Trojaner-Board - langsames internet

Hi,

ich denke das war's mit den updates - war sehr aufwendig. FF nach wir vor langsam. Hier der OTL log-file:

gruß
fuba2012
Code:
OTL logfile created on: 29.09.2012 21:31:18 - Run 6

OTL by OldTimer - Version 3.2.64.0     Folder = C:\Users\M. Schniotalle\Desktop

64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.0.8112.16421)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

3,96 Gb Total Physical Memory | 2,42 Gb Available Physical Memory | 61,12% Memory free

7,92 Gb Paging File | 6,31 Gb Available in Paging File | 79,67% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 218,20 Gb Total Space | 131,50 Gb Free Space | 60,27% Space Free | Partition Type: NTFS

 

Computer Name: MSCHNIOTALLE-PC | User Name: M. Schniotalle | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.09.22 13:47:19 | 000,296,096 | ---- | M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe

PRC - [2012.09.20 17:13:17 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe

PRC - [2012.08.10 18:59:52 | 004,440,896 | ---- | M] (Akamai Technologies, Inc.) -- C:\Users\M. Schniotalle\AppData\Local\Akamai\netsession_win.exe

PRC - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2012.01.23 06:43:08 | 000,247,728 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe

PRC - [2012.01.23 06:43:08 | 000,092,592 | ---- | M] (TomTom) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe

PRC - [2011.04.17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe

PRC - [2011.03.28 12:40:56 | 001,611,160 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE

PRC - [2011.03.07 14:33:34 | 000,591,272 | ---- | M] (CANON INC.) -- C:\Program Files (x86)\Canon\Solution Menu EX\CNSEUPDT.EXE

PRC - [2011.02.07 09:56:11 | 000,138,192 | ---- | M] () -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE

PRC - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe

PRC - [2010.02.23 11:01:28 | 000,329,168 | ---- | M] () -- C:\Program Files (x86)\Verbindungsassistent\WTGService.exe

PRC - [2010.02.09 13:34:00 | 001,807,680 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe

PRC - [2009.12.15 22:14:22 | 000,498,160 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe

PRC - [2009.09.17 21:05:00 | 000,656,624 | ---- | M] (SoftThinks) -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE

PRC - [2009.09.11 19:38:14 | 000,614,400 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe

PRC - [2009.06.25 04:19:50 | 000,140,520 | ---- | M] (CyberLink Corp.) -- C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe

PRC - [2009.06.09 18:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Programme\Dell\DellDock\DockLogin.exe

PRC - [2009.06.05 03:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe

PRC - [2009.06.05 03:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe

PRC - [2007.05.21 12:12:48 | 000,078,696 | ---- | M] () -- C:\Program Files (x86)\MySecurityCenter\Programs\service.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2012.09.29 18:10:31 | 001,840,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\761fd1afc17f11bf6d49c3a7d16465ca\System.Web.Services.ni.dll

MOD - [2012.09.29 18:09:29 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll

MOD - [2012.09.29 18:09:17 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll

MOD - [2012.09.29 18:08:21 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll

MOD - [2012.09.29 18:08:16 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll

MOD - [2012.09.29 18:08:11 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll

MOD - [2012.09.29 18:08:02 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll

MOD - [2012.09.25 11:42:58 | 000,460,312 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\ppGoogleNaClPluginChrome.dll

MOD - [2012.09.25 11:42:55 | 004,005,912 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\pdf.dll

MOD - [2012.09.25 11:41:39 | 000,578,072 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\libglesv2.dll

MOD - [2012.09.25 11:41:38 | 000,123,416 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\libegl.dll

MOD - [2012.09.25 11:41:27 | 000,156,712 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avutil-51.dll

MOD - [2012.09.25 11:41:26 | 000,275,496 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avformat-54.dll

MOD - [2012.09.25 11:41:24 | 002,168,360 | ---- | M] () -- C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\avcodec-54.dll

MOD - [2011.06.24 22:56:36 | 000,087,328 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll

MOD - [2011.06.24 22:56:14 | 001,241,888 | ---- | M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll

MOD - [2010.11.13 01:26:08 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll

MOD - [2010.02.09 13:34:00 | 001,807,680 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe

MOD - [2010.02.09 13:34:00 | 000,365,888 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\de\DataSafeOnline.resources.dll

MOD - [2010.02.09 13:34:00 | 000,275,776 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbShared.dll

MOD - [2010.02.09 13:34:00 | 000,152,896 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbShared.XmlSerializers.dll

MOD - [2010.02.09 13:34:00 | 000,095,552 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\SdbUI.dll

MOD - [2010.02.09 13:34:00 | 000,046,400 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\de\SdbUI.resources.dll

MOD - [2010.02.09 13:34:00 | 000,017,728 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\cpputils.dll

MOD - [2009.12.15 22:14:22 | 000,498,160 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe

MOD - [2009.09.11 20:05:00 | 000,058,608 | ---- | M] () -- C:\Program Files (x86)\Dell DataSafe Online\BalloonWindow.dll

MOD - [2009.09.11 19:38:14 | 000,614,400 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2012.08.18 17:41:56 | 000,114,688 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\GFilterSvc.exe -- (GFilterSvc)

SRV:64bit: - [2012.08.18 17:41:55 | 000,106,496 | ---- | M] () [Auto | Running] -- C:\Windows\SysNative\perfos64.exe -- (TapiUnautend)

SRV:64bit: - [2010.08.09 04:04:10 | 000,166,704 | ---- | M] (Samsung Electronics CO., LTD.) [On_Demand | Stopped] -- C:\Windows\SysNative\SUPDSvc.exe -- (Samsung UPD Service)

SRV - [2012.09.29 14:04:26 | 000,250,288 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2012.09.06 03:25:06 | 000,114,144 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2012.07.27 22:51:26 | 000,063,960 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2012.01.23 06:43:08 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)

SRV - [2011.08.02 11:47:14 | 000,159,232 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Samsung\USB Drivers\26_VIA_driver2\amd64\VIAService.exe -- (CDMA Device Service)

SRV - [2011.04.17 02:45:11 | 000,130,008 | R--- | M] (Symantec Corporation) [Auto | Running] -- C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\ccSvcHst.exe -- (NIS)

SRV - [2011.02.07 09:56:11 | 000,138,192 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE -- (IJPLMSVC)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2010.02.23 11:01:28 | 000,329,168 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Verbindungsassistent\WTGService.exe -- (WTGService)

SRV - [2009.09.17 21:05:00 | 000,656,624 | ---- | M] (SoftThinks) [Auto | Running] -- C:\Program Files (x86)\Dell DataSafe Local Backup\sftservice.EXE -- (SftService)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

SRV - [2009.06.09 18:11:14 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Programme\Dell\DellDock\DockLogin.exe -- (DockLoginService)

SRV - [2009.06.05 03:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe -- (IAANTMON)

SRV - [2007.05.21 12:12:48 | 000,078,696 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\MySecurityCenter\Programs\service.exe -- (MySecurityCenter License Service)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2012.09.15 12:51:11 | 000,174,200 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS -- (SymEvent)

DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.06.15 09:10:14 | 000,557,848 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor)

DRV:64bit: - [2011.04.21 03:37:49 | 000,386,168 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys -- (SymNetS)

DRV:64bit: - [2011.03.31 05:04:12 | 000,043,640 | R--- | M] (Symantec Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\SymIMV.sys -- (SymIM)

DRV:64bit: - [2011.03.31 05:00:09 | 000,744,568 | R--- | M] (Symantec Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys -- (SRTSP)

DRV:64bit: - [2011.03.31 05:00:09 | 000,040,568 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys -- (SRTSPX)

DRV:64bit: - [2011.03.15 04:31:23 | 000,912,504 | R--- | M] (Symantec Corporation) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys -- (SymEFA)

DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2011.01.27 08:47:10 | 000,450,680 | R--- | M] (Symantec Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys -- (SymDS)

DRV:64bit: - [2011.01.27 07:07:06 | 000,171,128 | R--- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys -- (SymIRON)

DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2010.04.15 14:40:10 | 000,301,688 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Apfiltr.sys -- (ApfiltrService)

DRV:64bit: - [2009.09.28 09:22:00 | 000,395,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.07.09 04:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.06.03 05:16:56 | 007,333,472 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)

DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM)

DRV:64bit: - [2009.05.14 02:51:40 | 005,435,904 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETw5v64.sys -- (NETw5v64)

DRV:64bit: - [2009.05.08 10:15:18 | 000,215,552 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)

DRV:64bit: - [2009.03.02 15:12:18 | 000,011,576 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\SSPORT.SYS -- (SSPORT)

DRV:64bit: - [2006.11.01 20:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)

DRV:64bit: - [2005.11.03 16:40:56 | 000,089,600 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfvfs02.sys -- (sfvfs02)

DRV:64bit: - [2005.08.10 14:46:20 | 000,068,608 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfdrv01.sys -- (sfdrv01)

DRV:64bit: - [2005.05.16 15:21:16 | 000,007,168 | ---- | M] (Protection Technology) [Kernel | Disabled | Stopped] -- C:\Windows\SysNative\drivers\sfhlp02.sys -- (sfhlp02)

DRV - [2012.09.27 21:00:16 | 002,084,000 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\VirusDefs\20120928.033\ex64.sys -- (NAVEX15)

DRV - [2012.09.27 21:00:16 | 000,138,912 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys -- (EraserUtilRebootDrv)

DRV - [2012.09.27 21:00:16 | 000,126,112 | ---- | M] (Symantec Corporation) [Kernel | On_Demand | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\VirusDefs\20120928.033\eng64.sys -- (NAVENG)

DRV - [2012.09.15 13:45:50 | 000,484,512 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys -- (eeCtrl)

DRV - [2012.09.14 08:41:34 | 000,513,184 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\IPSDefs\20120928.001\IDSviA64.sys -- (IDSVia64)

DRV - [2012.09.05 00:23:56 | 001,385,120 | ---- | M] (Symantec Corporation) [Kernel | System | Running] -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\Definitions\BASHDefs\20120919.001\BHDrvx64.sys -- (BHDrvx64)

DRV - [2010.11.18 02:34:58 | 000,025,072 | ---- | M] (PC-Doctor, Inc.) [Kernel | On_Demand | Stopped] -- c:\Programme\Dell Support Center\pcdsrvc_x64.pkms -- (PCDSRVC{1E208CE0-FB7451FF-06020101}_0)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE:64bit: - HKLM\..\SearchScopes\{3C78FD94-E1BF-4881-812D-05DE5CB559CC}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,Backup.Old.DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\..\SearchScopes\{7FC2AB76-6360-4921-BC0A-EBB47194BC05}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=DLCDF8&pc=MDDC&src=IE-SearchBox

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D4 33 5F 01 8B 9D CD 01  [binary data]

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

 
 ========== FireFox ==========

 

FF - prefs.js..browser.startup.homepage: "www.google.de"

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_278.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_278.dll ()

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)

FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)

FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)

FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\M. Schniotalle\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\M. Schniotalle\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.09.27 23:01:37 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\coFFPlgn_2011_7_12_1 [2012.09.29 21:28:03 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.09.27 23:01:37 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.6.0.29\IPSFFPlgn\ [2012.09.29 21:28:00 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.29 13:24:23 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.09.27 22:59:58 | 000,000,000 | ---D | M]

 

[2012.09.29 13:11:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Extensions

[2011.07.17 12:25:43 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Extensions\home2@tomtom.com

[2012.09.20 17:07:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\m7klgx40.Standard-Benutzer\extensions

[2012.09.29 13:11:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\v9mdlsvp.default\extensions

[2012.09.29 13:11:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M. Schniotalle\AppData\Roaming\mozilla\Firefox\Profiles\v9mdlsvp.default\extensions\allglassv2@ambroos.neowin.net

[2012.09.29 13:24:23 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2012.09.27 22:59:58 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}

[2012.09.27 22:59:58 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions\ffxtlbr@babylon.com

[2012.09.06 03:26:03 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2012.09.22 13:47:27 | 000,129,176 | ---- | M] (RealPlayer) -- C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll

[2012.09.06 04:07:37 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2012.09.06 04:07:37 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2012.09.06 04:07:37 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2012.09.06 04:07:37 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2012.02.14 21:53:00 | 000,000,158 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\Search the web.src

[2012.09.06 04:07:37 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2012.09.06 04:07:37 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 
 ========== Chrome  ==========

 

CHR - homepage: 

CHR - default_search_provider: Google (Enabled)

CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}

CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}

CHR - homepage: 

CHR - plugin: Shockwave Flash (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\21.0.1180.89\PepperFlash\pepflashplayer.dll

CHR - plugin: Shockwave Flash (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\gcswf32.dll

CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer

CHR - plugin: Native Client (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\ppGoogleNaClPluginChrome.dll

CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\Application\22.0.1229.79\pdf.dll

CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll

CHR - plugin: Microsoft\u00AE Windows Media Player Firefox Plugin (Enabled) = C:\Program Files (x86)\Mozilla Firefox\plugins\np-mswmp.dll

CHR - plugin: CANON iMAGE GATEWAY Album Plugin Utility for IJ (Enabled) = C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL

CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll

CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll

CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll

CHR - plugin: Java Deployment Toolkit 6.0.350.10 (Enabled) = C:\Windows\SysWOW64\npdeployJava1.dll

CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll

CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\M. Schniotalle\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\

 

O1 HOSTS File: ([2012.09.20 21:22:28 | 000,000,027 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found

O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)

O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)

O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\IPS\IPSBHO.DLL (Symantec Corporation)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)

O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.

O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)

O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.7.2.3\coIEPlg.dll (Symantec Corporation)

O4:64bit: - HKLM..\Run: [Apoint] C:\Programme\DellTPad\Apoint.exe (Alps Electric Co., Ltd.)

O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)

O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IAAnotif] C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)

O4:64bit: - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray64.exe (IDT, Inc.)

O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)

O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)

O4 - HKLM..\Run: [Dell DataSafe Online] C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe ()

O4 - HKLM..\Run: [DellSupportCenter] "C:\Program Files (x86)\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter File not found

O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()

O4 - HKLM..\Run: [PDVDDXSrv] C:\Program Files (x86)\CyberLink\PowerDVD DX\PDVDDXSrv.exe (CyberLink Corp.)

O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()

O4 - HKLM..\Run: [setc] C:\Program Files (x86)\MySecurityCenter\Programs\setc.exe (MySecurityCenter)

O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)

O4 - HKCU..\Run: [Akamai NetSession Interface] C:\Users\M. Schniotalle\AppData\Local\Akamai\netsession_win.exe (Akamai Technologies, Inc.)

O4 - HKCU..\Run: [TomTomHOME.exe] C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)

O4 - Startup: C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk =  File not found

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery present

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found

O8:64bit: - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found

O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found

O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.)

O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found

O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found

O9 - Extra 'Tools' menuitem : My kikin - {0F7195C2-6713-4d93-A1BC-DA5FA33F0A65} - Reg Error: Key error. File not found

O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)

O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EE687837-BCDD-47F0-9DD3-7B2E77E57300}: DhcpNameServer = 192.168.2.1

O18:64bit: - Protocol\Handler\livecall - No CLSID value found

O18:64bit: - Protocol\Handler\ms-help - No CLSID value found

O18:64bit: - Protocol\Handler\msnim - No CLSID value found

O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found

O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)

O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.09.29 14:58:36 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview

[2012.09.29 14:16:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight

[2012.09.29 14:16:36 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Silverlight

[2012.09.29 14:16:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight

[2012.09.29 13:56:22 | 000,116,224 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll

[2012.09.29 13:55:49 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll

[2012.09.29 13:24:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Maintenance Service

[2012.09.28 21:05:50 | 000,000,000 | ---D | C] -- C:\_OTL

[2012.09.28 20:00:22 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\Shared

[2012.09.28 08:46:44 | 000,000,000 | ---D | C] -- C:\Windows\Panther

[2012.09.28 08:43:55 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oem

[2012.09.28 08:43:24 | 000,000,000 | ---D | C] -- C:\Windows\de-DE

[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer

[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\drivers\de-DE

[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\de

[2012.09.28 08:43:23 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\0407

[2012.09.28 08:43:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\de-DE

[2012.09.28 08:43:22 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\0407

[2012.09.28 08:43:21 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\de

[2012.09.28 08:40:59 | 000,004,096 | ---- | C] (SCM Microsystems, Inc.) -- C:\Windows\SysNative\drivers\de-DE\pscr.sys.mui

[2012.09.28 08:40:40 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerId.sys.mui

[2012.09.28 08:40:40 | 000,011,776 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrSerIb.sys.mui

[2012.09.28 08:40:40 | 000,002,560 | ---- | C] (Brother Industries Ltd.) -- C:\Windows\SysNative\drivers\de-DE\BrParwdm.sys.mui

[2012.09.28 08:30:36 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~Q

[2012.09.28 08:25:34 | 000,000,000 | -H-D | C] -- C:\$INPLACE.~TR

[2012.09.27 23:38:40 | 000,000,000 | -HSD | C] -- C:\Recovery

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente

[2012.09.27 23:38:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten

[2012.09.27 22:51:31 | 000,000,000 | --SD | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Videos

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Saved Games

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Pictures

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Music

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Links

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Favorites

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Downloads

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Documents

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\Desktop

[2012.09.27 22:51:31 | 000,000,000 | R--D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Vorlagen

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Verlauf

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Temporary Internet Files

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Startmenü

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\SendTo

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Recent

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Netzwerkumgebung

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Lokale Einstellungen

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Videos

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Musik

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Eigene Dateien

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Documents\Eigene Bilder

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Druckumgebung

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Cookies

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\AppData\Local\Anwendungsdaten

[2012.09.27 22:51:31 | 000,000,000 | -HSD | C] -- C:\Users\M. Schniotalle\Anwendungsdaten

[2012.09.27 22:51:31 | 000,000,000 | -H-D | C] -- C:\Users\M. Schniotalle\AppData

[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Temp

[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Microsoft

[2012.09.27 22:51:31 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Media Center Programs

[2012.09.27 22:50:17 | 000,000,000 | ---D | C] -- C:\Program Files\DellTPad

[2012.09.27 22:47:43 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch

[2012.09.27 20:51:45 | 000,693,265 | ---- | C] (Farbar) -- C:\Users\M. Schniotalle\Desktop\FSS.exe

[2012.09.27 20:34:56 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution

[2012.09.27 19:58:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com

[2012.09.27 19:58:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Tweaking.com

[2012.09.27 19:37:52 | 000,181,064 | ---- | C] (Sysinternals) -- C:\Windows\PSEXESVC.EXE

[2012.09.27 19:37:05 | 000,000,000 | ---D | C] -- C:\Tweaking.com_Windows_Repair_Logs

[2012.09.27 19:07:04 | 000,751,391 | ---- | C] (Farbar) -- C:\Users\M. Schniotalle\Desktop\MiniToolBox.exe

[2012.09.27 19:01:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET

[2012.09.22 22:51:12 | 000,000,000 | ---D | C] -- C:\ProgramData\UUdb

[2012.09.22 16:33:57 | 004,731,392 | ---- | C] (AVAST Software) -- C:\Users\M. Schniotalle\Desktop\aswMBR.exe

[2012.09.22 13:47:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared

[2012.09.22 13:47:22 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll

[2012.09.22 13:47:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealNetworks

[2012.09.22 13:13:14 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LimeWire

[2012.09.22 13:10:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

[2012.09.22 12:51:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LimeWire

[2012.09.22 12:50:26 | 000,000,000 | ---D | C] -- C:\LiWi

[2012.09.22 11:37:32 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome

[2012.09.20 21:50:12 | 002,322,184 | ---- | C] (ESET) -- C:\Users\M. Schniotalle\Desktop\esetsmartinstaller_enu.exe

[2012.09.20 21:11:42 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe

[2012.09.20 21:11:42 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe

[2012.09.20 21:11:42 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe

[2012.09.20 21:11:38 | 000,000,000 | ---D | C] -- C:\ComboFix

[2012.09.20 21:11:33 | 000,000,000 | ---D | C] -- C:\Qoobox

[2012.09.20 21:11:15 | 000,000,000 | ---D | C] -- C:\Windows\erdnt

[2012.09.20 21:04:12 | 004,754,465 | R--- | C] (Swearware) -- C:\Users\M. Schniotalle\Desktop\ComboFix.exe

[2012.09.20 17:13:08 | 000,600,064 | ---- | C] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe

[2012.09.19 19:52:53 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\Malwarebytes

[2012.09.19 19:52:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes

[2012.09.19 19:34:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DownloadManager

[2012.09.19 18:44:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe

[2012.09.19 18:44:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe

[2012.09.18 21:22:44 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\convert

[2012.09.16 19:20:23 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Real

[2012.09.16 17:27:57 | 000,200,976 | ---- | C] (Trend Micro Inc.) -- C:\Windows\SysWow64\drivers\tmcomm.sys

[2012.09.16 14:36:41 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Apps

[2012.09.15 19:52:18 | 000,386,168 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnets.sys

[2012.09.15 19:52:17 | 000,912,504 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.sys

[2012.09.15 19:52:17 | 000,744,568 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.sys

[2012.09.15 19:52:17 | 000,450,680 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.sys

[2012.09.15 19:52:17 | 000,171,128 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\ironx64.sys

[2012.09.15 19:52:17 | 000,040,568 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.sys

[2012.09.15 19:51:58 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64\1207020.003

[2012.09.15 14:01:45 | 000,043,640 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SymIMV.sys

[2012.09.15 12:51:11 | 000,174,200 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS

[2012.09.15 12:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Symantec Shared

[2012.09.15 12:51:11 | 000,000,000 | ---D | C] -- C:\Program Files\Symantec

[2012.09.15 12:50:49 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64

[2012.09.15 12:50:47 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Internet Security

[2012.09.15 12:50:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Internet Security

[2012.09.15 12:50:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller

[2012.09.15 11:10:19 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Local\Freeware.de

[2012.09.10 18:47:58 | 000,000,000 | ---D | C] -- C:\Users\M. Schniotalle\AppData\Roaming\WildTangent

[2012.09.08 15:24:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox

[2010.01.14 19:46:35 | 008,656,832 | ---- | C] (Dell, Inc.                                                   ) -- C:\Users\M. Schniotalle\AppData\Roaming\DataSafeDotNet.exe

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.09.29 21:35:19 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2012.09.29 21:35:19 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2012.09.29 21:34:31 | 001,612,484 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2012.09.29 21:34:31 | 000,696,870 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2012.09.29 21:34:31 | 000,652,148 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2012.09.29 21:34:31 | 000,148,134 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2012.09.29 21:34:31 | 000,121,080 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2012.09.29 21:31:00 | 000,001,156 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000UA.job

[2012.09.29 21:27:10 | 000,001,122 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job

[2012.09.29 21:26:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2012.09.29 21:26:34 | 3190,050,816 | -HS- | M] () -- C:\hiberfil.sys

[2012.09.29 21:25:07 | 001,590,378 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2012.09.29 21:13:12 | 000,001,126 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job

[2012.09.29 20:54:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2012.09.29 20:19:31 | 002,533,674 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\Cat.DB

[2012.09.29 19:44:45 | 000,002,880 | ---- | M] () -- C:\{BE53943B-9F9E-412F-9FF7-3E81368D0CE9}

[2012.09.29 19:41:27 | 000,002,880 | ---- | M] () -- C:\{F4711A1A-434D-4CCC-BF26-AA413A0F32B7}

[2012.09.29 19:33:40 | 000,002,840 | ---- | M] () -- C:\{49EB1A66-A7F5-40BF-B487-66CA89E908F0}

[2012.09.29 17:29:21 | 000,311,432 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2012.09.29 13:24:34 | 000,001,132 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk

[2012.09.29 12:23:58 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000Core.job

[2012.09.28 20:49:21 | 000,002,052 | ---- | M] () -- C:\Windows\epplauncher.mif

[2012.09.28 20:47:19 | 000,513,501 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\adwcleaner.exe

[2012.09.28 17:50:55 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf

[2012.09.28 17:50:54 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf

[2012.09.28 08:43:11 | 000,295,922 | ---- | M] () -- C:\Windows\SysNative\perfi007.dat

[2012.09.28 08:43:11 | 000,038,104 | ---- | M] () -- C:\Windows\SysNative\perfd007.dat

[2012.09.27 23:35:17 | 000,039,252 | ---- | M] () -- C:\Windows\SysWow64\license.rtf

[2012.09.27 23:35:17 | 000,039,252 | ---- | M] () -- C:\Windows\SysNative\license.rtf

[2012.09.27 23:22:12 | 000,022,960 | ---- | M] () -- C:\Windows\SysNative\emptyregdb.dat

[2012.09.27 22:50:19 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf

[2012.09.27 22:50:13 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2012.09.27 21:31:31 | 000,026,405 | ---- | M] () -- C:\Windows\diagwrn.xml

[2012.09.27 21:31:31 | 000,001,890 | ---- | M] () -- C:\Windows\diagerr.xml

[2012.09.27 20:51:53 | 000,693,265 | ---- | M] (Farbar) -- C:\Users\M. Schniotalle\Desktop\FSS.exe

[2012.09.27 20:36:41 | 000,196,608 | ---- | M] () -- C:\Windows\SysNative\Ikeext.etl

[2012.09.27 20:34:59 | 000,181,064 | ---- | M] (Sysinternals) -- C:\Windows\PSEXESVC.EXE

[2012.09.27 19:58:10 | 000,002,249 | ---- | M] () -- C:\Users\Public\Desktop\Tweaking.com - Windows Repair (All in One).lnk

[2012.09.27 19:45:50 | 000,006,640 | ---- | M] () -- C:\bootsqm.dat

[2012.09.27 19:07:16 | 000,751,391 | ---- | M] (Farbar) -- C:\Users\M. Schniotalle\Desktop\MiniToolBox.exe

[2012.09.26 23:03:52 | 000,000,512 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\MBR.dat

[2012.09.23 08:32:32 | 000,000,564 | ---- | M] () -- C:\Windows\tasks\PCDoctorBackgroundMonitorTask.job

[2012.09.22 16:34:39 | 004,731,392 | ---- | M] (AVAST Software) -- C:\Users\M. Schniotalle\Desktop\aswMBR.exe

[2012.09.22 13:47:58 | 000,001,318 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk

[2012.09.22 13:47:22 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll

[2012.09.20 21:50:28 | 002,322,184 | ---- | M] (ESET) -- C:\Users\M. Schniotalle\Desktop\esetsmartinstaller_enu.exe

[2012.09.20 21:22:28 | 000,000,027 | ---- | M] () -- C:\Windows\SysNative\drivers\etc\hosts

[2012.09.20 21:04:49 | 004,754,465 | R--- | M] (Swearware) -- C:\Users\M. Schniotalle\Desktop\ComboFix.exe

[2012.09.20 17:13:17 | 000,600,064 | ---- | M] (OldTimer Tools) -- C:\Users\M. Schniotalle\Desktop\OTL.exe

[2012.09.19 19:40:20 | 000,002,051 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\JDownloader.lnk

[2012.09.19 18:45:17 | 000,001,981 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk

[2012.09.16 17:54:36 | 000,102,400 | ---- | M] () -- C:\Windows\RegBootClean.exe

[2012.09.16 13:17:34 | 000,002,458 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk

[2012.09.15 12:51:11 | 000,174,200 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS

[2012.09.15 12:51:11 | 000,007,488 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT

[2012.09.15 12:51:11 | 000,000,855 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF

[2012.09.15 10:57:25 | 000,001,314 | ---- | M] () -- C:\Users\M. Schniotalle\Desktop\Norton-Installationsdateien.lnk

 
 ========== Files Created - No Company Name ==========

 

[2012.09.29 19:44:45 | 000,002,880 | ---- | C] () -- C:\{BE53943B-9F9E-412F-9FF7-3E81368D0CE9}

[2012.09.29 19:41:25 | 000,002,880 | ---- | C] () -- C:\{F4711A1A-434D-4CCC-BF26-AA413A0F32B7}

[2012.09.29 19:33:38 | 000,002,840 | ---- | C] () -- C:\{49EB1A66-A7F5-40BF-B487-66CA89E908F0}

[2012.09.29 13:57:33 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd

[2012.09.29 13:55:22 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml

[2012.09.29 13:55:07 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml

[2012.09.29 13:55:07 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml

[2012.09.29 13:54:24 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml

[2012.09.29 13:30:56 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2012.09.29 13:24:34 | 000,001,144 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk

[2012.09.29 13:24:34 | 000,001,132 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk

[2012.09.28 20:49:21 | 000,002,052 | ---- | C] () -- C:\Windows\epplauncher.mif

[2012.09.28 20:46:50 | 000,513,501 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\adwcleaner.exe

[2012.09.28 20:36:44 | 000,001,441 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

[2012.09.28 20:18:19 | 001,590,378 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI

[2012.09.28 17:50:55 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf

[2012.09.28 17:50:54 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf

[2012.09.28 08:43:55 | 000,000,024 | RH-- | C] () -- C:\Windows\DELL_version

[2012.09.28 08:43:37 | 000,696,870 | ---- | C] () -- C:\Windows\SysNative\perfh007.dat

[2012.09.28 08:43:37 | 000,295,922 | ---- | C] () -- C:\Windows\SysNative\perfi007.dat

[2012.09.28 08:43:37 | 000,148,134 | ---- | C] () -- C:\Windows\SysNative\perfc007.dat

[2012.09.28 08:43:37 | 000,038,104 | ---- | C] () -- C:\Windows\SysNative\perfd007.dat

[2012.09.27 23:40:27 | 000,001,407 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk

[2012.09.27 23:36:39 | 3190,050,816 | -HS- | C] () -- C:\hiberfil.sys

[2012.09.27 23:22:12 | 000,022,960 | ---- | C] () -- C:\Windows\SysNative\emptyregdb.dat

[2012.09.27 22:51:09 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk

[2012.09.27 22:51:06 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk

[2012.09.27 22:50:19 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_Apfiltr_01009.Wdf

[2012.09.27 22:50:13 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf

[2012.09.27 21:21:53 | 000,026,405 | ---- | C] () -- C:\Windows\diagwrn.xml

[2012.09.27 21:21:53 | 000,001,890 | ---- | C] () -- C:\Windows\diagerr.xml

[2012.09.27 20:32:35 | 000,303,616 | ---- | C] ( ) -- C:\SetACL.exe

[2012.09.27 19:58:10 | 000,002,249 | ---- | C] () -- C:\Users\Public\Desktop\Tweaking.com - Windows Repair (All in One).lnk

[2012.09.27 19:45:50 | 000,006,640 | ---- | C] () -- C:\bootsqm.dat

[2012.09.22 17:06:19 | 000,000,512 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\MBR.dat

[2012.09.22 13:47:58 | 000,001,318 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk

[2012.09.22 11:26:32 | 000,001,156 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000UA.job

[2012.09.22 11:26:31 | 000,001,104 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-393729950-4219940585-1066930786-1000Core.job

[2012.09.20 21:11:42 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe

[2012.09.20 21:11:42 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe

[2012.09.20 21:11:42 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe

[2012.09.20 21:11:42 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe

[2012.09.20 21:11:42 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe

[2012.09.19 19:35:51 | 000,002,051 | ---- | C] () -- C:\Users\M. Schniotalle\Desktop\JDownloader.lnk

[2012.09.19 19:35:37 | 000,002,015 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk

[2012.09.19 19:35:36 | 000,001,951 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Deinstallationsprogramm.lnk

[2012.09.19 19:35:33 | 000,001,928 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk

[2012.09.19 18:45:17 | 000,002,471 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk

[2012.09.19 18:45:17 | 000,001,981 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk

[2012.09.16 17:54:36 | 000,102,400 | ---- | C] () -- C:\Windows\RegBootClean.exe

[2012.09.16 13:16:57 | 002,533,674 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\Cat.DB

[2012.09.15 19:52:18 | 000,007,458 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnet64.cat

[2012.09.15 19:52:18 | 000,001,445 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symnet.inf

[2012.09.15 19:52:17 | 000,007,492 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\iron.cat

[2012.09.15 19:52:17 | 000,007,462 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.cat

[2012.09.15 19:52:17 | 000,007,460 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa64.cat

[2012.09.15 19:52:17 | 000,007,458 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.cat

[2012.09.15 19:52:17 | 000,003,373 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symefa.inf

[2012.09.15 19:52:17 | 000,002,792 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds.inf

[2012.09.15 19:52:17 | 000,001,438 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtsp64.inf

[2012.09.15 19:52:17 | 000,001,422 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\srtspx64.inf

[2012.09.15 19:52:17 | 000,000,772 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\iron.inf

[2012.09.15 19:52:00 | 000,000,000 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\symds64.cat

[2012.09.15 19:51:58 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1207020.003\isolate.ini

[2012.09.15 12:51:11 | 000,007,488 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT

[2012.09.15 12:51:11 | 000,000,855 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF

[2012.09.15 12:51:08 | 000,002,458 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security.lnk

[2012.02.10 21:58:47 | 000,471,040 | ---- | C] () -- C:\Windows\ssndii.exe

[2011.11.16 17:22:34 | 000,258,864 | ---- | C] () -- C:\Windows\SUPDRun.exe

[2011.10.27 17:15:20 | 000,001,650 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\MyMicroBalanceConfig.ini

[2011.07.26 17:26:46 | 000,974,848 | ---- | C] () -- C:\Windows\SysWow64\cis-2.4.dll

[2011.07.26 17:26:46 | 000,081,920 | ---- | C] () -- C:\Windows\SysWow64\issacapi_bs-2.3.dll

[2011.07.26 17:26:46 | 000,065,536 | ---- | C] () -- C:\Windows\SysWow64\issacapi_pe-2.3.dll

[2011.07.26 17:26:46 | 000,057,344 | ---- | C] () -- C:\Windows\SysWow64\issacapi_se-2.3.dll

[2011.06.04 15:18:01 | 000,299,520 | ---- | C] () -- C:\Windows\krtunins.exe

[2010.01.16 21:21:53 | 000,019,881 | ---- | C] () -- C:\Users\M. Schniotalle\AppData\Roaming\UserTile.png

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 
 ========== LOP Check ==========

 

[2012.09.27 23:13:55 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Amazon

[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audacity

[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audio Record Edit Toolbox Pro

[2012.09.27 23:13:56 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Audio Recorder for Free

[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Canon

[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\convert

[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\elsterformular

[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\flightgear.org

[2012.09.27 23:13:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\fltk.org

[2010.12.14 17:30:59 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\GetRightToGo

[2012.09.27 23:14:08 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\PCDr

[2012.09.27 23:14:09 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Product_RM

[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Registry Mechanic

[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\SAD-Office-Vorlagen

[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\SAD-Shared

[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Samsung

[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Subversion

[2012.08.22 08:55:50 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\temp

[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Tific

[2012.09.27 23:14:16 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\TomTom

[2012.09.27 23:14:17 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Verbindungsassistent

[2012.09.27 23:14:17 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\WildTangent

[2010.01.14 21:06:01 | 000,000,000 | ---D | M] -- C:\Users\M. Schniotalle\AppData\Roaming\Windows Live Writer

 
 ========== Purity Check ==========

 

 
 

< End of report >