DDS (Ver_09-02-01.01) - NTFSx86  
Run by [removed] at 19:11:01,58 on 02.03.2009
Internet Explorer: 7.0.6001.18000 BrowserJavaVersion: 1.6.0_11

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.winkelbach-web.de/sign/
mStart Page = hxxp://de.intl.acer.yahoo.com
mDefault_Page_URL = hxxp://de.intl.acer.yahoo.com
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: NoExplorer - No File
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: RoboForm: {724d43a9-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
TB: FireShot: {6e6e744e-4d20-4ce3-9a7a-26dfffe22f68} - c:\program files\fireshot for ie\fsaddin-0.68.dll
TB: &RoboForm: {724d43a0-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\roboform.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
EB: {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB} - No File
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [MsnMsgr] "c:\program files\windows live\messenger\MsnMsgr.Exe" /background
uRun: [ehTray.exe] c:\windows\ehome\ehTray.exe
uRun: [TYPO3Winstaller] d:\localhost-typo3\typo3start.exe
uRun: [RoboForm] "c:\program files\siber systems\ai roboform\RoboTaskBarIcon.exe"
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
mRun: [ePower_DMC] c:\program files\acer\empowering technology\epower\ePower_DMC.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [IAAnotif] c:\program files\intel\intel matrix storage manager\iaanotif.exe
mRun: [PLFSetI] c:\windows\PLFSetI.exe
mRun: [WarReg_PopUp] c:\program files\acer\wr_popup\WarReg_PopUp.exe
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [<NO NAME>] 
mRun: [eDataSecurity Loader] c:\program files\acer\empowering technology\edatasecurity\x86\eDSloader.exe
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [PrnStatusMX] c:\program files\hewlett-packard\prnstatusmx\PrnStatusMX.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Append to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Nach Microsoft E&xel exportieren - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: RF - Formular ausf�llen - file://c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: RF - Formular speichern - file://c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: RF - Identit�ten-Editor - file://c:\program files\siber systems\ai roboform\RoboFormComEditIdent.html
IE: RF - Men� anpassen - file://c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html
IE: RF - PassCard-Editor - file://c:\program files\siber systems\ai roboform\RoboFormComEditPass.html
IE: RF - RoboForm-Leiste ein/aus - file://c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: RF - SafeNotizen-Editor - file://c:\program files\siber systems\ai roboform\RoboFormComEditNote.html
IE: {10954C80-4F0F-11d3-B17C-00C0DFE39736} - c:\program files\acer\acer bio protection\PwdBank.exe
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F46} - c:\program files\siber systems\ai roboform\RoboFormComFillForms.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F49} - c:\program files\siber systems\ai roboform\RoboFormComSavePass.html
IE: {320AF880-6646-11D3-ABEE-C5DBF3571F4E} - c:\program files\siber systems\ai roboform\RoboFormComCustomizeIEMenu.html
IE: {45DB34C3-955C-11D3-ABEF-444553540000} - c:\program files\siber systems\ai roboform\RoboFormComEditIdent.html
IE: {45DB34C3-955C-11D3-ABEF-444553540001} - c:\program files\siber systems\ai roboform\RoboFormComEditPass.html
IE: {45DB34C3-955C-11D3-ABEF-444553540002} - c:\program files\siber systems\ai roboform\RoboFormComEditNote.html
IE: {724d43aa-0d85-11d4-9908-00400523e39a} - c:\program files\siber systems\ai roboform\RoboFormComShowToolbar.html
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\ssv.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB} - {A6790AA5-C6C7-4BCF-A46D-0FDAC4EA90EB}
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
Trusted Zone: microsoft.com\office
DPF: {02BCC737-B171-4746-94C9-0D8A0B2C0089} - hxxp://office.microsoft.com/templates/ieawsdc.cab
DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} - hxxp://download.microsoft.com/download/e/4/9/e494c802-dd90-4c6b-a074-469358f075a6/OGAControl.cab
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - hxxp://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.2.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_11-windows-i586.cab
DPF: {E06E2E99-0AA1-11D4-ABA6-0060082AA75C} - hxxps://googleonline.webex.com/client/T26L/event/ieatgpc1.cab
TCP: {9431D57D-FCDE-490B-BECE-99F7268B5D29} = 213.184.232.33 217.21.51.1
TCP: {FA05BF5D-7EB5-4997-A8C0-A24025149020} = 194.226.121.90
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AWinNotifyVitaKey MC3000 - c:\program files\acer\acer bio protection\WinNotify.dll
AppInit_DLLs: c:\progra~1\google\google~1\GOEC62~1.DLL
LSA: Notification Packages = scecli c:\program files\acer\acer bio protection\PwdFilter

================= FIREFOX ===================

FF - ProfilePath - c:\users\helmut~1\appdata\roaming\mozilla\firefox\profiles\c1uvee6u.default\
FF - prefs.js: browser.startup.homepage - hxxp://winkelbach-web.de/sign/
FF - component: c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
FF - component: c:\users\helmut winkelbach\appdata\roaming\mozilla\firefox\profiles\c1uvee6u.default\extensions\{0b457caa-602d-484a-8fe7-c1d894a011ba}\platform\winnt_x86-msvc\components\SSSLauncher.dll
FF - component: c:\users\helmut winkelbach\appdata\roaming\mozilla\firefox\profiles\c1uvee6u.default\extensions\{6ac85730-7d0f-4de0-b3fa-21142dd85326}\platform\winnt\components\ColorZilla.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\users\helmut winkelbach\appdata\roaming\mozilla\plugins\npatgpc.dll

---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2009-03-01 17:20	7,680	a-------	c:\windows\system32\spwmp.dll
2009-03-01 17:19	8,147,456	a-------	c:\windows\system32\wmploc.DLL
2009-03-01 17:19	4,096	a-------	c:\windows\system32\msdxm.ocx
2009-03-01 17:19	4,096	a-------	c:\windows\system32\dxmasf.dll
2009-02-17 23:30	<DIR>	--d-----	c:\program files\Trend Micro
2009-02-15 18:39	328,728	a-------	c:\windows\system32\drivers\iaStor.sys
2009-02-11 19:49	0	a---h---	c:\windows\system32\drivers\Msft_User_WpdMtpDr_01_00_00.Wdf
2009-02-10 20:06	827,392	a-------	c:\windows\system32\wininet.dll
2009-02-10 20:06	1,383,424	a-------	c:\windows\system32\mshtml.tlb
2009-02-09 23:02	<DIR>	--d-----	c:\program files\Microsoft
2009-02-03 18:20	97,800	a-------	c:\windows\system32\infocardapi.dll
2009-02-03 18:19	622,080	a-------	c:\windows\system32\icardagt.exe
2009-02-03 18:19	105,016	a-------	c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-02-03 18:19	43,544	a-------	c:\windows\system32\PresentationHostProxy.dll
2009-02-03 18:19	37,384	a-------	c:\windows\system32\infocardcpl.cpl
2009-02-03 18:19	11,264	a-------	c:\windows\system32\icardres.dll
2009-02-03 18:19	781,344	a-------	c:\windows\system32\PresentationNative_v0300.dll
2009-02-03 18:19	326,160	a-------	c:\windows\system32\PresentationHost.exe
2009-02-03 18:16	96,760	a-------	c:\windows\system32\dfshim.dll
2009-02-03 18:16	282,112	a-------	c:\windows\system32\mscoree.dll
2009-02-03 18:16	41,984	a-------	c:\windows\system32\netfxperf.dll
2009-02-03 18:16	158,720	a-------	c:\windows\system32\mscorier.dll
2009-02-03 18:15	83,968	a-------	c:\windows\system32\mscories.dll
2009-02-03 17:23	0	a-------	C:\ss_router.cfg

==================== Find3M  ====================

2009-03-02 18:08	620,118	a-------	c:\windows\system32\perfh007.dat
2009-03-02 18:08	123,558	a-------	c:\windows\system32\perfc007.dat
2009-03-01 20:01	57,337	a-------	c:\programdata\nvModes.dat
2009-03-01 20:01	57,337	a-------	c:\progra~2\nvModes.dat
2009-02-15 18:42	51,200	a-------	c:\windows\inf\infpub.dat
2009-02-15 18:42	143,360	a-------	c:\windows\inf\infstrng.dat
2009-02-15 18:42	86,016	a-------	c:\windows\inf\infstor.dat
2009-02-05 23:06	51,792	a-------	c:\windows\system32\drivers\aswMonFlt.sys
2008-12-14 11:16	603,904	a-------	c:\windows\system32\TUProgSt.exe
2008-12-14 11:16	360,192	a-------	c:\windows\system32\TuneUpDefragService.exe
2008-12-11 14:31	17,152	a-------	c:\windows\system32\authuitu.dll
2008-12-11 14:31	27,904	a-------	c:\windows\system32\uxtuneup.dll
2008-12-05 16:13	410,984	a-------	c:\windows\system32\deploytk.dll
2008-12-05 06:32	293,376	a-------	c:\windows\system32\psisdecd.dll
2008-12-05 06:32	428,544	a-------	c:\windows\system32\EncDec.dll
2008-10-23 17:10	56	a---h---	c:\programdata\ezsidmv.dat
2008-10-23 17:10	56	a---h---	c:\progra~2\ezsidmv.dat
2008-06-11 13:41	665,600	a-------	c:\windows\inf\drvindex.dat
2008-01-21 09:14	290,748	a-------	c:\windows\inf\perflib\0407\perfi.dat
2008-01-21 09:14	290,748	a-------	c:\windows\inf\perflib\0407\perfh.dat
2008-01-21 09:14	36,916	a-------	c:\windows\inf\perflib\0407\perfd.dat
2008-01-21 09:14	36,916	a-------	c:\windows\inf\perflib\0407\perfc.dat
2008-01-21 04:43	174	a--sh---	c:\program files\desktop.ini
2006-11-02 11:20	287,440	a-------	c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 11:20	287,440	a-------	c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 11:20	30,674	a-------	c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 11:20	30,674	a-------	c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 19:11:36,31 ===============