OTL logfile created on: 28.06.2012 07:57:53 - Run 1
OTL by OldTimer - Version 3.2.53.0     Folder = F:\Download\OTL OldTimer's List-It (Trojaner Analyse)\20120628 v3.2.23.0
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1023,48 Mb Total Physical Memory | 693,55 Mb Available Physical Memory | 67,76% Memory free
2,41 Gb Paging File | 2,07 Gb Available in Paging File | 86,19% Paging File free
Paging file location(s): f:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = F: | %SystemRoot% = F:\WINDOWS | %ProgramFiles% = F:\Programme
Drive C: | 15,42 Gb Total Space | 15,13 Gb Free Space | 98,17% Space Free | Partition Type: FAT32
Drive F: | 74,52 Gb Total Space | 4,70 Gb Free Space | 6,30% Space Free | Partition Type: NTFS
 
Computer Name: JULIA-OY8KH7RE5 | User Name: Julia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2012.06.28 07:21:48 | 000,596,992 | ---- | M] (OldTimer Tools) -- F:\Download\OTL OldTimer's List-It (Trojaner Analyse)\20120628 v3.2.23.0\OTL.exe
PRC - [2012.05.13 23:31:46 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- F:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2012.05.13 23:31:44 | 000,348,624 | ---- | M] (Avira Operations GmbH & Co. KG) -- F:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.05.13 23:31:44 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- F:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.05.13 23:31:44 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- F:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.02.23 22:19:22 | 000,371,200 | ---- | M] (shbox.de) -- F:\Programme\FreePDF_XP\fpassist.exe
PRC - [2010.05.01 08:51:28 | 000,217,088 | ---- | M] (Teruten) -- F:\WINDOWS\system32\FsUsbExService.Exe
PRC - [2010.05.01 08:50:00 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) -- F:\WINDOWS\system32\dgdersvc.exe
PRC - [2009.05.07 02:01:00 | 001,904,640 | R--- | M] (AVM Berlin) -- F:\Programme\avmwlanstick\WLanGUI.exe
PRC - [2009.05.07 02:01:00 | 000,368,640 | R--- | M] (AVM Berlin) -- F:\Programme\avmwlanstick\WLanNetService.exe
PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- F:\WINDOWS\explorer.exe
PRC - [2001.02.23 10:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) -- F:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
 
 
[color=#E56717]========== Modules (No Company Name) ==========[/color]
 
MOD - [2012.06.23 14:14:03 | 000,238,568 | ---- | M] () -- F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Temp\wpbt0.dll
MOD - [2012.05.13 23:31:46 | 000,398,288 | ---- | M] () -- F:\Programme\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2010.06.17 21:56:52 | 000,116,224 | ---- | M] () -- F:\WINDOWS\system32\redmonnt.dll
MOD - [2008.09.16 21:18:06 | 000,132,608 | ---- | M] () -- F:\Programme\WinRAR\RarExt.dll
MOD - [2001.10.28 16:42:30 | 000,116,224 | ---- | M] () -- F:\WINDOWS\system32\pdfcmnnt.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - [2012.05.13 23:31:46 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- F:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.05.13 23:31:44 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- F:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2012.05.07 10:28:36 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- F:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2010.05.04 04:33:54 | 009,241,088 | ---- | M] () [On_Demand | Stopped] -- F:\Program Files\Samsung\Kies\WiselinkPro\WiselinkPro.exe -- (KiesAllShare)
SRV - [2010.05.01 08:51:28 | 000,217,088 | ---- | M] (Teruten) [Auto | Running] -- F:\WINDOWS\system32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010.05.01 08:50:00 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Auto | Running] -- F:\WINDOWS\system32\dgdersvc.exe -- (dgdersvc)
SRV - [2009.05.07 02:01:00 | 000,368,640 | R--- | M] (AVM Berlin) [Auto | Running] -- F:\Programme\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service)
SRV - [2008.11.11 09:38:06 | 000,620,544 | ---- | M] (Nokia.) [On_Demand | Stopped] -- F:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2005.05.31 15:45:30 | 000,176,128 | ---- | M] () [Disabled | Stopped] -- F:\VIRUSfighter\Bin\Zanda.exe -- (Norman ZANDA)
SRV - [2005.01.12 10:57:56 | 000,143,360 | ---- | M] () [Disabled | Stopped] -- F:\VIRUSfighter\Bin\Njeeves.exe -- (Norman NJeeves)
SRV - [2004.10.22 03:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- F:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2001.02.23 10:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- F:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\ZDPSp50.sys -- (ZDPSp50)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\zd1211Bu.sys -- (X-Micro WLAN 11g USB Adapter(X-Micro)) X-Micro WLAN 11g USB Adapter Driver(X-Micro)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] --  -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] --  -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] --  -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] --  -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] --  -- (Changer)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\BRGSp50.sys -- (BRGSp50)
DRV - [2012.05.13 23:31:46 | 000,137,928 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- F:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.05.13 23:31:46 | 000,083,392 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- F:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.09.16 16:08:07 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- F:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2010.05.01 08:51:28 | 000,036,640 | ---- | M] () [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2010.05.01 08:50:00 | 000,018,136 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2010.04.27 04:25:20 | 000,123,648 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\sscemdm.sys -- (sscemdm)
DRV - [2010.04.27 04:25:20 | 000,100,352 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\ssceserd.sys -- (ssceserd) SAMSUNG Mobile Modem Diagnostic Serial Port V2 (WDM)
DRV - [2010.04.27 04:25:20 | 000,098,560 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\sscebus.sys -- (sscebus) SAMSUNG USB Composite Device V2 driver (WDM)
DRV - [2010.04.27 04:25:20 | 000,014,848 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\sscemdfl.sys -- (sscemdfl)
DRV - [2009.10.08 16:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- F:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.05.07 02:01:00 | 000,265,088 | R--- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\fwlanusb.sys -- (FWLANUSB)
DRV - [2009.05.07 02:01:00 | 000,004,352 | R--- | M] (AVM Berlin) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\avmeject.sys -- (avmeject)
DRV - [2008.04.13 20:45:29 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- F:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2006.09.16 18:26:24 | 000,099,840 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- F:\WINDOWS\system32\drivers\ACEDRV06.sys -- (ACEDRV06)
DRV - [2001.08.17 15:00:04 | 000,002,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\msmpu401.sys -- (ms_mpu401)
DRV - [2001.08.17 13:50:26 | 000,731,648 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- F:\WINDOWS\system32\drivers\nv4.sys -- (nv4)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://toolbar.ask.com/toolbarv/askRedirect?o=101761&gct=&gc=1&q=
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.com/ie
IE - HKCU\..\URLSearchHook: {C94E154B-1459-4A47-966B-4B843BEFC7DB} - F:\Programme\AskSearch\bin\DefaultSearch.dll ()
IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\..\SearchScopes\{080FBDF6-B230-4e4d-A4E7-7C7A56D7BABC}: "URL" = http://searchservice.myspace.com/index.cfm?fuseaction=sitesearch.results&qry={searchTerms}&type=Web&orig=IMC-IEDS
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
IE - HKCU\..\SearchScopes\{CF739809-1C6C-47C0-85B9-569DBB141420}: "URL" = http://toolbar.ask.com/toolbarv/askRedirect?gct=&gc=1&q={searchTerms}&crm=1&toolbar=BT
IE - HKCU\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = http://slirsredirect.search.aol.com/slirs_http/sredir?sredir=2685&query={searchTerms}&invocationType=tb50winampie7
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.startup.homepage: "about:blank"
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: F:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@bittorrent.com/BitTorrentDNA: F:\Programme\DNA\plugins\npbtdna.dll (BitTorrent, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_32: F:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: F:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: f:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.11.2303: F:\Programme\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.1465: F:\Programme\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: F:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: F:\Programme\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohTVPlugin:  File not found
FF - HKLM\Software\MozillaPlugins\@veoh.com/VeohWebPlayer:  File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: F:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: F:\Programme\Mozilla Firefox\components [2012.05.07 10:28:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: F:\Programme\Mozilla Firefox\plugins
 
[2012.04.09 17:00:51 | 000,000,000 | ---D | M] (No name found) -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\Mozilla\Extensions
[2012.05.03 00:54:25 | 000,000,000 | ---D | M] (No name found) -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\Mozilla\Firefox\Profiles\8usoib4h.default\extensions
[2012.06.04 19:14:27 | 000,000,000 | ---D | M] (No name found) -- F:\Programme\Mozilla Firefox\extensions
[2012.06.04 19:14:27 | 000,000,000 | ---D | M] (Java Console) -- F:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA}
[2012.05.07 10:28:36 | 000,097,208 | ---- | M] (Mozilla Foundation) -- F:\Programme\mozilla firefox\components\browsercomps.dll
[2012.03.13 07:23:34 | 000,001,392 | ---- | M] () -- F:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.03.13 07:06:36 | 000,002,252 | ---- | M] () -- F:\Programme\mozilla firefox\searchplugins\bing.xml
[2012.03.13 07:23:34 | 000,001,153 | ---- | M] () -- F:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012.03.13 07:23:34 | 000,006,805 | ---- | M] () -- F:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.03.13 07:23:34 | 000,001,178 | ---- | M] () -- F:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.03.13 07:23:34 | 000,001,105 | ---- | M] () -- F:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
[color=#E56717]========== Chrome  ==========[/color]
 
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
 
O1 HOSTS File: ([2001.08.18 14:00:00 | 000,000,820 | ---- | M]) - F:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Windows Live Toolbar Helper) - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - F:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Veoh Web Player Video Finder) - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - Reg Error: Value error. File not found
O3 - HKLM\..\Toolbar: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - F:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (Veoh Browser Plug-in) - {D0943516-5076-4020-A3B5-AEFAF26AB263} - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {3041D03E-FD4B-44E0-B742-2D9B88305F98} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Windows Live Toolbar) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - F:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O4 - HKLM..\Run: [avgnt] F:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [AVMWlanClient] F:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin)
O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found
O4 - HKLM..\Run: [FreePDF Assistant] F:\Programme\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] F:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] F:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] F:\WINDOWS\System32\nwiz.exe ()
O4 - HKCU..\Run: [KiesTrayAgent]  File not found
O4 - HKCU..\Run: [updateMgr] F:\Programme\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00  [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispBackgroundPage = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoDispScrSavPage = 1
O8 - Extra context menu item: &Windows Live Search - F:\Programme\Windows Live Toolbar\msntb.dll (Microsoft Corporation)
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx File not found
O8 - Extra context menu item: In neuer Registerkarte im Hintergrund öffnen - F:\Programme\Windows Live Toolbar\Components\de-de\msntabres.dll.mui (Microsoft Corporation)
O8 - Extra context menu item: In neuer Registerkarte im Vordergrund öffnen - F:\Programme\Windows Live Toolbar\Components\de-de\msntabres.dll.mui (Microsoft Corporation)
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://F:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000 File not found
O15 - HKCU\..Trusted Domains:   ([]msn in My Computer)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1333984759695 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-0015-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_03-windows-i586.cab (Java Plug-in 1.5.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_32-windows-i586.cab (Java Plug-in 1.6.0_32)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0557FF88-0DB2-4DA4-9DAA-E23A6DE17863}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - F:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - F:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - F:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - F:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (F:\WINDOWS\system32\userinit.exe) - F:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 () - http://www.gmxattachments.net/de/cgi/g.fcgi/mail/print/attachment?mid=babgebha.1195505206.28101.lcjyuzeqkh.76&uid=JGAEdhB0Iyd10UUTPGZrfaNacGFkZtVu&frame=content
O24 - Desktop Components:1 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{0644062e-27b2-11df-83fd-0011e206f5a5}\Shell\AutoRun\command - "" = J:\Menu.exe
O33 - MountPoints2\{2d4d43c4-df4b-11dd-816d-00138f12d10f}\Shell\AutoRun\command - "" = C:\Menu.exe
O33 - MountPoints2\{46f9352b-132a-11e0-85bc-00138f12d10f}\Shell\AutoRun\command - "" = C:\setup.exe
O33 - MountPoints2\{95a0a4ae-fa59-11e0-86e2-00138f12d10f}\Shell\AutoRun\command - "" = G:\RunClubSanDisk.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (sprestrt)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2012.06.26 23:38:14 | 000,000,000 | ---D | C] -- F:\Kaspersky Rescue Disk 10.0
[2012.06.24 13:56:17 | 000,000,000 | ---D | C] -- F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\Identities
[2012.06.07 01:17:17 | 000,000,000 | ---D | C] -- F:\Dokumente und Einstellungen\Julia\Eigene Dateien\download
[2012.05.29 11:00:00 | 000,000,000 | ---D | C] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\Buhl Data Service
[2012.05.29 10:59:53 | 000,000,000 | ---D | C] -- F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\Buhl Data Service
[2012.05.29 10:58:56 | 000,000,000 | ---D | C] -- F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\Buhl
[2012.05.29 10:57:07 | 000,000,000 | ---D | C] -- F:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Steuer 2011
[2012.05.29 10:54:56 | 000,000,000 | ---D | C] -- F:\Programme\Steuer 2011
[2012.05.29 10:54:22 | 000,000,000 | ---D | C] -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Buhl Data Service GmbH
[2010.11.10 01:07:42 | 000,563,200 | ---- | C] (Marlem-Software) -- F:\Programme\Bildschi.exe
[2010.03.31 19:01:04 | 012,991,896 | ---- | C] (Opera Software ASA) -- F:\Programme\Opera_1051_int_Setup.exe
[2008.12.06 21:28:35 | 004,043,308 | ---- | C] (e-merge GmbH) -- F:\Programme\wace269d.exe
[2008.04.17 11:23:39 | 009,413,760 | ---- | C] (Nullsoft, Inc.) -- F:\Programme\winamp5531_full_emusic-7plus_de-de.exe
[4 F:\WINDOWS\System32\*.tmp files -> F:\WINDOWS\System32\*.tmp -> ]
[11 F:\WINDOWS\*.tmp files -> F:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2012.06.28 07:55:51 | 000,001,210 | ---- | M] () -- F:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1202660629-492894223-725345543-1003UA.job
[2012.06.27 03:39:19 | 000,013,646 | ---- | M] () -- F:\WINDOWS\System32\wpa.dbl
[2012.06.27 03:38:41 | 000,001,086 | ---- | M] () -- F:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2012.06.27 03:38:21 | 000,043,573 | ---- | M] () -- F:\WINDOWS\System32\nvapps.xml
[2012.06.27 03:38:08 | 000,002,048 | --S- | M] () -- F:\WINDOWS\bootstat.dat
[2012.06.27 03:38:06 | 1073,270,784 | -HS- | M] () -- F:\hiberfil.sys
[2012.06.27 03:35:43 | 004,503,728 | ---- | M] () -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\0tbpw.pad
[2012.06.27 01:53:05 | 000,001,090 | ---- | M] () -- F:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2012.06.27 01:19:00 | 000,000,246 | ---- | M] () -- F:\WINDOWS\tasks\Auf Updates für Windows Live Toolbar prüfen.job
[2012.06.26 22:55:00 | 000,001,158 | ---- | M] () -- F:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1202660629-492894223-725345543-1003Core.job
[2012.06.24 14:26:35 | 000,137,728 | ---- | M] () -- F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.06.23 14:15:28 | 000,000,664 | ---- | M] () -- F:\WINDOWS\System32\d3d9caps.dat
[2012.06.23 14:14:09 | 000,001,604 | ---- | M] () -- F:\Dokumente und Einstellungen\Julia\Startmenü\Programme\Autostart\ctfmon.lnk
[2012.06.23 11:54:24 | 000,157,160 | ---- | M] () -- F:\WINDOWS\System32\FNTCACHE.DAT
[2012.06.23 00:50:06 | 000,459,250 | ---- | M] () -- F:\WINDOWS\System32\perfh007.dat
[2012.06.23 00:50:06 | 000,441,552 | ---- | M] () -- F:\WINDOWS\System32\perfh009.dat
[2012.06.23 00:50:06 | 000,084,754 | ---- | M] () -- F:\WINDOWS\System32\perfc007.dat
[2012.06.23 00:50:06 | 000,071,488 | ---- | M] () -- F:\WINDOWS\System32\perfc009.dat
[2012.06.23 00:42:49 | 000,001,374 | ---- | M] () -- F:\WINDOWS\imsins.BAK
[2012.06.18 09:19:35 | 000,011,117 | ---- | M] () -- F:\Dokumente und Einstellungen\Julia\Eigene Dateien\Anschreiben Techniker 20120618.odt
[2012.06.17 18:03:40 | 000,002,364 | ---- | M] () -- F:\Dokumente und Einstellungen\Julia\Desktop\Google Chrome.lnk
[2012.05.29 15:17:40 | 000,001,292 | ---- | M] () -- F:\WINDOWS\wiso.ini
[2012.05.29 10:58:11 | 000,001,546 | ---- | M] () -- F:\Dokumente und Einstellungen\All Users\Desktop\Steuer 2011.lnk
[4 F:\WINDOWS\System32\*.tmp files -> F:\WINDOWS\System32\*.tmp -> ]
[11 F:\WINDOWS\*.tmp files -> F:\WINDOWS\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2012.06.27 00:53:03 | 004,503,728 | ---- | C] () -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\0tbpw.pad
[2012.06.24 14:11:35 | 1073,270,784 | -HS- | C] () -- F:\hiberfil.sys
[2012.06.23 14:14:08 | 000,001,604 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Startmenü\Programme\Autostart\ctfmon.lnk
[2012.06.18 09:00:51 | 000,011,117 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Eigene Dateien\Anschreiben Techniker 20120618.odt
[2012.05.29 10:59:02 | 000,001,292 | ---- | C] () -- F:\WINDOWS\wiso.ini
[2012.05.29 10:58:11 | 000,001,546 | ---- | C] () -- F:\Dokumente und Einstellungen\All Users\Desktop\Steuer 2011.lnk
[2012.04.13 16:27:16 | 000,000,664 | ---- | C] () -- F:\WINDOWS\System32\d3d9caps.dat
[2012.04.10 01:17:48 | 000,116,224 | ---- | C] () -- F:\WINDOWS\System32\redmonnt.dll
[2012.04.10 01:17:48 | 000,045,056 | ---- | C] () -- F:\WINDOWS\System32\unredmon.exe
[2012.04.09 21:25:32 | 000,003,072 | ---- | C] () -- F:\WINDOWS\System32\iacenc.dll
[2011.10.19 21:59:01 | 000,110,592 | ---- | C] () -- F:\WINDOWS\System32\FsUsbExDevice.Dll
[2011.10.19 21:59:00 | 000,036,640 | ---- | C] () -- F:\WINDOWS\System32\FsUsbExDisk.Sys
[2011.10.19 21:25:58 | 000,002,528 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\$_hpcst$.hpc
[2011.09.11 20:32:29 | 096,593,169 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\semesterarbeit.cpr
[2011.07.16 23:03:50 | 196,566,948 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\wanderurlaub 2011.cpr
[2011.07.16 16:32:22 | 115,049,201 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\2012.cpr
[2011.06.25 11:45:42 | 115,049,201 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\27.06.2011.cpr
[2011.06.25 00:32:03 | 065,232,955 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Buch 26.6.cpr
[2011.06.23 23:05:55 | 126,448,143 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Letzes mal.cpr
[2011.06.23 23:04:56 | 126,448,037 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Fotobuch das letzte.cpr
[2011.06.22 21:02:17 | 096,053,353 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Fotobuch aktuell1.cpr
[2011.06.15 23:42:39 | 029,760,381 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\FOTOBUCH ROSSMANN.cpr
[2010.11.23 18:09:14 | 000,002,909 | ---- | C] () -- F:\Programme\tastatur.ini
[2010.11.10 01:07:54 | 000,000,107 | ---- | C] () -- F:\Programme\wörterbuch
[2010.03.03 14:52:09 | 002,925,160 | ---- | C] () -- F:\Programme\BitTorrent-6.4.exe
[2008.12.06 21:30:22 | 000,000,213 | ---- | C] () -- F:\Programme\WinACE_2.6_(Serial).zip
[2008.04.10 21:53:59 | 009,730,075 | ---- | C] () -- F:\Programme\vlc-0.8.6f-win32.exe
[2006.09.16 18:25:10 | 000,000,138 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2006.07.27 15:15:43 | 000,137,728 | ---- | C] () -- F:\Dokumente und Einstellungen\Julia\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.05.11 22:37:12 | 000,000,305 | ---- | C] () -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
 
[color=#E56717]========== LOP Check ==========[/color]
 
[2012.05.29 15:06:26 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Buhl Data Service GmbH
[2011.10.30 08:56:34 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ClubSanDisk
[2012.04.14 11:17:15 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Driver Whiz
[2011.10.19 22:00:33 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2011.10.19 21:26:14 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2011.04.10 00:51:46 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\tmp
[2012.04.14 11:17:45 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\All Users\Anwendungsdaten\UAB
[2010.03.04 01:18:01 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\BitTorrent
[2012.05.29 11:00:00 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\Buhl Data Service
[2009.02.19 11:41:31 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\DNA
[2012.04.10 01:17:44 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\FreePDF
[2007.04.19 23:29:36 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\ICQ Toolbar
[2007.07.17 19:59:49 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\ICQLite
[2006.09.16 18:39:00 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\IMP
[2010.03.03 19:41:44 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\Lindy
[2012.04.09 23:09:31 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\OpenOffice.org
[2011.10.21 14:09:04 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\Opera
[2011.10.19 22:00:21 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\PC Suite
[2008.08.24 19:07:29 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\rhcaepj0e331
[2011.10.19 21:23:11 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\Samsung
[2006.04.22 20:50:43 | 000,000,000 | ---D | M] -- F:\Dokumente und Einstellungen\Julia\Anwendungsdaten\The Labyrinth Plus! Edition
[2012.06.27 01:19:00 | 000,000,246 | ---- | M] () -- F:\WINDOWS\Tasks\Auf Updates für Windows Live Toolbar prüfen.job
 
[color=#E56717]========== Purity Check ==========[/color]
 
 

< End of report >