System Fix, wirklich entfernt?

Don Roman

Hallo zusammen

Nach langer zeit ohne nerventöter hab ich mir gestern system fix (aus blödheit...) eingefangen. Hab bis jetzt versucht mit mbam dem ding herr zu werden und hoffe ich hab es auch entfernt.


Mir fehlen im startmenu noch der alle programme ordner, sowie das zuletzt verwendet menu und die meistverwendetet programme werden ebenfalls nicht angezeigt. Wo muss man hier dran schrauben?

Kann mir jemand sagen ob mein System nun wieder sauber ist?


OLT Log file:


OTL logfile created on: 21.11.2011 18:56:44 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = E:\Dokumente und Einstellungen\Ich\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy

2.00 Gb Total Physical Memory | 1.30 Gb Available Physical Memory | 65.13% Memory free
3.85 Gb Paging File | 3.24 Gb Available in Paging File | 84.32% Paging File free
Paging file location(s): E:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Programme
Drive C: | 80.69 Gb Total Space | 36.33 Gb Free Space | 45.02% Space Free | Partition Type: NTFS
Drive D: | 145.95 Gb Total Space | 63.26 Gb Free Space | 43.34% Space Free | Partition Type: NTFS
Drive E: | 68.35 Gb Total Space | 38.04 Gb Free Space | 55.65% Space Free | Partition Type: NTFS

Computer Name: ROMAN | User Name: Ich | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.11.20 23:37:03 | 000,584,192 | ---- | M] (OldTimer Tools) -- E:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe
PRC - [2011.10.11 14:00:02 | 000,080,336 | -H-- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.10.11 13:59:49 | 000,086,224 | -H-- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2011.10.11 13:59:37 | 000,258,512 | -H-- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.10.11 13:59:37 | 000,110,032 | -H-- | M] (Avira Operations GmbH & Co. KG) -- E:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.08.31 16:00:48 | 001,047,208 | ---- | M] (Malwarebytes Corporation) -- E:\Programme\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2011.05.26 10:29:03 | 000,800,768 | ---- | M] (Yuna Software) -- E:\Programme\Yuna Software\Messenger Plus!\PlusService.exe
PRC - [2010.01.03 18:27:58 | 000,026,248 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\strokeit.exe
PRC - [2009.08.18 10:29:22 | 001,529,728 | ---- | M] (Microsoft Corporation) -- E:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE
PRC - [2009.08.18 10:29:22 | 000,183,152 | ---- | M] (Microsoft Corporation) -- E:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVCM.EXE
PRC - [2008.12.03 14:51:30 | 002,181,672 | -H-- | M] (Gainward Co.) -- E:\Programme\EXPERTool\TBPANEL.exe
PRC - [2008.04.14 03:22:45 | 000,979,456 | ---- | M] (Microsoft Corporation) -- E:\WINDOWS\explorer.exe
PRC - [2007.03.18 23:05:02 | 000,630,784 | ---- | M] () -- E:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
PRC - [2006.07.23 02:22:42 | 001,126,400 | ---- | M] (Logitech Inc.) -- E:\Programme\Gemeinsame Dateien\Logitech\G-series Software\LGDCore.exe


========== Modules (No Company Name) ==========

MOD - [2011.10.11 13:59:51 | 000,398,288 | -H-- | M] () -- E:\Programme\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2011.09.05 18:04:58 | 000,301,056 | ---- | M] () -- E:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.DEU
MOD - [2011.03.02 10:11:18 | 000,004,096 | ---- | M] () -- E:\Programme\Yuna Software\Messenger Plus!\Detoured.dll
MOD - [2010.03.15 11:28:22 | 000,141,824 | ---- | M] () -- E:\Programme\WinRAR\RarExt.dll
MOD - [2010.01.03 18:28:02 | 000,016,520 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\Plugins\exec.dll
MOD - [2010.01.03 18:28:02 | 000,013,448 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\Plugins\msg.dll
MOD - [2010.01.03 18:28:02 | 000,012,936 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\Plugins\OSD.dll
MOD - [2010.01.03 18:28:00 | 000,018,056 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\Plugins\keys.dll
MOD - [2010.01.03 18:28:00 | 000,016,520 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\Plugins\win.dll
MOD - [2010.01.03 18:28:00 | 000,013,960 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\Plugins\utilities.dll
MOD - [2010.01.03 18:28:00 | 000,013,448 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\Plugins\multimon.dll
MOD - [2010.01.03 18:28:00 | 000,010,376 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\Plugins\siControl.dll
MOD - [2010.01.03 18:27:58 | 000,026,248 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\strokeit.exe
MOD - [2010.01.03 18:27:58 | 000,011,912 | ---- | M] () -- E:\Programme\TCB Networks\StrokeIt\mhook.dll
MOD - [2009.08.27 10:24:26 | 000,026,624 | R--- | M] () -- E:\WINDOWS\system32\sst2cl3.dll
MOD - [2009.06.21 22:26:00 | 000,305,664 | ---- | M] () -- E:\Programme\TeraCopy\TeraCopyExt.dll
MOD - [2008.04.14 03:22:16 | 000,014,336 | ---- | M] () -- E:\WINDOWS\system32\msdmo.dll
MOD - [2007.03.18 23:05:02 | 000,630,784 | ---- | M] () -- E:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
MOD - [2007.03.18 23:04:22 | 000,069,632 | ---- | M] () -- E:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.dll
MOD - [1998.10.31 10:55:56 | 000,005,120 | -H-- | M] () -- E:\Programme\EXPERTool\TBMANAGE.DLL


========== Win32 Services (SafeList) ==========

SRV - [2011.10.11 13:59:49 | 000,086,224 | -H-- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.10.11 13:59:37 | 000,110,032 | -H-- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.08.15 15:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) [On_Demand | Stopped] -- E:\Programme\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2009.08.18 10:29:22 | 001,529,728 | ---- | M] (Microsoft Corporation) [Auto | Running] -- E:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.07.20 12:28:10 | 000,121,360 | -H-- | M] (Logitech, Inc.) [On_Demand | Stopped] -- E:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2005.04.04 00:41:10 | 000,069,632 | -H-- | M] (Macrovision Corporation) [On_Demand | Stopped] -- E:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)


========== Driver Services (SafeList) ==========

DRV - [2011.10.11 14:00:01 | 000,134,344 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.10.11 14:00:01 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- E:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.10.11 14:00:01 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.07.27 11:29:31 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011.02.11 23:10:35 | 000,017,488 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\gdrv.sys -- (gdrv)
DRV - [2010.06.17 14:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- E:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.06.17 17:56:32 | 000,028,560 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\LUsbFilt.sys -- (LUsbFilt)
DRV - [2009.06.17 17:56:16 | 000,037,392 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2009.06.17 17:56:06 | 000,035,472 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2009.06.17 17:55:34 | 000,010,384 | ---- | M] (Logitech, Inc.) [Kernel | Auto | Running] -- E:\WINDOWS\system32\drivers\LBeepKE.sys -- (LBeepKE)
DRV - [2009.06.17 17:55:18 | 000,020,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\L8042Kbd.sys -- (L8042Kbd)
DRV - [2009.03.18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2008.02.14 10:04:06 | 004,676,096 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008.01.03 15:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- E:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007.03.16 10:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Auto | Running] -- E:\WINDOWS\System32\drivers\TBPanel.sys -- (TBPanel)
DRV - [2007.03.16 10:11:38 | 000,012,256 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- E:\WINDOWS\system32\drivers\TBPanel.sys -- (Cardex)
DRV - [2004.05.17 11:21:54 | 000,017,280 | ---- | M] (Intellon, Inc.) [Kernel | Auto | Running] -- E:\WINDOWS\system32\plcndis5.sys -- (PLCNDIS5)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========


IE - HKCU\..\URLSearchHook: {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - E:\WINDOWS\system32\dvmurl.dll (DeviceVM Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: E:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: E:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: E:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: E:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)


[2011.06.12 12:57:05 | 000,000,000 | -H-D | M] (No name found) -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions
[2011.06.12 12:57:05 | 000,000,000 | -H-D | M] (No name found) -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

O1 HOSTS File: ([2004.08.04 13:00:00 | 000,000,820 | ---- | M]) - E:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - E:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [Alcmtr] E:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] E:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] E:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [Launch LGDCore] E:\Programme\Gemeinsame Dateien\Logitech\G-series Software\LGDCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] E:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NvCplDaemon] E:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] E:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [PlusService] E:\Programme\Yuna Software\Messenger Plus!\PlusService.exe (Yuna Software)
O4 - HKCU..\Run: [GAINWARD] E:\Programme\EXPERTool\TBPanel.exe (Gainward Co.)
O4 - HKCU..\Run: [RocketDock] E:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [StrokeIt] E:\Programme\TCB Networks\StrokeIt\strokeit.exe ()
O4 - Startup: E:\Dokumente und Einstellungen\Ich\Startmenü\Programme\Autostart\RocketDock.lnk = E:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 153
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 153
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - E:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - E:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab (Java Plug-in 1.6.0_23)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{047325DD-23D9-4B3F-923F-820A511A146A}: DhcpNameServer = 194.230.1.71 194.230.1.39 192.168.1.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - E:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -E:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (E:\WINDOWS\system32\userinit.exe) -E:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\LBTWlgn: DllName - (e:\programme\gemeinsame dateien\logishrd\bluetooth\LBTWlgn.dll) - e:\Programme\Gemeinsame Dateien\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: E:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: E:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.01.02 15:39:41 | 000,000,000 | -H-- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2004.08.18 14:18:44 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011.11.21 17:52:09 | 000,000,000 | -HSD | C] -- E:\Dokumente und Einstellungen\Ich\Recent
[2011.11.20 23:37:03 | 000,584,192 | ---- | C] (OldTimer Tools) -- E:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe
[2011.11.20 18:24:11 | 000,000,000 | -H-D | C] -- E:\Dokumente und Einstellungen\Ich\Startmenü\Programme\System Fix
[2011.11.03 21:48:24 | 000,000,000 | ---D | C] -- E:\Programme\Gemeinsame Dateien\Blizzard Entertainment
[2011.10.26 16:03:11 | 000,026,176 | -H-- | C] (LogMeIn, Inc.) -- E:\WINDOWS\System32\hamachi.sys
[2011.10.26 16:03:09 | 000,000,000 | ---D | C] -- E:\Programme\LogMeIn Hamachi
[2011.10.26 15:54:18 | 000,000,000 | -H-D | C] -- E:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\LogMeIn Hamachi
[2011.10.26 15:54:10 | 000,000,000 | -H-D | C] -- E:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\LogMeIn Hamachi
[6 E:\WINDOWS\System32\*.tmp files -> E:\WINDOWS\System32\*.tmp -> ]
[4 E:\WINDOWS\*.tmp files -> E:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.11.21 18:51:12 | 000,013,646 | ---- | M] () -- E:\WINDOWS\System32\wpa.dbl
[2011.11.21 18:50:36 | 000,002,048 | --S- | M] () -- E:\WINDOWS\bootstat.dat
[2011.11.20 23:37:03 | 000,584,192 | ---- | M] (OldTimer Tools) -- E:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe
[2011.11.20 22:24:49 | 000,492,714 | ---- | M] () -- E:\WINDOWS\System32\perfh007.dat
[2011.11.20 22:24:49 | 000,473,010 | ---- | M] () -- E:\WINDOWS\System32\perfh009.dat
[2011.11.20 22:24:49 | 000,091,166 | ---- | M] () -- E:\WINDOWS\System32\perfc007.dat
[2011.11.20 22:24:49 | 000,076,104 | ---- | M] () -- E:\WINDOWS\System32\perfc009.dat
[2011.11.12 11:43:29 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- E:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2011.10.31 19:15:20 | 000,140,496 | ---- | M] () -- E:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011.10.31 19:15:14 | 000,280,736 | ---- | M] () -- E:\WINDOWS\System32\PnkBstrB.xtr
[2011.10.25 21:39:25 | 000,280,736 | ---- | M] () -- E:\WINDOWS\System32\PnkBstrB.ex0
[6 E:\WINDOWS\System32\*.tmp files -> E:\WINDOWS\System32\*.tmp -> ]
[4 E:\WINDOWS\*.tmp files -> E:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.10.02 22:49:48 | 000,161,462 | -H-- | C] () -- E:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2011.08.04 19:36:19 | 000,026,624 | R--- | C] () -- E:\WINDOWS\System32\sst2cl3.dll
[2011.06.12 12:57:01 | 000,000,000 | ---- | C] () -- E:\WINDOWS\nsreg.dat
[2011.06.11 18:44:23 | 000,027,648 | ---- | C] () -- E:\WINDOWS\System32\AVSredirect.dll
[2011.06.11 11:54:05 | 000,000,115 | ---- | C] () -- E:\WINDOWS\AIMPR.INI
[2011.06.08 21:28:20 | 000,047,104 | ---- | C] () -- E:\WINDOWS\System32\KMVIDC32.DLL
[2011.04.15 12:10:34 | 000,020,860 | -H-- | C] () -- E:\WINDOWS\System32\mlfcache.dat
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- E:\WINDOWS\System32\xlive.dll.cat
[2011.02.10 21:43:30 | 000,000,020 | ---- | C] () -- E:\WINDOWS\mafosav.INI
[2011.01.17 18:56:48 | 000,207,400 | R--- | C] () -- E:\WINDOWS\GSetup.exe
[2011.01.17 18:56:48 | 000,000,010 | ---- | C] () -- E:\WINDOWS\GSetup.ini
[2011.01.02 19:21:04 | 000,140,496 | ---- | C] () -- E:\WINDOWS\System32\drivers\PnkBstrK.sys
[2011.01.02 19:21:04 | 000,138,056 | -H-- | C] () -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\PnkBstrK.sys
[2011.01.02 19:20:39 | 000,280,736 | ---- | C] () -- E:\WINDOWS\System32\PnkBstrB.exe
[2011.01.02 19:20:38 | 002,434,856 | ---- | C] () -- E:\WINDOWS\System32\pbsvc_bc2.exe
[2011.01.02 19:20:38 | 000,075,136 | ---- | C] () -- E:\WINDOWS\System32\PnkBstrA.exe
[2011.01.02 19:05:05 | 000,094,720 | -H-- | C] () -- E:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.02 16:53:20 | 000,000,048 | -H-- | C] () -- E:\WINDOWS\System32\ezsidmv.dat
[2011.01.02 15:51:37 | 000,240,592 | ---- | C] () -- E:\WINDOWS\System32\nvdrsdb0.bin
[2011.01.02 15:51:36 | 000,240,592 | ---- | C] () -- E:\WINDOWS\System32\nvdrsdb1.bin
[2011.01.02 15:51:36 | 000,000,001 | ---- | C] () -- E:\WINDOWS\System32\nvdrssel.bin
[2011.01.02 15:51:30 | 002,293,194 | ---- | C] () -- E:\WINDOWS\System32\nvdata.bin
[2011.01.02 15:48:48 | 000,049,152 | R--- | C] () -- E:\WINDOWS\System32\ChCfg.exe
[2011.01.02 15:41:05 | 000,002,048 | --S- | C] () -- E:\WINDOWS\bootstat.dat
[2011.01.02 15:37:28 | 000,021,740 | ---- | C] () -- E:\WINDOWS\System32\emptyregdb.dat
[2011.01.02 15:28:00 | 000,004,161 | ---- | C] () -- E:\WINDOWS\ODBCINST.INI
[2011.01.02 15:26:58 | 000,143,624 | ---- | C] () -- E:\WINDOWS\System32\FNTCACHE.DAT
[2008.12.03 08:39:45 | 000,007,237 | ---- | C] () -- E:\WINDOWS\cadx2.ini
[2005.04.06 16:27:14 | 000,237,568 | ---- | C] () -- E:\WINDOWS\System32\xvidvfw.dll
[2005.04.06 16:24:40 | 001,216,512 | ---- | C] () -- E:\WINDOWS\System32\xvidcore.dll
[2004.08.04 13:00:00 | 013,107,200 | ---- | C] () -- E:\WINDOWS\System32\oembios.bin
[2004.08.04 13:00:00 | 000,673,088 | ---- | C] () -- E:\WINDOWS\System32\mlang.dat
[2004.08.04 13:00:00 | 000,492,714 | ---- | C] () -- E:\WINDOWS\System32\perfh007.dat
[2004.08.04 13:00:00 | 000,473,010 | ---- | C] () -- E:\WINDOWS\System32\perfh009.dat
[2004.08.04 13:00:00 | 000,272,128 | ---- | C] () -- E:\WINDOWS\System32\perfi009.dat
[2004.08.04 13:00:00 | 000,269,480 | ---- | C] () -- E:\WINDOWS\System32\perfi007.dat
[2004.08.04 13:00:00 | 000,218,003 | ---- | C] () -- E:\WINDOWS\System32\dssec.dat
[2004.08.04 13:00:00 | 000,091,166 | ---- | C] () -- E:\WINDOWS\System32\perfc007.dat
[2004.08.04 13:00:00 | 000,076,104 | ---- | C] () -- E:\WINDOWS\System32\perfc009.dat
[2004.08.04 13:00:00 | 000,046,258 | ---- | C] () -- E:\WINDOWS\System32\mib.bin
[2004.08.04 13:00:00 | 000,034,478 | ---- | C] () -- E:\WINDOWS\System32\perfd007.dat
[2004.08.04 13:00:00 | 000,028,626 | ---- | C] () -- E:\WINDOWS\System32\perfd009.dat
[2004.08.04 13:00:00 | 000,004,569 | ---- | C] () -- E:\WINDOWS\System32\secupd.dat
[2004.08.04 13:00:00 | 000,004,461 | ---- | C] () -- E:\WINDOWS\System32\oembios.dat
[2004.08.04 13:00:00 | 000,001,804 | ---- | C] () -- E:\WINDOWS\System32\dcache.bin
[2004.08.04 13:00:00 | 000,000,741 | ---- | C] () -- E:\WINDOWS\System32\noise.dat
[1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- E:\WINDOWS\System32\iyvu9_32.dll

========== LOP Check ==========

[2011.04.23 11:06:54 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2011.01.19 19:21:10 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations
[2011.01.22 12:32:14 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Messenger Plus!
[2011.10.21 13:08:18 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MicroWorld
[2011.01.19 19:11:29 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache
[2011.01.19 19:27:43 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2011.01.28 23:19:43 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
[2011.05.07 11:28:36 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SofTax GR 2010 NP
[2011.11.05 17:29:39 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TrackMania
[2011.04.15 12:09:13 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2011.05.07 11:28:46 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\.Kanton GR
[2011.08.17 22:09:24 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DAEMON Tools Lite
[2011.01.19 19:57:01 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\GlarySoft
[2011.01.02 17:24:36 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Leadertech
[2011.01.02 16:50:05 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\MSNInstaller
[2011.09.16 17:04:13 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Neverball
[2011.01.19 19:27:45 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia
[2011.09.04 10:27:18 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Notepad++
[2011.01.23 17:08:29 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\OpenOffice.org
[2011.10.23 18:16:12 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Opera
[2011.01.19 19:28:01 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\PC Suite
[2011.01.02 16:35:41 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TCB Networks
[2011.03.22 23:03:21 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TeamViewer
[2011.11.16 17:36:40 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TeraCopy
[2011.06.12 12:57:00 | 000,000,000 | -H-D | M] -- E:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Thunderbird

========== Purity Check ==========



< End of report >


OTL Extras logfile created on: 21.11.2011 18:56:44 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = E:\Dokumente und Einstellungen\Ich\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy

2.00 Gb Total Physical Memory | 1.30 Gb Available Physical Memory | 65.13% Memory free
3.85 Gb Paging File | 3.24 Gb Available in Paging File | 84.32% Paging File free
Paging file location(s): E:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Programme
Drive C: | 80.69 Gb Total Space | 36.33 Gb Free Space | 45.02% Space Free | Partition Type: NTFS
Drive D: | 145.95 Gb Total Space | 63.26 Gb Free Space | 43.34% Space Free | Partition Type: NTFS
Drive E: | 68.35 Gb Total Space | 38.04 Gb Free Space | 55.65% Space Free | Partition Type: NTFS

Computer Name: ROMAN | User Name: Ich | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = Opera.HTML] -- E:\Programme\Opera\Opera.exe (Opera Software)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- E:\Programme\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "E:\Programme\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "E:\Programme\Opera\Opera.exe" "%1" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "E:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "E:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "E:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "E:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "E:\Programme\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNetisabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNetisabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"E:\Programme\Opera\opera.exe" = E:\Programme\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"E:\Programme\Skype\Plugin Manager\skypePM.exe" = E:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"E:\Programme\Java\jre6\bin\javaw.exe" = E:\Programme\Java\jre6\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"D:\Games\Call of Duty 4 - Modern Warfare\iw3mp.exe" = D:\Games\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:iw3mp -- ()
"E:\Programme\Winamp\winamp.exe" = E:\Programme\Winamp\winamp.exe:*:Enabled:Winamp -- (Nullsoft, Inc.)
"D:\Games\Call of Duty 7\Call of Duty - Black Ops\BlackOps.exe" = D:\Games\Call of Duty 7\Call of Duty - Black Ops\BlackOps.exe:*isabled:BlackOps -- ()
"D:\Games\Duty Calls\binaries\Win32\DutyCalls.exe" = D:\Games\Duty Calls\binaries\Win32\DutyCalls.exe:*:EnabledutyCalls
"E:\Programme\Gigabyte\GBTUpd\GBTUpd.exe" = E:\Programme\Gigabyte\GBTUpd\GBTUpd.exe:*:Enabled:GBTUpd.exe
"E:\Programme\Gigabyte\GBTUpd\RunUpd.exe" = E:\Programme\Gigabyte\GBTUpd\RunUpd.exe:*:Enabled:RunUpd
"E:\Programme\Gigabyte\@BIOS\gwflash.exe" = E:\Programme\Gigabyte\@BIOS\gwflash.exe:*:Enabled:@BIOS Application
"D:\Programme\eclipse\eclipse.exe" = D:\Programme\eclipse\eclipse.exe:*:Enabled:eclipse
"D:\Games\Far Cry 2\bin\FarCry2.exe" = D:\Games\Far Cry 2\bin\FarCry2.exe:*:Enabled:Far Cry 2
"D:\Games\Far Cry 2\bin\FC2Launcher.exe" = D:\Games\Far Cry 2\bin\FC2Launcher.exe:*:Enabled:Far Cry 2 Updater
"D:\Games\Far Cry 2\bin\FC2Editor.exe" = D:\Games\Far Cry 2\bin\FC2Editor.exe:*:Enabled:Editor
"D:\Games\Far Cry 2\bin\FC2ServerLauncher.exe" = D:\Games\Far Cry 2\bin\FC2ServerLauncher.exe:*:Enablededizierter Server
"E:\Programme\Microsoft Games\Age of Empires II\EMPIRES2.ICD" = E:\Programme\Microsoft Games\Age of Empires II\EMPIRES2.ICD:*:Enabled:Age of Empires II -- (Microsoft Corporation)
"J:\Games\AoE II\age2_x1.exe" = J:\Games\AoE II\age2_x1.exe:*:Enabled:Age of Empires II Expansion
"D:\Games\AoE II\age2_x1.exe" = D:\Games\AoE II\age2_x1.exe:*:Enabled:Age of Empires II Expansion -- (Microsoft Corporation)
"D:\Games\Halo 1\halo.exe" = D:\Games\Halo 1\halo.exe:*isabled:Halo -- (Microsoft Corporation)
"D:\Programme\Steam\SteamApps\common\battlefield bad company 2\BFBC2Game.exe" = D:\Programme\Steam\SteamApps\common\battlefield bad company 2\BFBC2Game.exe:*:Enabled:Battlefield: Bad Company 2 -- (EA Digital Illusions CE AB)
"D:\Programme\Steam\SteamApps\common\battlefield bad company 2\Support\EA Help\Electronic_Arts_Technical_Support.htm" = D:\Programme\Steam\SteamApps\common\battlefield bad company 2\Support\EA Help\Electronic_Arts_Technical_Support.htm:*:Enabled:Battlefield: Bad Company 2 -- ()
"H:\AoE II\empires2.exe" = H:\AoE II\empires2.exe:*:Enabled:Age of Empires II
"D:\Games\trackmania\TmForever.exe" = D:\Games\trackmania\TmForever.exe:*:Enabled:TmForever -- ()
"E:\Programme\TweakMe!\unins000.exe" = E:\Programme\TweakMe!\unins000.exe:*:Enabled: TweakMe! entfernen -- ()
"E:\WINDOWS\system32\dplaysvr.exe" = E:\WINDOWS\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"D:\Games\Warcraft III\Warcraft III.exe" = D:\Games\Warcraft III\Warcraft III.exe:*:Enabled:Warcraft III -- (Blizzard Entertainment)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 23
"{2FB1052B-2F3D-48CE-A65D-006240516ECE}_is1" = 1.2.0.0
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{709D0207-B1F8-4ADC-BB2F-CDBE2367A475}_is1" = TweakMe!
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{77A1C7DD-E4F6-4057-92FC-710219215987}" = Logitech G11 Keyboard Software 1.03
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8BBB5E4C-3F5E-4C07-BFBE-33B34600783A}" = LogMeIn Hamachi
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{99A17B9E-3901-400B-BCD7-2ACD8FFE328B}" = System Requirements Lab for Intel
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A498D9EB-927B-459B-85D6-DD6EF8C2C564}" = erLT
"{A804B134-F03D-4EFD-9BC0-DCD257AA1B22}" = Hitman Blood Money
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.1) - Deutsch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1" = SUPER © v2011.build.48 (April 23, 2011) Version v2011.build.48
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}" = OpenOffice.org 3.2
"{E8AEA11B-E60A-455E-B008-E4E763604612}" = Browser Configuration Utility
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F2835483-37F2-4123-B4FE-0E77D58447F2}" = Far Cry 2
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"7-Zip" = 7-Zip 9.20
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Age of Empires 2.0" = Microsoft Age of Empires II
"Avira AntiVir Desktop" = Avira Free Antivirus
"CCleaner" = CCleaner
"CrystalDiskInfo_is1" = CrystalDiskInfo 4.0.1
"DAEMON Tools Lite" = DAEMON Tools Lite
"dlanconf" = devolo dLAN-Konfigurationsassistent
"EXPERTool_is1" = EXPERTool 7.0
"GeoGebra" = GeoGebra
"Guild Wars" = GUILD WARS
"Halo" = Microsoft Halo
"Hitman - Codename 47" = Hitman - Codename 47
"ie8" = Windows Internet Explorer 8
"JDownloader" = JDownloader
"LameACM" = Lame ACM MP3 Codec
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.2.1300
"Messenger Plus!" = Messenger Plus! 5
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"MSNINST" = MSN
"NVIDIA Drivers" = NVIDIA Drivers
"Opera 11.52.1100" = Opera 11.52
"Pack Vista Inspirat 2" = Pack Vista Inspirat 2 1.0
"PunkBusterSvc" = PunkBuster Services
"RocketDock_is1" = RocketDock 1.3.5
"SofTax GR 2010 NP" = SofTax GR 2010 NP
"StrokeIt" = StrokeIt
"TeraCopy_is1" = TeraCopy 2.12
"VLC media player" = VLC media player 1.1.11
"Warcraft III" = Warcraft III
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"XviD" = XviD MPEG-4 Codec

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Block2lock" = Block2lock
"Winamp Detect" = Winamp Erkennungs-Plug-in

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 04.06.2011 12:42:05 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 04.06.2011 14:15:31 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 04.06.2011 18:01:30 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 05.06.2011 14:52:18 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 06.06.2011 11:43:53 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 07.06.2011 09:19:51 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 07.06.2011 09:20:57 | Computer Name = ROMAN | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung skype.exe, Version 5.3.0.111, fehlgeschlagenes
Modul kernel32.dll, Version 5.1.2600.5781, Fehleradresse 0x00012afb.

Error - 07.06.2011 13:14:30 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 08.06.2011 09:27:23 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

Error - 08.06.2011 14:46:23 | Computer Name = ROMAN | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.

[ System Events ]
Error - 20.11.2011 18:30:21 | Computer Name = ROMAN | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "" auf Volume "HarddiskVolume2" ist im
Wiederherstellungsfilter der unerwartete Fehler "0xC0000001" aufgetreten. Die Volumeüberwachung
wurde angehalten.

Error - 20.11.2011 18:30:36 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error - 20.11.2011 18:30:36 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error - 20.11.2011 18:30:54 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Cardex" wurde aufgrund folgenden Fehlers nicht gestartet:
%%183

Error - 21.11.2011 12:52:12 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error - 21.11.2011 12:52:12 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error - 21.11.2011 12:52:37 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Cardex" wurde aufgrund folgenden Fehlers nicht gestartet:
%%183

Error - 21.11.2011 13:51:07 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error - 21.11.2011 13:51:07 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SSPORT" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2

Error - 21.11.2011 13:51:29 | Computer Name = ROMAN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Cardex" wurde aufgrund folgenden Fehlers nicht gestartet:
%%183


< End of report >