Windowssystem Blockiert ...

HUSC · 19.12.2011, 21:56

Wie bei vielen anderen das Problem
"Ihr Windowssystem ..."

HUSC · 19.12.2011, 22:00

Bin echt am verzweifeln ich hoffe ihr findet was (:
Habe mir gerade die anderen Threads durchgelesen ich muss echt sagen ihr macht das ganze hier einfach nur spitzte :X ich kann es kaum glauben das es so nette menschen gibt !

HUSC · 19.12.2011, 22:12

Code:

ATTFilter

OTL logfile created on: 19.12.2011 21:40:28 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Marco\Desktop\Neuer Ordner
64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
16,00 Gb Total Physical Memory | 13,35 Gb Available Physical Memory | 83,46% Memory free
32,00 Gb Paging File | 28,90 Gb Available in Paging File | 90,33% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 59,62 Gb Total Space | 2,39 Gb Free Space | 4,00% Space Free | Partition Type: NTFS
Drive D: | 292,87 Gb Total Space | 75,99 Gb Free Space | 25,95% Space Free | Partition Type: NTFS
Drive E: | 638,54 Gb Total Space | 540,11 Gb Free Space | 84,58% Space Free | Partition Type: NTFS
Drive F: | 5,63 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 232,83 Gb Total Space | 29,86 Gb Free Space | 12,82% Space Free | Partition Type: FAT32
 
Computer Name: MARCO-PC | User Name: Marco | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Marco\Desktop\Neuer Ordner\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe (RealNetworks, Inc.)
PRC - D:\Origin\Origin.exe (Electronic Arts)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
PRC - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - D:\TeamViewer5\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe (Creative Technology Ltd)
PRC - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe ()
PRC - C:\Program Files (x86)\Conceptronic\Common\RaRegistry.exe (Ralink Technology, Corp.)
PRC - C:\Program Files (x86)\ROCCAT\Kone Mouse\KoneHID.EXE (ROCCAT)
PRC - C:\Program Files (x86)\ROCCAT\Kone Mouse\osd.exe (ROCCAT)
PRC - C:\Programme\Logitech\GamePanel Software\LCD Manager\Applets\LCDMedia.exe (Logitech Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - D:\Origin\QtWebKit4.dll ()
MOD - D:\Origin\imageformats\qtiff4.dll ()
MOD - D:\Origin\imageformats\qmng4.dll ()
MOD - D:\Origin\imageformats\qjpeg4.dll ()
MOD - D:\Origin\codecs\qjpcodecs4.dll ()
MOD - D:\Origin\codecs\qtwcodecs4.dll ()
MOD - D:\Origin\codecs\qcncodecs4.dll ()
MOD - D:\Origin\codecs\qkrcodecs4.dll ()
MOD - D:\Origin\imageformats\qico4.dll ()
MOD - D:\Origin\imageformats\qgif4.dll ()
MOD - D:\Origin\phonon4.dll ()
MOD - D:\Origin\QtXml4.dll ()
MOD - D:\Origin\QtNetwork4.dll ()
MOD - D:\Origin\QtGui4.dll ()
MOD - D:\Origin\QtCore4.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll ()
MOD - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf ()
MOD - C:\Program Files (x86)\HTC\HTC Sync 3.0\sqlite3.dll ()
MOD - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
MOD - C:\Program Files (x86)\HTC\HTC Sync 3.0\HtcDetect.dll ()
MOD - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcDisk.dll ()
MOD - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcDetectLegend.dll ()
MOD - C:\Program Files (x86)\HTC\HTC Sync 3.0\fdHttpd.dll ()
MOD - C:\Program Files (x86)\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
MOD - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (WireHelpSvc) -- C:\Programme\Common Files\WireHelpSvc.exe ()
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (TeamViewer5) -- D:\TeamViewer5\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (PassThru Service) -- C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe ()
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (RalinkRegistryWriter64) -- C:\Program Files (x86)\Conceptronic\Common\RaRegistry64.exe (Ralink Technology, Corp.)
SRV - (RalinkRegistryWriter) -- C:\Program Files (x86)\Conceptronic\Common\RaRegistry.exe (Ralink Technology, Corp.)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (ESLWireAC) -- C:\Windows\SysNative\drivers\ESLWireACD.sys (<Turtle Entertainment>)
DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV:64bit: - (cpuz135) -- C:\Windows\SysNative\drivers\cpuz135_x64.sys (CPUID)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (ESLvnic1) -- C:\Windows\SysNative\drivers\ESLvnic.sys (Turtle Entertainment GmbH)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (teamviewervpn) -- C:\Windows\SysNative\drivers\teamviewervpn.sys (TeamViewer GmbH)
DRV:64bit: - (V0520Vid) -- C:\Windows\SysNative\drivers\V0520Vid.sys (Creative Technology Ltd.)
DRV:64bit: - (CtClsFlt) -- C:\Windows\SysNative\drivers\CtClsFlt.sys (Creative Technology Ltd.)
DRV:64bit: - (NVNET) -- C:\Windows\SysNative\drivers\nvmf6264.sys (NVIDIA Corporation)
DRV:64bit: - (htcnprot) -- C:\Windows\SysNative\drivers\htcnprot.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (netr28x) -- C:\Windows\SysNative\drivers\netr28x.sys (Ralink Technology, Corp.)
DRV:64bit: - (HTCAND64) -- C:\Windows\SysNative\drivers\ANDROIDUSB.sys (HTC, Corporation)
DRV:64bit: - (VIAHdAudAddService) -- C:\Windows\SysNative\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (usb_rndisx) -- C:\Windows\SysNative\drivers\usb8023x.sys (Microsoft Corporation)
DRV:64bit: - (NVENETFD) -- C:\Windows\SysNative\drivers\nvm62x64.sys (NVIDIA Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (KoneFltr) -- C:\Windows\SysNative\drivers\Kone.sys (ROCCAT Ltd)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://start.facemoods.com/?a=ddr&s={searchTerms}&f=4
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.facemoods.com/?a=ddr
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9A 0B 29 E3 66 C9 CB 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "Facemoods Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledItems: linkuryfirefoxremoteplugin@linkury.com:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {ABDE892B-13A8-4d1b-88E6-365A6E755758}:14.0.1
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.2
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_0_1.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.0: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll File not found
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.102.0: C:\Program Files (x86)\Battlelog Web Plugins\1.102.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.104.0: C:\Program Files (x86)\Battlelog Web Plugins\1.104.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.0.198: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.0.198: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.0.198: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.0.198: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=15.0.0.198: c:\program files (x86)\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.11.22 17:51:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.11.22 17:50:02 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.11.22 17:51:44 | 000,000,000 | ---D | M]
 
[2010.10.29 18:20:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marco\AppData\Roaming\mozilla\Extensions
[2011.11.13 11:45:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Marco\AppData\Roaming\mozilla\Firefox\Profiles\87fydlv6.default\extensions
[2010.11.02 16:52:15 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Marco\AppData\Roaming\mozilla\Firefox\Profiles\87fydlv6.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.11.13 11:45:49 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Marco\AppData\Roaming\mozilla\Firefox\Profiles\87fydlv6.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.11.10 17:22:55 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.11.22 17:51:16 | 000,000,000 | ---D | M] (RealPlayer Browser Record Plugin) -- C:\PROGRAMDATA\REAL\REALPLAYER\BROWSERRECORDPLUGIN\FIREFOX\EXT
[2011.11.10 17:22:50 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2010.11.06 17:10:02 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010.01.01 09:00:00 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 09:00:00 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2010.01.01 09:00:00 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.03.13 14:07:46 | 000,002,046 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\fcmdSrchddr.xml
[2010.01.01 09:00:00 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.01.01 09:00:00 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.01.01 09:00:00 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
========== Chrome  ==========
 
CHR - default_search_provider: Linkury Smartbar Search (Enabled)
CHR - default_search_provider: search_url = hxxp://search-us.linkury.com/results.htm?cx=partner-pub-7890126930977991:5731629158&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com
CHR - default_search_provider: suggest_url = 
CHR - Extension: Facemoods = C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihflimipbcaljfnojhhknppphnnciiif\1.2.1_0\
CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.4_0\
CHR - Extension: Skype Extension = C:\Users\Marco\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.3.0.7550_0\
 
O1 HOSTS File: ([2011.05.07 17:04:11 | 000,001,021 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 im.adtech.de
O1 - Hosts: 127.0.0.1 adserver.adtech.de
O1 - Hosts: 127.0.0.1 adtech.de
O1 - Hosts: 127.0.0.1 ar.atwola.com
O1 - Hosts: 127.0.0.1 atwola.com
O1 - Hosts: 127.0.0.1 adserver.71i.de
O1 - Hosts: 127.0.0.1 adicqserver.71i.de
O1 - Hosts: 127.0.0.1 71i.de
O2:64bit: - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.5\bh\facemoods.dll (facemoods.com BHO)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~4\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.5\facemoodsTlbr.dll (facemoods.com)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4:64bit: - HKLM..\Run: [Launch LCDMon] C:\Program Files\Logitech\GamePanel Software\LCD Manager\LCDMon.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [Launch LGDCore] C:\Program Files\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4:64bit: - HKLM..\Run: [RunDLLEntry] C:\Windows\SysNative\AmbRunE.DLL (Creative Technology Ltd.)
O4:64bit: - HKLM..\Run: [VIAAUD] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VIAAUD.exe File not found
O4 - HKLM..\Run: [AdobeCS5ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [facemoods] C:\Program Files (x86)\facemoods.com\facemoods\1.4.17.5\facemoodssrv.exe (facemoods.com)
O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
O4 - HKLM..\Run: [Kone] C:\Program Files (x86)\ROCCAT\Kone Mouse\KoneHID.EXE (ROCCAT)
O4 - HKLM..\Run: [Live! Central 3] C:\Program Files (x86)\Creative\Creative Live! Cam\Live! Central 3\CTLVCentral3.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent File not found
O4 - HKCU..\Run: [EADM] D:\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [EPSON SX510W Series] C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIFIE.EXE /FU "C:\Windows\TEMP\E_SE954.tmp" /EF "HKCU" File not found
O4 - HKCU..\Run: [ESL Wire] C:\Program Files\EslWire\wire.exe (Turtle Entertainment GmbH)
O4 - HKCU..\Run: [firefox.exe] C:\Users\Marco\AppData\Roaming\Mozilla\Firefox\firefox.exe File not found
O4 - HKCU..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.5\ICQ.exe" silent loginmode=4 File not found
O4 - Startup: C:\Users\Marco\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Free YouTube Download - C:\Users\Marco\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Marco\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~4\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Free YouTube Download - C:\Users\Marco\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Marco\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~4\Office14\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0FEFFC9E-4745-489E-BA70-66BCFE2058AF}: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28:64bit: - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~4\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.09.09 20:35:07 | 000,206,657 | R--- | M] () - F:\Autorun.ico -- [ CDFS ]
O32 - AutoRun File - [2011.10.07 23:43:22 | 000,000,106 | R--- | M] () - F:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{08ae4253-e68c-11e0-a839-00ff01000001}\Shell - "" = AutoRun
O33 - MountPoints2\{08ae4253-e68c-11e0-a839-00ff01000001}\Shell\AutoRun\command - "" = H:\raf-dead_island.exe
O33 - MountPoints2\{0ee99b56-7167-11e0-bed8-0025226233d2}\Shell - "" = AutoRun
O33 - MountPoints2\{0ee99b56-7167-11e0-bed8-0025226233d2}\Shell\AutoRun\command - "" = G:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.12.19 21:40:17 | 000,000,000 | ---D | C] -- C:\Users\Marco\Desktop\Neuer Ordner
[2011.12.19 20:49:56 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{7A4A52B9-377D-4EBE-B2DB-5DADB15CF8CA}
[2011.12.19 20:49:33 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{DB81625B-8BA1-4B8A-9620-E58C8F3867D0}
[2011.12.19 19:58:20 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2011.12.15 21:53:25 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{3DDD9FB9-54C9-4221-8686-1BDEC4368FFA}
[2011.12.15 21:53:03 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{986B0CA6-EB67-44EB-910B-C337479249A2}
[2011.12.14 21:22:11 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2011.12.14 21:21:07 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.12.14 21:21:07 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.12.14 21:21:06 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.12.14 21:21:05 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.12.14 21:21:05 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.12.14 21:21:03 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2011.12.14 21:21:03 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2011.12.14 21:20:59 | 000,723,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2011.12.14 21:20:59 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2011.12.13 21:05:51 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{EE6CC4F8-8AB6-4ACC-A4DB-A48748F51DF4}
[2011.12.13 21:05:29 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{643BDC7B-5F12-42A0-BDD0-F942D0658BAC}
[2011.12.12 17:54:00 | 000,021,992 | ---- | C] (CPUID) -- C:\Windows\SysNative\drivers\cpuz135_x64.sys
[2011.12.12 17:54:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
[2011.12.12 17:53:59 | 000,000,000 | ---D | C] -- C:\Program Files\CPUID
[2011.12.12 16:05:21 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{6B103A45-4DA8-4EC6-8A11-25DA26E90DD5}
[2011.12.12 16:04:59 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{8A215682-17B2-43B0-91AA-E7F5AB3F42E3}
[2011.12.11 11:48:47 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{9C9C0706-172E-43C3-93BF-BF09E790FCCE}
[2011.12.11 11:48:35 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{C00DCAB3-A528-4E6E-8EC4-703B1F76695B}
[2011.12.10 15:13:54 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{29449A9B-C138-4897-A7D1-DD4859982A76}
[2011.12.10 15:13:32 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{4671B79F-B5A4-4936-8A7E-498AC43BA2B0}
[2011.12.08 22:35:42 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{66FD9351-E19F-4113-9ADE-0DAFCC77D3E8}
[2011.12.08 22:35:20 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{23C7708A-C0AA-46B7-8388-AA2DF1F94C87}
[2011.12.07 21:45:01 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{F3549DE4-E673-4FE1-A536-8F75ACD96B31}
[2011.12.05 16:13:01 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{53D49838-5765-417F-838C-10910515E954}
[2011.12.05 16:12:39 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{75825F1F-7A20-44AB-ACAB-F4183ED47C6E}
[2011.12.04 19:21:03 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{2020A0F5-8A5C-4D8A-B8D6-A123F1783598}
[2011.12.04 19:20:40 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{1A81A32C-F7E0-4FD1-913A-ED84CCFB7E13}
[2011.12.01 17:11:33 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{A9B13C01-E9E9-4522-AA52-4B24E9D2469F}
[2011.12.01 17:11:10 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{B24F0DFC-B124-4B75-9A06-B613EB7AC41E}
[2011.11.29 16:23:54 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{39DCD1B4-65A9-490C-B871-F53010CA00F2}
[2011.11.29 16:23:32 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{B7299B00-B4C6-4897-BC00-28729C0228F5}
[2011.11.29 15:17:03 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{EA36BB89-CA62-4F37-AAAF-1808B3E034A5}
[2011.11.28 20:32:47 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{66737E0A-CB8A-4476-B2AD-313A41A05B52}
[2011.11.28 20:32:34 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{135EC230-C9EF-4CD8-A006-08930C45FB54}
[2011.11.27 18:17:58 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{F7FEEE97-4840-4659-9720-91E74EFD4EB1}
[2011.11.27 18:17:47 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{4FFCD66A-B91F-4075-AC8F-FD1FFAC0743E}
[2011.11.26 12:06:30 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{A53E1DC4-CB79-4AE3-A072-91BF79D2E4B7}
[2011.11.26 12:06:07 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{FEB35ED7-33DB-4987-9DBF-D940E986A92A}
[2011.11.24 22:37:48 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{004075D9-729D-4193-B52F-3CD018431EF1}
[2011.11.24 22:37:37 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{5A8A4803-9F13-47C9-A7E6-DE5FD63D5209}
[2011.11.22 17:51:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\xing shared
[2011.11.22 17:50:52 | 000,198,832 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll
[2011.11.22 17:50:22 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5016.dll
[2011.11.22 17:50:22 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5032.dll
[2011.11.22 17:50:21 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2011.11.22 17:50:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Real
[2011.11.22 16:06:37 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{88D72AA6-8C18-487D-8C4A-3474E01834CE}
[2011.11.22 16:06:23 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{B73F1C96-6A3E-4492-BC83-0553C96824D7}
[2011.11.21 16:38:39 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{8222EF30-132C-45BC-8EDF-3CABA25B8FAC}
[2011.11.21 16:38:27 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Local\{475B4F2E-9C13-4D93-B147-D7292AC51FC1}
[2011.11.20 21:05:14 | 000,000,000 | ---D | C] -- C:\ProgramData\NCH Software
[2011.11.20 21:05:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite
[2011.11.20 21:05:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Related Programs
[2011.11.20 21:05:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NCH Software
[2011.11.20 21:04:54 | 000,000,000 | ---D | C] -- C:\Users\Marco\AppData\Roaming\NCH Software
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2011.12.19 21:32:33 | 001,651,036 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.12.19 21:32:33 | 000,710,848 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.12.19 21:32:33 | 000,663,860 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.12.19 21:32:33 | 000,153,940 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.12.19 21:32:33 | 000,125,990 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.12.19 21:31:06 | 000,018,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.12.19 21:31:06 | 000,018,000 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.12.19 21:25:35 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.12.19 21:14:59 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2011.12.19 21:14:59 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.12.16 16:55:38 | 000,048,489 | ---- | M] () -- C:\Users\Marco\Desktop\390125_261333483921725_100001352269889_642832_533205290_n.jpg
[2011.12.16 13:40:40 | 000,280,904 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2011.12.15 20:13:35 | 000,009,563 | ---- | M] () -- C:\Users\Marco\Desktop\spicker.odt
[2011.12.15 20:04:11 | 000,007,334 | ---- | M] () -- C:\Users\Marco\Desktop\OpenDocument Text (neu) (4).odt
[2011.12.15 16:01:02 | 004,991,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.12.13 22:23:44 | 000,000,554 | ---- | M] () -- C:\Users\Marco\Desktop\World of Warcraft.lnk
[2011.12.12 17:54:01 | 000,000,869 | ---- | M] () -- C:\Users\Public\Desktop\CPUID CPU-Z.lnk
[2011.12.06 20:56:26 | 000,000,688 | ---- | M] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
[2011.12.06 20:56:03 | 000,075,136 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2011.12.06 20:35:13 | 000,000,566 | ---- | M] () -- C:\Users\Marco\Desktop\Minecraft(2) - Verknüpfung.lnk
[2011.12.04 17:07:41 | 000,013,480 | ---- | M] () -- C:\Users\Marco\Desktop\1366,playerlogo.jpg
[2011.12.01 17:19:37 | 000,000,944 | ---- | M] () -- C:\Users\Public\Desktop\ESL Wire.lnk
[2011.11.28 20:58:01 | 000,014,866 | ---- | M] () -- C:\Users\Marco\Desktop\das ist ein man.png
[2011.11.28 20:55:59 | 000,018,909 | ---- | M] () -- C:\Users\Marco\Desktop\faaaail.png
[2011.11.28 13:21:00 | 000,168,864 | ---- | M] () -- C:\Program Files\Common Files\WireHelpSvc.exe
[2011.11.28 13:20:48 | 000,147,472 | ---- | M] (<Turtle Entertainment>) -- C:\Windows\SysNative\drivers\ESLWireACD.sys
[2011.11.26 19:17:48 | 000,053,720 | ---- | M] () -- C:\Users\Marco\Desktop\375291_281909361852661_100001007980158_807005_1610876498_n.jpg
[2011.11.26 18:51:54 | 000,048,205 | ---- | M] () -- C:\Users\Marco\Desktop\314600_299510353398140_226210720728104_1411702_129173368_n.jpg
[2011.11.22 17:51:36 | 000,001,948 | ---- | M] () -- C:\Users\Public\Desktop\Kostenlose Angebote.lnk
[2011.11.22 17:51:36 | 000,001,132 | ---- | M] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2011.11.22 17:50:52 | 000,198,832 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll
[2011.11.22 17:50:22 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5016.dll
[2011.11.22 17:50:22 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5032.dll
[2011.11.22 17:50:21 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll
[2011.11.21 21:56:27 | 000,001,398 | ---- | M] () -- C:\Users\Marco\Desktop\Free YouTube to MP3 Converter.lnk
[2011.11.21 16:37:44 | 000,031,572 | ---- | M] () -- C:\Users\Marco\Desktop\Bewerbung NEU.odt
[2011.11.20 21:05:02 | 000,001,110 | ---- | M] () -- C:\Users\Public\Desktop\Debut Video Capture Software.lnk
[2 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2011.12.17 17:43:24 | 011,098,851 | ---- | C] () -- C:\Users\Marco\Desktop\01_whigfield_-_right_in_the_night_(favretto_and_battini_remix_extended)-sl.mp3
[2011.12.16 16:55:37 | 000,048,489 | ---- | C] () -- C:\Users\Marco\Desktop\390125_261333483921725_100001352269889_642832_533205290_n.jpg
[2011.12.15 20:13:33 | 000,009,563 | ---- | C] () -- C:\Users\Marco\Desktop\spicker.odt
[2011.12.15 20:04:11 | 000,007,334 | ---- | C] () -- C:\Users\Marco\Desktop\OpenDocument Text (neu) (4).odt
[2011.12.15 16:02:28 | 000,000,312 | ---- | C] () -- C:\Users\Marco\Desktop\Curse Client.appref-ms
[2011.12.12 17:54:01 | 000,000,869 | ---- | C] () -- C:\Users\Public\Desktop\CPUID CPU-Z.lnk
[2011.12.06 20:35:13 | 000,000,566 | ---- | C] () -- C:\Users\Marco\Desktop\Minecraft(2) - Verknüpfung.lnk
[2011.12.04 17:07:40 | 000,013,480 | ---- | C] () -- C:\Users\Marco\Desktop\1366,playerlogo.jpg
[2011.11.28 20:58:01 | 000,014,866 | ---- | C] () -- C:\Users\Marco\Desktop\das ist ein man.png
[2011.11.28 20:55:59 | 000,018,909 | ---- | C] () -- C:\Users\Marco\Desktop\faaaail.png
[2011.11.26 19:17:47 | 000,053,720 | ---- | C] () -- C:\Users\Marco\Desktop\375291_281909361852661_100001007980158_807005_1610876498_n.jpg
[2011.11.26 18:51:54 | 000,048,205 | ---- | C] () -- C:\Users\Marco\Desktop\314600_299510353398140_226210720728104_1411702_129173368_n.jpg
[2011.11.22 17:51:36 | 000,001,948 | ---- | C] () -- C:\Users\Public\Desktop\Kostenlose Angebote.lnk
[2011.11.22 17:51:36 | 000,001,132 | ---- | C] () -- C:\Users\Public\Desktop\RealPlayer.lnk
[2011.11.21 16:37:42 | 000,031,572 | ---- | C] () -- C:\Users\Marco\Desktop\Bewerbung NEU.odt
[2011.11.20 21:05:02 | 000,001,122 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debut Video Capture Software.lnk
[2011.11.20 21:05:02 | 000,001,110 | ---- | C] () -- C:\Users\Public\Desktop\Debut Video Capture Software.lnk
[2011.10.14 23:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.08.30 15:22:05 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\Access.dat
[2011.07.06 09:05:42 | 000,168,864 | ---- | C] () -- C:\Program Files\Common Files\WireHelpSvc.exe
[2011.06.05 14:08:47 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011.02.27 15:14:26 | 000,011,776 | ---- | C] () -- C:\Users\Marco\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.02.11 14:17:33 | 000,073,728 | ---- | C] () -- C:\Windows\SysWow64\GkSui18.EXE
[2011.01.24 21:41:51 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010.12.10 12:43:01 | 000,013,931 | ---- | C] () -- C:\Windows\SysWow64\RaCoInst.dat
[2010.11.14 23:18:12 | 000,000,193 | ---- | C] () -- C:\Windows\WORDPAD.INI
[2010.11.07 16:35:44 | 000,000,093 | ---- | C] () -- C:\Users\Marco\AppData\Local\fusioncache.dat
[2010.11.06 13:58:32 | 001,670,446 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010.11.06 13:57:39 | 000,669,184 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2010.11.06 11:40:04 | 000,000,132 | ---- | C] () -- C:\Users\Marco\AppData\Roaming\Adobe PNG Format CS5 Prefs
[2010.11.03 13:49:57 | 000,111,932 | ---- | C] () -- C:\Windows\SysWow64\EPPICPrinterDB.dat
[2010.11.03 13:49:57 | 000,031,053 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern131.dat
[2010.11.03 13:49:57 | 000,027,417 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern121.dat
[2010.11.03 13:49:57 | 000,026,154 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern1.dat
[2010.11.03 13:49:57 | 000,024,903 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern3.dat
[2010.11.03 13:49:57 | 000,021,390 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern5.dat
[2010.11.03 13:49:57 | 000,020,148 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern2.dat
[2010.11.03 13:49:57 | 000,011,811 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern4.dat
[2010.11.03 13:49:57 | 000,004,943 | ---- | C] () -- C:\Windows\SysWow64\EPPICPattern6.dat
[2010.11.03 13:49:57 | 000,001,146 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_DU.dat
[2010.11.03 13:49:57 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_PT.dat
[2010.11.03 13:49:57 | 000,001,139 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_BP.dat
[2010.11.03 13:49:57 | 000,001,136 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_ES.dat
[2010.11.03 13:49:57 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_FR.dat
[2010.11.03 13:49:57 | 000,001,129 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_CF.dat
[2010.11.03 13:49:57 | 000,001,120 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_IT.dat
[2010.11.03 13:49:57 | 000,001,107 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_GE.dat
[2010.11.03 13:49:57 | 000,001,104 | ---- | C] () -- C:\Windows\SysWow64\EPPICPresetData_EN.dat
[2010.11.03 13:49:57 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2010.10.31 12:08:38 | 002,434,856 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_bc2.exe
[2010.10.29 23:00:15 | 002,601,752 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_moh.exe
[2010.10.29 23:00:15 | 000,280,904 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010.10.29 23:00:15 | 000,075,136 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2010.10.29 18:56:01 | 000,021,504 | ---- | C] () -- C:\Windows\jestertb.dll
[2010.10.29 18:20:29 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010.08.16 09:09:59 | 000,007,764 | ---- | C] () -- C:\Windows\cadx2.ini
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2002.07.24 23:43:46 | 000,667,648 | ---- | C] () -- C:\Windows\SysWow64\FreeImage.dll
 
========== LOP Check ==========
 
[2011.04.28 09:39:32 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\.minecraft
[2011.09.24 10:34:30 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\DAEMON Tools Lite
[2011.11.21 21:56:42 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\DVDVideoSoft
[2011.08.17 09:31:16 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.02.17 21:49:23 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\EPSON
[2011.03.20 21:38:58 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\Firefly Studios
[2011.08.30 21:29:11 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\GameRanger
[2010.11.06 17:01:57 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\GHISLER
[2011.05.19 19:26:34 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\HTC
[2011.05.19 19:30:13 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\HTC.388BC06ACDAB6261375BCE37FBA2E023C0D7EE34.1
[2011.12.19 21:27:16 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\ICQ
[2011.09.24 10:34:03 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\OpenCandy
[2010.10.29 20:00:24 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\OpenOffice.org
[2011.10.26 19:33:32 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\Origin
[2010.10.29 19:30:55 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\ROCCAT
[2010.11.01 12:40:09 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2010.10.29 20:17:55 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\TeamViewer
[2011.06.16 23:00:50 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\TS3Client
[2011.08.30 19:06:32 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\Tunngle
[2010.11.08 17:41:26 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\Windows Live Writer
[2011.05.02 14:26:49 | 000,000,000 | ---D | M] -- C:\Users\Marco\AppData\Roaming\WindSolutions
[2011.12.03 18:27:58 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >

Windowssystem Blockiert ...

Log-Analyse und Auswertung: Windowssystem Blockiert ...

Windowssystem Blockiert ...

Windowssystem Blockiert ...

Windowssystem Blockiert ...

Ähnliche Themen: Windowssystem Blockiert ...

19.12.2011, 21:56	#1
HUSC	Windowssystem Blockiert ... Wie bei vielen anderen das Problem "Ihr Windowssystem ..."

19.12.2011, 22:00	#2
HUSC	Windowssystem Blockiert ... Bin echt am verzweifeln ich hoffe ihr findet was (: Habe mir gerade die anderen Threads durchgelesen ich muss echt sagen ihr macht das ganze hier einfach nur spitzte :X ich kann es kaum glauben das es so nette menschen gibt ! __________________