Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Bundespolizei Einheit 5.2 entfernen (https://www.trojaner-board.de/119673-bundespolizei-einheit-5-2-entfernen.html)

martymge 16.07.2012 20:33
Bundespolizei Einheit 5.2 entfernen
 
Hallo an alle wollte fragen wie Ich den Virus Bundespolizei entfernen kann. Mit dem abgesicherten Modus komme ich nicht rein er schreibt mir dann einen bluescrean.


Kann mir jemand helfen.


Danke

t'john 16.07.2012 21:23
:hallo:

Mit einem sauberen 2. Rechner eine OTLPE-CD erstellen und den infizierten Rechner dann von dieser CD booten:


Falls Du kein Brennprogramm installiert hast, lade dir bitte ISOBurner herunter. Das Programm wird Dir erlauben, OTLPE auf eine CD zu brennen und sie bootfähig zu machen. Du brauchst das Tool nur zu installieren, der Rest läuft automatisch => Wie brenne ich eine ISO Datei auf CD/DVD.
  • Lade OTLPENet.exe von OldTimer herunter und speichere sie auf Deinem Desktop. Anmerkung: Die Datei ist ca. 120 MB groß und es wird bei langsamer Internet-Verbindung ein wenig dauern, bis Du sie runtergeladen hast.
  • Wenn der Download fertig ist, mache einen Doppelklick auf die Datei und beantworte die Frage "Do you want to burn the CD?" mit Yes.
  • Lege eine leere CD in Deinen Brenner.
  • ImgBurn (oder Dein Brennprogramm) wird das Archiv extrahieren und OTLPE Network auf die CD brennen.
  • Wenn der Brenn-Vorgang abgeschlossen ist, wirst Du eine Dialogbox sehen => "Operation successfully completed".
  • Du kannst nun die Fenster des Brennprogramms schließen.
Nun boote von der OTLPE CD. Hinweis: Wie boote ich von CD
  • Dein System sollte nach einigen Minuten den REATOGO-X-PE Desktop anzeigen.
  • Mache einen Doppelklick auf das OTLPE Icon.
  • Hinweis: Damit OTLPE auch das richtige installierte Windows scant, musst du den Windows-Ordner des auf der Platte installierten Windows auswählen, einfach nur C: auswählen gibt einen Fehler!
  • Wenn Du gefragt wirst "Do you wish to load the remote registry", dann wähle Yes.
  • Wenn Du gefragt wirst "Do you wish to load remote user profile(s) for scanning", dann wähle Yes.
  • Vergewissere Dich, dass die Box "Automatically Load All Remaining Users" gewählt ist und drücke OK.
  • OTLpe sollte nun starten.
  • Drücke Run Scan, um den Scan zu starten.
  • Wenn der Scan fertig ist, werden die Dateien C:\OTL.Txt und C:\Extras.Txt erstellt
  • Kopiere diese Datei auf Deinen USB-Stick, wenn Du keine Internetverbindung auf diesem System hast.
  • Bitte poste den Inhalt von C:\OTL.Txt und Extras.Txt.

martymge 16.07.2012 22:23
Hallo

es war nur die OTL.Txt datei vorhanden oder habe ich etwas falsch gemacht.


MFG

OTL Logfile:
Code:
OTL logfile created on: 7/17/2012 12:10:10 AM - Run
OTLPE by OldTimer - Version 3.1.48.0    Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 81.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 96.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 232.88 Gb Total Space | 104.81 Gb Free Space | 45.01% Space Free | Partition Type: NTFS
Drive D: | 883.25 Mb Total Space | 882.30 Mb Free Space | 99.89% Space Free | Partition Type: FAT
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet003
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Auto] --  -- (USBDLM)
SRV - File not found [Auto] --  -- (RoxLiveShare9)
SRV - [2012/07/02 00:02:38 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/05/08 09:13:28 | 000,185,856 | ---- | M] () [Auto] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater)
SRV - [2011/12/20 06:34:29 | 000,077,944 | ---- | M] (Autodesk) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2011/07/19 23:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2011/07/02 00:18:57 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/04/21 01:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/05/04 06:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto] -- C:\Programme\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2009/06/05 05:48:14 | 000,144,712 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2008/09/29 08:49:46 | 000,066,848 | ---- | M] (Rockwell Automation Inc.) [Auto] -- C:\Programme\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe -- (FTActivationBoost)
SRV - [2008/07/25 03:39:26 | 001,971,768 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Rockwell Software\RSLINX\RSLINX.EXE -- (RSLinx)
SRV - [2008/07/14 13:02:20 | 000,069,685 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Siemens\Step7\S7BIN\s7asysvx.exe -- (s7asysvx)
SRV - [2008/07/03 07:30:28 | 001,571,912 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\S7IEPG\s7oiehsx.exe -- (s7oiehsx)
SRV - [2008/07/03 07:30:28 | 000,240,712 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe -- (S7TraceServiceX)
SRV - [2008/06/30 05:54:57 | 001,036,288 | ---- | M] (Kepware) [Auto] -- C:\Programme\KEPServerEnterprise\ServerMain.exe -- (KEPServerEnterpriseService)
SRV - [2008/06/25 07:17:06 | 000,218,408 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RsvcHost.exe -- (RsvcHost)
SRV - [2008/06/25 07:15:22 | 000,148,776 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADiagReceiver.exe -- (RNADiagReceiver)
SRV - [2008/06/25 07:15:18 | 000,034,088 | ---- | M] (Rockwell Automation Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADiagnosticsSrv.exe -- (RNADiagnosticsService)
SRV - [2008/05/27 05:20:38 | 000,070,952 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSLINX\dnwhodisp.exe -- (dnWhoDisp)
SRV - [2008/05/24 03:25:12 | 000,202,024 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSCommon\RSOBSERV.EXE -- (Harmony)
SRV - [2008/05/20 10:10:42 | 001,146,880 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\sws\almsrv\almsrvx.exe -- (almservice)
SRV - [2007/11/21 11:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Auto] -- C:\WINDOWS\system32\TODDSrv.exe -- (TODDSrv)
SRV - [2007/09/28 10:05:16 | 000,128,360 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2007/09/18 14:34:28 | 000,147,456 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSView Enterprise\TagSrv.exe -- (Rockwell Tag Server)
SRV - [2007/09/18 14:26:24 | 000,077,824 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe -- (Rockwell HMI Diagnostics)
SRV - [2007/09/17 18:57:28 | 000,212,992 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RdcyHost.exe -- (RdcyHost)
SRV - [2007/09/17 18:57:20 | 000,212,992 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\NmspHost.exe -- (NmspHost)
SRV - [2007/09/17 17:43:08 | 000,991,232 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADirMultiplexor.exe -- (RNADirMultiplexor)
SRV - [2007/09/17 17:42:44 | 000,897,024 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RnaDirServer.exe -- (RNADirectory)
SRV - [2007/09/17 17:36:32 | 000,282,624 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\EventClientMultiplexer.exe -- (EventClientMultiplexer)
SRV - [2007/09/17 17:36:08 | 000,217,088 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\EventServer.exe -- (EventServer)
SRV - [2007/08/09 08:58:34 | 001,757,696 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Auto] -- C:\WINDOWS\System32\hasplms.exe -- (hasplms)
SRV - [2007/07/09 04:47:58 | 000,094,208 | ---- | M] () [On_Demand] -- C:\Programme\Rockwell Software\RSLinx Enterprise\LogReceiver.exe -- (LogReceiver)
SRV - [2007/06/26 09:11:48 | 000,217,088 | ---- | M] (Rockwell Automation) [Auto] -- C:\Programme\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe -- (RSLinxNG)
SRV - [2007/04/17 02:07:50 | 000,135,168 | ---- | M] (OPC Foundation) [On_Demand] -- C:\WINDOWS\system32\opcenum.exe -- (OpcEnum)
SRV - [2007/02/12 11:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Auto] -- C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)
SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005/04/03 18:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2005/01/17 11:38:00 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2004/03/23 09:40:20 | 000,028,672 | ---- | M] ( ) [Auto] -- C:\Programme\Rockwell Software\RSView32 Service\RSV32ServiceAD.exe -- (RSView32 Service for AD)
SRV - [2003/11/17 13:50:50 | 000,659,456 | ---- | M] (Macrovision Corporation) [Auto] -- C:\Programme\Rockwell Software\FactoryTalk Activation\lmgrd.exe -- (FactoryTalk Activation Service)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WINIO)
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | System] --  -- (VirtualBackplane)
DRV - File not found [Kernel | Auto] --  -- (S7oppilx)
DRV - File not found [Kernel | On_Demand] --  -- (RimUsb)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand] --  -- (pcidnt)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand] --  -- (hwdatacard)
DRV - File not found [Kernel | On_Demand] --  -- (GenericMount)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - [2011/07/02 00:18:59 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/07/02 00:18:59 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/10/08 11:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008/07/05 12:19:52 | 000,155,440 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\RSSERIAL.SYS -- (RSSERIAL)
DRV - [2008/07/05 12:19:50 | 000,039,067 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\RSIKT.SYS -- (RsiKtControl)
DRV - [2008/07/03 07:10:08 | 000,508,416 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\S7otranx.sys -- (s7otranx)
DRV - [2008/07/03 07:07:36 | 000,173,568 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\s7osmcax.sys -- (s7osmcax)
DRV - [2008/07/03 07:06:02 | 000,095,232 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\S7oppitx.sys -- (s7oppitx)
DRV - [2008/07/03 07:04:42 | 000,031,232 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s7opcsrtx.sys -- (S7opcsrtx) PROFINET IO RT-Protocol (LLDP)
DRV - [2008/07/03 07:03:10 | 000,077,312 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\S7odpx2x.sys -- (s7odpx2x)
DRV - [2008/06/30 01:15:26 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2008/04/13 14:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/03/13 08:51:52 | 000,057,536 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2008/03/13 08:50:02 | 000,072,000 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2008/03/04 04:12:06 | 000,048,600 | ---- | M] (O2Micro ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\o2media.sys -- (O2MDRDR)
DRV - [2008/02/19 09:39:44 | 000,191,424 | ---- | M] (Jungo) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6)
DRV - [2008/02/01 08:18:56 | 000,732,160 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (CnxtHdAudAddService)
DRV - [2008/01/30 11:21:12 | 002,846,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008/01/15 05:40:53 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2008/01/15 05:40:53 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2007/12/28 04:51:00 | 000,285,952 | ---- | M] (Marvell) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2007/12/05 05:51:04 | 000,310,144 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\SNTIE.SYS -- (SNTIE) SIMATIC Industrial Ethernet (ISO)
DRV - [2007/11/06 10:25:36 | 000,101,888 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2007/11/01 11:26:36 | 000,989,696 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2007/11/01 11:25:32 | 000,211,456 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2007/11/01 11:25:22 | 000,731,520 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2007/10/12 09:42:56 | 000,255,872 | ---- | M] (PEAK-System Technik GmbH, Darmstadt, Germany) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Peakcan.sys -- (Peakcan)
DRV - [2007/10/02 05:43:22 | 000,064,128 | ---- | M] (TOSHIBA Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2007/09/26 01:01:32 | 002,236,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Intel(R)
DRV - [2007/08/29 14:24:06 | 000,012,333 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s7oupc2x.sys -- (s7oupc2x)
DRV - [2007/07/30 06:06:04 | 000,071,168 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s7snsrtx.sys -- (s7snsrtx)
DRV - [2007/07/23 10:12:44 | 000,046,336 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshhl.sys -- (akshhl)
DRV - [2007/07/05 10:16:56 | 000,238,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshasp.sys -- (akshasp)
DRV - [2007/07/05 10:16:56 | 000,014,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\aksusb.sys -- (aksusb)
DRV - [2007/06/25 09:47:16 | 000,028,363 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\dpmtrcdd.sys -- (Dpmtrcdd)
DRV - [2007/05/29 05:01:50 | 000,006,912 | ---- | M] (TOSHIBA) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\QIOMem.sys -- (QIOMem)
DRV - [2007/05/28 04:02:02 | 000,352,256 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2007/03/26 06:22:18 | 000,105,856 | ---- | M] (TOSHIBA Corporation) [File_System | Auto] -- C:\WINDOWS\system32\drivers\tdudf.sys -- (tdudf)
DRV - [2007/03/20 05:33:28 | 000,028,672 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\libusb0.sys -- (libusb0)
DRV - [2007/03/01 06:12:16 | 000,075,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\slabser.sys -- (slabser)
DRV - [2007/03/01 06:12:16 | 000,058,368 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\slabbus.sys -- (slabbus) CP210x USB Composite Device driver (WDM)
DRV - [2007/02/19 06:15:32 | 000,134,016 | ---- | M] (TOSHIBA Corporation) [File_System | Auto] -- C:\WINDOWS\system32\drivers\trudf.sys -- (trudf)
DRV - [2006/12/28 06:44:44 | 000,084,992 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AtiHdAud.sys -- (HdAudAddService)
DRV - [2006/11/22 04:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006/10/23 10:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2006/10/18 05:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV - [2006/10/10 13:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2006/01/12 10:21:18 | 000,031,872 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\qkbfiltr.sys -- (qkbfiltr)
DRV - [2005/06/10 16:42:00 | 000,005,504 | ---- | M] (Quanta Computer Corp) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BoiHwSetup.sys -- (BoiHwsetup)
DRV - [2005/05/05 08:27:38 | 000,007,936 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\qmofiltr.sys -- (qmofiltr)
DRV - [2003/01/29 09:35:00 | 000,012,032 | ---- | M] (TOSHIBA Corporation.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio)
DRV - [2002/11/13 08:38:40 | 000,016,447 | ---- | M] (Rockwell Automation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\RSI-PKTX-A.SYS -- (RSI-PKTX-A)
DRV - [2002/11/13 04:40:28 | 000,002,976 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\FwKbd.sys -- (fwkbd)
DRV - [2002/10/17 20:34:14 | 000,030,512 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\s7oefs_x.sys -- (s7oefs_x)
DRV - [2002/04/23 13:02:26 | 000,038,999 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\RSIKTNG.SYS -- (RSLINXNGKtControl)
DRV - [2001/10/25 04:21:48 | 000,063,972 | ---- | M] (Siemens AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\dpmcslv.sys -- (dpmcslv)
DRV - [2001/06/21 15:39:02 | 000,073,728 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel)
DRV - [2001/06/21 15:39:02 | 000,020,032 | R--- | M] (Rainbow Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS -- (Sntnlusb)
DRV - [2001/02/28 21:15:00 | 000,006,144 | ---- | M] (Erik Salaj) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\IOPORT.SYS -- (IOPort)
DRV - [1998/07/09 22:31:00 | 000,007,328 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\ds1410d.sys -- (DS1410D)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\administrator.ABALON-HARDWOOD.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE8ENUS/701
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.bing.com [binary data]
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
IE - HKU\Administrator_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE8ENUS/701
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.bing.com [binary data]
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/
IE - HKU\eunger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://suche.aon.at
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\mgombotz_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mystart.incredibar.com/mb139?a=6PQz7vCB0W&i=26
IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.at/
IE - HKU\mgrabner_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgrabner_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKU\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
========== FireFox ==========
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Programme\Web Assistant\Firefox [2012/06/01 00:46:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/07/02 00:02:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins
 
[2012/05/18 04:27:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Extensions
[2012/03/12 14:29:54 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
File not found (No name found) --
[2012/07/02 00:02:40 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012/07/02 00:02:31 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/07/02 00:02:31 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/07/02 00:02:31 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/07/02 00:02:31 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/07/02 00:02:31 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/07/02 00:02:31 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2008/01/15 05:26:47 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (QuickStores-Toolbar) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} -  File not found
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Programme\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Plugin for Media Finder) - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder\Extensions\IEPlugin32.dll (Media Finder)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder\Extensions\gencrawler_gc.dll ()
O2 - BHO: (ADDICT-THING Class) - {CDE76C9A-C062-F8FE-474B-6A6705EAE133} - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ADDICT-THING\bhoclass.dll ()
O3 - HKLM\..\Toolbar: (QuickStores-Toolbar) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} -  File not found
O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Programme\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O3 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgombotz_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {7E111A5C-3D11-4F56-9463-5310C3C69025} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [AutoRunnerX] C:\Programme\AutoRunnerX\arxsrv.exe (Bernhard Fomm, Munich)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent]  File not found
O4 - HKLM..\Run: [DDWMon] C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe ()
O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe (HP)
O4 - HKLM..\Run: [ITSecMng] C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe ( TOSHIBA CORPORATION)
O4 - HKLM..\Run: [S7UB Start] C:\Programme\Gemeinsame Dateien\Siemens\S7ubtoox\s7ubtstx.exe (SIEMENS AG)
O4 - HKLM..\Run: [SmoothView] C:\Programme\Toshiba\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [topi] C:\Programme\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA)
O4 - HKLM..\Run: [Toshiba Controls Utility] C:\Programme\Toshiba\Controls\VolumeIndicator.exe (TOSHIBA Inc.)
O4 - HKLM..\Run: [Toshiba Hotkey Utility] C:\Programme\Toshiba\Windows Utilities\Hotkey.exe (TOSHIBA Inc.)
O4 - HKLM..\Run: [TPSMain]  File not found
O4 - HKLM..\Run: [UnlockerAssistant]  File not found
O4 - HKLM..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKLM..\Run: [UsbCipHelper] C:\Programme\Rockwell Automation\Rockwell Automation USB CIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.)
O4 - HKU\administrator.ABALON-HARDWOOD.000_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\administrator.ABALON-HARDWOOD_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\Administrator_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\Administrator_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKU\eunger_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\mgombotz.ABALON-HARDWOOD_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\mgombotz_ON_C..\Run: [swg]  File not found
O4 - HKU\mgombotz_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKU\mgrabner_ON_C..\Run: [Media Finder]  File not found
O4 - HKU\mgrabner_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AutoCAD-Startbeschleuniger.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe (Autodesk, Inc)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\LEO Server.lnk = C:\Programme\RSW\Leo8\LeoServer\LeoServer.exe (RSW Technik GmbH)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\eunger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O7 - HKU\mgombotz_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgrabner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/DE-AT/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1214216227406 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} hxxp://lads.myspace.com/upload/MySpaceUploader2.cab (MySpace Uploader Control)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} https://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab (UI File Upload Control)
O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/mygarmin/m/GarminAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = abalon-hardwood.com
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -  File not found
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -  File not found
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -  File not found
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -  File not found
O20 - HKLM Winlogon: UIHost - (logonui.exe) -  File not found
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") -  File not found
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll -  File not found
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll -  File not found
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll -  File not found
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll -  File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll -  File not found
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll -  File not found
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll -  File not found
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll -  File not found
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll -  File not found
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll -  File not found
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll -  File not found
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll -  File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\TOSHIBA1280x0800.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\TOSHIBA1280x0800.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  File not found
O29 - HKLM SecurityProviders - (msapsspc.dll) -  File not found
O29 - HKLM SecurityProviders - (schannel.dll) -  File not found
O29 - HKLM SecurityProviders - (digest.dll) -  File not found
O29 - HKLM SecurityProviders - (msnsspc.dll) -  File not found
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/07 12:08:21 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/07/13 08:08:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\Facebook
[2012/07/13 00:11:36 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012/07/12 00:51:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kabel++
[2012/07/12 00:51:53 | 000,000,000 | ---D | C] -- C:\Programme\Kabel++
[2012/07/03 06:58:25 | 000,000,000 | ---D | C] -- C:\FreePDF
[2012/06/29 02:40:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Unterlagen Allgemein
[2012/06/25 07:31:17 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2009/02/13 10:34:03 | 000,570,128 | ---- | C] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\dao350.dll
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012/07/16 16:26:14 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/07/16 16:25:54 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat
[2012/07/16 16:22:18 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/07/16 16:22:17 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\Express Files Updater.job
[2012/07/16 16:16:47 | 2137,444,352 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/16 16:12:35 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\defogger_reenable
[2012/07/16 08:49:18 | 000,142,848 | ---- | M] () -- C:\WINDOWS\System32\fest0r_ot.exe
[2012/07/16 08:39:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/07/16 05:42:19 | 000,138,742 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\vitw_d.pdf
[2012/07/16 00:21:50 | 000,000,772 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2012/07/13 01:08:58 | 000,445,312 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/07/13 00:12:19 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/07/12 00:51:59 | 000,000,662 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Kabel++ Light.lnk
[2012/07/12 00:51:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kabel++
[2012/07/09 07:10:51 | 000,001,744 | ---- | M] () -- C:\WINDOWS\UtahS7Integrate.ini
[2012/07/06 07:28:06 | 000,066,296 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\feedworks.pdf
[2012/07/04 09:37:51 | 000,071,656 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\RSLogix 5000 Report(s).pdf
[2012/07/04 00:12:14 | 000,128,570 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole.pdf
[2012/07/03 07:00:38 | 000,114,598 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole tc Alt.pdf
[2012/06/29 00:31:42 | 000,002,505 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Microsoft Office Excel 2007.lnk
[2012/06/25 10:17:31 | 000,523,690 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012/06/25 10:17:31 | 000,494,480 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/06/25 10:17:31 | 000,110,826 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012/06/25 10:17:31 | 000,091,040 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012/07/16 16:12:35 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\defogger_reenable
[2012/07/16 08:49:24 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\fest0r_ot.exe
[2012/07/16 05:42:17 | 000,138,742 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\vitw_d.pdf
[2012/07/12 00:51:59 | 000,000,662 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Kabel++ Light.lnk
[2012/07/06 07:28:03 | 000,066,296 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\feedworks.pdf
[2012/07/04 09:35:49 | 000,071,656 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\RSLogix 5000 Report(s).pdf
[2012/07/04 00:12:12 | 000,128,570 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole.pdf
[2012/07/03 07:00:34 | 000,114,598 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole tc Alt.pdf
[2012/05/09 05:58:18 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll
[2012/05/09 05:58:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe
[2012/05/03 08:01:45 | 000,006,656 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/04/17 05:18:24 | 000,000,157 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2012/04/17 04:59:58 | 000,000,166 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2012/04/04 00:28:04 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\$_hpcst$.hpc
[2012/03/08 05:47:40 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/02/15 01:14:52 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/01/25 10:08:26 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2012/01/25 08:36:43 | 000,000,035 | ---- | C] () -- C:\WINDOWS\A5W.INI
[2011/12/07 08:09:36 | 000,004,608 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/11/08 08:54:44 | 000,000,061 | R--- | C] () -- C:\WINDOWS\System32\uninstall.ini
[2011/11/08 07:49:03 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\eunger\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/10/10 04:06:20 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/07/26 04:42:03 | 000,000,066 | ---- | C] () -- C:\WINDOWS\HRMINIA 2.0.INI
[2011/07/26 03:37:11 | 000,006,688 | ---- | C] () -- C:\WINDOWS\MOVEXE.EXE
[2011/07/26 03:12:29 | 000,000,045 | ---- | C] () -- C:\WINDOWS\MINIA 2.0.INI
[2009/11/24 22:45:58 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\sdc1ml3.dll
[2009/08/12 10:17:15 | 000,135,253 | R--- | C] () -- C:\WINDOWS\System32\WdReg.exe
[2009/07/30 01:44:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Autoplay.INI
[2009/07/24 15:47:45 | 000,000,031 | ---- | C] () -- C:\WINDOWS\RESETW.INI
[2009/04/17 13:01:13 | 000,000,256 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\pool.bin
[2009/04/15 02:18:41 | 000,000,031 | ---- | C] () -- C:\WINDOWS\RESET.INI
[2009/04/13 11:21:09 | 000,319,696 | ---- | C] () -- C:\WINDOWS\System32\BOCOF.DLL
[2009/04/13 05:03:29 | 000,000,256 | ---- | C] () -- C:\WINDOWS\System32\pool.bin
[2009/02/25 06:20:16 | 000,000,097 | ---- | C] () -- C:\WINDOWS\usrwiz.ini
[2009/02/25 05:20:01 | 000,000,324 | ---- | C] () -- C:\WINDOWS\Sew_ra.ini
[2009/02/25 05:19:58 | 000,000,076 | ---- | C] () -- C:\WINDOWS\SEW_OEL.INI
[2009/02/25 05:19:56 | 000,001,363 | ---- | C] () -- C:\WINDOWS\SEW_KAT.INI
[2009/02/25 05:19:56 | 000,000,194 | ---- | C] () -- C:\WINDOWS\KONVERT.INI
[2009/02/25 05:15:16 | 000,000,412 | ---- | C] () -- C:\WINDOWS\Sew_glob.ini
[2009/02/24 08:28:57 | 000,000,292 | ---- | C] () -- C:\WINDOWS\Microwin.ini
[2009/02/23 03:39:30 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2009/02/18 12:58:20 | 000,000,146 | ---- | C] () -- C:\WINDOWS\CAPTURE.INI
[2009/02/18 12:56:09 | 000,000,036 | ---- | C] () -- C:\WINDOWS\ACROREAD.INI
[2009/02/18 12:54:33 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\lfpng60n.dll
[2009/02/18 12:54:33 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\lftif60n.dll
[2009/02/18 12:54:33 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\ltfil60n.dll
[2009/02/18 12:54:33 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\lfpcx60n.dll
[2009/02/18 12:54:33 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\lfpsd60n.dll
[2009/02/18 12:54:33 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\lftga60n.dll
[2009/02/18 12:54:33 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwpg60n.dll
[2009/02/18 12:54:33 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwmf60n.dll
[2009/02/18 12:54:32 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\lffax60n.dll
[2009/02/18 12:54:32 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\lfcmp60n.dll
[2009/02/18 12:54:32 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfpct60n.dll
[2009/02/18 12:54:32 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfeps60n.dll
[2009/02/18 12:54:32 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\lfbmp60n.dll
[2009/02/18 12:54:32 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\lfmsp60n.dll
[2009/02/18 12:54:32 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\lfmac60n.dll
[2009/02/18 12:54:32 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\implode.dll
[2009/02/18 12:53:28 | 000,002,469 | ---- | C] () -- C:\WINDOWS\pspice91.ini
[2009/02/13 10:55:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\FwSim.INI
[2009/02/13 10:48:52 | 000,104,633 | ---- | C] () -- C:\WINDOWS\System32\drivers\fwDH485.sys
[2009/02/13 10:48:52 | 000,002,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\FwKbd.sys
[2009/02/13 10:48:51 | 000,032,768 | ---- | C] () -- C:\WINDOWS\fwkbd.exe
[2009/02/13 10:48:48 | 000,031,232 | ---- | C] () -- C:\WINDOWS\System32\s7200L2.dll
[2009/02/13 10:48:00 | 000,208,896 | ---- | C] () -- C:\WINDOWS\ptuninst.exe
[2009/02/13 10:36:35 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\ptuninst.exe
[2009/02/02 02:06:46 | 000,048,128 | ---- | C] () -- C:\WINDOWS\AKDeInstall.exe
[2008/11/06 04:19:49 | 000,001,467 | ---- | C] () -- C:\WINDOWS\cdwl2.ini
[2008/09/18 15:08:02 | 000,290,904 | ---- | C] () -- C:\WINDOWS\System32\vc6-re200l.dll
[2008/09/13 08:28:26 | 000,002,721 | ---- | C] () -- C:\WINDOWS\cvavr.ini
[2008/08/12 01:02:55 | 000,012,074 | ---- | C] () -- C:\WINDOWS\hpdj6122.ini
[2008/08/07 11:16:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MERuntime.INI
[2008/07/28 12:38:59 | 000,000,012 | ---- | C] () -- C:\WINDOWS\bthservsdp.dat
[2008/07/25 04:08:34 | 000,036,408 | ---- | C] () -- C:\WINDOWS\System32\LINXVDD.DLL
[2008/07/10 12:01:07 | 000,007,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\ds1410d.sys
[2008/07/05 12:19:52 | 000,007,449 | ---- | C] () -- C:\WINDOWS\System32\drivers\SDDHP.BIN
[2008/07/05 12:19:52 | 000,006,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\slcnewkt.bin
[2008/07/05 12:19:52 | 000,005,433 | ---- | C] () -- C:\WINDOWS\System32\drivers\SDDH.BIN
[2008/07/05 12:19:50 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTC.BIN
[2008/07/05 12:19:50 | 000,015,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMK485.BIN
[2008/07/05 12:19:50 | 000,015,557 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTX485.BIN
[2008/07/05 12:19:50 | 000,009,282 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKPCL.BIN
[2008/07/05 12:19:50 | 000,009,139 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXPCL.BIN
[2008/07/05 12:19:50 | 000,007,575 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLPCL.BIN
[2008/07/05 12:19:50 | 000,001,825 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST2.BIN
[2008/07/05 12:19:50 | 000,001,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST3.BIN
[2008/07/05 12:19:50 | 000,001,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST2.BIN
[2008/07/05 12:19:50 | 000,001,801 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST1.BIN
[2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST1.BIN
[2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXST1.BIN
[2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST1.BIN
[2008/07/05 12:19:50 | 000,000,301 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST0.BIN
[2008/07/05 12:19:50 | 000,000,301 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXST0.BIN
[2008/07/05 12:19:50 | 000,000,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST0.BIN
[2008/07/05 12:19:50 | 000,000,177 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST0.BIN
[2008/07/05 12:19:50 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST2.BIN
[2008/07/01 06:05:40 | 000,000,235 | ---- | C] () -- C:\WINDOWS\RLEIcons.ini
[2008/06/30 11:37:05 | 000,000,032 | ---- | C] () -- C:\WINDOWS\EvmoveW.INI
[2008/06/30 05:55:27 | 000,015,840 | ---- | C] () -- C:\WINDOWS\System32\machnm1.exe
[2008/06/30 03:37:13 | 000,010,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/06/30 03:22:40 | 000,000,088 | ---- | C] () -- C:\WINDOWS\PIDCal.ini
[2008/06/30 02:40:54 | 000,000,032 | ---- | C] () -- C:\WINDOWS\EVMOVE.INI
[2008/06/30 01:15:26 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2008/06/30 01:15:21 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\hdduinst.exe
[2008/06/30 01:15:21 | 000,006,836 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.INI
[2008/06/30 01:15:20 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.EXE
[2008/06/28 00:59:22 | 000,020,992 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/06/26 06:12:17 | 000,002,488 | ---- | C] () -- C:\WINDOWS\EDS.ini
[2008/06/26 00:16:14 | 000,000,121 | ---- | C] () -- C:\WINDOWS\rocksoft.ini
[2008/06/24 13:36:16 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008/06/23 07:35:21 | 000,000,193 | ---- | C] () -- C:\WINDOWS\hpbafd.ini
[2008/06/23 07:28:56 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/06/23 07:25:04 | 000,000,157 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/06/23 05:59:29 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/06/23 05:57:28 | 001,399,880 | ---- | C] () -- C:\WINDOWS\System32\igklg450.dll
[2008/06/23 05:57:26 | 001,843,784 | ---- | C] () -- C:\WINDOWS\System32\igklg400.dll
[2008/06/23 05:57:26 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4906.dll
[2008/06/23 05:57:26 | 000,104,636 | ---- | C] () -- C:\WINDOWS\System32\igmedcompkrn.dll
[2008/04/08 01:37:57 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2008/04/08 01:35:48 | 000,000,562 | ---- | C] () -- C:\WINDOWS\TBTdetect.ini
[2008/04/08 01:30:03 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2008/04/07 13:12:03 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2008/04/07 13:12:03 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2008/04/07 13:12:03 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2008/04/07 13:12:03 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2008/04/07 13:12:03 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2008/04/07 13:12:03 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2008/04/07 13:07:00 | 000,013,992 | ---- | C] () -- C:\WINDOWS\HWSetupStr.ini
[2008/04/07 13:07:00 | 000,002,182 | ---- | C] () -- C:\WINDOWS\SVPW32Str.ini
[2008/04/07 13:04:09 | 000,004,313 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/04/07 13:03:36 | 000,445,312 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/04/07 12:58:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI
[2008/04/07 12:57:13 | 000,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini
[2008/04/07 12:57:13 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll
[2008/04/07 12:57:13 | 000,009,480 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini
[2008/04/07 12:57:13 | 000,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini
[2008/04/07 12:53:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2008/04/07 12:53:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2008/04/07 12:53:00 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2008/04/07 12:52:59 | 000,165,782 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2008/04/07 12:25:16 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/04/07 12:22:53 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ToshBIOS.dll
[2008/04/07 12:21:16 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2008/04/07 12:20:35 | 000,159,744 | ---- | C] () -- C:\WINDOWS\MakeMrk.exe
[2008/04/07 12:20:35 | 000,000,083 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2008/04/07 12:10:07 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008/04/07 12:06:27 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/04/07 11:58:14 | 000,523,690 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2008/04/07 11:58:14 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2008/04/07 11:58:14 | 000,110,826 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2008/04/07 11:58:14 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2008/04/07 11:58:09 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/04/07 11:58:08 | 000,494,480 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/04/07 11:58:08 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/04/07 11:58:08 | 000,091,040 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/04/07 11:58:08 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/04/07 11:58:07 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008/04/07 11:58:07 | 000,004,631 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008/04/07 11:58:07 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2008/04/07 11:58:06 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/04/07 11:58:06 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/04/07 11:58:02 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/04/07 11:58:02 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2007/12/21 10:46:32 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2007/12/18 08:47:16 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\TPeculiarity.dll
[2007/12/14 11:01:30 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\tsbwls.dll
[2007/11/14 21:24:14 | 000,003,584 | ---- | C] () -- C:\WINDOWS\System32\wceprv.dll
[2007/09/28 05:30:54 | 000,198,680 | ---- | C] () -- C:\WINDOWS\System32\WL40ENT.DLL
[2007/09/28 05:30:54 | 000,023,064 | ---- | C] () -- C:\WINDOWS\System32\WTR40T.DLL
[2005/07/22 15:30:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
[2005/06/10 02:46:52 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\FDT100.dll
[2004/03/31 18:10:28 | 000,001,744 | ---- | C] () -- C:\WINDOWS\UtahS7Integrate.ini
[2000/03/13 08:12:54 | 000,128,512 | ---- | C] () -- C:\WINDOWS\System32\IBSUBC32.dll
[1999/11/08 09:55:46 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\S7oformx.dll
[1999/11/08 09:55:34 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\s7oformx.exe
[1999/10/23 05:05:54 | 000,526,872 | ---- | C] () -- C:\WINDOWS\System32\rtdsk40.exe
[1999/07/16 08:37:56 | 000,136,704 | ---- | C] () -- C:\WINDOWS\System32\TDCTRL.dll
[1996/12/19 08:37:38 | 000,103,360 | ---- | C] () -- C:\WINDOWS\System32\S7OSC16X.DLL
[1996/12/19 08:36:48 | 000,014,848 | ---- | C] () -- C:\WINDOWS\System32\S7OSC32X.DLL
 
========== LOP Check ==========
 
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\WINDOWS\system32\config\systemprofile\Anwendungsdaten\toshiba
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Anwendungsdaten\toshiba
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Anwendungsdaten\toshiba
[2011/12/20 06:36:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Autodesk
[2012/02/16 10:52:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\BabylonToolbar
[2011/06/15 09:35:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\ICQ Toolbar
[2011/11/08 07:47:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Pegtop
[2011/12/20 04:48:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\PriceGong
[2012/05/18 04:20:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\RSW
[2011/10/28 04:34:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TeamViewer
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\toshiba
[2011/11/08 07:41:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Uniblue
[2011/12/14 10:35:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\uTorrent
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\eunger\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\eunger\Anwendungsdaten\toshiba
[2008/09/12 05:48:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Aucotec
[2008/09/13 08:45:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Echo Software
[2009/04/03 11:17:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\GARMIN
[2008/06/24 08:51:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\ICQ
[2009/06/15 05:29:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\ICQ Toolbar
[2008/11/25 07:29:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\InterTrust
[2008/06/25 01:39:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\InterVideo
[2009/07/27 13:59:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Leadertech
[2009/01/06 13:15:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\mquadr.at
[2009/06/19 14:50:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Pegtop
[2009/04/13 05:03:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Research In Motion
[2009/02/13 09:58:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\SIEMENS AG
[2009/06/21 12:31:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\StarOffice8
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\TMP
[2008/07/01 09:46:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\toshiba
[2009/08/07 14:13:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Uniblue
[2008/06/24 11:53:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\ICQ Toolbar
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\toshiba
[2012/05/03 02:43:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Autodesk
[2012/05/09 05:58:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\FreePDF
[2012/06/04 00:25:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Incredibar.com
[2012/05/22 15:02:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\InterVideo
[2012/04/17 09:55:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Pegtop
[2012/05/14 08:01:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\RSW
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\toshiba
[2011/12/20 06:45:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Autodesk
[2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Babylon
[2012/02/14 10:09:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\BabylonToolbar
[2012/04/02 02:26:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\becker
[2011/10/10 05:04:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\ICQ Toolbar
[2012/03/12 14:25:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder
[2012/01/25 10:08:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\pdfforge
[2012/02/29 07:14:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\QuickStoresToolbar
[2012/02/13 10:48:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\TeamViewer
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\toshiba
[2012/03/06 01:42:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\uTorrent
[2012/06/04 00:25:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ADDICT-THING
[2008/09/12 05:32:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aucotec
[2012/05/03 02:43:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Autodesk
[2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2012/03/06 02:02:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FileServe Limited
[2012/06/01 00:49:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\InstallMate
[2009/01/06 13:15:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\m2backup
[2009/01/06 13:15:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\mquadr.at
[2012/06/01 00:49:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Premium
[2008/07/01 06:05:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell
[2009/04/23 04:22:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell Automation
[2009/08/07 11:23:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell Software
[2008/11/06 04:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SEW
[2008/11/07 04:11:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Siemens
[2009/02/13 09:42:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Siemens AG
[2012/03/06 02:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web Installer
[2009/04/23 06:27:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WFCU
[2008/06/23 14:09:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[2011/12/20 04:52:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{1C6FDDD8-FC9E-4C12-9FA5-1AAD377097B3}
[2009/01/06 13:13:38 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{783529ED-FB56-4E47-9A20-F9C23D22C2D0}
[2009/01/06 13:14:43 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8AF9D3CF-B9B5-4F8E-B47F-D26DF984D190}
[2009/06/13 14:26:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/01/06 13:13:44 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C3358ED5-0ADD-4BA0-8F60-B5A7CD34BD14}
[2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\Express Files Updater.job
 
========== Purity Check ==========
 
 
< End of report >
--- --- ---

martymge 17.07.2012 06:33
hallo habe scan heute nochmal gemacht Anbei die Dateien

martymge 17.07.2012 06:36
und die otl datei
OTL Logfile:
Code:
OTL logfile created on: 7/17/2012 9:21:34 AM - Run
OTLPE by OldTimer - Version 3.1.48.0    Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 80.00% Memory free
2.00 Gb Paging File | 2.00 Gb Available in Paging File | 95.00% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 232.88 Gb Total Space | 104.81 Gb Free Space | 45.01% Space Free | Partition Type: NTFS
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
 
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet003
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Auto] --  -- (USBDLM)
SRV - File not found [Auto] --  -- (RoxLiveShare9)
SRV - [2012/07/02 00:02:38 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/05/08 09:13:28 | 000,185,856 | ---- | M] () [Auto] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater)
SRV - [2011/12/20 06:34:29 | 000,077,944 | ---- | M] (Autodesk) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2011/07/19 23:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2011/07/02 00:18:57 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/04/21 01:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010/05/04 06:07:22 | 000,503,080 | ---- | M] (Nero AG) [Auto] -- C:\Programme\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2009/06/05 05:48:14 | 000,144,712 | ---- | M] (Apple Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2008/09/29 08:49:46 | 000,066,848 | ---- | M] (Rockwell Automation Inc.) [Auto] -- C:\Programme\Rockwell Software\FactoryTalk Activation\Tools\FTActivationBoost.exe -- (FTActivationBoost)
SRV - [2008/07/25 03:39:26 | 001,971,768 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Rockwell Software\RSLINX\RSLINX.EXE -- (RSLinx)
SRV - [2008/07/14 13:02:20 | 000,069,685 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Siemens\Step7\S7BIN\s7asysvx.exe -- (s7asysvx)
SRV - [2008/07/03 07:30:28 | 001,571,912 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\S7IEPG\s7oiehsx.exe -- (s7oiehsx)
SRV - [2008/07/03 07:30:28 | 000,240,712 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\Automation\TraceEngine\bin\S7TraceServiceX.exe -- (S7TraceServiceX)
SRV - [2008/06/30 05:54:57 | 001,036,288 | ---- | M] (Kepware) [Auto] -- C:\Programme\KEPServerEnterprise\ServerMain.exe -- (KEPServerEnterpriseService)
SRV - [2008/06/25 07:17:06 | 000,218,408 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RsvcHost.exe -- (RsvcHost)
SRV - [2008/06/25 07:15:22 | 000,148,776 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADiagReceiver.exe -- (RNADiagReceiver)
SRV - [2008/06/25 07:15:18 | 000,034,088 | ---- | M] (Rockwell Automation Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADiagnosticsSrv.exe -- (RNADiagnosticsService)
SRV - [2008/05/27 05:20:38 | 000,070,952 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSLINX\dnwhodisp.exe -- (dnWhoDisp)
SRV - [2008/05/24 03:25:12 | 000,202,024 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSCommon\RSOBSERV.EXE -- (Harmony)
SRV - [2008/05/20 10:10:42 | 001,146,880 | ---- | M] (SIEMENS AG) [Auto] -- C:\Programme\Gemeinsame Dateien\Siemens\sws\almsrv\almsrvx.exe -- (almservice)
SRV - [2007/11/21 11:23:32 | 000,129,632 | ---- | M] (TOSHIBA Corporation) [Auto] -- C:\WINDOWS\system32\TODDSrv.exe -- (TODDSrv)
SRV - [2007/09/28 10:05:16 | 000,128,360 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service)
SRV - [2007/09/18 14:34:28 | 000,147,456 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Rockwell Software\RSView Enterprise\TagSrv.exe -- (Rockwell Tag Server)
SRV - [2007/09/18 14:26:24 | 000,077,824 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Rockwell Software\RSView Enterprise\HMIDIAGNOSTICSLSTADAPT.exe -- (Rockwell HMI Diagnostics)
SRV - [2007/09/17 18:57:28 | 000,212,992 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RdcyHost.exe -- (RdcyHost)
SRV - [2007/09/17 18:57:20 | 000,212,992 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\NmspHost.exe -- (NmspHost)
SRV - [2007/09/17 17:43:08 | 000,991,232 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\RNADirMultiplexor.exe -- (RNADirMultiplexor)
SRV - [2007/09/17 17:42:44 | 000,897,024 | ---- | M] (Rockwell Automation, Inc.) [Auto] -- C:\Programme\Gemeinsame Dateien\Rockwell\RnaDirServer.exe -- (RNADirectory)
SRV - [2007/09/17 17:36:32 | 000,282,624 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\EventClientMultiplexer.exe -- (EventClientMultiplexer)
SRV - [2007/09/17 17:36:08 | 000,217,088 | ---- | M] (Rockwell Automation, Inc.) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Rockwell\EventServer.exe -- (EventServer)
SRV - [2007/08/09 08:58:34 | 001,757,696 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Auto] -- C:\WINDOWS\System32\hasplms.exe -- (hasplms)
SRV - [2007/07/09 04:47:58 | 000,094,208 | ---- | M] () [On_Demand] -- C:\Programme\Rockwell Software\RSLinx Enterprise\LogReceiver.exe -- (LogReceiver)
SRV - [2007/06/26 09:11:48 | 000,217,088 | ---- | M] (Rockwell Automation) [Auto] -- C:\Programme\Rockwell Software\RSLinx Enterprise\RSLinxNG.exe -- (RSLinxNG)
SRV - [2007/04/17 02:07:50 | 000,135,168 | ---- | M] (OPC Foundation) [On_Demand] -- C:\WINDOWS\system32\opcenum.exe -- (OpcEnum)
SRV - [2007/02/12 11:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Auto] -- C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)
SRV - [2006/10/26 08:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005/04/03 18:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2005/01/17 11:38:00 | 000,040,960 | ---- | M] (TOSHIBA CORPORATION) [Auto] -- C:\Programme\Toshiba\ConfigFree\CFSvcs.exe -- (CFSvcs)
SRV - [2004/03/23 09:40:20 | 000,028,672 | ---- | M] ( ) [Auto] -- C:\Programme\Rockwell Software\RSView32 Service\RSV32ServiceAD.exe -- (RSView32 Service for AD)
SRV - [2003/11/17 13:50:50 | 000,659,456 | ---- | M] (Macrovision Corporation) [Auto] -- C:\Programme\Rockwell Software\FactoryTalk Activation\lmgrd.exe -- (FactoryTalk Activation Service)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand] --  -- (WINIO)
DRV - File not found [Kernel | On_Demand] --  -- (WDICA)
DRV - File not found [Kernel | System] --  -- (VirtualBackplane)
DRV - File not found [Kernel | Auto] --  -- (S7oppilx)
DRV - File not found [Kernel | On_Demand] --  -- (RimUsb)
DRV - File not found [Kernel | On_Demand] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] --  -- (PDCOMP)
DRV - File not found [Kernel | System] --  -- (PCIDump)
DRV - File not found [Kernel | On_Demand] --  -- (pcidnt)
DRV - File not found [Kernel | System] --  -- (lbrtfdc)
DRV - File not found [Kernel | System] --  -- (i2omgmt)
DRV - File not found [Kernel | On_Demand] --  -- (hwdatacard)
DRV - File not found [Kernel | On_Demand] --  -- (GenericMount)
DRV - File not found [Kernel | System] --  -- (Changer)
DRV - [2011/07/02 00:18:59 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/07/02 00:18:59 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/10/08 11:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008/07/05 12:19:52 | 000,155,440 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\SYSTEM32\RSSERIAL.SYS -- (RSSERIAL)
DRV - [2008/07/05 12:19:50 | 000,039,067 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\RSIKT.SYS -- (RsiKtControl)
DRV - [2008/07/03 07:10:08 | 000,508,416 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\S7otranx.sys -- (s7otranx)
DRV - [2008/07/03 07:07:36 | 000,173,568 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\s7osmcax.sys -- (s7osmcax)
DRV - [2008/07/03 07:06:02 | 000,095,232 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\Drivers\S7oppitx.sys -- (s7oppitx)
DRV - [2008/07/03 07:04:42 | 000,031,232 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s7opcsrtx.sys -- (S7opcsrtx) PROFINET IO RT-Protocol (LLDP)
DRV - [2008/07/03 07:03:10 | 000,077,312 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\S7odpx2x.sys -- (s7odpx2x)
DRV - [2008/06/30 01:15:26 | 000,047,616 | ---- | M] (Aladdin Knowledge Systems) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Haspnt.sys -- (Haspnt)
DRV - [2008/04/13 14:56:06 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/03/13 08:51:52 | 000,057,536 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftdibus.sys -- (FTDIBUS)
DRV - [2008/03/13 08:50:02 | 000,072,000 | ---- | M] (FTDI Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ftser2k.sys -- (FTSER2K)
DRV - [2008/03/04 04:12:06 | 000,048,600 | ---- | M] (O2Micro ) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\o2media.sys -- (O2MDRDR)
DRV - [2008/02/19 09:39:44 | 000,191,424 | ---- | M] (Jungo) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\windrvr6.sys -- (WinDriver6)
DRV - [2008/02/01 08:18:56 | 000,732,160 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\CHDAud.sys -- (CnxtHdAudAddService)
DRV - [2008/01/30 11:21:12 | 002,846,720 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\ati2mtag.sys -- (ati2mtag)
DRV - [2008/01/15 05:40:53 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2008/01/15 05:40:53 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2007/12/28 04:51:00 | 000,285,952 | ---- | M] (Marvell) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2007/12/05 05:51:04 | 000,310,144 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\SNTIE.SYS -- (SNTIE) SIMATIC Industrial Ethernet (ISO)
DRV - [2007/11/06 10:25:36 | 000,101,888 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2007/11/01 11:26:36 | 000,989,696 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_DPV.sys -- (HSF_DPV)
DRV - [2007/11/01 11:25:32 | 000,211,456 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys -- (HSFHWAZL)
DRV - [2007/11/01 11:25:22 | 000,731,520 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys -- (winachsf)
DRV - [2007/10/12 09:42:56 | 000,255,872 | ---- | M] (PEAK-System Technik GmbH, Darmstadt, Germany) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Peakcan.sys -- (Peakcan)
DRV - [2007/10/02 05:43:22 | 000,064,128 | ---- | M] (TOSHIBA Corporation) [Kernel | System] -- C:\WINDOWS\system32\drivers\tosrfcom.sys -- (Tosrfcom)
DRV - [2007/09/26 01:01:32 | 002,236,032 | ---- | M] (Intel Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\NETw4x32.sys -- (NETw4x32) Intel(R)
DRV - [2007/08/29 14:24:06 | 000,012,333 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\s7oupc2x.sys -- (s7oupc2x)
DRV - [2007/07/30 06:06:04 | 000,071,168 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\s7snsrtx.sys -- (s7snsrtx)
DRV - [2007/07/23 10:12:44 | 000,046,336 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshhl.sys -- (akshhl)
DRV - [2007/07/05 10:16:56 | 000,238,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\akshasp.sys -- (akshasp)
DRV - [2007/07/05 10:16:56 | 000,014,976 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\aksusb.sys -- (aksusb)
DRV - [2007/06/25 09:47:16 | 000,028,363 | ---- | M] (SIEMENS AG) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\dpmtrcdd.sys -- (Dpmtrcdd)
DRV - [2007/05/29 05:01:50 | 000,006,912 | ---- | M] (TOSHIBA) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\QIOMem.sys -- (QIOMem)
DRV - [2007/05/28 04:02:02 | 000,352,256 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\aksfridge.sys -- (aksfridge)
DRV - [2007/03/26 06:22:18 | 000,105,856 | ---- | M] (TOSHIBA Corporation) [File_System | Auto] -- C:\WINDOWS\system32\drivers\tdudf.sys -- (tdudf)
DRV - [2007/03/20 05:33:28 | 000,028,672 | ---- | M] (hxxp://libusb-win32.sourceforge.net) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\libusb0.sys -- (libusb0)
DRV - [2007/03/01 06:12:16 | 000,075,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\slabser.sys -- (slabser)
DRV - [2007/03/01 06:12:16 | 000,058,368 | ---- | M] (MCCI Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\slabbus.sys -- (slabbus) CP210x USB Composite Device driver (WDM)
DRV - [2007/02/19 06:15:32 | 000,134,016 | ---- | M] (TOSHIBA Corporation) [File_System | Auto] -- C:\WINDOWS\system32\drivers\trudf.sys -- (trudf)
DRV - [2006/12/28 06:44:44 | 000,084,992 | ---- | M] (ATI Research Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\AtiHdAud.sys -- (HdAudAddService)
DRV - [2006/11/22 04:01:48 | 000,693,760 | ---- | M] (Aladdin Knowledge Systems Ltd.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\hardlock.sys -- (Hardlock)
DRV - [2006/10/23 10:32:20 | 000,009,216 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosrfec.sys -- (tosrfec)
DRV - [2006/10/18 05:50:04 | 000,016,128 | ---- | M] (TOSHIBA Corporation.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tdcmdpst.sys -- (tdcmdpst)
DRV - [2006/10/10 13:33:00 | 000,041,600 | ---- | M] (TOSHIBA Corporation) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\tosporte.sys -- (tosporte)
DRV - [2006/01/12 10:21:18 | 000,031,872 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\qkbfiltr.sys -- (qkbfiltr)
DRV - [2005/06/10 16:42:00 | 000,005,504 | ---- | M] (Quanta Computer Corp) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\BoiHwSetup.sys -- (BoiHwsetup)
DRV - [2005/05/05 08:27:38 | 000,007,936 | ---- | M] (Quanta Computer, Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\qmofiltr.sys -- (qmofiltr)
DRV - [2003/01/29 09:35:00 | 000,012,032 | ---- | M] (TOSHIBA Corporation.) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\Netdevio.sys -- (Netdevio)
DRV - [2002/11/13 08:38:40 | 000,016,447 | ---- | M] (Rockwell Automation) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\RSI-PKTX-A.SYS -- (RSI-PKTX-A)
DRV - [2002/11/13 04:40:28 | 000,002,976 | ---- | M] () [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\FwKbd.sys -- (fwkbd)
DRV - [2002/10/17 20:34:14 | 000,030,512 | ---- | M] (SIEMENS AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\s7oefs_x.sys -- (s7oefs_x)
DRV - [2002/04/23 13:02:26 | 000,038,999 | ---- | M] (Rockwell Software Inc.) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\RSIKTNG.SYS -- (RSLINXNGKtControl)
DRV - [2001/10/25 04:21:48 | 000,063,972 | ---- | M] (Siemens AG) [Kernel | On_Demand] -- C:\WINDOWS\System32\drivers\dpmcslv.sys -- (dpmcslv)
DRV - [2001/06/21 15:39:02 | 000,073,728 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel)
DRV - [2001/06/21 15:39:02 | 000,020,032 | R--- | M] (Rainbow Technologies Inc.) [Kernel | On_Demand] -- C:\WINDOWS\system32\drivers\SNTNLUSB.SYS -- (Sntnlusb)
DRV - [2001/02/28 21:15:00 | 000,006,144 | ---- | M] (Erik Salaj) [Kernel | Auto] -- C:\WINDOWS\system32\drivers\IOPORT.SYS -- (IOPort)
DRV - [1998/07/09 22:31:00 | 000,007,328 | ---- | M] () [Kernel | Auto] -- C:\WINDOWS\system32\drivers\ds1410d.sys -- (DS1410D)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\administrator.ABALON-HARDWOOD.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE8ENUS/701
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.bing.com [binary data]
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\Administrator_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
IE - HKU\Administrator_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1me10IE8ENUS/701
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://www.bing.com [binary data]
IE - HKU\eunger_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://at.msn.com/
IE - HKU\eunger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://suche.aon.at
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie
IE - HKU\mgombotz_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://mystart.incredibar.com/mb139?a=6PQz7vCB0W&i=26
IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://at.msn.com/
IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://www.bing.com [binary data]
IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.at/
IE - HKU\mgrabner_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgrabner_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKU\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
========== FireFox ==========
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: 
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Programme\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Programme\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Programme\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Programme\Web Assistant\Firefox [2012/06/01 00:46:59 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/07/02 00:02:41 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins
 
[2012/05/18 04:27:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Extensions
[2012/03/12 14:29:54 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
File not found (No name found) --
[2012/07/02 00:02:40 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012/07/02 00:02:31 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/07/02 00:02:31 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/07/02 00:02:31 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/07/02 00:02:31 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/07/02 00:02:31 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/07/02 00:02:31 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2008/01/15 05:26:47 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1      localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (QuickStores-Toolbar) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} -  File not found
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Incredibar.com Helper Object) - {6E13DDE1-2B6E-46CE-8B66-DC8BF36F6B99} - C:\Programme\Incredibar.com\incredibar\1.5.11.14\bh\incredibar.dll (Montera Technologeis LTD)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Plugin for Media Finder) - {AD4DF010-E2FD-43CE-864A-6BD1EDC59AC2} - C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder\Extensions\IEPlugin32.dll (Media Finder)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O2 - BHO: (Help the General-Search Project) - {CA4520F3-AE13-4FB1-A513-58E23991C86D} - C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder\Extensions\gencrawler_gc.dll ()
O2 - BHO: (ADDICT-THING Class) - {CDE76C9A-C062-F8FE-474B-6A6705EAE133} - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ADDICT-THING\bhoclass.dll ()
O3 - HKLM\..\Toolbar: (QuickStores-Toolbar) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} -  File not found
O3 - HKLM\..\Toolbar: (Incredibar Toolbar) - {F9639E4A-801B-4843-AEE3-03D9DA199E77} - C:\Programme\Incredibar.com\incredibar\1.5.11.14\incredibarTlbr.dll (Montera Technologeis LTD)
O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O3 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgombotz_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {7E111A5C-3D11-4F56-9463-5310C3C69025} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [AutoRunnerX] C:\Programme\AutoRunnerX\arxsrv.exe (Bernhard Fomm, Munich)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent]  File not found
O4 - HKLM..\Run: [DDWMon] C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe ()
O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe (HP)
O4 - HKLM..\Run: [ITSecMng] C:\Programme\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe ( TOSHIBA CORPORATION)
O4 - HKLM..\Run: [S7UB Start] C:\Programme\Gemeinsame Dateien\Siemens\S7ubtoox\s7ubtstx.exe (SIEMENS AG)
O4 - HKLM..\Run: [SmoothView] C:\Programme\Toshiba\TOSHIBA Zoom-Dienstprogramm\SmoothView.exe (TOSHIBA Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [topi] C:\Programme\TOSHIBA\Toshiba Online Product Information\topi.exe (TOSHIBA)
O4 - HKLM..\Run: [Toshiba Controls Utility] C:\Programme\Toshiba\Controls\VolumeIndicator.exe (TOSHIBA Inc.)
O4 - HKLM..\Run: [Toshiba Hotkey Utility] C:\Programme\Toshiba\Windows Utilities\Hotkey.exe (TOSHIBA Inc.)
O4 - HKLM..\Run: [TPSMain]  File not found
O4 - HKLM..\Run: [UnlockerAssistant]  File not found
O4 - HKLM..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKLM..\Run: [UsbCipHelper] C:\Programme\Rockwell Automation\Rockwell Automation USB CIP Driver Package\UsbCipHelper\UsbCipHelper.exe (Rockwell Automation, Inc.)
O4 - HKU\administrator.ABALON-HARDWOOD.000_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\administrator.ABALON-HARDWOOD_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\Administrator_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\Administrator_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKU\eunger_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\mgombotz.ABALON-HARDWOOD_ON_C..\Run: [ISUSPM] C:\Programme\Gemeinsame Dateien\InstallShield\UpdateService\ISUSPM.exe (Macrovision Corporation)
O4 - HKU\mgombotz_ON_C..\Run: [swg]  File not found
O4 - HKU\mgombotz_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKU\mgrabner_ON_C..\Run: [Media Finder]  File not found
O4 - HKU\mgrabner_ON_C..\Run: [TOSCDSPD] C:\Programme\Toshiba\TOSCDSPD\TOSCDSPD.exe (TOSHIBA)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AutoCAD-Startbeschleuniger.lnk = C:\Programme\Gemeinsame Dateien\Autodesk Shared\acstart16.exe (Autodesk, Inc)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\LEO Server.lnk = C:\Programme\RSW\Leo8\LeoServer\LeoServer.exe (RSW Technik GmbH)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\eunger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O7 - HKU\mgombotz_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgrabner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/DE-AT/a-UNO1/GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1214216227406 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {9C23D886-43CB-43DE-B2DB-112A68D7E10A} hxxp://lads.myspace.com/upload/MySpaceUploader2.cab (MySpace Uploader Control)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {E4CF4E86-D0DC-4864-8F0E-4F6EA2526334} https://img.ui-portal.de/webde/smartdrive/activex/gmxnet_osupload_2002.cab (UI File Upload Control)
O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/mygarmin/m/GarminAxControl.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = abalon-hardwood.com
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -  File not found
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -  File not found
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} -  File not found
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -  File not found
O20 - HKLM Winlogon: UIHost - (logonui.exe) -  File not found
O20 - HKLM Winlogon: VMApplet - (Control_RunDLL "sysdm.cpl") -  File not found
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll -  File not found
O20 - Winlogon\Notify\crypt32chain: DllName - crypt32.dll -  File not found
O20 - Winlogon\Notify\cryptnet: DllName - cryptnet.dll -  File not found
O20 - Winlogon\Notify\cscdll: DllName - cscdll.dll -  File not found
O20 - Winlogon\Notify\igfxcui: DllName - igfxdev.dll -  File not found
O20 - Winlogon\Notify\ScCertProp: DllName - wlnotify.dll -  File not found
O20 - Winlogon\Notify\Schedule: DllName - wlnotify.dll -  File not found
O20 - Winlogon\Notify\sclgntfy: DllName - sclgntfy.dll -  File not found
O20 - Winlogon\Notify\SensLogn: DllName - WlNotify.dll -  File not found
O20 - Winlogon\Notify\termsrv: DllName - wlnotify.dll -  File not found
O20 - Winlogon\Notify\WgaLogon: DllName - WgaLogon.dll -  File not found
O20 - Winlogon\Notify\wlballoon: DllName - wlnotify.dll -  File not found
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\TOSHIBA1280x0800.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\TOSHIBA1280x0800.bmp
O28 - HKLM ShellExecuteHooks: {AEB6717E-7E19-11d0-97EE-00C04FD91972} -  File not found
O29 - HKLM SecurityProviders - (msapsspc.dll) -  File not found
O29 - HKLM SecurityProviders - (schannel.dll) -  File not found
O29 - HKLM SecurityProviders - (digest.dll) -  File not found
O29 - HKLM SecurityProviders - (msnsspc.dll) -  File not found
O30 - LSA: Authentication Packages - (nwprovau) - C:\WINDOWS\System32\nwprovau.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/04/07 12:08:21 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012/07/13 08:08:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\Facebook
[2012/07/13 00:11:36 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012/07/12 00:51:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kabel++
[2012/07/12 00:51:53 | 000,000,000 | ---D | C] -- C:\Programme\Kabel++
[2012/07/03 06:58:25 | 000,000,000 | ---D | C] -- C:\FreePDF
[2012/06/29 02:40:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Unterlagen Allgemein
[2012/06/25 07:31:17 | 000,521,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jsdbgui.dll
[2009/02/13 10:34:03 | 000,570,128 | ---- | C] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\dao350.dll
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012/07/17 01:50:11 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/07/17 01:49:51 | 000,000,012 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat
[2012/07/17 01:49:20 | 2137,444,352 | -HS- | M] () -- C:\hiberfil.sys
[2012/07/16 16:22:18 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/07/16 16:22:17 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\Express Files Updater.job
[2012/07/16 16:12:35 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\defogger_reenable
[2012/07/16 08:49:18 | 000,142,848 | ---- | M] () -- C:\WINDOWS\System32\fest0r_ot.exe
[2012/07/16 08:39:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/07/16 05:42:19 | 000,138,742 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\vitw_d.pdf
[2012/07/16 00:21:50 | 000,000,772 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Microsoft\Internet Explorer\Quick Launch\Microsoft Office Outlook.lnk
[2012/07/13 01:08:58 | 000,445,312 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/07/13 00:12:19 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012/07/12 00:51:59 | 000,000,662 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Kabel++ Light.lnk
[2012/07/12 00:51:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Kabel++
[2012/07/09 07:10:51 | 000,001,744 | ---- | M] () -- C:\WINDOWS\UtahS7Integrate.ini
[2012/07/06 07:28:06 | 000,066,296 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\feedworks.pdf
[2012/07/04 09:37:51 | 000,071,656 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\RSLogix 5000 Report(s).pdf
[2012/07/04 00:12:14 | 000,128,570 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole.pdf
[2012/07/03 07:00:38 | 000,114,598 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole tc Alt.pdf
[2012/06/29 00:31:42 | 000,002,505 | ---- | M] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Microsoft Office Excel 2007.lnk
[2012/06/25 10:17:31 | 000,523,690 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012/06/25 10:17:31 | 000,494,480 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/06/25 10:17:31 | 000,110,826 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012/06/25 10:17:31 | 000,091,040 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[4 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012/07/16 16:12:35 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\defogger_reenable
[2012/07/16 08:49:24 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\fest0r_ot.exe
[2012/07/16 05:42:17 | 000,138,742 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\vitw_d.pdf
[2012/07/12 00:51:59 | 000,000,662 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Kabel++ Light.lnk
[2012/07/06 07:28:03 | 000,066,296 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\feedworks.pdf
[2012/07/04 09:35:49 | 000,071,656 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\RSLogix 5000 Report(s).pdf
[2012/07/04 00:12:12 | 000,128,570 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole.pdf
[2012/07/03 07:00:34 | 000,114,598 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Desktop\Symbole tc Alt.pdf
[2012/05/09 05:58:18 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\redmonnt.dll
[2012/05/09 05:58:18 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\unredmon.exe
[2012/05/03 08:01:45 | 000,006,656 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/04/17 05:18:24 | 000,000,157 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2012/04/17 04:59:58 | 000,000,166 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2012/04/04 00:28:04 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\$_hpcst$.hpc
[2012/03/08 05:47:40 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/02/15 01:14:52 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/01/25 10:08:26 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll
[2012/01/25 08:36:43 | 000,000,035 | ---- | C] () -- C:\WINDOWS\A5W.INI
[2011/12/07 08:09:36 | 000,004,608 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/11/08 08:54:44 | 000,000,061 | R--- | C] () -- C:\WINDOWS\System32\uninstall.ini
[2011/11/08 07:49:03 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\eunger\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/10/10 04:06:20 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\mgrabner\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2011/07/26 04:42:03 | 000,000,066 | ---- | C] () -- C:\WINDOWS\HRMINIA 2.0.INI
[2011/07/26 03:37:11 | 000,006,688 | ---- | C] () -- C:\WINDOWS\MOVEXE.EXE
[2011/07/26 03:12:29 | 000,000,045 | ---- | C] () -- C:\WINDOWS\MINIA 2.0.INI
[2009/11/24 22:45:58 | 000,026,624 | ---- | C] () -- C:\WINDOWS\System32\sdc1ml3.dll
[2009/08/12 10:17:15 | 000,135,253 | R--- | C] () -- C:\WINDOWS\System32\WdReg.exe
[2009/07/30 01:44:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Autoplay.INI
[2009/07/24 15:47:45 | 000,000,031 | ---- | C] () -- C:\WINDOWS\RESETW.INI
[2009/04/17 13:01:13 | 000,000,256 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\pool.bin
[2009/04/15 02:18:41 | 000,000,031 | ---- | C] () -- C:\WINDOWS\RESET.INI
[2009/04/13 11:21:09 | 000,319,696 | ---- | C] () -- C:\WINDOWS\System32\BOCOF.DLL
[2009/04/13 05:03:29 | 000,000,256 | ---- | C] () -- C:\WINDOWS\System32\pool.bin
[2009/02/25 06:20:16 | 000,000,097 | ---- | C] () -- C:\WINDOWS\usrwiz.ini
[2009/02/25 05:20:01 | 000,000,324 | ---- | C] () -- C:\WINDOWS\Sew_ra.ini
[2009/02/25 05:19:58 | 000,000,076 | ---- | C] () -- C:\WINDOWS\SEW_OEL.INI
[2009/02/25 05:19:56 | 000,001,363 | ---- | C] () -- C:\WINDOWS\SEW_KAT.INI
[2009/02/25 05:19:56 | 000,000,194 | ---- | C] () -- C:\WINDOWS\KONVERT.INI
[2009/02/25 05:15:16 | 000,000,412 | ---- | C] () -- C:\WINDOWS\Sew_glob.ini
[2009/02/24 08:28:57 | 000,000,292 | ---- | C] () -- C:\WINDOWS\Microwin.ini
[2009/02/23 03:39:30 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2009/02/18 12:58:20 | 000,000,146 | ---- | C] () -- C:\WINDOWS\CAPTURE.INI
[2009/02/18 12:56:09 | 000,000,036 | ---- | C] () -- C:\WINDOWS\ACROREAD.INI
[2009/02/18 12:54:33 | 000,110,080 | ---- | C] () -- C:\WINDOWS\System32\lfpng60n.dll
[2009/02/18 12:54:33 | 000,046,080 | ---- | C] () -- C:\WINDOWS\System32\lftif60n.dll
[2009/02/18 12:54:33 | 000,043,008 | ---- | C] () -- C:\WINDOWS\System32\ltfil60n.dll
[2009/02/18 12:54:33 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\lfpcx60n.dll
[2009/02/18 12:54:33 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\lfpsd60n.dll
[2009/02/18 12:54:33 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\lftga60n.dll
[2009/02/18 12:54:33 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwpg60n.dll
[2009/02/18 12:54:33 | 000,019,456 | ---- | C] () -- C:\WINDOWS\System32\lfwmf60n.dll
[2009/02/18 12:54:32 | 000,176,128 | ---- | C] () -- C:\WINDOWS\System32\lffax60n.dll
[2009/02/18 12:54:32 | 000,141,824 | ---- | C] () -- C:\WINDOWS\System32\lfcmp60n.dll
[2009/02/18 12:54:32 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfpct60n.dll
[2009/02/18 12:54:32 | 000,022,528 | ---- | C] () -- C:\WINDOWS\System32\lfeps60n.dll
[2009/02/18 12:54:32 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\lfbmp60n.dll
[2009/02/18 12:54:32 | 000,018,432 | ---- | C] () -- C:\WINDOWS\System32\lfmsp60n.dll
[2009/02/18 12:54:32 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\lfmac60n.dll
[2009/02/18 12:54:32 | 000,017,920 | ---- | C] () -- C:\WINDOWS\System32\implode.dll
[2009/02/18 12:53:28 | 000,002,469 | ---- | C] () -- C:\WINDOWS\pspice91.ini
[2009/02/13 10:55:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\FwSim.INI
[2009/02/13 10:48:52 | 000,104,633 | ---- | C] () -- C:\WINDOWS\System32\drivers\fwDH485.sys
[2009/02/13 10:48:52 | 000,002,976 | ---- | C] () -- C:\WINDOWS\System32\drivers\FwKbd.sys
[2009/02/13 10:48:51 | 000,032,768 | ---- | C] () -- C:\WINDOWS\fwkbd.exe
[2009/02/13 10:48:48 | 000,031,232 | ---- | C] () -- C:\WINDOWS\System32\s7200L2.dll
[2009/02/13 10:48:00 | 000,208,896 | ---- | C] () -- C:\WINDOWS\ptuninst.exe
[2009/02/13 10:36:35 | 000,208,896 | ---- | C] () -- C:\WINDOWS\System32\ptuninst.exe
[2009/02/02 02:06:46 | 000,048,128 | ---- | C] () -- C:\WINDOWS\AKDeInstall.exe
[2008/11/06 04:19:49 | 000,001,467 | ---- | C] () -- C:\WINDOWS\cdwl2.ini
[2008/09/18 15:08:02 | 000,290,904 | ---- | C] () -- C:\WINDOWS\System32\vc6-re200l.dll
[2008/09/13 08:28:26 | 000,002,721 | ---- | C] () -- C:\WINDOWS\cvavr.ini
[2008/08/12 01:02:55 | 000,012,074 | ---- | C] () -- C:\WINDOWS\hpdj6122.ini
[2008/08/07 11:16:29 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MERuntime.INI
[2008/07/28 12:38:59 | 000,000,012 | ---- | C] () -- C:\WINDOWS\bthservsdp.dat
[2008/07/25 04:08:34 | 000,036,408 | ---- | C] () -- C:\WINDOWS\System32\LINXVDD.DLL
[2008/07/10 12:01:07 | 000,007,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\ds1410d.sys
[2008/07/05 12:19:52 | 000,007,449 | ---- | C] () -- C:\WINDOWS\System32\drivers\SDDHP.BIN
[2008/07/05 12:19:52 | 000,006,400 | ---- | C] () -- C:\WINDOWS\System32\drivers\slcnewkt.bin
[2008/07/05 12:19:52 | 000,005,433 | ---- | C] () -- C:\WINDOWS\System32\drivers\SDDH.BIN
[2008/07/05 12:19:50 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTC.BIN
[2008/07/05 12:19:50 | 000,015,664 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMK485.BIN
[2008/07/05 12:19:50 | 000,015,557 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTX485.BIN
[2008/07/05 12:19:50 | 000,009,282 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKPCL.BIN
[2008/07/05 12:19:50 | 000,009,139 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXPCL.BIN
[2008/07/05 12:19:50 | 000,007,575 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLPCL.BIN
[2008/07/05 12:19:50 | 000,001,825 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST2.BIN
[2008/07/05 12:19:50 | 000,001,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST3.BIN
[2008/07/05 12:19:50 | 000,001,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST2.BIN
[2008/07/05 12:19:50 | 000,001,801 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST1.BIN
[2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST1.BIN
[2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXST1.BIN
[2008/07/05 12:19:50 | 000,001,800 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST1.BIN
[2008/07/05 12:19:50 | 000,000,301 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST0.BIN
[2008/07/05 12:19:50 | 000,000,301 | ---- | C] () -- C:\WINDOWS\System32\drivers\KTXST0.BIN
[2008/07/05 12:19:50 | 000,000,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\KLST0.BIN
[2008/07/05 12:19:50 | 000,000,177 | ---- | C] () -- C:\WINDOWS\System32\drivers\KT2ST0.BIN
[2008/07/05 12:19:50 | 000,000,011 | ---- | C] () -- C:\WINDOWS\System32\drivers\PCMKST2.BIN
[2008/07/01 06:05:40 | 000,000,235 | ---- | C] () -- C:\WINDOWS\RLEIcons.ini
[2008/06/30 11:37:05 | 000,000,032 | ---- | C] () -- C:\WINDOWS\EvmoveW.INI
[2008/06/30 05:55:27 | 000,015,840 | ---- | C] () -- C:\WINDOWS\System32\machnm1.exe
[2008/06/30 03:37:13 | 000,010,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008/06/30 03:22:40 | 000,000,088 | ---- | C] () -- C:\WINDOWS\PIDCal.ini
[2008/06/30 02:40:54 | 000,000,032 | ---- | C] () -- C:\WINDOWS\EVMOVE.INI
[2008/06/30 01:15:26 | 000,000,383 | ---- | C] () -- C:\WINDOWS\System32\haspdos.sys
[2008/06/30 01:15:21 | 000,024,576 | ---- | C] () -- C:\WINDOWS\System32\hdduinst.exe
[2008/06/30 01:15:21 | 000,006,836 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.INI
[2008/06/30 01:15:20 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\UNWISE.EXE
[2008/06/28 00:59:22 | 000,020,992 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/06/26 06:12:17 | 000,002,488 | ---- | C] () -- C:\WINDOWS\EDS.ini
[2008/06/26 00:16:14 | 000,000,121 | ---- | C] () -- C:\WINDOWS\rocksoft.ini
[2008/06/24 13:36:16 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008/06/23 07:35:21 | 000,000,193 | ---- | C] () -- C:\WINDOWS\hpbafd.ini
[2008/06/23 07:28:56 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/06/23 07:25:04 | 000,000,157 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/06/23 05:59:29 | 000,000,141 | ---- | C] () -- C:\Dokumente und Einstellungen\mgombotz\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/06/23 05:57:28 | 001,399,880 | ---- | C] () -- C:\WINDOWS\System32\igklg450.dll
[2008/06/23 05:57:26 | 001,843,784 | ---- | C] () -- C:\WINDOWS\System32\igklg400.dll
[2008/06/23 05:57:26 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\igfxCoIn_v4906.dll
[2008/06/23 05:57:26 | 000,104,636 | ---- | C] () -- C:\WINDOWS\System32\igmedcompkrn.dll
[2008/04/08 01:37:57 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2008/04/08 01:35:48 | 000,000,562 | ---- | C] () -- C:\WINDOWS\TBTdetect.ini
[2008/04/08 01:30:03 | 000,000,000 | ---- | C] () -- C:\WINDOWS\ativpsrm.bin
[2008/04/07 13:12:03 | 000,204,800 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeW7.dll
[2008/04/07 13:12:03 | 000,200,704 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeA6.dll
[2008/04/07 13:12:03 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeP6.dll
[2008/04/07 13:12:03 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\IVIresizeM6.dll
[2008/04/07 13:12:03 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\IVIresizePX.dll
[2008/04/07 13:12:03 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\IVIresize.dll
[2008/04/07 13:07:00 | 000,013,992 | ---- | C] () -- C:\WINDOWS\HWSetupStr.ini
[2008/04/07 13:07:00 | 000,002,182 | ---- | C] () -- C:\WINDOWS\SVPW32Str.ini
[2008/04/07 13:04:09 | 000,004,313 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008/04/07 13:03:36 | 000,445,312 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/04/07 12:58:57 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NDSTray.INI
[2008/04/07 12:57:13 | 000,128,113 | ---- | C] () -- C:\WINDOWS\System32\csellang.ini
[2008/04/07 12:57:13 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\csellang.dll
[2008/04/07 12:57:13 | 000,009,480 | ---- | C] () -- C:\WINDOWS\System32\tosmreg.ini
[2008/04/07 12:57:13 | 000,007,671 | ---- | C] () -- C:\WINDOWS\System32\cseltbl.ini
[2008/04/07 12:53:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativvaxx.dat
[2008/04/07 12:53:00 | 003,107,788 | ---- | C] () -- C:\WINDOWS\System32\ativva5x.dat
[2008/04/07 12:53:00 | 000,887,724 | ---- | C] () -- C:\WINDOWS\System32\ativva6x.dat
[2008/04/07 12:52:59 | 000,165,782 | ---- | C] () -- C:\WINDOWS\System32\atiicdxx.dat
[2008/04/07 12:25:16 | 000,000,146 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/04/07 12:22:53 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\ToshBIOS.dll
[2008/04/07 12:21:16 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini
[2008/04/07 12:20:35 | 000,159,744 | ---- | C] () -- C:\WINDOWS\MakeMrk.exe
[2008/04/07 12:20:35 | 000,000,083 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2008/04/07 12:10:07 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008/04/07 12:06:27 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008/04/07 11:58:14 | 000,523,690 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2008/04/07 11:58:14 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2008/04/07 11:58:14 | 000,110,826 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2008/04/07 11:58:14 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2008/04/07 11:58:09 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/04/07 11:58:08 | 000,494,480 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/04/07 11:58:08 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/04/07 11:58:08 | 000,091,040 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/04/07 11:58:08 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/04/07 11:58:07 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008/04/07 11:58:07 | 000,004,631 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008/04/07 11:58:07 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2008/04/07 11:58:06 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/04/07 11:58:06 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/04/07 11:58:02 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/04/07 11:58:02 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2007/12/21 10:46:32 | 000,118,784 | ---- | C] () -- C:\WINDOWS\System32\TosBtAcc.dll
[2007/12/18 08:47:16 | 000,122,880 | ---- | C] () -- C:\WINDOWS\System32\TPeculiarity.dll
[2007/12/14 11:01:30 | 000,151,552 | ---- | C] () -- C:\WINDOWS\System32\tsbwls.dll
[2007/11/14 21:24:14 | 000,003,584 | ---- | C] () -- C:\WINDOWS\System32\wceprv.dll
[2007/09/28 05:30:54 | 000,198,680 | ---- | C] () -- C:\WINDOWS\System32\WL40ENT.DLL
[2007/09/28 05:30:54 | 000,023,064 | ---- | C] () -- C:\WINDOWS\System32\WTR40T.DLL
[2005/07/22 15:30:18 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\TosCommAPI.dll
[2005/06/10 02:46:52 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\FDT100.dll
[2004/03/31 18:10:28 | 000,001,744 | ---- | C] () -- C:\WINDOWS\UtahS7Integrate.ini
[2000/03/13 08:12:54 | 000,128,512 | ---- | C] () -- C:\WINDOWS\System32\IBSUBC32.dll
[1999/11/08 09:55:46 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\S7oformx.dll
[1999/11/08 09:55:34 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\s7oformx.exe
[1999/10/23 05:05:54 | 000,526,872 | ---- | C] () -- C:\WINDOWS\System32\rtdsk40.exe
[1999/07/16 08:37:56 | 000,136,704 | ---- | C] () -- C:\WINDOWS\System32\TDCTRL.dll
[1996/12/19 08:37:38 | 000,103,360 | ---- | C] () -- C:\WINDOWS\System32\S7OSC16X.DLL
[1996/12/19 08:36:48 | 000,014,848 | ---- | C] () -- C:\WINDOWS\System32\S7OSC32X.DLL
 
========== LOP Check ==========
 
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD.000\Anwendungsdaten\toshiba
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\administrator.ABALON-HARDWOOD\Anwendungsdaten\toshiba
[2011/12/20 06:36:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Autodesk
[2012/02/16 10:52:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\BabylonToolbar
[2011/06/15 09:35:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\ICQ Toolbar
[2011/11/08 07:47:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Pegtop
[2011/12/20 04:48:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\PriceGong
[2012/05/18 04:20:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\RSW
[2011/10/28 04:34:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TeamViewer
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\toshiba
[2011/11/08 07:41:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Uniblue
[2011/12/14 10:35:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\uTorrent
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\eunger\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\eunger\Anwendungsdaten\toshiba
[2008/09/12 05:48:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Aucotec
[2008/09/13 08:45:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Echo Software
[2009/04/03 11:17:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\GARMIN
[2008/06/24 08:51:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\ICQ
[2009/06/15 05:29:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\ICQ Toolbar
[2008/11/25 07:29:37 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\InterTrust
[2008/06/25 01:39:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\InterVideo
[2009/07/27 13:59:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Leadertech
[2009/01/06 13:15:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\mquadr.at
[2009/06/19 14:50:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Pegtop
[2009/04/13 05:03:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Research In Motion
[2009/02/13 09:58:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\SIEMENS AG
[2009/06/21 12:31:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\StarOffice8
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\TMP
[2008/07/01 09:46:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\toshiba
[2009/08/07 14:13:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Anwendungsdaten\Uniblue
[2008/06/24 11:53:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\ICQ Toolbar
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgombotz\Anwendungsdaten\toshiba
[2012/05/03 02:43:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Autodesk
[2012/05/09 05:58:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\FreePDF
[2012/06/04 00:25:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Incredibar.com
[2012/05/22 15:02:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\InterVideo
[2012/04/17 09:55:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\Pegtop
[2012/05/14 08:01:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\RSW
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner.ABALON-HARDWOOD\Anwendungsdaten\toshiba
[2011/12/20 06:45:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Autodesk
[2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Babylon
[2012/02/14 10:09:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\BabylonToolbar
[2012/04/02 02:26:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\becker
[2011/10/10 05:04:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\ICQ Toolbar
[2012/03/12 14:25:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Media Finder
[2012/01/25 10:08:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\pdfforge
[2012/02/29 07:14:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\QuickStoresToolbar
[2012/02/13 10:48:31 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\TeamViewer
[2008/06/23 14:08:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\TMP
[2008/06/23 14:09:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\toshiba
[2012/03/06 01:42:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\uTorrent
[2012/06/04 00:25:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ADDICT-THING
[2008/09/12 05:32:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Aucotec
[2012/05/03 02:43:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Autodesk
[2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2012/03/06 02:02:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FileServe Limited
[2012/06/01 00:49:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\InstallMate
[2009/01/06 13:15:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\m2backup
[2009/01/06 13:15:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\mquadr.at
[2012/06/01 00:49:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Premium
[2008/07/01 06:05:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell
[2009/04/23 04:22:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell Automation
[2009/08/07 11:23:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Rockwell Software
[2008/11/06 04:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SEW
[2008/11/07 04:11:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Siemens
[2009/02/13 09:42:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Siemens AG
[2012/03/06 02:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web Installer
[2009/04/23 06:27:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\WFCU
[2008/06/23 14:09:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{174892B1-CBE7-44F5-86FF-AB555EFD73A3}
[2011/12/20 04:52:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{1C6FDDD8-FC9E-4C12-9FA5-1AAD377097B3}
[2009/01/06 13:13:38 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{783529ED-FB56-4E47-9A20-F9C23D22C2D0}
[2009/01/06 13:14:43 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8AF9D3CF-B9B5-4F8E-B47F-D26DF984D190}
[2009/06/13 14:26:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
[2009/01/06 13:13:44 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{C3358ED5-0ADD-4BA0-8F60-B5A7CD34BD14}
[2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\Express Files Updater.job
 
========== Purity Check ==========
 
 
< End of report >
--- --- ---

t'john 17.07.2012 15:33
Fixen mit OTLpe


  • Starte den unbootbaren Computer erneut mit der OTLPE-CD,
  • warte bis der Reatogo-X-Pe-Desktop erscheint und doppelklicke das OTLPE-Icon.



  • Kopiere folgendes Skript in das Textfeld unterhalb von Custom Scans/Fixes:
  • Sollte das mangels Internet-Verbindung nicht möglich sein,
  • kopiere den Text aus der folgenden Code-Box und speichere ihn als Fix.txt auf einen USB-Stick.
  • Schließe den USB-Stick an den Computer an und öffne Fix.txt mit dem Explorer auf dem Reatogo-Desktop.
  • Kopiere den Inhalt von Fix.txt in das Textfeld unterhalb von Custom Scans/Fixes:


Code:
:OTL
SRV - [2012/05/08 09:13:28 | 000,185,856 | ---- | M] () [Auto] -- C:\Programme\Web Assistant\ExtensionUpdaterService.exe -- (Web Assistant Updater)
IE - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\administrator.ABALON-HARDWOOD.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Administrator_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\eunger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKU\mgombotz_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\mgrabner_ON_C\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\mgrabner_ON_C\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - Reg Error: Key error. File not found
IE - HKU\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Programme\Web Assistant\Firefox [2012/06/01 00:46:59 | 000,000,000 | ---D | M]
O2 - BHO: (Web Assistant) - {336D0C35-8A85-403a-B9D2-65C292C39087} - C:\Programme\Web Assistant\Extension32.dll ()
O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\Administrator_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O3 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgombotz_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {7E111A5C-3D11-4F56-9463-5310C3C69025} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} - No CLSID value found.
O3 - HKU\mgrabner_ON_C\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] File not found
O4 - HKLM..\Run: [DDWMon] C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe ()
O4 - HKLM..\Run: [TPSMain] File not found
O4 - HKLM..\Run: [UnlockerAssistant] File not found
O4 - HKLM..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKU\Administrator_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKU\mgombotz_ON_C..\Run: [swg] File not found
O4 - HKU\mgrabner.ABALON-HARDWOOD_ON_C..\Run: [Update] C:\WINDOWS\system32\fest0r_ot.exe ()
O4 - HKU\mgrabner_ON_C..\Run: [Media Finder] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\eunger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O7 - HKU\mgombotz_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\mgrabner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://my.garmin.com/mygarmin/m/GarminAxControl.CAB (Reg Error: Key error.)
O32 - HKLM CDRom: AutoRun - 1
 
[2012/07/16 16:22:17 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\Express Files Updater.job
[2012/07/16 16:22:17 | 000,000,282 | ---- | M] () -- C:\WINDOWS\Tasks\Express Files Updater.job
[2012/07/16 08:39:00 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012/02/16 10:52:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\BabylonToolbar
[2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Babylon
[2012/02/14 10:08:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2012/02/14 10:09:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\BabylonToolbar
:Files

C:\WINDOWS\system32\fest0r_ot.exe

ipconfig /flushdns /c
:Commands
[purity]
[emptytemp]
[emptyflash]

  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Klick auf http://billy-oneal.com/Canned%20Spee.../OTL/btnOK.png.
  • Kopiere den Inhalt hier in Code-Tags in Deinen Thread.
    Nachträglich kannst Du das Logfile hier einsehen => C:\OTLpe\MovedFiles\<datum_nummer.log>
  • Teste, ob den Computer nun wieder in den normalen Windows-Modus booten kannst und berichte.

martymge 17.07.2012 16:28
Das Betriebssystem ist normal hochgefahren. Ich Danke dir für die Hilfe.


Anbei die txt. Datei



MFG



========== OTL ==========
Registry key HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Web Assistant Updater deleted successfully.
C:\Programme\Web Assistant\ExtensionUpdaterService.exe moved successfully.
HKLM\Software\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKU\administrator.ABALON-HARDWOOD.000_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\administrator.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry value HKEY_USERS\Administrator_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}\ not found.
HKU\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\eunger_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\LocalService_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E : value set successfully!
HKU\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Search\\SearchAssistant| /E : value set successfully!
Registry value HKEY_USERS\mgombotz_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
HKU\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
HKU\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{855F3B16-6D32-4fe6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4fe6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\URLSearchHooks\\{EEE6C35D-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35D-6118-11DC-9C72-001320C79847}\ not found.
HKU\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
File C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) not found.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
File C:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) not found.
File HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Programme\Web Assistant\Firefox not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{336D0C35-8A85-403a-B9D2-65C292C39087}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{336D0C35-8A85-403a-B9D2-65C292C39087}\ deleted successfully.
C:\Programme\Web Assistant\Extension32.dll moved successfully.
Registry value HKEY_USERS\Administrator_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\Administrator_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found.
Registry value HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\mgombotz_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7E111A5C-3D11-4F56-9463-5310C3C69025} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7E111A5C-3D11-4F56-9463-5310C3C69025}\ not found.
Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{855F3B16-6D32-4FE6-8A56-BBB695989046} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{855F3B16-6D32-4FE6-8A56-BBB695989046}\ not found.
Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{C840E246-6B95-475E-9BD7-CAA1C7ECA9F2}\ not found.
Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{EEE6C35B-6118-11DC-9C72-001320C79847} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EEE6C35B-6118-11DC-9C72-001320C79847}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BluetoothAuthenticationAgent deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\DDWMon deleted successfully.
File move failed. C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe scheduled to be moved on reboot.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\TPSMain deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\UnlockerAssistant deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\Update deleted successfully.
C:\WINDOWS\system32\fest0r_ot.exe moved successfully.
Registry value HKEY_USERS\Administrator_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Update deleted successfully.
File C:\WINDOWS\system32\fest0r_ot.exe not found.
Registry value HKEY_USERS\mgombotz_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\swg deleted successfully.
Registry value HKEY_USERS\mgrabner.ABALON-HARDWOOD_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Update deleted successfully.
File C:\WINDOWS\system32\fest0r_ot.exe not found.
Registry value HKEY_USERS\mgrabner_ON_C\Software\Microsoft\Windows\CurrentVersion\Run\\Media Finder deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\HonorAutoRunSetting deleted successfully.
Registry value HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\eunger_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\LocalService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\mgombotz_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\mgrabner_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Registry value HKEY_USERS\NetworkService_ON_C\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoDriveTypeAutoRun deleted successfully.
Starting removal of ActiveX control {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\eunger_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\LocalService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\mgombotz_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\mgrabner_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\NetworkService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_USERS\systemprofile_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA}\ not found.
Starting removal of ActiveX control Garmin Communicator Plug-In
Registry error reading value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Garmin Communicator Plug-In\DownloadInformation\\INF .
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\Garmin Communicator Plug-In\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\administrator.ABALON-HARDWOOD.000_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\administrator.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\Administrator_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\eunger_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\LocalService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\mgombotz.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\mgombotz_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\mgrabner.ABALON-HARDWOOD_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\mgrabner_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\NetworkService_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
Registry key HKEY_USERS\systemprofile_ON_C\SOFTWARE\Microsoft\Active Setup\Installed Components\Garmin Communicator Plug-In\ not found.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\WINDOWS\tasks\Express Files Updater.job moved successfully.
File C:\WINDOWS\Tasks\Express Files Updater.job not found.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\BabylonToolbar\BabylonToolbar folder moved successfully.
C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\Babylon folder moved successfully.
C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon folder moved successfully.
C:\Dokumente und Einstellungen\mgrabner\Anwendungsdaten\BabylonToolbar\BabylonToolbar folder moved successfully.
========== FILES ==========
File\Folder C:\WINDOWS\system32\fest0r_ot.exe not found.
< ipconfig /flushdns /c >
Windows IP Configuration
An internal error occurred: The system cannot find the file specified.

Please contact Microsoft Product Support Services for further help.
Additional information: Unable to open registry key for tcpip.
C:\cmd.bat deleted successfully.
C:\cmd.txt deleted successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 238076162 bytes
->Temporary Internet Files folder emptied: 587889937 bytes
->Java cache emptied: 2125856 bytes
->FireFox cache emptied: 18591868 bytes
->Flash cache emptied: 13425 bytes

User: administrator.ABALON-HARDWOOD
->Temp folder emptied: 3619398 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: administrator.ABALON-HARDWOOD.000
->Temp folder emptied: 2223 bytes
->Temporary Internet Files folder emptied: 32902 bytes
->Java cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 32902 bytes

User: eunger
->Temp folder emptied: 248469 bytes
->Temporary Internet Files folder emptied: 37089 bytes

User: LocalService
->Temp folder emptied: 311621 bytes
->Temporary Internet Files folder emptied: 12471019 bytes

User: mgombotz
->Temp folder emptied: 1404339 bytes
->Temporary Internet Files folder emptied: 10019058 bytes
->Flash cache emptied: 585 bytes

User: mgombotz.ABALON-HARDWOOD
->Temp folder emptied: 1103009174 bytes
->Temporary Internet Files folder emptied: 807270968 bytes
->Java cache emptied: 333226 bytes
->Flash cache emptied: 27027 bytes

User: MGOMBO~1~ABA

User: mgrabner
->Temp folder emptied: 260459783 bytes
->Temporary Internet Files folder emptied: 661364624 bytes
->Java cache emptied: 91523 bytes
->FireFox cache emptied: 73502625 bytes
->Flash cache emptied: 8448 bytes

User: mgrabner.ABALON-HARDWOOD
->Temp folder emptied: 549784436 bytes
->Temporary Internet Files folder emptied: 107866544 bytes
->Java cache emptied: 1603935 bytes
->FireFox cache emptied: 467953034 bytes
->Flash cache emptied: 8336 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33177 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 19569 bytes
%systemroot%\System32 .tmp files removed: 2775943 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 357132386 bytes

Total Files Cleaned = 5,024.00 mb


[EMPTYFLASH]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: administrator.ABALON-HARDWOOD
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: administrator.ABALON-HARDWOOD.000
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: eunger
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: mgombotz
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: mgombotz.ABALON-HARDWOOD
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: MGOMBO~1~ABA

User: mgrabner
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: mgrabner.ABALON-HARDWOOD
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

Total Flash Files Cleaned = 0.00 mb


OTLPE by OldTimer - Version 3.1.48.0 log created on 07172012_190344

Files\Folders moved on Reboot...
File move failed. C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe scheduled to be moved on reboot.
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2010r4_MMS55_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2010r5_MMS55_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2030r1_MMS550_2.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2030r2_MMS550_SP2_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\HandlingBasic_V2.04_MMS55_SP2_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\HelpFilesV4_MMS550_SP2.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MC07B_CANopen_Configurator_MMS550_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MMS_V550_MotionStudio_SP2.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MotionStudioDriveSync_MMS55_3.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MotionStudio_Sample_Projects_550_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIFIT_PD_Monitor_MMS550.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIPLC_Documentation_MMS55_4.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIPLC_Docu_News_VersionInfo_MMS550_2.exe not found!

Registry entries deleted on Reboot...

Files\Folders moved on Reboot...
File move failed. C:\Programme\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe scheduled to be moved on reboot.
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2010r4_MMS55_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2010r5_MMS55_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2030r1_MMS550_2.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\DHP11B_Version_2030r2_MMS550_SP2_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\HandlingBasic_V2.04_MMS55_SP2_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\HelpFilesV4_MMS550_SP2.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MC07B_CANopen_Configurator_MMS550_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MMS_V550_MotionStudio_SP2.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MotionStudioDriveSync_MMS55_3.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MotionStudio_Sample_Projects_550_1.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIFIT_PD_Monitor_MMS550.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIPLC_Documentation_MMS55_4.exe not found!
File\Folder C:\Dokumente und Einstellungen\mgombotz.ABALON-HARDWOOD\Lokale Einstellungen\Temp\Temporäres Verzeichnis 1 für MOVITOOLS-MotionStudio_5_50_SP2_complete.zip\MOVITOOLS-MotionStudio_5_50_SP2_complete\Komponenten\SEW\MotionStudio\SEWAddIns\MOVIPLC_Docu_News_VersionInfo_MMS550_2.exe not found!

Registry entries deleted on Reboot...


:crazy::crazy::crazy:

t'john 17.07.2012 16:52
Sehr gut! :daumenhoc

Wie laeuft der Rechner?

1. Schritt

Neue Version! Bitte neu runterladen!
Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

danach:


Downloade Dir bitte AdwCleaner auf deinen Desktop.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Search.
  • Nach Ende des Suchlaufs öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[R1].txt.

martymge 18.07.2012 06:08
eigentlich sehr gut bis halt beim start braucht er ein bisschen.


Hier die Resultate von den anti Malware


mfg

martymge 18.07.2012 06:14
Hier die Resultate von Adwcleaner



mfg

t'john 18.07.2012 09:29
Lasse die Funde in Malwarebytes loeschen!!!


dann:

  • Schließe alle offenen Programme und Browser.
  • Starte die adwcleaner.exe mit einem Doppelklick.
  • Klicke auf Delete.
  • Bestätige jeweils mit Ok.
  • Dein Rechner wird neu gestartet. Nach dem Neustart öffnet sich eine Textdatei.
  • Poste mir den Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner[S1].txt.



danach nochmal:

Bitte einen Vollscan mit Malwarebytes Anti-Malware machen und Log posten.
Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss!

Malwarebytes Anti-Malware
- Anwendbar auf Windows 2000, XP, Vista und 7.
- Installiere das Programm in den vorgegebenen Pfad.
- Aktiviere "Komplett Scan durchführen" => Scan.
- Wähle alle verfügbaren Laufwerke (ausser CD/DVD) aus und starte den Scan.
- Funde bitte löschen lassen oder in Quarantäne.
- Wenn der Scan beendet ist, klicke auf "Zeige Resultate".

martymge 18.07.2012 13:49
hier txt datei test wird gerade gemacht



danke mfg

t'john 18.07.2012 15:52
Bitte mit MBAM Log wieder melden.

martymge 18.07.2012 16:28
so die letzte datei



mfg

t'john 18.07.2012 16:31
Sehr gut! :daumenhoc

Malware-Scan mit Emsisoft Anti-Malware

Lade die Gratisversion von => Emsisoft Anti-Malware herunter und installiere das Programm.
Lade über Jetzt Updaten die aktuellen Signaturen herunter.
Wähle den Freeware-Modus aus.

Wähle Detail Scan und starte über den Button Scan die Überprüfung des Computers.
Am Ende des Scans nichts loeschen lassen!. Mit Klick auf Bericht speichern das Logfile auf dem Desktop speichern und hier in den Thread posten.

Anleitung: http://www.trojaner-board.de/103809-...i-malware.html

martymge 18.07.2012 21:06
hier die txt datei

t'john 18.07.2012 21:10
Sehr gut! :daumenhoc

Lasse die Funde loeschen.



danach:


Hinweis: ESET zeigt durchaus öfter ein paar Fehlalarme. Deswegen soll auch von ESET immer nur erst das Log gepostet und nichts entfernt werden.


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset





Bitte alles nach Möglichkeit hier in CODE-Tags posten.

Wird so gemacht:

[code] hier steht das Log [/code]

Und das ganze sieht dann so aus:

Code:
hier steht das Log

t'john 31.07.2012 13:47
Fehlende Rückmeldung

Gibt es Probleme beim Abarbeiten obiger Anleitung?

Um Kapazitäten für andere Hilfesuchende freizumachen, lösche ich dieses Thema aus meinen Benachrichtigungen.

Solltest Du weitermachen wollen, schreibe mir eine PN oder eröffne ein neues Thema.
http://www.trojaner-board.de/69886-a...-beachten.html


Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner sauber ist.


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:27 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58