[Windows XP-32 bit] RPC Server nicht verfügbar....

[Klapperstorch]

hallo liebes team,

seit einigen Tagen werde ich vom Computer gequält...

Meldung RPC Server nicht verfügbar...
Dienst ist auf manuell und auch nach dem ich ihn gestartet habe funktioniert so einiges nicht...

Dateien lassen sich nicht verschieben/kopieren
Emails werden nicht abgerufen
Pc fährt auch mal ohne Grund herunter
Malwarebytes startet nicht
Firewall lässt sich nicht aktivieren
Drucken geht nicht
.... und was weiss ich sonst noch????

Hier mein Scan mit HijackThis
OTL Scan läuft noch

bitte helft mir...

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 07:50:34, on 09.05.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS.0\System32\smss.exe
C:\WINDOWS.0\system32\winlogon.exe
C:\WINDOWS.0\system32\services.exe
C:\WINDOWS.0\system32\lsass.exe
C:\WINDOWS.0\system32\nvsvc32.exe
E:\Programme\Sandboxie\SbieSvc.exe
C:\WINDOWS.0\System32\svchost.exe
C:\WINDOWS.0\system32\svchost.exe
E:\Programme\Avira\AntiVir Desktop\sched.exe
E:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
E:\Programme\Application Updater\ApplicationUpdater.exe
E:\Programme\Bonjour\mDNSResponder.exe
E:\Programme\Avira\AntiVir Desktop\avshadow.exe
E:\Programme\Java\jre6\bin\jqs.exe
C:\WINDOWS.0\system32\lxbkcoms.exe
C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
C:\WINDOWS.0\system32\slserv.exe
C:\WINDOWS.0\System32\StkASv2K.exe
C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe
C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe
E:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS.0\system32\RunDLL32.exe
C:\WINDOWS.0\system32\ctfmon.exe
E:\Programme\Sandboxie\SbieCtrl.exe
E:\Programme\Sandboxie\SandboxieRpcSs.exe
E:\Programme\Sandboxie\SandboxieDcomLaunch.exe
E:\Programme\Mozilla Firefox 4.0 Beta 9\firefox.exe
E:\Programme\Mozilla Firefox 4.0 Beta 9\plugin-container.exe
e:\programme\avira\antivir desktop\avcenter.exe
E:\Programme\Avira\AntiVir Desktop\avscan.exe
M:\Downloads\OTL.exe
C:\WINDOWS.0\system32\taskmgr.exe
C:\WINDOWS.0\explorer.exe
M:\Downloads\HiJackThis204.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Google Toolbar
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Google Toolbar
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Google
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = MSN, Messenger und Hotmail sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN, Messenger und Hotmail sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN, Messenger und Hotmail sowie Nachrichten, Unterhaltung, Video, Sport, Lifestyle, Finanzen, Auto uvm. bei MSN
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = Google Toolbar
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = Google Toolbar
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = %s - Google Search
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - E:\Programme\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll
O2 - BHO: Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - E:\Programme\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - E:\Programme\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll
O4 - HKLM\..\Run: [avgnt] "E:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [DBHAgent] E:\Programme\Paragon Software\System Backup 2010\program\dbhagent.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS.0\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] E:\Programme\NVIDIA Corporation\nView\nwiz.exe /installquiet
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS.0\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe
O4 - HKCU\..\Run: [SandboxieControl] "E:\Programme\Sandboxie\SbieCtrl.exe"
O4 - HKUS\S-1-5-21-725345543-492894223-1417001333-1004\..\Run: [ctfmon.exe] C:\WINDOWS.0\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-725345543-492894223-1417001333-1004\..\Run: [SandboxieControl] "E:\Programme\Sandboxie\SbieCtrl.exe" (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS.0\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: add to &BOM - E:\\PROGRA~1\\BIET-O~1\\\\AddToBOM.hta
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS.0\system32\GPhotos.scr/200
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\Programme\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\Programme\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS.0\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra button: Klicke hier um das Projekt xp-AntiSpy zu unterstützen - {0e921e80-267a-42aa-aee4-60b9a1222a44} - E:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O9 - Extra 'Tools' menuitem: Unterstützung für xp-AntiSpy - {0e921e80-267a-42aa-aee4-60b9a1222a44} - E:\Programme\xp-AntiSpy\sponsoring\sponsor.html (HKCU)
O9 - Extra button: eBay DE - {C1514B92-E6E2-4be8-B93C-8A44D1F3011F} - E:\Programme\Supreme Auction\ebay_de.url (HKCU)
O9 - Extra button: Supreme Auction - {DFE4453A-65DF-47d5-BF37-3D0FD37FBDBB} - E:\Programme\Supreme Auction\Deskstart.exe Software\SupremeAuctionV6 (file missing) (HKCU)
O9 - Extra button: eBay UK - {EA17D6B8-BE9B-4f12-89FD-0D2C8F756747} - E:\Programme\Supreme Auction\ebay_uk.url (HKCU)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1244893099765
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/micr...?1281812856812
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS.0\system32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS.0\system32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - E:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - E:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Application Updater - Spigot, Inc. - E:\Programme\Application Updater\ApplicationUpdater.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - E:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - E:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - E:\Programme\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - E:\Programme\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS.0\system32\LEXBCES.EXE
O23 - Service: lxbk_device - - C:\WINDOWS.0\system32\lxbkcoms.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS.0\system32\GameMon.des.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS.0\system32\nvsvc32.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - E:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: Sony Ericsson OMSI download service (OMSI download service) - Unknown owner - C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
O23 - Service: Paragon System Backup Dienst - Paragon Software Group - E:\Programme\Paragon Software\System Backup 2010\program\dbhservice.exe
O23 - Service: Sandboxie Service (SbieSvc) - SANDBOXIE L.T.D - E:\Programme\Sandboxie\SbieSvc.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS.0\SYSTEM32\slserv.exe
O23 - Service: Syntek STK1160 Service (StkASSrv) - Syntek America Inc. - C:\WINDOWS.0\System32\StkASv2K.exe
O23 - Service: Acronis Try And Decide Service (TryAndDecideService) - Unknown owner - C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 10420 bytes

[Klapperstorch]

OTL logfile created on: 09.05.2011 09:15:44 - Run 3
[#] OTL by OldTimer - Version 3.2.22.3 [#] Folder = M:\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

1.023,00 Mb Total Physical Memory | 233,00 Mb Available Physical Memory | 23,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 69,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = E:\Programme
Drive C: | 60,15 Gb Total Space | 33,03 Gb Free Space | 54,91% Space Free | Partition Type: NTFS
Drive E: | 9,77 Gb Total Space | 5,37 Gb Free Space | 55,03% Space Free | Partition Type: NTFS
Drive M: | 62,44 Gb Total Space | 39,08 Gb Free Space | 62,59% Space Free | Partition Type: NTFS
Drive Z: | 16,69 Gb Total Space | 16,61 Gb Free Space | 99,48% Space Free | Partition Type: NTFS

Computer Name: WOHNZIMMER | User Name: Mühleweg | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - M:\Downloads\OTL.exe (OldTimer Tools)
PRC - E:\Programme\Avira\AntiVir Desktop\avscan.exe (Avira GmbH)
PRC - E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - E:\Programme\Mozilla Firefox 4.0 Beta 9\plugin-container.exe (Mozilla Corporation)
PRC - E:\Programme\Mozilla Firefox 4.0 Beta 9\firefox.exe (Mozilla Corporation)
PRC - E:\Programme\Sandboxie\SandboxieRpcSs.exe (SANDBOXIE L.T.D)
PRC - E:\Programme\Sandboxie\SandboxieDcomLaunch.exe (SANDBOXIE L.T.D)
PRC - E:\Programme\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
PRC - E:\Programme\Sandboxie\SbieSvc.exe (SANDBOXIE L.T.D)
PRC - E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - E:\Programme\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
PRC - e:\Programme\Avira\AntiVir Desktop\avcenter.exe (Avira GmbH)
PRC - E:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\WINDOWS.0\system32\slserv.exe ( )
PRC - E:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ()
PRC - C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe ()
PRC - C:\WINDOWS.0\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS.0\system32\lxbkcoms.exe ( )
PRC - C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
PRC - C:\WINDOWS.0\system32\StkASv2K.exe (Syntek America Inc.)


========== Modules (SafeList) ==========

MOD - M:\Downloads\OTL.exe (OldTimer Tools)
MOD - E:\Programme\Sandboxie\SbieDll.dll (SANDBOXIE L.T.D)
MOD - C:\WINDOWS.0\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)


========== Win32 Services (SafeList) ==========

SRV - (AppMgmt) -- File not found
SRV - (Lavasoft Ad-Aware Service) -- E:\Programme\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft Limited)
SRV - (AntiVirSchedulerService) -- E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (nvUpdatusService) -- E:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (SbieSvc) -- E:\Programme\Sandboxie\SbieSvc.exe (SANDBOXIE L.T.D)
SRV - (AntiVirService) -- E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Application Updater) -- E:\Programme\Application Updater\ApplicationUpdater.exe (Spigot, Inc.)
SRV - (npggsvc) -- C:\WINDOWS.0\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (Paragon System Backup Dienst) -- E:\Programme\Paragon Software\System Backup 2010\program\dbhservice.exe (Paragon Software Group)
SRV - (SLService) -- C:\WINDOWS.0\System32\slserv.exe ( )
SRV - (OMSI download service) -- C:\Programme\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ()
SRV - (TryAndDecideService) -- C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe ()
SRV - (AcrSch2Svc) -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe (Acronis)
SRV - (lxbk_device) -- C:\WINDOWS.0\System32\lxbkcoms.exe ( )
SRV - (UleadBurningHelper) -- C:\Programme\Gemeinsame Dateien\Ulead Systems\DVD\ULCDRSvr.exe (Ulead Systems, Inc.)
SRV - (StkASSrv) -- C:\WINDOWS.0\system32\StkASv2K.exe (Syntek America Inc.)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (SbieDrv) -- E:\Programme\Sandboxie\SbieDrv.sys (SANDBOXIE L.T.D)
DRV - (avipbb) -- C:\WINDOWS.0\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (Lavasoft Kernexplorer) -- E:\Programme\Lavasoft\Ad-Aware\kernexplorer.sys ()
DRV - (avgntflt) -- C:\WINDOWS.0\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (APL531) -- C:\WINDOWS.0\system32\drivers\ov550i.sys (Omnivision Technologies, Inc.)
DRV - (hotcore3) -- C:\WINDOWS.0\system32\DRIVERS\hotcore3.sys (Paragon Software Group)
DRV - (PVUSB) -- C:\WINDOWS.0\system32\drivers\CESG502.SYS (Hitachi Semiconductor and Devices Sales Co.,Ltd.)
DRV - (Lbd) -- C:\WINDOWS.0\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (usbsermpt) -- C:\WINDOWS.0\system32\drivers\usbsermpt.sys (Microsoft Corporation)
DRV - (Mtlstrm) -- C:\WINDOWS.0\system32\drivers\mtlstrm.sys ( )
DRV - (Mtlmnt5) -- C:\WINDOWS.0\system32\drivers\mtlmnt5.sys ( )
DRV - (NtMtlFax) -- C:\WINDOWS.0\system32\drivers\ntmtlfax.sys ( )
DRV - (Slntamr) -- C:\WINDOWS.0\system32\drivers\slntamr.sys ( )
DRV - (SlNtHal) -- C:\WINDOWS.0\system32\drivers\slnthal.sys ( )
DRV - (SlWdmSup) -- C:\WINDOWS.0\system32\drivers\slwdmsup.sys (Vireo Software)
DRV - (Tcpip6) -- C:\WINDOWS.0\system32\drivers\tcpip6.sys (Microsoft Corporation)
DRV - (timounter) -- C:\WINDOWS.0\system32\DRIVERS\timntr.sys (Acronis)
DRV - (tifsfilter) -- C:\WINDOWS.0\system32\drivers\tifsfilt.sys (Acronis)
DRV - (snapman) -- C:\WINDOWS.0\system32\DRIVERS\snapman.sys (Acronis)
DRV - (tdrpman) -- C:\WINDOWS.0\system32\DRIVERS\tdrpman.sys (Acronis)
DRV - (zebrmdmc) Sony Ericsson mRouter Port (WDM) -- C:\WINDOWS.0\system32\drivers\zebrmdmc.sys (MCCI)
DRV - (zebrmdm) Sony Ericsson Port (WDM) -- C:\WINDOWS.0\system32\drivers\zebrmdm.sys (MCCI)
DRV - (zebrbus) -- C:\WINDOWS.0\system32\drivers\zebrbus.sys (MCCI)
DRV - (zebrmdfl) -- C:\WINDOWS.0\system32\drivers\zebrmdfl.sys (MCCI Corporation)
DRV - (tbhsd) -- C:\WINDOWS.0\system32\drivers\tbhsd.sys (RapidSolution Software AG)
DRV - (MxlW2k) -- C:\WINDOWS.0\System32\drivers\MxlW2k.sys (MusicMatch, Inc.)
DRV - (avgio) -- E:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\WINDOWS.0\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (ggsemc) -- C:\WINDOWS.0\system32\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV - (ggflt) -- C:\WINDOWS.0\system32\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV - (s0017mdm) -- C:\WINDOWS.0\system32\drivers\s0017mdm.sys (MCCI Corporation)
DRV - (s0017unic) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (WDM) -- C:\WINDOWS.0\system32\drivers\s0017unic.sys (MCCI Corporation)
DRV - (s0017mgmt) Sony Ericsson Device 0017 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS.0\system32\drivers\s0017mgmt.sys (MCCI Corporation)
DRV - (s0017obex) -- C:\WINDOWS.0\system32\drivers\s0017obex.sys (MCCI Corporation)
DRV - (s0017bus) Sony Ericsson Device 0017 driver (WDM) -- C:\WINDOWS.0\system32\drivers\s0017bus.sys (MCCI Corporation)
DRV - (s0017nd5) Sony Ericsson Device 0017 USB Ethernet Emulation SEMC0017 (NDIS) -- C:\WINDOWS.0\system32\drivers\s0017nd5.sys (MCCI Corporation)
DRV - (s0017mdfl) -- C:\WINDOWS.0\system32\drivers\s0017mdfl.sys (MCCI Corporation)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS.0\system32\drivers\alcxwdm.sys (Realtek Semiconductor Corp.)
DRV - (gameenum) -- C:\WINDOWS.0\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (RecAgent) -- C:\WINDOWS.0\system32\drivers\recagent.sys (Smart Link)
DRV - (MPE) -- C:\WINDOWS.0\system32\drivers\MPE.sys (Microsoft Corporation)
DRV - (seehcri) -- C:\WINDOWS.0\system32\drivers\seehcri.sys (Sony Ericsson Mobile Communications)
DRV - (motmodem) -- C:\WINDOWS.0\system32\drivers\motmodem.sys (Motorola)
DRV - (hotcore2) -- C:\WINDOWS.0\system32\drivers\hotcore2.sys (Paragon Software Group)
DRV - (StkAMini) -- C:\WINDOWS.0\system32\drivers\StkAMini.sys (Syntek America Inc.)
DRV - (StkScan) -- C:\WINDOWS.0\system32\drivers\StkScan.sys (Syntek America Inc.)
DRV - (nvatabus) -- C:\WINDOWS.0\system32\DRIVERS\nvatabus.sys (NVIDIA Corporation)
DRV - (USB28xxBGA) -- C:\WINDOWS.0\system32\drivers\emBDA.sys (Windows (R) 2000 DDK provider)
DRV - (USB28xxOEM) -- C:\WINDOWS.0\system32\drivers\emOEM.sys (eMPIA Technology, Inc.)
DRV - (nvnforce) Service for NVIDIA(R) nForce(TM) -- C:\WINDOWS.0\system32\drivers\nvapu.sys (NVIDIA Corporation)
DRV - (nvax) Service for NVIDIA(R) nForce(TM) -- C:\WINDOWS.0\system32\drivers\nvax.sys (NVIDIA Corporation)
DRV - (nvidesm) -- C:\WINDOWS.0\system32\drivers\nvidesm.sys (NVIDIA Corporation)
DRV - (NVENET) -- C:\WINDOWS.0\system32\drivers\NVENET.sys (NVIDIA Corporation)
DRV - (nv_agp) -- C:\WINDOWS.0\system32\DRIVERS\nv_agp.sys (NVIDIA Corporation)
DRV - (V90drv) -- C:\WINDOWS.0\system32\drivers\v90drv.sys ( )
DRV - (pfc) -- C:\WINDOWS.0\system32\drivers\pfc.sys (Padus, Inc.)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\current\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Google Toolbar
IE - HKU\current\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
IE - HKU\current\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\current\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Google Toolbar
IE - HKU\current\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google Toolbar
IE - HKU\current\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - E:\Programme\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKU\current\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\current\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-725345543-492894223-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Google Toolbar
IE - HKU\S-1-5-21-725345543-492894223-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm
IE - HKU\S-1-5-21-725345543-492894223-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\S-1-5-21-725345543-492894223-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Google Toolbar
IE - HKU\S-1-5-21-725345543-492894223-1417001333-1004\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Google Toolbar
IE - HKU\S-1-5-21-725345543-492894223-1417001333-1004\..\URLSearchHook: {B922D405-6D13-4A2B-AE89-08A030DA4402} - E:\Programme\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
IE - HKU\S-1-5-21-725345543-492894223-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-725345543-492894223-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local



========== FireFox ==========

FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=971163"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.de/webhp?ie=iso-8859-1&hl=de&lr=lang_de|about:blank"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {0b38152b-1b20-484d-a11f-5e04a9b0661f}:5.6.12.1
FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.52
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.1
FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.48.3
FF - prefs.js..extensions.enabledItems: firefox@ghostery.com:2.4.1
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {4BBDD651-70CF-4821-84F8-2B918CF89CA3}:6.3.3.2
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: pdfforge@mybrowserbar.com:4.1
FF - prefs.js..extensions.enabledItems: wtxpcom@mybrowserbar.com:4.1
FF - prefs.js..keyword.URL: "http://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=971163&p="
FF - prefs.js..network.proxy.no_proxies_on: "*.local"


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: E:\Programme\Mozilla Firefox\components [2011.05.09 07:25:14 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: E:\Programme\Mozilla Firefox\plugins [2011.05.09 07:25:24 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Components: E:\Programme\Mozilla Firefox 4.0 Beta 9\components [2011.04.17 19:35:36 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0.1\extensions\\Plugins: E:\Programme\Mozilla Firefox 4.0 Beta 9\plugins [2011.05.05 17:30:07 | 000,000,000 | ---D | M]

[2009.06.12 22:18:13 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Extensions
[2011.05.05 16:44:54 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \extensions
[2010.08.26 12:32:13 | 000,000,000 | ---D | M] (Winamp Toolbar) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}
[2010.04.27 19:51:48 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.12.09 12:54:38 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010.08.15 13:15:04 | 000,000,000 | ---D | M] (FEBE) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
[2011.04.29 13:02:40 | 000,000,000 | ---D | M] (BitDefender QuickScan) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010.04.22 08:08:11 | 000,000,000 | ---D | M] (Torbutton) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \extensions\{e0204bd5-9d31-402b-a99d-a6aa8ffebdca}
[2011.04.21 11:23:09 | 000,000,000 | ---D | M] (Ghostery) -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \extensions\firefox@ghostery.com
[2009.08.18 22:35:24 | 000,001,201 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\Mozilla\Firefox\Profiles\5gnb0i8d.default \searchplugins\winamp-search.xml
[2011.02.27 21:54:19 | 000,000,000 | ---D | M] (No name found) -- E:\Programme\Mozilla Firefox\extensions
[2010.10.13 16:08:10 | 000,000,000 | ---D | M] (Java Console) -- E:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
File not found (No name found) --
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\MüHLEWEG\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\5GNB0I8D.DEFAUL T\EXTENSIONS\{3112CA9C-DE6D-4884-A869-9855DE68056C}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\MüHLEWEG\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\5GNB0I8D.DEFAUL T\EXTENSIONS\{A0D7CCB3-214D-498B-B4AA-0E8FDA9A7BF7}.XPI
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\MüHLEWEG\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\5GNB0I8D.DEFAUL T\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\MüHLEWEG\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\5GNB0I8D.DEFAUL T\EXTENSIONS\{D40F5E7B-D2CF-4856-B441-CC613EEFFBE3}.XPI
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\MüHLEWEG\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\5GNB0I8D.DEFAUL T\EXTENSIONS\{E001C731-5E37-4538-A5CB-8168736A2360}
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\MüHLEWEG\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\5GNB0I8D.DEFAUL T\EXTENSIONS\FIREFOX@GHOSTERY.COM
File not found (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\MüHLEWEG\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\5GNB0I8D.DEFAUL T\EXTENSIONS\TESTPILOT@LABS.MOZILLA.COM.XPI
[2011.02.27 21:54:51 | 000,000,000 | ---D | M] (Widgi Toolbar Platform) -- C:\PROGRAMME\GEMEINSAME DATEIEN\SPIGOT\WTXPCOM
[2011.05.05 17:29:54 | 000,000,000 | ---D | M] (Java Quick Starter) -- E:\PROGRAMME\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011.05.05 17:30:07 | 000,000,000 | ---D | M] (Java Console) -- E:\PROGRAMME\MOZILLA FIREFOX 4.0 BETA 9\EXTENSIONS\{CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA}
[2011.02.27 21:54:51 | 000,000,000 | ---D | M] (pdfforge Toolbar) -- E:\PROGRAMME\PDFFORGE TOOLBAR\FF
[2010.10.13 16:07:44 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- E:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.07.12 18:33:56 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- E:\Programme\Mozilla Firefox\plugins\npwachk.dll
[2009.10.23 15:01:34 | 000,102,400 | ---- | M] (Zylom) -- E:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll
[2010.07.23 02:48:56 | 000,001,392 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.07.23 02:48:56 | 000,002,344 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.07.23 02:48:56 | 000,006,805 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.07.23 02:48:56 | 000,001,178 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.07.23 02:48:56 | 000,001,105 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2010.08.14 16:29:10 | 000,000,686 | ---- | M]) - C:\WINDOWS.0\system32\drivers\etc\HOSTS
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - E:\Programme\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (no name) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No CLSID value found.
O2 - BHO: (no name) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - No CLSID value found.
O3 - HKLM\..\Toolbar: (pdfforge Toolbar) - {B922D405-6D13-4A2B-AE89-08A030DA4402} - E:\Programme\pdfforge Toolbar\IE\4.3\pdfforgeToolbarIE.dll (Spigot, Inc.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [avgnt] E:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DBHAgent] E:\Programme\Paragon Software\System Backup 2010\program\dbhagent.exe (Paragon Software Group)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS.0\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS.0\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] E:\Programme\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKU\current..\Run: [SandboxieControl] E:\Programme\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
O4 - HKU\S-1-5-21-725345543-492894223-1417001333-1004..\Run: [SandboxieControl] E:\Programme\Sandboxie\SbieCtrl.exe (SANDBOXIE L.T.D)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\current\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\current\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\current\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\current_classes\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\current_classes\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-725345543-492894223-1417001333-1004\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-725345543-492894223-1417001333-1004\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\S-1-5-21-725345543-492894223-1417001333-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-725345543-492894223-1417001333-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-725345543-492894223-1417001333-1005\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O7 - HKU\Sandbox_Mühleweg_DefaultBox\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\Sandbox_Mühleweg_DefaultBox\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: add to &BOM - E:\\PROGRA~1\\BIET-O~1\\\\AddToBOM.hta ()
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS.0\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\OFFICE11\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Recherchieren - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\OFFICE11\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\Programme\PartyGaming\PartyPoker\RunApp.exe ()
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - E:\Programme\PartyGaming\PartyPoker\RunApp.exe ()
O9 - Extra Button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - E:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsu...?1244893099765 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} http://www.update.microsoft.com/micr...?1281812856812 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub...sh/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS.0\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Mühleweg\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Mühleweg\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS.0\System32\relog_ap.dll (Acronis)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:43:43 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (lsdelete) - C:\WINDOWS.0\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011.05.06 18:49:36 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Mühleweg\Recent
[2011.05.05 17:30:31 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java
[2011.05.05 17:30:07 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\javacpl.cpl
[2011.05.05 17:30:06 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\javaws.exe
[2011.05.05 17:30:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\javaw.exe
[2011.05.05 17:30:06 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\java.exe
[2011.05.05 17:26:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\NVIDIA
[2011.05.05 17:23:43 | 000,944,232 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS.0\System32\nvdispco3220140.dll
[2011.05.05 17:23:43 | 000,855,656 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS.0\System32\nvgenco322060.dll
[2011.05.05 17:21:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\iTunes
[2011.05.05 17:20:44 | 000,000,000 | ---D | C] -- E:\Programme\iPod
[2011.05.05 17:20:28 | 000,000,000 | ---D | C] -- E:\Programme\iTunes
[2011.05.05 17:16:50 | 000,000,000 | ---D | C] -- E:\Programme\Bonjour
[2011.04.20 15:21:38 | 012,501,600 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS.0\System32\dllcache\nv4_mini.sys
[2011.04.20 15:21:32 | 004,111,232 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS.0\System32\nv4_disp.dll
[2011.04.15 21:15:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Winamp
[2011.04.15 21:15:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mühleweg\Startmenü\Programme\Winamp Erkennungs-Plug-in
[2011.04.15 21:13:30 | 000,123,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS.0\System32\pxcpyi64.exe
[2011.04.15 21:13:29 | 000,126,448 | ---- | C] (Sonic Solutions) -- C:\WINDOWS.0\System32\pxinsi64.exe
[2011.04.15 21:13:24 | 000,059,888 | ---- | C] (Sonic Solutions) -- C:\WINDOWS.0\System32\pxwma.dll
[2011.04.15 21:09:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mühleweg\Startmenü\Programme\WinRAR
[2011.04.15 21:09:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\WinRAR
[2011.04.15 21:07:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Sandboxie
[2011.04.15 21:04:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\CCleaner
[2011.04.14 00:40:10 | 004,284,416 | ---- | C] (Google Inc.) -- C:\WINDOWS.0\System32\GPhotos.scr
[2010.11.12 17:15:06 | 000,040,960 | ---- | C] ( ) -- C:\WINDOWS.0\OMNIUNS.EXE
[2010.03.13 12:10:02 | 000,991,232 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkusb1.dll
[2010.03.13 12:10:02 | 000,413,696 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkinpa.dll
[2010.03.13 12:10:02 | 000,397,312 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkiesc.dll
[2010.03.13 12:10:02 | 000,323,584 | ---- | C] ( ) -- C:\WINDOWS.0\System32\LXBKhcp.dll
[2010.03.13 12:10:01 | 001,224,704 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkserv.dll
[2010.03.13 12:10:01 | 000,696,320 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkhbn3.dll
[2010.03.13 12:10:01 | 000,684,032 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkcomc.dll
[2010.03.13 12:10:01 | 000,643,072 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkpmui.dll
[2010.03.13 12:10:01 | 000,585,728 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbklmpm.dll
[2010.03.13 12:10:01 | 000,537,256 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkcoms.exe
[2010.03.13 12:10:01 | 000,163,840 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkprox.dll
[2010.03.13 12:10:01 | 000,094,208 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkpplc.dll
[2010.03.13 12:01:33 | 000,014,976 | ---- | C] ( ) -- C:\WINDOWS.0\System32\drivers\winddx.sys
[2009.07.28 15:57:06 | 000,421,888 | ---- | C] ( ) -- C:\WINDOWS.0\System32\lxbkcomm.dll
[2009.07.28 15:57:06 | 000,385,704 | ---- | C] ( ) -- C:\WINDOWS.0\System32\LXBKIH.EXE
[2009.07.28 15:57:04 | 000,381,608 | ---- | C] ( ) -- C:\WINDOWS.0\System32\LXBKCFG.EXE
[2009.06.12 22:00:44 | 001,432,836 | ---- | C] ( ) -- C:\WINDOWS.0\System32\drivers\v90drv.sys
[2003.02.16 19:33:46 | 001,293,192 | ---- | C] ( ) -- C:\WINDOWS.0\System32\drivers\mtlstrm.sys
[2003.02.16 18:12:46 | 000,085,520 | ---- | C] ( ) -- C:\WINDOWS.0\System32\drivers\slnthal.sys
[2003.02.16 18:11:56 | 000,516,616 | ---- | C] ( ) -- C:\WINDOWS.0\System32\drivers\slntamr.sys
[2003.02.16 18:08:18 | 000,210,128 | ---- | C] ( ) -- C:\WINDOWS.0\System32\drivers\mtlmnt5.sys
[2003.02.05 19:25:56 | 000,162,136 | ---- | C] ( ) -- C:\WINDOWS.0\System32\drivers\ntmtlfax.sys
[2003.01.17 04:02:38 | 000,045,056 | ---- | C] ( ) -- C:\WINDOWS.0\System32\slserv.exe
[4 C:\WINDOWS.0\*.tmp files -> C:\WINDOWS.0\*.tmp -> ]
[3 C:\WINDOWS.0\System32\drivers\*.tmp files -> C:\WINDOWS.0\System32\drivers\*.tmp -> ]
[1 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.05.09 07:47:57 | 000,006,344 | ---- | M] () -- C:\WINDOWS.0\Sandboxie.ini
[2011.05.08 21:59:47 | 000,271,360 | ---- | M] () -- M:\backupoutlook27022011.pst
[2011.05.08 21:38:03 | 000,000,377 | RHS- | M] () -- C:\boot.ini
[2011.05.08 21:36:20 | 000,002,048 | --S- | M] () -- C:\WINDOWS.0\bootstat.dat
[2011.05.08 08:41:54 | 000,013,646 | ---- | M] () -- C:\WINDOWS.0\System32\wpa.dbl
[2011.05.06 18:50:38 | 000,026,320 | ---- | M] () -- M:\cc_20110506_185034.reg
[2011.05.06 18:48:38 | 000,000,484 | ---- | M] () -- C:\WINDOWS.0\tasks\Ad-Aware Update (Weekly).job
[2011.05.06 18:46:07 | 000,000,064 | ---- | M] () -- C:\WINDOWS.0\System32\rp_stats.dat
[2011.05.06 18:46:07 | 000,000,044 | ---- | M] () -- C:\WINDOWS.0\System32\rp_rules.dat
[2011.05.05 17:29:53 | 000,157,472 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\javaws.exe
[2011.05.05 17:29:53 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\javaw.exe
[2011.05.05 17:29:53 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\java.exe
[2011.05.05 17:29:53 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\javacpl.cpl
[2011.05.05 17:29:52 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS.0\System32\deployJava1.dll
[2011.05.05 17:24:36 | 000,259,708 | ---- | M] () -- C:\WINDOWS.0\System32\nvdrsdb0.bin
[2011.05.05 17:24:36 | 000,000,001 | ---- | M] () -- C:\WINDOWS.0\System32\nvdrssel.bin
[2011.05.05 17:24:28 | 000,259,708 | ---- | M] () -- C:\WINDOWS.0\System32\nvdrsdb1.bin
[2011.05.02 15:08:32 | 000,087,270 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\DAG Tiefbau Kovo.pdf
[2011.05.02 14:35:38 | 000,000,516 | ---- | M] () -- C:\WINDOWS.0\lexstat.ini
[2011.05.02 12:17:03 | 000,051,371 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Richard Rechung April 2011.pdf
[2011.05.02 12:14:59 | 000,051,842 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Tim Rechnung April 2011.pdf
[2011.05.02 12:12:14 | 000,051,879 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Mara Rechnung April 2011.pdf
[2011.05.02 12:08:03 | 000,051,835 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Laurent Rechnung April 2011.pdf
[2011.05.02 11:52:17 | 000,004,844 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Richard Stunden April 2011.pdf
[2011.05.02 11:51:01 | 000,004,814 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Tim Stunden April 2011.pdf
[2011.05.02 11:48:16 | 000,004,609 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Mara Stunden April 2011.pdf
[2011.05.02 11:45:38 | 000,005,598 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Laurent Stunden April 2011.pdf
[2011.04.28 11:13:14 | 000,038,168 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Re Infra Energy 4.pdf
[2011.04.25 13:08:21 | 000,035,707 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Spielplan_Damen_2011.pdf
[2011.04.21 10:22:39 | 002,916,053 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Verlegepraxis.pdf
[2011.04.21 10:20:25 | 000,162,551 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Picasa.pdf
[2011.04.21 10:13:06 | 000,027,576 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Granit-Blockstufen.jpg
[2011.04.20 17:57:50 | 000,038,159 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Re Infra Energy 3.pdf
[2011.04.18 21:39:14 | 000,026,644 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Rechnung Nr 2011041801.pdf
[2011.04.17 15:30:00 | 000,056,168 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Konto_989442-Auszug_2011_003_pdf.pdf
[2011.04.17 15:20:22 | 000,011,966 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\kontoauszug_10.04.2011.pdf;jsessionid=FED2325E4B3 6F5CC41BAA437F3385528.pdf
[2011.04.15 21:04:44 | 000,000,581 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Desktop\CCleaner.lnk
[2011.04.15 20:46:39 | 000,072,658 | ---- | M] () -- M:\cc_20110415_204627.reg
[2011.04.14 08:27:39 | 000,104,464 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Auftrag Wintergarten.pdf
[2011.04.14 00:40:10 | 004,284,416 | ---- | M] (Google Inc.) -- C:\WINDOWS.0\System32\GPhotos.scr
[2011.04.12 23:28:13 | 000,646,696 | ---- | M] () -- C:\WINDOWS.0\System32\FNTCACHE.DAT
[2011.04.12 23:10:19 | 000,451,970 | ---- | M] () -- C:\WINDOWS.0\System32\perfh007.dat
[2011.04.12 23:10:19 | 000,435,260 | ---- | M] () -- C:\WINDOWS.0\System32\perfh009.dat
[2011.04.12 23:10:19 | 000,080,928 | ---- | M] () -- C:\WINDOWS.0\System32\perfc007.dat
[2011.04.12 23:10:19 | 000,068,156 | ---- | M] () -- C:\WINDOWS.0\System32\perfc009.dat
[2011.04.10 14:48:54 | 000,057,172 | ---- | M] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\MV Köster.pdf
[4 C:\WINDOWS.0\*.tmp files -> C:\WINDOWS.0\*.tmp -> ]
[3 C:\WINDOWS.0\System32\drivers\*.tmp files -> C:\WINDOWS.0\System32\drivers\*.tmp -> ]
[1 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.05.06 18:50:36 | 000,026,320 | ---- | C] () -- M:\cc_20110506_185034.reg
[2011.05.05 17:23:43 | 000,003,629 | ---- | C] () -- C:\WINDOWS.0\System32\nvinfo.pb
[2011.05.02 15:08:28 | 000,087,270 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\DAG Tiefbau Kovo.pdf
[2011.05.02 12:17:01 | 000,051,371 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Richard Rechung April 2011.pdf
[2011.05.02 12:14:56 | 000,051,842 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Tim Rechnung April 2011.pdf
[2011.05.02 12:12:11 | 000,051,879 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Mara Rechnung April 2011.pdf
[2011.05.02 12:08:00 | 000,051,835 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Laurent Rechnung April 2011.pdf
[2011.05.02 11:52:14 | 000,004,844 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Richard Stunden April 2011.pdf
[2011.05.02 11:50:59 | 000,004,814 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Tim Stunden April 2011.pdf
[2011.05.02 11:48:14 | 000,004,609 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Mara Stunden April 2011.pdf
[2011.05.02 11:42:56 | 000,005,598 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Laurent Stunden April 2011.pdf
[2011.04.28 11:13:11 | 000,038,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Re Infra Energy 4.pdf
[2011.04.25 13:08:21 | 000,035,707 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Spielplan_Damen_2011.pdf
[2011.04.23 02:10:46 | 000,000,064 | ---- | C] () -- C:\WINDOWS.0\System32\rp_stats.dat
[2011.04.23 02:10:46 | 000,000,044 | ---- | C] () -- C:\WINDOWS.0\System32\rp_rules.dat
[2011.04.21 10:22:39 | 002,916,053 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Verlegepraxis.pdf
[2011.04.21 10:20:01 | 000,162,551 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Picasa.pdf
[2011.04.21 10:13:01 | 000,027,576 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Granit-Blockstufen.jpg
[2011.04.20 17:57:48 | 000,038,159 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Re Infra Energy 3.pdf
[2011.04.18 21:39:14 | 000,026,644 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Rechnung Nr 2011041801.pdf
[2011.04.17 15:30:00 | 000,056,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Konto_989442-Auszug_2011_003_pdf.pdf
[2011.04.17 15:20:22 | 000,011,966 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\kontoauszug_10.04.2011.pdf;jsessionid=FED2325E4B3 6F5CC41BAA437F3385528.pdf
[2011.04.15 20:46:34 | 000,072,658 | ---- | C] () -- M:\cc_20110415_204627.reg
[2011.04.14 08:27:35 | 000,104,464 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\Auftrag Wintergarten.pdf
[2011.04.10 14:48:53 | 000,057,172 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Desktop\MV Köster.pdf
[2011.02.07 23:48:17 | 000,000,120 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\Microsoft.SqlServer.Compact.351.32.bc
[2011.01.26 16:50:11 | 000,116,224 | ---- | C] () -- C:\WINDOWS.0\System32\pdfcmnnt.dll
[2010.12.01 21:00:10 | 000,000,651 | ---- | C] () -- C:\WINDOWS.0\System32\winpdf.ini
[2010.10.17 14:57:32 | 000,000,664 | ---- | C] () -- C:\WINDOWS.0\System32\d3d9caps.dat
[2010.08.15 13:17:46 | 000,259,708 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrsdb0.bin
[2010.08.15 13:17:42 | 000,259,708 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrsdb1.bin
[2010.08.15 13:17:42 | 000,000,001 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrssel.bin
[2010.08.14 20:16:44 | 000,006,344 | ---- | C] () -- C:\WINDOWS.0\Sandboxie.ini
[2010.08.13 15:21:01 | 000,256,512 | ---- | C] () -- C:\WINDOWS.0\PEV.exe
[2010.08.13 15:21:01 | 000,098,816 | ---- | C] () -- C:\WINDOWS.0\sed.exe
[2010.08.13 15:21:01 | 000,080,412 | ---- | C] () -- C:\WINDOWS.0\grep.exe
[2010.08.13 15:21:01 | 000,077,312 | ---- | C] () -- C:\WINDOWS.0\MBR.exe
[2010.08.13 15:21:01 | 000,068,096 | ---- | C] () -- C:\WINDOWS.0\zip.exe
[2010.06.24 20:31:17 | 000,017,408 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Lokale Einstellungen\Anwendungsdaten\WebpageIcons.db
[2010.05.11 12:28:22 | 000,363,520 | ---- | C] () -- C:\WINDOWS.0\System32\PsisDecd.dll
[2010.04.23 17:24:00 | 000,000,120 | ---- | C] () -- C:\WINDOWS.0\PbkUser.INI
[2010.03.13 12:42:07 | 000,000,169 | ---- | C] () -- C:\WINDOWS.0\RtlRack.ini
[2010.03.13 12:34:46 | 000,000,164 | ---- | C] () -- C:\WINDOWS.0\avrack.ini
[2010.03.13 12:10:39 | 000,061,440 | ---- | C] () -- C:\WINDOWS.0\System32\lxbkcnv5.dll
[2010.03.13 12:10:39 | 000,061,440 | ---- | C] () -- C:\WINDOWS.0\System32\lxbkcnv4.dll
[2010.03.13 12:10:39 | 000,039,899 | ---- | C] () -- C:\WINDOWS.0\System32\rtsicis.ini
[2010.03.13 12:10:02 | 000,274,432 | ---- | C] () -- C:\WINDOWS.0\System32\LXBKinst.dll
[2010.03.13 12:01:33 | 000,466,944 | ---- | C] () -- C:\WINDOWS.0\System32\SLLights.dll
[2010.03.13 12:01:33 | 000,376,832 | ---- | C] () -- C:\WINDOWS.0\System32\slmh.exe
[2010.03.13 12:01:33 | 000,167,936 | ---- | C] () -- C:\WINDOWS.0\System32\minirec.exe
[2010.01.02 20:59:01 | 000,162,304 | ---- | C] () -- C:\WINDOWS.0\System32\ztvunrar36.dll
[2010.01.02 20:59:01 | 000,077,312 | ---- | C] () -- C:\WINDOWS.0\System32\ztvunace26.dll
[2009.12.11 18:33:38 | 000,004,960 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\ntiowp.sys
[2009.12.06 14:53:48 | 000,000,119 | ---- | C] () -- C:\WINDOWS.0\Podcasts.INI
[2009.11.25 13:40:50 | 000,085,504 | ---- | C] () -- C:\WINDOWS.0\System32\ff_vfw.dll
[2009.09.03 23:41:59 | 000,819,200 | ---- | C] () -- C:\WINDOWS.0\System32\xvidcore.dll
[2009.09.03 23:41:59 | 000,180,224 | ---- | C] () -- C:\WINDOWS.0\System32\xvidvfw.dll
[2009.08.18 22:35:04 | 000,125,168 | -H-- | C] () -- C:\WINDOWS.0\System32\mlfcache.dat
[2009.07.28 15:57:32 | 000,000,516 | ---- | C] () -- C:\WINDOWS.0\lexstat.ini
[2009.07.28 15:57:09 | 000,040,960 | ---- | C] () -- C:\WINDOWS.0\System32\lxbkvs.dll
[2009.07.28 15:57:07 | 000,077,824 | ---- | C] () -- C:\WINDOWS.0\System32\LXBKLCNP.DLL
[2009.07.28 15:57:02 | 000,040,960 | ---- | C] () -- C:\WINDOWS.0\System32\INSTMON.EXE
[2009.07.28 15:56:41 | 000,413,696 | ---- | C] () -- C:\WINDOWS.0\System32\lxbkutil.dll
[2009.07.28 15:56:41 | 000,344,064 | ---- | C] () -- C:\WINDOWS.0\System32\lxbkcoin.dll
[2009.07.28 15:56:41 | 000,000,266 | ---- | C] () -- C:\WINDOWS.0\System32\lxbkcoin.ini
[2009.07.04 15:06:39 | 000,129,024 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.06.25 00:01:49 | 000,087,552 | ---- | C] () -- C:\WINDOWS.0\cadkasdeinst01.exe
[2009.06.19 09:41:24 | 000,015,873 | ---- | C] () -- C:\WINDOWS.0\System32\Inetde.dll
[2009.06.17 22:06:38 | 000,007,680 | ---- | C] () -- C:\WINDOWS.0\System32\CNMVS61.DLL
[2009.06.15 22:50:17 | 000,000,647 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Anwendungsdaten\burnaware.ini
[2009.06.15 20:20:37 | 000,008,192 | ---- | C] () -- C:\WINDOWS.0\System32\wnaspi32.dll
[2009.06.13 18:59:13 | 000,049,152 | ---- | C] () -- C:\WINDOWS.0\System32\ChCfg.exe
[2009.06.13 18:58:50 | 000,147,456 | ---- | C] () -- C:\WINDOWS.0\System32\RtlCPAPI.dll
[2009.06.13 13:23:03 | 000,015,880 | ---- | C] () -- C:\WINDOWS.0\System32\lsdelete.exe
[2009.06.13 10:58:55 | 000,002,670 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Lokale Einstellungen\Anwendungsdaten\FASTWiz.html
[2009.06.13 10:54:52 | 000,000,796 | ---- | C] () -- C:\Dokumente und Einstellungen\Mühleweg\Lokale Einstellungen\Anwendungsdaten\FASTApp.html
[2009.06.13 10:45:49 | 000,408,618 | ---- | C] () -- C:\WINDOWS.0\System32\prfh0407.dat
[2009.06.13 10:45:48 | 000,071,598 | ---- | C] () -- C:\WINDOWS.0\System32\prfc0407.dat
[2009.06.12 23:49:00 | 000,000,406 | ---- | C] () -- C:\WINDOWS.0\ODBC.INI
[2009.06.12 23:13:16 | 000,004,212 | -H-- | C] () -- C:\WINDOWS.0\System32\zllictbl.dat
[2009.06.12 23:01:37 | 000,000,008 | ---- | C] () -- C:\WINDOWS.0\System32\nvModes.dat
[2009.06.12 22:26:04 | 000,018,253 | R--- | C] () -- C:\WINDOWS.0\System32\drivers\SSNVFX.INI
[2009.06.12 22:23:32 | 000,000,862 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\setup.ini
[2009.06.12 22:23:25 | 000,000,510 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\layout.bin
[2009.06.12 22:18:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS.0\nsreg.dat
[2009.06.12 22:11:18 | 000,001,024 | R--- | C] () -- C:\WINDOWS.0\System32\drivers\jedih2rx.bin
[2009.06.12 22:11:18 | 000,000,122 | R--- | C] () -- C:\WINDOWS.0\System32\drivers\ramsed.bin
[2009.06.12 22:00:44 | 000,151,552 | ---- | C] () -- C:\WINDOWS.0\System32\amr_cpl.dll
[2009.06.12 22:00:44 | 000,061,440 | ---- | C] () -- C:\WINDOWS.0\smcfg.exe
[2009.06.12 22:00:43 | 000,425,984 | ---- | C] () -- C:\WINDOWS.0\sllights.exe
[2009.06.12 22:00:43 | 000,001,856 | R--- | C] () -- C:\WINDOWS.0\System32\drivers\Slclean.ini
[2009.06.12 21:30:35 | 000,184,320 | R--- | C] () -- C:\WINDOWS.0\W2KSetup.exe
[2009.06.12 21:29:43 | 000,049,152 | ---- | C] () -- C:\WINDOWS.0\W2K_c38uinst.exe
[2009.06.12 21:29:43 | 000,004,249 | ---- | C] () -- C:\WINDOWS.0\mixerdef.ini
[2009.06.12 21:29:42 | 000,049,152 | ---- | C] () -- C:\WINDOWS.0\c38uinst.exe
[2009.06.12 21:29:05 | 000,000,392 | ---- | C] () -- C:\WINDOWS.0\CMISETUP.INI
[2009.06.12 21:28:58 | 000,000,026 | ---- | C] () -- C:\WINDOWS.0\CMCDPLAY.INI
[2009.06.12 21:22:26 | 000,009,378 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\nvxbar.sys
[2009.06.12 21:17:33 | 000,010,240 | ---- | C] () -- C:\WINDOWS.0\System32\vidx16.dll
[2009.06.12 19:06:52 | 000,004,249 | ---- | C] () -- C:\WINDOWS.0\ODBCINST.INI
[2009.06.12 19:05:40 | 000,646,696 | ---- | C] () -- C:\WINDOWS.0\System32\FNTCACHE.DAT
[2009.06.12 18:19:38 | 000,002,048 | --S- | C] () -- C:\WINDOWS.0\bootstat.dat
[2009.06.12 18:14:35 | 000,021,740 | ---- | C] () -- C:\WINDOWS.0\System32\emptyregdb.dat
[2009.04.30 22:02:00 | 002,116,894 | ---- | C] () -- C:\WINDOWS.0\System32\nvdata.bin
[2008.04.14 08:06:26 | 000,001,804 | ---- | C] () -- C:\WINDOWS.0\System32\Dcache.bin
[2006.12.31 08:57:08 | 000,004,569 | ---- | C] () -- C:\WINDOWS.0\System32\secupd.dat
[2003.02.20 17:53:42 | 000,005,702 | ---- | C] () -- C:\WINDOWS.0\System32\OUTLPERF.INI
[2003.01.17 04:10:34 | 000,188,416 | ---- | C] () -- C:\WINDOWS.0\System32\slextspk.dll
[2003.01.17 04:09:52 | 000,049,152 | ---- | C] () -- C:\WINDOWS.0\System32\coinst.dll
[2003.01.17 04:01:02 | 000,159,744 | ---- | C] () -- C:\WINDOWS.0\System32\SLGen.dll
[2003.01.17 03:47:52 | 000,024,576 | ---- | C] () -- C:\WINDOWS.0\slrundll.exe
[2001.09.04 11:12:28 | 013,107,200 | ---- | C] () -- C:\WINDOWS.0\System32\oembios.bin
[2001.09.04 11:10:20 | 000,004,518 | ---- | C] () -- C:\WINDOWS.0\System32\oembios.dat
[2001.08.18 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS.0\System32\mlang.dat
[2001.08.18 14:00:00 | 000,451,970 | ---- | C] () -- C:\WINDOWS.0\System32\perfh007.dat
[2001.08.18 14:00:00 | 000,435,260 | ---- | C] () -- C:\WINDOWS.0\System32\perfh009.dat
[2001.08.18 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS.0\System32\perfi009.dat
[2001.08.18 14:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS.0\System32\perfi007.dat
[2001.08.18 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS.0\System32\dssec.dat
[2001.08.18 14:00:00 | 000,080,928 | ---- | C] () -- C:\WINDOWS.0\System32\perfc007.dat
[2001.08.18 14:00:00 | 000,068,156 | ---- | C] () -- C:\WINDOWS.0\System32\perfc009.dat
[2001.08.18 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS.0\System32\mib.bin
[2001.08.18 14:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS.0\System32\perfd007.dat
[2001.08.18 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS.0\System32\perfd009.dat
[2001.08.18 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS.0\System32\noise.dat

< End of report >

[markusg]

bitte erstelle und poste ein combofix log.
Ein Leitfaden und Tutorium zur Nutzung von ComboFix