Firefox will beim Start Disc im Laufwerk

midnrambler

Hallo!

Ich habe folgendes komisches Verhalten von Firefox 5 und bin ziemlich ratlos:
Wenn ich in der laufenden Windows (Vista)-Sitzung noch keine CD/DVD im Laufwerk hatte, startet Firefox ganz normal, kein Problem. Wenn aber eine CD/DVD im Laufwerk ist oder auch war (wieder entnommen), bringt Firefox ab da beim Start jedesmal die Meldung "Es befindet sich kein Datenträger im Laufwerk. Legen Sie einen Datenträger in Laufwerk E: ein". E ist mein DVD/CD-Laufwerk. Diese Meldung ist nicht mehr wegzukriegen, außer man startet Windows neu und legt keine Disc ein. Dann geht's wieder solange gut bis man eine Disc einlegt. Ich hab schon in den Einstellungen alles versucht, mir ist nicht klar, was Firefox auf dem CD/DVD-Laufwerk will... Es gibt dort weder etwas abzuspeichern noch von dort zu laden. Kann mir jemand weiterhelfen?

Brummelchen

OTL und MBAM sind hier bevorzugte Prüflinge

OTL
► http://www.trojaner-board.de/85104-otl-otlogfile-oldtimer.html

Malwarebytes' Anti-Malware (MBAM)
► http://www.malwarebytes.org/
(Version 1.51.0.1800, Update >7400, Vollständigen Scan!)

Beide mit Admin-Rechten ausführen.
Die Logbücher bitte hier als CODE einfügen

midnrambler

Zitat von Brummelchen

OTL und MBAM sind hier bevorzugte Prüflinge
OTL
► http://www.trojaner-board.de/85104-otl-otlogfile-oldtimer.html
Malwarebytes' Anti-Malware (MBAM)
► http://www.malwarebytes.org/
(Version 1.51.0.1800, Update >7400, Vollständigen Scan!)
Beide mit Admin-Rechten ausführen.
Die Logbücher bitte hier als CODE einfügen

OK, hier sind die Scans. Glaub aber nicht, dass es von Malware kommt, wurde auch nichts gefunden. Das komische Verhalten war übrigens da, als ich FF 5.0 installiert hatte, bei älteren Versionen ist es mir nie aufgefallen.

OTL:

Code

OTL logfile created on: 14.08.2011 19:07:18 - Run 3
OTL by OldTimer - Version 3.2.26.2     Folder = C:\Users\Kurt Kleiner\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,50 Gb Total Physical Memory | 2,19 Gb Available Physical Memory | 62,67% Memory free
7,21 Gb Paging File | 5,95 Gb Available in Paging File | 82,56% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 285,46 Gb Total Space | 177,08 Gb Free Space | 62,03% Space Free | Partition Type: NTFS
Drive D: | 10,00 Gb Total Space | 3,59 Gb Free Space | 35,89% Space Free | Partition Type: NTFS
 
Computer Name: PC-NOTEBOOK | User Name: Kurt Kleiner | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
[color=#E56717]========== Processes (SafeList) ==========[/color]
 
PRC - [2011.08.14 17:28:12 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Kurt Kleiner\Desktop\OTL.exe
PRC - [2011.08.13 16:22:49 | 012,597,912 | ---- | M] (Mozilla Messaging) -- C:\Program Files\Mozilla Thunderbird 3\thunderbird.exe
PRC - [2011.07.21 16:47:04 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.07.06 19:52:38 | 001,047,656 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2011.07.06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011.06.24 11:07:09 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.04.21 07:53:10 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.04.21 07:52:51 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2011.03.29 18:32:09 | 000,399,736 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
PRC - [2009.05.14 17:06:17 | 000,122,512 | ---- | M] (B.H.A Corporation) -- C:\Windows\System32\bgsvcgen.exe
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2007.03.28 20:47:34 | 000,021,504 | ---- | M] (UPEK Inc.) -- C:\Program Files\Protector Suite QL\upeksvr.exe
PRC - [2007.03.21 14:00:04 | 000,355,096 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2003.02.04 10:00:00 | 002,080,768 | ---- | M] (IDM Computer Solutions, Inc.) -- C:\Program Files\UltraEdit\uedit32.exe
 
 
[color=#E56717]========== Modules (SafeList) ==========[/color]
 
MOD - [2011.08.14 17:28:12 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Kurt Kleiner\Desktop\OTL.exe
MOD - [2011.08.13 16:22:49 | 012,597,912 | ---- | M] (Mozilla Messaging) -- C:\Program Files\Mozilla Thunderbird 3\thunderbird.exe
MOD - [2011.08.13 16:22:49 | 000,409,752 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\xpcom_core.dll
MOD - [2011.08.13 16:22:49 | 000,018,584 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\xpcom.dll
MOD - [2011.08.13 16:22:48 | 000,504,984 | ---- | M] (sqlite.org) -- C:\Program Files\Mozilla Thunderbird 3\sqlite3.dll
MOD - [2011.08.13 16:22:48 | 000,166,040 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\softokn3.dll
MOD - [2011.08.13 16:22:48 | 000,141,464 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\ssl3.dll
MOD - [2011.08.13 16:22:48 | 000,104,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\smime3.dll
MOD - [2011.08.13 16:22:47 | 000,719,000 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\mozcrt19.dll
MOD - [2011.08.13 16:22:47 | 000,719,000 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\mozcpp19.dll
MOD - [2011.08.13 16:22:47 | 000,645,272 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\nss3.dll
MOD - [2011.08.13 16:22:47 | 000,342,168 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\nssckbi.dll
MOD - [2011.08.13 16:22:47 | 000,174,232 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\nspr4.dll
MOD - [2011.08.13 16:22:47 | 000,161,944 | ---- | M] () -- C:\Program Files\Mozilla Thunderbird 3\nsldap32v60.dll
MOD - [2011.08.13 16:22:47 | 000,104,600 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\nssdbm3.dll
MOD - [2011.08.13 16:22:47 | 000,088,216 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\nssutil3.dll
MOD - [2011.08.13 16:22:47 | 000,021,656 | ---- | M] () -- C:\Program Files\Mozilla Thunderbird 3\nsldappr32v60.dll
MOD - [2011.08.13 16:22:47 | 000,021,144 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\plc4.dll
MOD - [2011.08.13 16:22:47 | 000,018,072 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\plds4.dll
MOD - [2011.08.13 16:22:46 | 000,849,048 | ---- | M] () -- C:\Program Files\Mozilla Thunderbird 3\js3250.dll
MOD - [2011.08.13 16:22:46 | 000,268,440 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Thunderbird 3\freebl3.dll
MOD - [2011.07.22 04:45:41 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
MOD - [2011.07.07 19:53:05 | 006,271,648 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
MOD - [2011.07.06 19:52:40 | 002,224,176 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamnet.dll
MOD - [2011.07.06 19:52:40 | 000,521,264 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamcore.dll
MOD - [2011.07.06 19:52:40 | 000,174,128 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.dll
MOD - [2011.07.06 19:52:40 | 000,079,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
MOD - [2011.07.06 19:52:38 | 001,047,656 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
MOD - [2011.06.24 11:07:09 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
MOD - [2011.06.24 11:07:09 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\components\browsercomps.dll
MOD - [2011.06.24 11:07:08 | 001,850,328 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2011.06.24 11:07:08 | 000,719,832 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozcpp19.dll
MOD - [2011.06.24 11:07:08 | 000,715,736 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozcrt19.dll
MOD - [2011.06.24 11:07:08 | 000,269,272 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\freebl3.dll
MOD - [2011.06.24 11:07:08 | 000,015,832 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\mozalloc.dll
MOD - [2011.06.24 11:07:07 | 014,232,536 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\xul.dll
MOD - [2011.06.24 11:07:07 | 000,781,272 | ---- | M] (sqlite.org) -- C:\Program Files\Mozilla Firefox\mozsqlite3.dll
MOD - [2011.06.24 11:07:07 | 000,646,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nss3.dll
MOD - [2011.06.24 11:07:07 | 000,343,000 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssckbi.dll
MOD - [2011.06.24 11:07:07 | 000,203,736 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nspr4.dll
MOD - [2011.06.24 11:07:07 | 000,166,872 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\softokn3.dll
MOD - [2011.06.24 11:07:07 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\ssl3.dll
MOD - [2011.06.24 11:07:07 | 000,105,432 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\smime3.dll
MOD - [2011.06.24 11:07:07 | 000,105,432 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssdbm3.dll
MOD - [2011.06.24 11:07:07 | 000,089,048 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\nssutil3.dll
MOD - [2011.06.24 11:07:07 | 000,021,976 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\plc4.dll
MOD - [2011.06.24 11:07:07 | 000,019,416 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\xpcom.dll
MOD - [2011.06.24 11:07:07 | 000,018,904 | ---- | M] (Mozilla Foundation) -- C:\Program Files\Mozilla Firefox\plds4.dll
MOD - [2011.06.16 19:14:02 | 000,063,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.mfcloc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_49768ef57548175e\MFC90DEU.DLL
MOD - [2011.06.16 19:13:53 | 003,781,960 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.mfc_1fc8b3b9a1e18e3b_9.0.30729.6161_none_4bf7e3e2bf9ada4c\mfc90u.dll
MOD - [2011.06.16 19:13:43 | 000,653,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcr90.dll
MOD - [2011.06.16 19:13:43 | 000,569,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.6161_none_50934f2ebcb7eb57\msvcp90.dll
MOD - [2011.06.16 19:10:40 | 000,632,656 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.6195_none_d09154e044272b9a\msvcr80.dll
MOD - [2011.06.01 10:16:54 | 000,496,976 | ---- | M] (vbAccelerator) -- C:\Program Files\Malwarebytes' Anti-Malware\vbalsgrid6.ocx
MOD - [2011.06.01 10:16:54 | 000,046,416 | ---- | M] (vbAccelerator) -- C:\Program Files\Malwarebytes' Anti-Malware\ssubtmr6.dll
MOD - [2011.04.21 07:52:52 | 000,086,376 | ---- | M] (Avira GmbH) -- C:\Program Files\Avira\AntiVir Desktop\shlext.dll
MOD - [2011.03.29 18:32:09 | 000,399,736 | ---- | M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe
MOD - [2011.03.03 17:40:04 | 002,159,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\AppPatch\AcGenral.dll
MOD - [2011.02.22 15:33:12 | 001,068,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\DWrite.dll
MOD - [2011.02.10 18:47:18 | 000,606,208 | ---- | M] () -- C:\Windows\System32\pngom9sp.dll
MOD - [2011.01.20 18:08:16 | 000,478,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
MOD - [2011.01.20 18:08:06 | 001,029,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
MOD - [2011.01.20 18:08:06 | 000,219,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
MOD - [2011.01.20 18:08:06 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
MOD - [2011.01.20 18:08:06 | 000,160,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
MOD - [2011.01.20 15:47:51 | 000,683,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d2d1.dll
MOD - [2010.11.04 20:55:38 | 000,352,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
MOD - [2010.11.04 20:51:35 | 001,748,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.18342_none_9e54f8aaca13c773\GdiPlus.dll
MOD - [2010.10.17 01:55:00 | 005,473,896 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll
MOD - [2010.10.17 01:55:00 | 001,719,912 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvapi.dll
MOD - [2010.08.31 17:43:52 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll
MOD - [2010.08.31 17:43:52 | 000,531,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.6002.18305_none_88f3a38569c2c436\comctl32.dll
MOD - [2010.08.26 18:37:45 | 000,157,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
MOD - [2010.06.20 04:21:58 | 000,214,016 | ---- | M] (Mozilla Foundation) -- C:\Users\Kurt Kleiner\AppData\Roaming\Thunderbird\Profiles\vpj7dtyd.default\extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}\components\calbscmp.dll
MOD - [2010.06.18 19:31:29 | 000,036,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
MOD - [2010.04.05 19:01:01 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
MOD - [2009.12.09 17:31:34 | 000,020,992 | ---- | M] () -- C:\Users\Kurt Kleiner\AppData\Roaming\Thunderbird\Profiles\vpj7dtyd.default\extensions\{de1b245c-de57-11da-ba2d-0050c2490048}\library\WINNT-32\MinimizeToTrayPlus.dll
MOD - [2009.10.23 19:10:19 | 000,714,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
MOD - [2009.10.17 23:00:00 | 000,088,064 | ---- | M] (Romain Petges) -- C:\Program Files\Romain's Software\Attribute Changer\acshell.dll
MOD - [2009.10.01 03:02:04 | 000,334,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
MOD - [2009.10.01 03:01:59 | 000,160,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceTypes.dll
MOD - [2009.08.16 18:06:02 | 000,141,312 | ---- | M] () -- C:\Program Files\Winrar\RarExt.dll
MOD - [2009.07.11 21:01:41 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanapi.dll
MOD - [2009.04.11 08:28:26 | 000,223,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscntfy.dll
MOD - [2009.04.11 08:28:26 | 000,033,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
MOD - [2009.04.11 08:28:25 | 000,250,368 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wevtapi.dll
MOD - [2009.04.11 08:28:25 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WinSCard.dll
MOD - [2009.04.11 08:28:25 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemsvc.dll
MOD - [2009.04.11 08:28:25 | 000,030,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\wbemprox.dll
MOD - [2009.04.11 08:28:24 | 002,205,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
MOD - [2009.04.11 08:28:24 | 000,301,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
MOD - [2009.04.11 08:28:23 | 001,823,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
MOD - [2009.04.11 08:28:23 | 001,541,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\onex.dll
MOD - [2009.04.11 08:28:23 | 000,286,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasapi32.dll
MOD - [2009.04.11 08:28:23 | 000,098,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\powrprof.dll
MOD - [2009.04.11 08:28:22 | 000,744,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\spool\drivers\w32x86\3\unidrvui.dll
MOD - [2009.04.11 08:28:22 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
MOD - [2009.04.11 08:28:22 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msutb.dll
MOD - [2009.04.11 08:28:20 | 002,012,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\milcore.dll
MOD - [2009.04.11 08:28:20 | 000,391,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
MOD - [2009.04.11 08:28:20 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
MOD - [2009.04.11 08:28:20 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IPHLPAPI.DLL
MOD - [2009.04.11 08:28:20 | 000,019,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MsCtfMonitor.dll
MOD - [2009.04.11 08:28:19 | 000,614,912 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbem\fastprox.dll
MOD - [2009.04.11 08:28:19 | 000,595,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
MOD - [2009.04.11 08:28:19 | 000,444,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dsound.dll
MOD - [2009.04.11 08:28:19 | 000,153,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fundisc.dll
MOD - [2009.04.11 08:28:19 | 000,135,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappcfg.dll
MOD - [2009.04.11 08:28:19 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\gpapi.dll
MOD - [2009.04.11 08:28:19 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\feclient.dll
MOD - [2009.04.11 08:28:19 | 000,024,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\fdProxy.dll
MOD - [2009.04.11 08:28:19 | 000,020,992 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
MOD - [2009.04.11 08:28:18 | 001,788,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
MOD - [2009.04.11 08:28:18 | 001,112,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
MOD - [2009.04.11 08:28:18 | 000,323,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\certcli.dll
MOD - [2009.04.11 08:28:18 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
MOD - [2009.04.11 08:28:18 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
MOD - [2009.04.11 08:28:18 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
MOD - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
MOD - [2009.04.11 08:27:12 | 000,640,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
MOD - [2009.04.01 17:50:30 | 000,131,072 | ---- | M] (Scooter Software) -- C:\Program Files\Beyond Compare 3\BCShellEx.dll
MOD - [2009.02.03 09:09:46 | 000,069,632 | ---- | M] (Igor Pavlov) -- C:\Program Files\7-Zip\7-zip.dll
MOD - [2008.05.02 06:15:37 | 000,010,240 | ---- | M] () -- C:\Program Files\Unlocker\UnlockerCOM.dll
MOD - [2008.01.21 04:25:18 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\HotStartUserAgent.dll
MOD - [2008.01.21 04:25:01 | 000,183,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\duser.dll
MOD - [2008.01.21 04:24:56 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
MOD - [2008.01.21 04:24:54 | 000,397,312 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AudioEng.dll
MOD - [2008.01.21 04:24:54 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mlang.dll
MOD - [2008.01.21 04:24:54 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cabinet.dll
MOD - [2008.01.21 04:24:54 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\avrt.dll
MOD - [2008.01.21 04:24:53 | 000,071,680 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msacm32.dll
MOD - [2008.01.21 04:24:48 | 000,140,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winsta.dll
MOD - [2008.01.21 04:24:47 | 000,403,968 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\FirewallAPI.dll
MOD - [2008.01.21 04:24:47 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winnsi.dll
MOD - [2008.01.21 04:24:46 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\eappprxy.dll
MOD - [2008.01.21 04:24:46 | 000,026,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wtsapi32.dll
MOD - [2008.01.21 04:24:44 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
MOD - [2008.01.21 04:24:42 | 000,127,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\aclui.dll
MOD - [2008.01.21 04:24:41 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\oledlg.dll
MOD - [2008.01.21 04:24:41 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\cryptdll.dll
MOD - [2008.01.21 04:24:30 | 000,289,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hnetcfg.dll
MOD - [2008.01.21 04:24:29 | 000,017,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\PlaySndSrv.dll
MOD - [2008.01.21 04:24:28 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\icm32.dll
MOD - [2008.01.21 04:24:25 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\QUTIL.DLL
MOD - [2008.01.21 04:24:13 | 000,376,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\sxs.dll
MOD - [2008.01.21 04:24:11 | 001,386,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msvbvm60.dll
MOD - [2008.01.21 04:24:11 | 000,071,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasman.dll
MOD - [2008.01.21 04:24:04 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WSHTCPIP.DLL
MOD - [2008.01.21 04:24:04 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wship6.dll
MOD - [2008.01.21 04:24:03 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\upnp.dll
MOD - [2008.01.21 04:23:54 | 000,798,208 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dbghelp.dll
MOD - [2008.01.21 04:23:53 | 000,357,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
MOD - [2008.01.21 04:23:50 | 000,035,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dimsjob.dll
MOD - [2008.01.21 04:23:45 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wsock32.dll
MOD - [2008.01.21 04:23:39 | 001,298,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TMM.dll
MOD - [2007.03.28 20:59:10 | 002,953,216 | ---- | M] (UPEK Inc.) -- C:\Program Files\Protector Suite QL\farchns.dll
MOD - [2007.03.28 20:14:34 | 000,296,960 | ---- | M] (UPEK Inc.) -- C:\Program Files\Protector Suite QL\infra.dll
MOD - [2006.11.03 17:50:10 | 000,184,320 | ---- | M] (Broadcom Corporation.) -- C:\Windows\System32\BTNCopy.dll
MOD - [2006.11.02 14:34:50 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\AltTab.dll
MOD - [2006.11.02 14:34:33 | 000,009,728 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IconCodecService.dll
MOD - [2006.11.02 11:46:14 | 000,008,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wlanutil.dll
MOD - [2006.11.02 11:46:13 | 000,869,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\winbrand.dll
MOD - [2006.11.02 11:46:13 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\tapi32.dll
MOD - [2006.11.02 11:46:13 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
MOD - [2006.11.02 11:46:13 | 000,037,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ssdpapi.dll
MOD - [2006.11.02 11:46:13 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\TSChannel.dll
MOD - [2006.11.02 11:46:13 | 000,007,168 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\shfolder.dll
MOD - [2006.11.02 11:46:12 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pautoenr.dll
MOD - [2006.11.02 11:46:12 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\npmproxy.dll
MOD - [2006.11.02 11:46:12 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\rasadhlp.dll
MOD - [2006.11.02 11:46:05 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\hid.dll
MOD - [2006.11.02 11:46:05 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ksuser.dll
MOD - [2006.11.02 11:46:03 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d8thk.dll
MOD - [2006.11.02 11:46:02 | 000,737,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\batmeter.dll
MOD - [2003.02.04 10:00:00 | 002,080,768 | ---- | M] (IDM Computer Solutions, Inc.) -- C:\Program Files\UltraEdit\uedit32.exe
MOD - [2003.02.04 10:00:00 | 000,520,192 | ---- | M] (WeOnlyDo! COM) -- C:\Program Files\UltraEdit\SftpDLL.dll
MOD - [2003.02.04 10:00:00 | 000,113,664 | ---- | M] (Wintertree Software Inc.) -- C:\Program Files\UltraEdit\SSCE4332.DLL
MOD - [2003.02.04 10:00:00 | 000,018,944 | ---- | M] () -- C:\Program Files\UltraEdit\ue32ctmn.dll
MOD - [2000.10.02 10:27:50 | 000,125,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\vb6de.dll
 
 
[color=#E56717]========== Win32 Services (SafeList) ==========[/color]
 
SRV - File not found [Disabled | Stopped] --  -- (NMIndexingService)
SRV - [2011.07.21 16:47:04 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.07.06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011.04.21 07:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010.05.04 13:07:22 | 000,503,080 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2009.05.14 17:06:17 | 000,122,512 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\Windows\System32\bgsvcgen.exe -- (bgsvcgen)
SRV - [2009.03.25 17:35:11 | 000,016,680 | ---- | M] (Citrix Online, a division of Citrix Systems, Inc.) [Disabled | Stopped] -- C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe -- (GoToAssist)
SRV - [2008.01.21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.12.03 06:27:54 | 000,073,728 | ---- | M] (Andrea Electronics Corporation) [Disabled | Stopped] -- C:\Windows\System32\AEstSrv.exe -- (AESTFilters)
SRV - [2007.03.21 14:00:04 | 000,355,096 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
 
 
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
 
DRV - [2011.07.21 16:47:06 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.07.21 16:47:06 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.07.06 19:52:42 | 000,022,712 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.03.29 20:36:08 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2010.10.17 01:55:00 | 010,084,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2010.02.24 12:22:10 | 000,185,472 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\acedrv11.sys -- (acedrv11)
DRV - [2009.12.19 20:22:01 | 000,104,512 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2009.12.08 20:19:22 | 000,113,664 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2009.12.07 19:53:18 | 000,103,168 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009.11.04 16:14:38 | 000,560,448 | ---- | M] (DiBcom SA) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\mod7700.sys -- (mod7700)
DRV - [2009.11.04 16:14:38 | 000,020,032 | ---- | M] (DiBcom S.A.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\modrc.sys -- (MODRC)
DRV - [2009.10.23 16:03:02 | 000,721,904 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2009.10.12 15:22:56 | 000,101,120 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009.10.08 17:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.10.05 19:13:17 | 000,281,504 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2009.10.05 19:13:15 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009.08.08 11:23:54 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2009.05.14 17:06:17 | 000,033,408 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\CDRBSDRV.SYS -- (cdrbsdrv)
DRV - [2008.12.18 12:48:24 | 000,018,424 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\bcm42rly.sys -- (BCM42RLY)
DRV - [2008.12.07 13:44:54 | 000,030,088 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs)
DRV - [2008.10.23 07:45:58 | 000,038,400 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2008.10.23 07:45:56 | 000,046,592 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2008.10.23 07:45:54 | 000,043,008 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2008.03.04 07:05:34 | 000,007,424 | ---- | M] (EyePower Games Pte. Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\OEM02Vfx.sys -- (OEM02Vfx)
DRV - [2008.03.04 07:05:18 | 000,235,648 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\OEM02Dev.sys -- (OEM02Dev)
DRV - [2008.02.15 18:27:02 | 000,330,752 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2008.01.25 07:42:14 | 000,164,400 | ---- | M] (Alps Electric Co., Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Apfiltr.sys -- (ApfiltrService)
DRV - [2008.01.21 04:23:25 | 000,251,904 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VSTBS23.SYS -- (VSTHWBS2)
DRV - [2008.01.21 04:23:25 | 000,220,672 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R)
DRV - [2007.09.11 15:20:00 | 000,087,296 | ---- | M] (e3C, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\EC168BDA.sys -- (EC168BDA)
DRV - [2007.09.07 11:27:32 | 000,209,408 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ianvstor.sys -- (iaNvStor) Intel(R)
DRV - [2007.05.02 11:11:18 | 000,109,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdm.sys -- (ss_mdm)
DRV - [2007.05.02 11:11:18 | 000,015,112 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_mdfl.sys -- (ss_mdfl)
DRV - [2007.05.02 11:11:16 | 000,083,592 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ss_bus.sys -- (ss_bus) SAMSUNG Mobile USB Device 1.0 driver (WDM)
DRV - [2007.01.11 20:15:26 | 000,028,048 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2007.01.11 20:15:16 | 000,032,528 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2007.01.11 20:15:06 | 000,032,272 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2006.11.02 09:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2004.08.09 13:33:26 | 000,114,016 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.08.09 13:29:28 | 000,053,920 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2004.07.19 16:49:54 | 000,007,040 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2003.12.01 17:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp01.sys -- (sfhlp01)
 
 
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== Internet Explorer ==========[/color]
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
[color=#E56717]========== FireFox ==========[/color]
 
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "about:blank"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {3d7eb24f-2740-49df-8937-200b1cc08f8a}:1.5.14.2
FF - prefs.js..extensions.enabledItems: {04514a2c-a3ab-4f47-8688-55f911b0fe75}:0.4.1
FF - prefs.js..network.proxy.http: "74.231.24.11"
FF - prefs.js..network.proxy.http_port: 80
FF - prefs.js..network.proxy.socks_version: 0
FF - prefs.js..network.proxy.type: 0
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nosltd.com/getPlus+(R),version=1.6.2.91:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=7:  File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.06.24 11:07:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.05.14 12:52:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.12\extensions\\Components: C:\Program Files\Mozilla Thunderbird 3\components [2011.08.13 16:22:49 | 000,000,000 | ---D | M]
 
[2009.06.13 19:52:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Extensions
[2009.06.13 19:52:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011.08.13 10:34:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Firefox\Profiles\z0p6zvjs.default\extensions
[2011.03.22 18:23:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Firefox\Profiles\z0p6zvjs.default\extensions\nostmp
[2011.05.05 20:38:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Firefox\Profiles\z0p6zvjs.default - Kopie\extensions
[2011.04.02 20:30:10 | 000,000,000 | ---D | M] (Delete Bookmark Icons) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Firefox\Profiles\z0p6zvjs.default - Kopie\extensions\{04514a2c-a3ab-4f47-8688-55f911b0fe75}
[2011.04.02 20:30:10 | 000,000,000 | ---D | M] (Flashblock) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Firefox\Profiles\z0p6zvjs.default - Kopie\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2011.05.05 20:38:15 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Firefox\Profiles\z0p6zvjs.default - Kopie\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.04.02 20:30:11 | 000,000,000 | ---D | M] (MinimizeToTray Plus) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Firefox\Profiles\z0p6zvjs.default - Kopie\extensions\{de1b245c-de57-11da-ba2d-0050c2490048}
[2011.04.02 20:30:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Kurt Kleiner\AppData\Roaming\mozilla\Firefox\Profiles\z0p6zvjs.default - Kopie\extensions\nostmp
[2011.05.14 12:52:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2011.05.14 12:52:10 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
File not found (No name found) -- 
() (No name found) -- C:\USERS\KURT KLEINER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Z0P6ZVJS.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\USERS\KURT KLEINER\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\Z0P6ZVJS.DEFAULT\EXTENSIONS\LDSI_PLASHCOR@GMAIL.COM.XPI
[2011.06.24 11:07:09 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.05.14 12:51:59 | 000,423,656 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2010.01.01 10:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 10:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2010.01.01 10:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2010.01.01 10:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.01.01 10:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.01.01 10:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\ShellBrowser: (TerraTec Home Cinema) - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
O3 - HKCU\..\Toolbar\WebBrowser: (TerraTec Home Cinema) - {AD6E6555-FB2C-47D4-8339-3E2965509877} - C:\Program Files\TerraTec\TerraTec Home Cinema\ThcDeskBand.dll (TerraTec Electronic GmbH)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: NoInternetOpenWith = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoStrCmpLogical = 0
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Filter\AutorunsDisabled - No CLSID value found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: GinaDLL - (vrlogon.dll) - C:\Windows\System32\vrlogon.dll (UPEK Inc.)
O20 - Winlogon\Notify\GoToAssist: DllName - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll - C:\Program Files\Citrix\GoToAssist\514\g2awinlogon.dll (Citrix Online, a division of Citrix Systems, Inc.)
O20 - Winlogon\Notify\psfus: DllName - C:\Windows\system32\psqlpwd.dll - C:\Windows\System32\psqlpwd.dll (UPEK Inc.)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{1b5fe92e-210c-11de-9a20-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{1b5fe92e-210c-11de-9a20-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{1b5fe930-210c-11de-9a20-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{1b5fe930-210c-11de-9a20-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3d93571e-a6a6-11df-94fe-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{3d93571e-a6a6-11df-94fe-00234efd9922}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3d93572b-a6a6-11df-94fe-001e101f82a7}\Shell - "" = AutoRun
O33 - MountPoints2\{3d93572b-a6a6-11df-94fe-001e101f82a7}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3d935753-a6a6-11df-94fe-001e101f4679}\Shell - "" = AutoRun
O33 - MountPoints2\{3d935753-a6a6-11df-94fe-001e101f4679}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3d93575e-a6a6-11df-94fe-001e101f4e71}\Shell - "" = AutoRun
O33 - MountPoints2\{3d93575e-a6a6-11df-94fe-001e101f4e71}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{79022e9c-2128-11de-b4a4-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{79022e9c-2128-11de-b4a4-00234efd9922}\Shell\AutoRun\command - "" = F:\EasySuite.exe
O33 - MountPoints2\{79022ea7-2128-11de-b4a4-00234efd9922}\Shell\AutoRun\command - "" = F:\Menu.exe
O33 - MountPoints2\{79022ec8-2128-11de-b4a4-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{79022ec8-2128-11de-b4a4-00234efd9922}\Shell\AutoRun\command - "" = F:\EasySuite.exe
O33 - MountPoints2\{93b27bf9-2056-11df-a06c-0023ae0f1245}\Shell - "" = AutoRun
O33 - MountPoints2\{93b27bf9-2056-11df-a06c-0023ae0f1245}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{bda4bee6-2156-11de-bac4-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{bda4bee6-2156-11de-bac4-00234efd9922}\Shell\AutoRun\command - "" = F:\EasySuite.exe
O33 - MountPoints2\{d896d39c-4867-11de-815b-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{d896d39c-4867-11de-815b-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{e9e61e04-2109-11de-86f5-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{e9e61e04-2109-11de-86f5-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{e9e61e38-2109-11de-86f5-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{e9e61e38-2109-11de-86f5-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]
 
[2011.08.14 17:29:52 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Users\Kurt Kleiner\Desktop\OTL.exe
[2011.08.13 18:10:28 | 000,000,000 | ---D | C] -- C:\Users\Kurt Kleiner\AppData\Roaming\TuneUp Software
[2011.08.13 18:09:20 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2011.08.13 18:09:11 | 000,000,000 | -HSD | C] -- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2011.08.11 22:07:55 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.08.11 22:07:54 | 001,797,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.08.11 22:07:54 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.08.11 22:07:54 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.08.11 22:07:53 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.08.11 22:07:52 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.08.11 17:49:54 | 000,375,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2011.08.11 17:49:32 | 003,602,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2011.08.11 17:49:32 | 003,550,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2011.07.21 19:50:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
[2011.07.17 23:17:44 | 000,000,000 | -HSD | C] -- C:\$RECYCLE.BIN
[2011.07.17 21:51:36 | 000,000,000 | RH-D | C] -- C:\S-1-5-21-48523281-4015312947-2980840472-1000
[2011.07.17 21:43:27 | 000,000,000 | ---D | C] -- C:\Users\Kurt Kleiner\AppData\Roaming\Avira
[2011.07.17 21:36:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2011.07.17 21:36:33 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2011.07.17 21:36:30 | 000,138,192 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2011.07.17 21:36:30 | 000,066,616 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2011.07.17 21:36:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011.07.17 21:36:29 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2011.07.17 20:50:06 | 000,000,000 | ---D | C] -- C:\Users\Kurt Kleiner\AppData\Roaming\Malwarebytes
[2011.07.17 20:49:58 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.07.17 20:49:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.07.17 20:49:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.07.17 20:49:55 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.07.17 20:49:55 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.07.17 17:49:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot
[2011.07.17 17:49:09 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
 
[2011.08.14 19:02:25 | 000,017,489 | ---- | M] () -- C:\Windows\uedit32.INI
[2011.08.14 17:39:04 | 000,032,536 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2011.08.14 17:39:04 | 000,032,536 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011.08.14 17:39:01 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.08.14 17:39:01 | 000,003,744 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.08.14 17:38:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.08.14 17:38:53 | 3756,064,768 | -HS- | M] () -- C:\hiberfil.sys
[2011.08.14 17:38:10 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2011.08.14 17:28:12 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Users\Kurt Kleiner\Desktop\OTL.exe
[2011.08.13 13:35:06 | 005,770,278 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.08.13 13:35:06 | 005,069,292 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.08.13 13:35:05 | 016,967,756 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.08.13 13:35:04 | 005,575,766 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.08.11 20:36:10 | 000,010,994 | ---- | M] () -- C:\Windows\System32\EPPICResdb0001
[2011.08.11 20:36:10 | 000,000,217 | ---- | M] () -- C:\Windows\System32\EPPICResdb
[2011.08.06 21:36:52 | 000,000,314 | ---- | M] () -- C:\Users\Kurt Kleiner\AppData\Roaming\DBATL2008.ini
[2011.08.02 18:59:52 | 000,000,028 | ---- | M] () -- C:\Windows\ODBC.INI
[2011.07.22 04:54:43 | 001,797,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2011.07.22 04:47:24 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.07.22 04:46:48 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.07.22 04:45:41 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.07.22 04:44:36 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.07.22 04:43:07 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.07.21 16:47:06 | 000,138,192 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2011.07.21 16:47:06 | 000,066,616 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2011.07.17 21:00:46 | 000,001,905 | ---- | M] () -- C:\Windows\diagwrn.xml
[2011.07.17 21:00:46 | 000,001,905 | ---- | M] () -- C:\Windows\diagerr.xml
[2011.07.17 17:40:24 | 000,101,720 | ---- | M] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys
[3 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
[color=#E56717]========== Files Created - No Company Name ==========[/color]
 
[2011.07.17 20:59:49 | 000,001,905 | ---- | C] () -- C:\Windows\diagwrn.xml
[2011.07.17 20:59:49 | 000,001,905 | ---- | C] () -- C:\Windows\diagerr.xml
[2011.06.05 23:17:57 | 000,000,100 | ---- | C] () -- C:\Users\Kurt Kleiner\AppData\Local\fusioncache.dat
[2011.03.04 13:32:27 | 000,000,003 | ---- | C] () -- C:\Windows\treeskp.sys
[2011.03.04 13:32:27 | 000,000,003 | ---- | C] () -- C:\Windows\sbacknt.bin
[2011.02.10 18:47:18 | 000,606,208 | ---- | C] () -- C:\Windows\System32\pngom9sp.dll
[2010.08.13 10:29:48 | 000,000,261 | ---- | C] () -- C:\Windows\mp3merger.ini
[2010.05.29 11:41:44 | 000,175,104 | ---- | C] () -- C:\Windows\MM_Bahn_V3_Uninstall.exe
[2010.04.01 15:09:51 | 000,000,071 | ---- | C] () -- C:\Windows\PrintCD.INI
[2010.01.14 18:41:08 | 000,000,125 | -HS- | C] () -- C:\ProgramData\.zreglib
[2009.10.21 04:39:00 | 000,000,050 | ---- | C] () -- C:\Windows\MegaManager.INI
[2009.10.05 19:13:17 | 000,281,504 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2009.10.05 19:13:15 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2009.09.24 19:01:46 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.09.24 19:01:46 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009.08.21 17:01:44 | 000,111,932 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
[2009.08.21 17:01:44 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
[2009.08.21 17:01:44 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
[2009.08.21 17:01:44 | 000,026,154 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
[2009.08.21 17:01:44 | 000,024,903 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
[2009.08.21 17:01:44 | 000,021,390 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
[2009.08.21 17:01:44 | 000,020,148 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
[2009.08.21 17:01:44 | 000,011,811 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
[2009.08.21 17:01:44 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
[2009.08.21 17:01:44 | 000,001,146 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_DU.dat
[2009.08.21 17:01:44 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
[2009.08.21 17:01:44 | 000,001,139 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
[2009.08.21 17:01:44 | 000,001,136 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
[2009.08.21 17:01:44 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
[2009.08.21 17:01:44 | 000,001,129 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
[2009.08.21 17:01:44 | 000,001,120 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_IT.dat
[2009.08.21 17:01:44 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2009.08.21 17:01:44 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2009.08.21 17:01:44 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2009.08.08 11:13:44 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys
[2009.08.03 15:07:42 | 000,403,816 | ---- | C] () -- C:\Windows\System32\OGACheckControl.dll
[2009.08.03 15:07:42 | 000,230,768 | ---- | C] () -- C:\Windows\System32\OGAEXEC.exe
[2009.05.27 15:31:04 | 000,000,028 | ---- | C] () -- C:\Windows\ODBC.INI
[2009.04.29 17:21:38 | 000,007,109 | ---- | C] () -- C:\Windows\System32\drivers\EC168BDA.bin
[2009.04.29 17:21:38 | 000,000,128 | ---- | C] () -- C:\Windows\System32\drivers\EEPROM.bin
[2009.04.29 17:21:38 | 000,000,104 | ---- | C] () -- C:\Windows\System32\drivers\EC168Hid.dat
[2009.04.23 22:29:28 | 000,069,632 | R--- | C] () -- C:\Windows\System32\xmltok.dll
[2009.04.23 22:29:28 | 000,036,864 | R--- | C] () -- C:\Windows\System32\xmlparse.dll
[2009.04.04 22:32:12 | 000,000,314 | ---- | C] () -- C:\Users\Kurt Kleiner\AppData\Roaming\DBATL2008.ini
[2009.04.04 17:12:58 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI
[2009.04.02 19:27:18 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009.03.31 20:11:40 | 000,000,000 | ---- | C] () -- C:\Windows\Irremote.ini
[2009.03.31 19:00:30 | 000,000,186 | ---- | C] () -- C:\Windows\WININIT.INI
[2009.03.31 17:36:05 | 000,017,489 | ---- | C] () -- C:\Windows\uedit32.INI
[2009.03.30 16:56:18 | 000,032,536 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.03.30 16:56:12 | 000,032,536 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.03.26 01:43:53 | 000,167,936 | ---- | C] () -- C:\Windows\System32\nvccoin.dll
[2009.03.26 01:40:07 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009.03.25 17:51:55 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2009.03.25 17:16:27 | 000,006,656 | ---- | C] () -- C:\Windows\System32\bcmwlrc.dll
[2009.03.25 17:16:26 | 000,054,784 | ---- | C] () -- C:\Windows\System32\bcmwlrmt.dll
[2009.03.25 17:16:26 | 000,026,112 | ---- | C] () -- C:\Windows\System32\WLTRYSVC.EXE
[2009.03.25 17:11:13 | 000,000,074 | RHS- | C] () -- C:\Windows\CT4CET.bin
[2008.12.07 13:44:54 | 000,030,088 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys
[2008.02.06 08:51:36 | 000,000,000 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat
[2008.01.21 09:15:58 | 016,967,756 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.01.21 09:15:58 | 005,575,766 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.01.21 09:15:58 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.01.21 09:15:58 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2007.07.23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2007.07.23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2007.07.23 09:03:32 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2007.07.23 09:03:30 | 000,053,248 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2006.11.03 18:25:56 | 000,389,120 | ---- | C] () -- C:\Windows\System32\btwhidcs.dll
[2006.11.02 14:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 14:47:37 | 000,938,832 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 12:33:01 | 005,770,278 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 12:33:01 | 005,069,292 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 12:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 12:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 12:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006.11.02 12:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 10:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 10:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 09:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2005.02.04 05:59:48 | 000,118,784 | ---- | C] () -- C:\Windows\System32\metaflac.exe
[2005.02.04 05:59:44 | 000,217,088 | ---- | C] () -- C:\Windows\System32\flac.exe
[2001.11.14 13:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll
 
< End of report >

Alles anzeigen

midnrambler

MBAM:

Code

Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org


Datenbank Version: 7465


Windows 6.0.6002 Service Pack 2
Internet Explorer 9.0.8112.16421


14.08.2011 19:02:24
mbam-log-2011-08-14 (19-02-24).txt


Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 281931
Laufzeit: 1 Stunde(n), 21 Minute(n), 17 Sekunde(n)


Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0


Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)


Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)


Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)


Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)


Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)


Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)


Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

Alles anzeigen

pittifox

Zitat von midnrambler

bringt Firefox ab da beim Start jedesmal die Meldung "Es befindet sich kein Datenträger im Laufwerk. Legen Sie einen Datenträger in Laufwerk E: ein".

Kommt die Meldung wirklich von Firefox oder nicht eher von Windows ?
Mal bitte durchlesen: http://www.google.de/search?q=Es+be…lient=firefox-a

Brummelchen

Diese Dateien auf VT testen ► http://virustotal.com/

Code

C:\Windows\System32\pngom9sp.dll

Code

O33 - MountPoints2\{1b5fe92e-210c-11de-9a20-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{1b5fe92e-210c-11de-9a20-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{1b5fe930-210c-11de-9a20-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{1b5fe930-210c-11de-9a20-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3d93571e-a6a6-11df-94fe-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{3d93571e-a6a6-11df-94fe-00234efd9922}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3d93572b-a6a6-11df-94fe-001e101f82a7}\Shell - "" = AutoRun
O33 - MountPoints2\{3d93572b-a6a6-11df-94fe-001e101f82a7}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3d935753-a6a6-11df-94fe-001e101f4679}\Shell - "" = AutoRun
O33 - MountPoints2\{3d935753-a6a6-11df-94fe-001e101f4679}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{3d93575e-a6a6-11df-94fe-001e101f4e71}\Shell - "" = AutoRun
O33 - MountPoints2\{3d93575e-a6a6-11df-94fe-001e101f4e71}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{79022e9c-2128-11de-b4a4-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{79022e9c-2128-11de-b4a4-00234efd9922}\Shell\AutoRun\command - "" = F:\EasySuite.exe
O33 - MountPoints2\{79022ea7-2128-11de-b4a4-00234efd9922}\Shell\AutoRun\command - "" = F:\Menu.exe
O33 - MountPoints2\{79022ec8-2128-11de-b4a4-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{79022ec8-2128-11de-b4a4-00234efd9922}\Shell\AutoRun\command - "" = F:\EasySuite.exe
O33 - MountPoints2\{93b27bf9-2056-11df-a06c-0023ae0f1245}\Shell - "" = AutoRun
O33 - MountPoints2\{93b27bf9-2056-11df-a06c-0023ae0f1245}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{bda4bee6-2156-11de-bac4-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{bda4bee6-2156-11de-bac4-00234efd9922}\Shell\AutoRun\command - "" = F:\EasySuite.exe
O33 - MountPoints2\{d896d39c-4867-11de-815b-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{d896d39c-4867-11de-815b-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{e9e61e04-2109-11de-86f5-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{e9e61e04-2109-11de-86f5-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{e9e61e38-2109-11de-86f5-00234efd9922}\Shell - "" = AutoRun
O33 - MountPoints2\{e9e61e38-2109-11de-86f5-00234efd9922}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe

Alles anzeigen

Ausserdem ist dein JAVA zu alt ► http://java.sun.com (<-- das hier ist richtig!)

Bzgl der Meldung auch möglich ► http://www.philognosie.net/index.php/tip/tipview/759/