SafeBootMin: PNP Filter - Driver Group

SafeBootMin: Primary disk - Driver Group

SafeBootMin: SCSI Class - Driver Group

SafeBootMin: sermouse.sys - Driver

SafeBootMin: System Bus Extender - Driver Group

SafeBootMin: vds - Service

SafeBootMin: vga.sys - Driver

SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy

SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

 

SafeBootNet: Base - Driver Group

SafeBootNet: Boot Bus Extender - Driver Group

SafeBootNet: Boot file system - Driver Group

SafeBootNet: File system - Driver Group

SafeBootNet: Filter - Driver Group

SafeBootNet: NDIS Wrapper - Driver Group

SafeBootNet: NetBIOSGroup - Driver Group

SafeBootNet: NetDDEGroup - Driver Group

SafeBootNet: Network - Driver Group

SafeBootNet: NetworkProvider - Driver Group

SafeBootNet: PCI Configuration - Driver Group

SafeBootNet: PNP Filter - Driver Group

SafeBootNet: PNP_TDI - Driver Group

SafeBootNet: Primary disk - Driver Group

SafeBootNet: SCSI Class - Driver Group

SafeBootNet: sermouse.sys - Driver

SafeBootNet: SharedAccess -  File not found

SafeBootNet: Streams Drivers - Driver Group

SafeBootNet: System Bus Extender - Driver Group

SafeBootNet: TDI - Driver Group

SafeBootNet: vga.sys - Driver

SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers

SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive

SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive

SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller

SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc

SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard

SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse

SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net

SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient

SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService

SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans

SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters

SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter

SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System

SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive

SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume

SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices

 

ActiveX: {0213C6AF-5562-4D09-884C-2ADCFC8C2F35} - Microsoft .NET Framework 1.1 Security Update (KB2656353)

ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)

ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)

ActiveX: {1897C549-AE52-4571-8996-44854F5612B2} - Microsoft .NET Framework 1.1 Security Update (KB2656370)

ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4

ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation

ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)

ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java

ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offlinebrowsingpaket

ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe

ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)

ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring

ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow

ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx

ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer-Hilfe

ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes

ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6

ActiveX: {5056b317-8d4c-43ee-8543-b9d1e234b8f4} - Sicherheitsupdate für Windows XP (KB923789)

ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW

ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools

ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsererweiterungen

ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player

ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Zugang zu MSN Site

ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework

ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll

ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe

ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install

ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML-Datenbindung

ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework

ActiveX: {C3C986D6-06B1-43BF-90DD-BE30756C00DE} - RevokedRootsUpdate

ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer-Hauptschriftarten

ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework

ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner

ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1

ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash

ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML-Hilfe

ActiveX: {E78BFA60-5393-4C38-82AB-E8019E464EB4} - .NET Framework

ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface

ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP

ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE

ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

 

Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)

Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)

Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)

Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)

Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)

Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()

Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()

Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)

Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)

 

CREATERESTOREPOINT

Restore point Set: OTL Restore Point

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.08.10 14:20:36 | 000,596,480 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe

[2012.08.06 08:45:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Desktop\TroBoard

[2012.08.05 22:30:27 | 000,000,000 | ---D | C] -- C:\Programme\ESET

[2012.08.05 22:30:07 | 002,322,184 | ---- | C] (ESET) -- C:\Dokumente und Einstellungen\Hp\Desktop\esetsmartinstaller_enu.exe

[2012.08.05 19:00:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Malwarebytes

[2012.08.05 18:59:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware

[2012.08.05 18:59:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

[2012.08.05 18:59:45 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2012.08.05 18:58:17 | 010,652,120 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\Hp\Desktop\mbam-setup-1.62.0.1300.exe

[2012.08.01 16:28:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Desktop\Neuer Ordner

[2012.08.01 15:19:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Desktop\69886-alle-hilfesuchenden-eroeffnung-themas-beachten-Dateien

[2012.08.01 14:27:10 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Hp\Recent

[2012.08.01 09:17:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Hp\Startmenü\Programme\Live Security Platinum

[2012.08.01 09:16:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\6F63A56600001AB8000019DD7B07D287

[2012.07.16 13:27:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WISO Steuer 2012

[2008.05.30 14:37:10 | 001,694,728 | ---- | C] (Microsoft Corporation) -- C:\Programme\dsetup32.dll

[2008.05.30 14:35:56 | 000,097,288 | ---- | C] (Microsoft Corporation) -- C:\Programme\DSETUP.dll

[2008.05.30 14:34:50 | 000,528,392 | ---- | C] (Microsoft Corporation) -- C:\Programme\DXSETUP.exe

[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\*.tmp files -> C:\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.08.10 14:20:39 | 000,596,480 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Hp\Desktop\OTL.exe

[2012.08.10 14:20:01 | 000,001,082 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job

[2012.08.10 14:17:26 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2012.08.10 14:16:50 | 000,000,040 | ---- | M] () -- C:\WINDOWS\System32\mscandc.ini

[2012.08.10 14:16:48 | 000,001,078 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job

[2012.08.10 14:16:30 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2012.08.09 13:33:20 | 000,000,424 | ---- | M] () -- C:\WINDOWS\zipgenius.xml

[2012.08.09 13:01:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job

[2012.08.06 19:36:33 | 000,614,903 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\adwcleaner.exe

[2012.08.05 22:30:08 | 002,322,184 | ---- | M] (ESET) -- C:\Dokumente und Einstellungen\Hp\Desktop\esetsmartinstaller_enu.exe

[2012.08.05 18:59:47 | 000,000,630 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.05 18:58:35 | 010,652,120 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\Hp\Desktop\mbam-setup-1.62.0.1300.exe

[2012.08.03 12:42:54 | 000,000,035 | ---- | M] () -- C:\WINDOWS\Ulead32.INI

[2012.08.01 16:29:23 | 000,010,541 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Logfile.zip

[2012.08.01 15:19:24 | 000,074,704 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\69886-alle-hilfesuchenden-eroeffnung-themas-beachten.html

[2012.08.01 15:12:24 | 000,302,592 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\x0g99d80.exe

[2012.08.01 15:05:28 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\defogger_reenable

[2012.08.01 15:04:15 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Defogger.exe

[2012.07.30 10:26:27 | 000,459,588 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat

[2012.07.30 10:26:27 | 000,441,696 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2012.07.30 10:26:27 | 000,084,960 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat

[2012.07.30 10:26:27 | 000,071,632 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2012.07.16 18:03:19 | 000,000,930 | ---- | M] () -- C:\WINDOWS\wiso.ini

[2012.07.12 13:46:08 | 000,003,827 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Maple9.5.ini

[2012.07.12 11:25:24 | 000,345,345 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Untitled5_MAS.bak

[2012.07.12 08:28:59 | 000,215,264 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT

[2012.07.11 18:18:49 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[1 C:\*.tmp files -> C:\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012.08.06 19:36:33 | 000,614,903 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\adwcleaner.exe

[2012.08.05 18:59:47 | 000,000,630 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk

[2012.08.01 16:29:21 | 000,010,541 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Logfile.zip

[2012.08.01 15:19:17 | 000,074,704 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\69886-alle-hilfesuchenden-eroeffnung-themas-beachten.html

[2012.08.01 15:12:23 | 000,302,592 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\x0g99d80.exe

[2012.08.01 15:05:28 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\defogger_reenable

[2012.08.01 15:04:14 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Desktop\Defogger.exe

[2012.08.01 14:33:46 | 000,001,712 | ---- | C] () -- C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\U\00000001.@

[2012.05.19 11:49:34 | 000,044,098 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\usrlgo.bmp

[2012.02.25 11:25:12 | 000,345,345 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled5_MAS.bak

[2012.02.14 21:48:58 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll

[2012.01.20 19:44:14 | 000,222,089 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled3_MAS.bak

[2011.12.16 20:56:31 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll

[2011.11.29 22:13:18 | 000,000,849 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\.recently-used.xbel

[2011.10.20 13:24:23 | 000,067,320 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled1_MAS.bak

[2011.08.08 17:33:00 | 000,003,163 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled10_MAS.bak

[2011.08.08 17:28:22 | 000,155,546 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled4_MAS.bak

[2011.08.08 17:18:34 | 000,367,598 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled2_MAS.bak

[2011.03.20 11:17:59 | 000,823,296 | ---- | C] () -- C:\WINDOWS\j3dcore-d3d.dll

[2011.03.20 11:17:59 | 000,163,840 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl.dll

[2011.03.20 11:17:59 | 000,049,152 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl-chk.dll

[2011.03.20 11:17:59 | 000,040,960 | ---- | C] () -- C:\WINDOWS\j3dcore-ogl-cg.dll

[2010.12.25 11:21:50 | 001,456,640 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\Falk Navi-Manager.msi

[2010.12.25 11:21:27 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\$_hpcst$.hpc

[2010.05.05 18:06:55 | 000,499,743 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Untitled0_MAS.bak

[2009.11.20 09:28:25 | 000,005,943 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\mainhst.zgh

[2009.01.03 12:32:49 | 000,003,827 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Maple9.5.ini

[2008.09.10 17:02:04 | 000,008,810 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\gsview32.ini

[2008.08.10 17:40:41 | 000,007,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2008.05.30 14:38:30 | 001,158,739 | ---- | C] () -- C:\Programme\BDANT.cab

[2008.05.30 14:38:30 | 001,130,465 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x86.cab

[2008.05.30 14:38:30 | 001,118,469 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x86.cab

[2008.05.30 14:38:30 | 001,087,968 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x86.cab

[2008.05.30 14:38:30 | 001,082,704 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x86.cab

[2008.05.30 14:38:30 | 001,082,210 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x86.cab

[2008.05.30 14:38:28 | 001,080,892 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x86.cab

[2008.05.30 14:38:26 | 001,068,173 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x86.cab

[2008.05.30 14:38:26 | 001,016,473 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x86.cab

[2008.05.30 14:38:26 | 000,978,396 | ---- | C] () -- C:\Programme\BDAXP.cab

[2008.05.30 14:38:26 | 000,919,678 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86.cab

[2008.05.30 14:38:26 | 000,867,848 | ---- | C] () -- C:\Programme\Nov2007_d3dx10_36_x64.cab

[2008.05.30 14:38:26 | 000,855,534 | ---- | C] () -- C:\Programme\AUG2007_d3dx10_35_x64.cab

[2008.05.30 14:38:24 | 000,871,076 | ---- | C] () -- C:\Programme\Jun2008_d3dx10_38_x64.cab

[2008.05.30 14:38:24 | 000,853,167 | ---- | C] () -- C:\Programme\Jun2008_d3dx10_38_x86.cab

[2008.05.30 14:38:24 | 000,848,132 | ---- | C] () -- C:\Programme\Mar2008_d3dx10_37_x64.cab

[2008.05.30 14:38:24 | 000,807,132 | ---- | C] () -- C:\Programme\Nov2007_d3dx10_36_x86.cab

[2008.05.30 14:38:24 | 000,702,292 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x64.cab

[2008.05.30 14:38:22 | 000,821,508 | ---- | C] () -- C:\Programme\Mar2008_d3dx10_37_x86.cab

[2008.05.30 14:38:22 | 000,800,115 | ---- | C] () -- C:\Programme\AUG2007_d3dx10_35_x86.cab

[2008.05.30 14:38:22 | 000,701,860 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x64.cab

[2008.05.30 14:38:20 | 000,701,720 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x86.cab

[2008.05.30 14:38:18 | 000,272,876 | ---- | C] () -- C:\Programme\Jun2008_XAudio_x64.cab

[2008.05.30 14:38:16 | 000,699,113 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x86.cab

[2008.05.30 14:38:16 | 000,254,442 | ---- | C] () -- C:\Programme\Mar2008_XAudio_x64.cab

[2008.05.30 14:38:14 | 000,272,272 | ---- | C] () -- C:\Programme\Jun2008_XAudio_x86.cab

[2008.05.30 14:38:14 | 000,229,498 | ---- | C] () -- C:\Programme\Mar2008_XAudio_x86.cab

[2008.05.30 14:38:14 | 000,216,055 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x64.cab

[2008.05.30 14:38:12 | 000,201,344 | ---- | C] () -- C:\Programme\AUG2007_XACT_x64.cab

[2008.05.30 14:38:12 | 000,200,370 | ---- | C] () -- C:\Programme\JUN2007_XACT_x64.cab

[2008.05.30 14:38:12 | 000,200,010 | ---- | C] () -- C:\Programme\NOV2007_XACT_x64.cab

[2008.05.30 14:38:12 | 000,197,923 | ---- | C] () -- C:\Programme\FEB2007_XACT_x64.cab

[2008.05.30 14:38:10 | 000,186,151 | ---- | C] () -- C:\Programme\AUG2006_XACT_x64.cab

[2008.05.30 14:38:10 | 000,185,609 | ---- | C] () -- C:\Programme\OCT2006_XACT_x64.cab

[2008.05.30 14:38:08 | 000,199,014 | ---- | C] () -- C:\Programme\APR2007_XACT_x64.cab

[2008.05.30 14:38:08 | 000,194,968 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x86.cab

[2008.05.30 14:38:06 | 000,195,723 | ---- | C] () -- C:\Programme\DEC2006_XACT_x64.cab

[2008.05.30 14:38:06 | 000,184,033 | ---- | C] () -- C:\Programme\JUN2006_XACT_x64.cab

[2008.05.30 14:38:04 | 000,182,381 | ---- | C] () -- C:\Programme\Apr2006_XACT_x64.cab

[2008.05.30 14:38:04 | 000,181,607 | ---- | C] () -- C:\Programme\Feb2006_XACT_x64.cab

[2008.05.30 14:38:04 | 000,156,157 | ---- | C] () -- C:\Programme\JUN2007_XACT_x86.cab

[2008.05.30 14:38:04 | 000,151,512 | ---- | C] () -- C:\Programme\NOV2007_XACT_x86.cab

[2008.05.30 14:38:04 | 000,151,231 | ---- | C] () -- C:\Programme\FEB2007_XACT_x86.cab

[2008.05.30 14:38:02 | 000,156,260 | ---- | C] () -- C:\Programme\AUG2007_XACT_x86.cab

[2008.05.30 14:38:00 | 000,154,473 | ---- | C] () -- C:\Programme\APR2007_XACT_x86.cab

[2008.05.30 14:38:00 | 000,136,351 | ---- | C] () -- C:\Programme\Apr2006_XACT_x86.cab

[2008.05.30 14:37:58 | 000,148,847 | ---- | C] () -- C:\Programme\DEC2006_XACT_x86.cab

[2008.05.30 14:37:58 | 000,135,657 | ---- | C] () -- C:\Programme\Feb2006_XACT_x86.cab

[2008.05.30 14:37:56 | 000,141,265 | ---- | C] () -- C:\Programme\OCT2006_XACT_x86.cab

[2008.05.30 14:37:56 | 000,140,483 | ---- | C] () -- C:\Programme\AUG2006_XACT_x86.cab

[2008.05.30 14:37:56 | 000,136,919 | ---- | C] () -- C:\Programme\JUN2006_XACT_x86.cab

[2008.05.30 14:37:54 | 000,056,550 | ---- | C] () -- C:\Programme\APR2007_xinput_x86.cab

[2008.05.30 14:37:52 | 000,125,584 | ---- | C] () -- C:\Programme\Mar2008_XACT_x64.cab

[2008.05.30 14:37:52 | 000,124,302 | ---- | C] () -- C:\Programme\Jun2008_XACT_x64.cab

[2008.05.30 14:37:52 | 000,100,065 | ---- | C] () -- C:\Programme\APR2007_xinput_x64.cab

[2008.05.30 14:37:52 | 000,058,402 | ---- | C] () -- C:\Programme\Jun2008_X3DAudio_x64.cab

[2008.05.30 14:37:52 | 000,049,306 | ---- | C] () -- C:\Programme\AUG2006_xinput_x86.cab

[2008.05.30 14:37:50 | 000,058,306 | ---- | C] () -- C:\Programme\Mar2008_X3DAudio_x64.cab

[2008.05.30 14:37:50 | 000,025,153 | ---- | C] () -- C:\Programme\Jun2008_X3DAudio_x86.cab

[2008.05.30 14:37:48 | 000,097,916 | ---- | C] () -- C:\Programme\dxupdate.cab

[2008.05.30 14:37:48 | 000,049,258 | ---- | C] () -- C:\Programme\Apr2006_xinput_x86.cab

[2008.05.30 14:37:48 | 000,048,607 | ---- | C] () -- C:\Programme\Oct2005_xinput_x86.cab

[2008.05.30 14:37:46 | 000,090,390 | ---- | C] () -- C:\Programme\AUG2006_xinput_x64.cab

[2008.05.30 14:37:46 | 000,090,349 | ---- | C] () -- C:\Programme\Apr2006_xinput_x64.cab

[2008.05.30 14:37:46 | 000,047,700 | ---- | C] () -- C:\Programme\dxdllreg_x86.cab

[2008.05.30 14:37:44 | 000,049,392 | ---- | C] () -- C:\Programme\NOV2007_X3DAudio_x64.cab

[2008.05.30 14:37:42 | 000,096,982 | ---- | C] () -- C:\Programme\Mar2008_XACT_x86.cab

[2008.05.30 14:37:42 | 000,096,376 | ---- | C] () -- C:\Programme\Jun2008_XACT_x86.cab

[2008.05.30 14:37:42 | 000,089,285 | ---- | C] () -- C:\Programme\Oct2005_xinput_x64.cab

[2008.05.30 14:37:42 | 000,025,115 | ---- | C] () -- C:\Programme\Mar2008_X3DAudio_x86.cab

[2008.05.30 14:37:42 | 000,021,744 | ---- | C] () -- C:\Programme\NOV2007_X3DAudio_x86.cab

[2008.05.30 14:36:04 | 013,267,416 | ---- | C] () -- C:\Programme\dxnt.cab

[2008.05.30 14:36:02 | 004,165,878 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86_Archive.cab

[2008.05.30 14:36:02 | 001,805,306 | ---- | C] () -- C:\Programme\Nov2007_d3dx9_36_x64.cab

[2008.05.30 14:36:00 | 001,803,408 | ---- | C] () -- C:\Programme\AUG2007_d3dx9_35_x64.cab

[2008.05.30 14:35:56 | 001,795,856 | ---- | C] () -- C:\Programme\Jun2008_d3dx9_38_x64.cab

[2008.05.30 14:35:56 | 001,773,110 | ---- | C] () -- C:\Programme\Mar2008_d3dx9_37_x64.cab

[2008.05.30 14:35:56 | 001,712,608 | ---- | C] () -- C:\Programme\Nov2007_d3dx9_36_x86.cab

[2008.05.30 14:35:56 | 001,711,400 | ---- | C] () -- C:\Programme\AUG2007_d3dx9_35_x86.cab

[2008.05.30 14:35:56 | 001,611,022 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x64.cab

[2008.05.30 14:35:56 | 001,610,606 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x64.cab

[2008.05.30 14:35:56 | 001,610,534 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x86.cab

[2008.05.30 14:35:56 | 001,609,287 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x86.cab

[2008.05.30 14:35:56 | 001,577,624 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x86.cab

[2008.05.30 14:35:56 | 001,574,402 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x64.cab

[2008.05.30 14:35:56 | 001,467,126 | ---- | C] () -- C:\Programme\Jun2008_d3dx9_38_x86.cab

[2008.05.30 14:35:56 | 001,446,530 | ---- | C] () -- C:\Programme\Mar2008_d3dx9_37_x86.cab

[2008.05.30 14:35:56 | 001,416,150 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x64.cab

[2008.05.30 14:35:56 | 001,401,078 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x64.cab

[2008.05.30 14:35:56 | 001,361,224 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x64.cab

[2008.05.30 14:35:56 | 001,339,250 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x64.cab

[2008.05.30 14:35:54 | 001,366,044 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x64.cab

[2008.05.30 14:35:54 | 001,353,790 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x64.cab

[2008.05.30 14:35:54 | 001,350,602 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x64.cab

[2008.05.30 14:35:54 | 001,250,747 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x64.cab

[2004.08.04 14:00:00 | 000,002,048 | -HS- | C] () -- C:\WINDOWS\Installer\{170ff124-1ba0-a426-70fe-860c313d0703}\@

[2004.08.04 14:00:00 | 000,002,048 | -HS- | C] () -- C:\Dokumente und Einstellungen\Hp\Lokale Einstellungen\Anwendungsdaten\{170ff124-1ba0-a426-70fe-860c313d0703}\@

 
 ========== LOP Check ==========

 

[2012.08.01 14:19:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\6F63A56600001AB8000019DD7B07D287

[2012.07.16 14:01:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Buhl Data Service GmbH

[2011.11.12 09:11:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CheckPoint

[2011.12.10 15:38:17 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files

[2008.12.06 20:31:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eXPert PDF 4

[2008.08.09 10:37:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier

[2011.08.29 18:37:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Power Soft

[2011.10.14 17:43:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software

[2010.10.29 15:20:21 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}

[2011.10.14 17:41:49 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936}

[2010.04.30 08:27:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}

[2009.01.30 14:54:34 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{55A29068-F2CE-456C-9148-C869879E2357}

[2009.10.31 14:57:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}

[2009.10.30 19:26:51 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}

[2010.08.03 18:25:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\CheckPoint

[2010.11.19 12:56:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\Thunderbird

[2011.11.09 12:23:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Gast1\Anwendungsdaten\TuneUp Software

[2011.10.22 09:24:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\TuneUp Software

[2010.10.29 16:00:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\TuneUp Software

 
 ========== Purity Check ==========

 

 

 
 ========== Custom Scans ==========

 
 < %ALLUSERSPROFILE%\Application Data\*. >

 
 < %ALLUSERSPROFILE%\Application Data\*.exe /s >

 
 < %APPDATA%\*. >

[2008.09.02 10:31:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\ABBYY

[2010.12.01 20:46:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Adobe

[2011.07.18 12:28:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Apple Computer

[2012.03.24 18:19:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Avira

[2008.12.13 21:05:26 | 000,000,000 | R--D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Brother

[2010.06.03 10:28:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Buhl Data Service

[2011.03.03 17:37:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\CheckPoint

[2010.12.02 21:01:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1

[2008.08.11 16:26:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Design Science

[2012.06.03 13:44:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Dropbox

[2011.09.12 16:40:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\DVDVideoSoftIEHelpers

[2009.03.27 16:32:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\eXPert PDF Editor

[2008.11.30 14:31:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Google

[2011.11.29 22:13:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\gtk-2.0

[2008.09.10 17:05:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Help

[2008.08.09 09:44:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Identities

[2008.09.04 09:47:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\InterVideo

[2008.09.06 09:16:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\IrfanView

[2010.12.01 20:54:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\JacquieLawsonAdventCalendar

[2011.11.12 22:23:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\JLAdventCalendarLondon2011

[2011.05.07 10:34:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Klett

[2009.04.14 10:25:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\KnotPlot

[2010.05.02 11:10:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Macromedia

[2012.08.05 19:00:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Malwarebytes

[2010.12.30 13:25:52 | 000,000,000 | --SD | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Microsoft

[2008.08.09 12:18:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Microsoft Web Folders

[2010.10.21 17:28:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla

[2009.09.14 18:20:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\OpenOffice.org

[2008.08.09 13:11:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Sun

[2008.08.09 11:01:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Talkback

[2011.01.03 14:34:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Thunderbird

[2011.10.14 17:43:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\TuneUp Software

[2010.03.28 19:47:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Youtube Downloader HD

[2012.05.19 12:07:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\ZipGenius

 
 < %APPDATA%\*.exe /s >

[2012.05.24 20:39:22 | 027,112,840 | ---- | M] (Dropbox, Inc.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Dropbox\bin\Dropbox.exe

[2012.05.24 20:39:24 | 000,872,144 | ---- | M] (Dropbox, Inc.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Dropbox\bin\DropboxUpdateHelper.exe

[2012.05.24 20:39:30 | 000,177,280 | ---- | M] (Dropbox, Inc.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Dropbox\bin\Uninstall.exe

[2011.11.12 22:21:02 | 000,053,632 | ---- | M] (Adobe Systems Inc.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe

[2011.05.19 09:02:53 | 000,188,152 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\FlashGot.exe

[2010.03.29 08:53:22 | 000,029,984 | ---- | M] (NOS Microsystems Ltd.) -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\32rujttl.profil2\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}\chrome\content\getPlusPlus_Adobe_reg.exe

[2008.05.29 17:35:44 | 000,167,336 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\Mozilla\Firefox\Profiles\pc8e0u8i.default\FlashGot.exe

[2011.06.11 17:00:48 | 000,617,472 | ---- | M] () -- C:\Dokumente und Einstellungen\Hp\Anwendungsdaten\OpenOffice.org\3\user\uno_packages\cache\uno_packages\11.tmp_\oracle-pdfimport.oxt\xpdfimport.exe

 
 < %SYSTEMDRIVE%\*.exe >

 
 < MD5 for: AGP440.SYS  >

[2004.08.04 14:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys

[2008.10.15 22:18:19 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys

[2004.08.04 01:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys

[2008.10.15 22:18:19 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys

[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys

[2008.04.13 20:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

 
 < MD5 for: ATAPI.SYS  >

[2004.08.04 14:00:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys

[2008.10.15 22:18:19 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys

[2004.08.04 01:10:00 | 018,782,319 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys

[2008.10.15 22:18:19 | 023,898,261 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys

[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys

[2008.04.13 20:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys

 
 < MD5 for: EVENTLOG.DLL  >

[2008.04.14 04:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll

[2008.04.14 04:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll

 
 < MD5 for: IASTOR.SYS  >

[2004.09.26 15:24:54 | 000,477,952 | ---- | M] (Intel Corporation) MD5=DD19FDD8BB262F64A11C50CC23FC6F70 -- C:\WINDOWS\OEM\iaStor\iaStor.sys

 
 < MD5 for: NETLOGON.DLL  >

[2008.04.14 04:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll

[2008.04.14 04:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll

 
 < MD5 for: NVATABUS.SYS  >

[2004.09.02 09:24:38 | 000,082,816 | ---- | M] (NVIDIA Corporation) MD5=EEABD98AA887DD923546F20D400B2907 -- C:\WINDOWS\OEM\nvatabus\nvatabus.sys

 
 < MD5 for: SCECLI.DLL  >

[2008.04.14 04:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll

[2008.04.14 04:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll

 
 < MD5 for: USER32.DLL  >

[2008.04.14 04:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\ServicePackFiles\i386\user32.dll

[2008.04.14 04:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll

 
 < MD5 for: USERINIT.EXE  >

[2008.04.14 04:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe

[2008.04.14 04:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe

 
 < MD5 for: VIAMRAID.SYS  >

[2004.05.18 15:55:26 | 000,074,112 | ---- | M] (VIA Technologies inc,.ltd) MD5=F199939205DCCC7836AE5AB8B5DD5E83 -- C:\WINDOWS\OEM\viapdsk\viamraid.sys

[2004.05.18 15:55:26 | 000,074,112 | ---- | M] (VIA Technologies inc,.ltd) MD5=F199939205DCCC7836AE5AB8B5DD5E83 -- C:\WINDOWS\system32\drivers\viamraid.sys

 
 < MD5 for: WINLOGON.EXE  >

[2008.04.14 04:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe

[2008.04.14 04:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe

 
 < MD5 for: WS2IFSL.SYS  >

[2004.08.04 14:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys

[2004.08.04 14:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys

 
 < %systemroot%\system32\drivers\*.sys /lockedfiles >

 
 < %systemroot%\System32\config\*.sav >

[2008.08.09 11:19:30 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav

[2008.08.09 11:19:29 | 000,663,552 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav

[2008.08.09 11:19:29 | 000,442,368 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

 
 < %systemroot%\*. /mp /s >

 
 < %systemroot%\system32\*.dll /lockedfiles >

[10 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]

 
 <           >
 

< End of report >

--- --- ---

[/code]

Vielen Dank.
Herzliche Grüße
HanspeterE