| . |
| DDS (Ver_2011-08-26.01) - NTFSAMD64 |
| Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 1.6.0_26 |
| Run by Verena at 8:52:01 on 2012-02-25 |
| Microsoft Windows 7 Home Premium 6.1.7600.0.1252.43.1031.18.3893.1453 [GMT 1:00] |
| . |
| AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7} |
| SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} |
| SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A} |
| . |
| ============== Running Processes =============== |
| . |
| C:\Windows\system32\wininit.exe |
| C:\Windows\system32\lsm.exe |
| C:\Windows\system32\svchost.exe -k DcomLaunch |
| C:\Windows\system32\ibmpmsvc.exe |
| C:\Windows\system32\svchost.exe -k RPCSS |
| C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted |
| C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted |
| C:\Windows\system32\svchost.exe -k netsvcs |
| C:\Windows\system32\svchost.exe -k LocalService |
| C:\Windows\system32\svchost.exe -k NetworkService |
| C:\Windows\system32\WLANExt.exe |
| C:\Windows\system32\conhost.exe |
| C:\Windows\System32\spoolsv.exe |
| C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe |
| C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork |
| C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe |
| C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe |
| C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe |
| C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe |
| C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe |
| C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe |
| C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe |
| C:\Windows\system32\conhost.exe |
| C:\Program Files (x86)\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe |
| C:\Program Files (x86)\Bonjour\mDNSResponder.exe |
| C:\Program Files\Intel\WiFi\bin\EvtEng.exe |
| C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation |
| C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe |
| C:\Windows\SysWOW64\svchost.exe -k hpdevmgmt |
| C:\Program Files\LENOVO\HOTKEY\CAMMUTE.exe |
| C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe |
| C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe |
| C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe |
| C:\Program Files\CyberLink\Shared Files\RichVideo64.exe |
| C:\Program Files (x86)\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe |
| c:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe |
| C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE |
| C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe |
| C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe |
| C:\Windows\system32\wbem\wmiprvse.exe |
| C:\Windows\system32\wbem\unsecapp.exe |
| C:\Windows\System32\alg.exe |
| C:\Windows\system32\svchost.exe -k HPService |
| C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted |
| C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe |
| C:\Program Files (x86)\Common Files\InterVideo\RegMgr\iviRegMgr.exe |
| c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe |
| c:\Program Files (x86)\Lenovo\System Update\SUService.exe |
| C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe |
| C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe |
| C:\Windows\System32\svchost.exe -k secsvcs |
| C:\Program Files\Windows Media Player\wmpnetwk.exe |
| C:\Windows\system32\SearchIndexer.exe |
| C:\Windows\system32\taskhost.exe |
| C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe |
| C:\Windows\system32\Dwm.exe |
| C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe |
| C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe |
| C:\Windows\System32\TpShocks.exe |
| C:\Windows\System32\hkcmd.exe |
| C:\Windows\System32\igfxpers.exe |
| C:\Program Files\Lenovo\Client Security Solution\cssauth.exe |
| C:\Windows\system32\igfxsrvc.exe |
| C:\Program Files\Synaptics\SynTP\SynTPEnh.exe |
| C:\Program Files\Windows Sidebar\sidebar.exe |
| C:\Program Files (x86)\Audible\Bin\AudibleDownloadHelper.exe |
| C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe |
| C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe |
| C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe |
| C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe |
| C:\Program Files\Synaptics\SynTP\SynTPLpr.exe |
| C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe |
| C:\Program Files\Synaptics\SynTP\SynTPHelper.exe |
| C:\Windows\SysWOW64\rundll32.exe |
| C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe |
| C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe |
| C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe |
| C:\Windows\system32\rundll32.exe |
| C:\Windows\system32\igfxext.exe |
| C:\Program Files (x86)\iTunes\iTunesHelper.exe |
| C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe |
| C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe |
| C:\Windows\System32\svchost.exe -k LocalServicePeerNet |
| C:\Program Files\iPod\bin\iPodService.exe |
| C:\Windows\system32\DllHost.exe |
| C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe |
| C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe |
| C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe |
| C:\Windows\system32\svchost.exe -k SDRSVC |
| C:\Windows\explorer.exe |
| C:\Windows\SysWOW64\NOTEPAD.EXE |
| C:\Windows\system32\taskhost.exe |
| C:\Windows\system32\Dwm.exe |
| C:\PROGRA~1\Lenovo\HOTKEY\tpnumlkd.exe |
| C:\Windows\Explorer.EXE |
| C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe |
| C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe |
| C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe |
| C:\Windows\System32\TpShocks.exe |
| C:\Windows\System32\hkcmd.exe |
| C:\Windows\system32\igfxsrvc.exe |
| C:\Windows\System32\igfxpers.exe |
| C:\Program Files\Lenovo\Client Security Solution\cssauth.exe |
| C:\Program Files\Synaptics\SynTP\SynTPEnh.exe |
| C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe |
| C:\Program Files (x86)\Audible\Bin\AudibleDownloadHelper.exe |
| C:\Program Files\Synaptics\SynTP\SynTPLpr.exe |
| C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe |
| C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe |
| C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe |
| C:\Program Files\Synaptics\SynTP\SynTPHelper.exe |
| C:\Windows\SysWOW64\rundll32.exe |
| C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe |
| C:\Windows\system32\rundll32.exe |
| C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe |
| C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe |
| C:\Program Files (x86)\iTunes\iTunesHelper.exe |
| C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe |
| C:\Windows\system32\igfxext.exe |
| C:\Program Files (x86)\HP\Digital Imaging\bin\hpqSTE08.exe |
| C:\Program Files (x86)\HP\Digital Imaging\bin\hpqbam08.exe |
| C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe |
| C:\Windows\system32\LogonUI.exe |
| C:\Windows\System32\svchost.exe -k HPZ12 |
| C:\Windows\System32\svchost.exe -k HPZ12 |
| C:\Program Files (x86)\Mozilla Firefox\firefox.exe |
| C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe |
| C:\Windows\system32\SearchProtocolHost.exe |
| C:\Windows\system32\SearchFilterHost.exe |
| C:\Users\Verena\Downloads\Defogger.exe |
| C:\Windows\system32\conhost.exe |
| C:\Windows\system32\DllHost.exe |
| C:\Windows\system32\DllHost.exe |
| C:\Windows\SysWOW64\cmd.exe |
| C:\Windows\system32\conhost.exe |
| C:\Windows\SysWOW64\cscript.exe |
| C:\Windows\system32\wbem\wmiprvse.exe |
| . |
| ============== Pseudo HJT Report =============== |
| . |
| uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&affID=101287&mntrId=56dfe2f80000000000000026c737aa7b |
| uDefault_Page_URL = hxxp://lenovo.msn.com |
| uInternet Settings,ProxyOverride = *.local |
| mURLSearchHooks: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll |
| mWinlogon: Userinit=userinit.exe |
| BHO: HP Print Enhancer: {0347c33e-8762-4905-bf09-768834316c61} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll |
| BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll |
| BHO: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll |
| BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll |
| BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll |
| BHO: Windows Live ID-Anmelde-Hilfsprogramm: {9030d464-4c02-4abf-8ecc-5164760863c6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll |
| BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll |
| BHO: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll |
| BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll |
| BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll |
| BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll |
| BHO: IePasswordManagerHelper Class: {bf468356-bb7e-42d7-9f15-4f3b9bcfced2} - C:\Program Files (x86)\Lenovo\Client Security Solution\tvtpwm_ie_com.dll |
| BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll |
| BHO: HP Smart BHO Class: {ffffffff-cf4e-4f2b-bdc2-0e72e116a856} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll |
| TB: MyAshampoo Toolbar: {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - C:\Program Files (x86)\MyAshampoo\tbMyAs.dll |
| TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - C:\Program Files (x86)\ConduitEngine\ConduitEngine.dll |
| TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll |
| TB: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File |
| EB: HP Smart Web Printing: {555d4d79-4bd2-4094-a395-cfc534424a05} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_bho.dll |
| uRun: [Google Update] "C:\Users\Verena\AppData\Local\Google\Update\GoogleUpdate.exe" /c |
| uRun: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun |
| uRun: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized |
| uRun: [swg] "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" |
| mRun: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor |
| mRun: [Message Center Plus] C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe /start |
| mRun: [<NO NAME>] |
| mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" |
| mRun: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min |
| mRun: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe |
| mRun: [IR_SERVER] C:\PROGRA~2\Realtek\REALTE~1\IR_SERVER.exe |
| mRun: [Recordpad] "C:\Program Files (x86)\NCH Swift Sound\Recordpad\recordpad.exe" -logon |
| mRun: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime |
| mRun: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" |
| mRun: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe |
| mRun: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" |
| mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" |
| mRun: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe |
| StartupFolder: C:\Users\Verena\AppData\Roaming\MICROS~1\Windows\STARTM~1\Programs\Startup\Dropbox.lnk - C:\Users\Verena\AppData\Roaming\Dropbox\bin\Dropbox.exe |
| StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\AUDIBL~1.LNK - C:\Program Files (x86)\Audible\Bin\AudibleDownloadHelper.exe |
| StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\BLUETO~1.LNK - C:\Program Files (x86)\ThinkPad\Bluetooth Software\BTTray.exe |
| StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\HPDIGI~1.LNK - C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe |
| StartupFolder: C:\PROGRA~3\MICROS~1\Windows\STARTM~1\Programs\Startup\TMMONI~1.LNK - C:\Program Files (x86)\ArcSoft\TotalMedia 3.5\TMMonitor.exe |
| mPolicies-explorer: NoActiveDesktop = 1 (0x1) |
| mPolicies-explorer: NoActiveDesktopChanges = 1 (0x1) |
| mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5) |
| mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) |
| mPolicies-system: EnableUIADesktopToggle = 0 (0x0) |
| IE: Free YouTube to Mp3 Converter - C:\Users\Verena\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm |
| IE: Google Sidewiki... - C:\Program Files (x86)\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_6CE5017F567343CA.dll/cmsidewiki.html |
| IE: Nach Microsoft E&xel exportieren - C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000 |
| IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm |
| IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll |
| IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll |
| IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll |
| IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll |
| IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL |
| IE: {DDE87865-83C5-48c4-8357-2F5B1AA84522} - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll |
| IE: {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - {F4F55DC8-0B69-4DFE-BA94-CB677B88B2A3} - C:\Program Files (x86)\Lenovo\Client Security Solution\tvtpwm_ie_com.dll |
| DPF: {233C1507-6A77-46A4-9443-F871F945D258} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab |
| DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab |
| DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} - hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx |
| DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab |
| DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab |
| TCP: DhcpNameServer = 10.0.0.138 10.0.0.138 |
| TCP: Interfaces\{839561D4-8578-4741-8237-CA1DA7ACF866} : DhcpNameServer = 10.0.0.138 10.0.0.138 |
| TCP: Interfaces\{839561D4-8578-4741-8237-CA1DA7ACF866}\6686C696E6A7 : DhcpNameServer = 10.70.0.1 10.70.0.2 |
| TCP: Interfaces\{D5CF92D3-24BC-441B-BCC3-0FCC6B23C0C0} : DhcpNameServer = 10.0.0.138 10.0.0.138 |
| Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll |
| Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll |
| Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll |
| SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll |
| LSA: Notification Packages = scecli ACGina |
| {0347C33E-8762-4905-BF09-768834316C61} |
| {18DF081C-E8AD-4283-A596-FA578C2EBDC3} |
| {30F9B915-B755-4826-820B-08FBA6BD249D} |
| {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} |
| {72853161-30C5-4D22-B7F9-0BBC1D38A37E} |
| {9030D464-4C02-4ABF-8ECC-5164760863C6} |
| {9FDDE16B-836F-4806-AB1F-1455CBEFF289} |
| {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} |
| {AA58ED58-01DD-4d91-8333-CF10577473F7} |
| {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} |
| {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} |
| {BF468356-BB7E-42D7-9F15-4F3B9BCFCED2} |
| {DBC80044-A445-435b-BC74-9C25C1C588A9} |
| {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} |
| {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} |
| {30F9B915-B755-4826-820B-08FBA6BD249D} |
| {2318C2B1-4965-11d4-9B18-009027A5CD4F} |
| TB-X64: {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File |
| EB-X64: {555D4D79-4BD2-4094-A395-CFC534424A05} - No File |
| mRun-x64: [PWMTRV] rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor |
| mRun-x64: [Message Center Plus] C:\Program Files (x86)\LENOVO\Message Center Plus\MCPLaunch.exe /start |
| mRun-x64: [(Standard)] |
| mRun-x64: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" |
| mRun-x64: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min |
| mRun-x64: [ArcSoft Connection Service] C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACDaemon.exe |
| mRun-x64: [IR_SERVER] C:\PROGRA~2\Realtek\REALTE~1\IR_SERVER.exe |
| mRun-x64: [Recordpad] "C:\Program Files (x86)\NCH Swift Sound\Recordpad\recordpad.exe" -logon |
| mRun-x64: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime |
| mRun-x64: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe" |
| mRun-x64: [AppleSyncNotifier] C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe |
| mRun-x64: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" |
| mRun-x64: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" |
| mRun-x64: [HP Software Update] C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe |
| IE-X64: {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\ThinkPad\Bluetooth Software\btsendto_ie.htm |
| SEH-X64: {B5A7F190-DDA6-4420-B3BA-52453494E6CD}: Groove GFS Stub Execution Hook |
| . |
| ================= FIREFOX =================== |
| . |
| FF - ProfilePath - C:\Users\Verena\AppData\Roaming\Mozilla\Firefox\Profiles\m9tsse7f.default\ |
| FF - prefs.js: browser.search.selectedEngine - Google |
| FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.de/ |
| FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=56dfe2f80000000000000026c737aa7b&tlver=1.4.35.10&affID=101287 |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpClipBook.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpClipBookDB.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpNeoLogger.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSaturn.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSeymour.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSmartSelect.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSmartWebPrinting.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpSWPOperation.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPLogging.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPMTC.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXPMTL.dll |
| FF - component: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3\components\hpXREStub.dll |
| FF - component: C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}\components\SkypeFfComponent.dll |
| FF - plugin: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll |
| FF - plugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll |
| FF - plugin: C:\Program Files (x86)\Google\Update\1.2.183.13\npGoogleOneClick8.dll |
| FF - plugin: C:\Program Files (x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll |
| FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.53\npGoogleUpdate3.dll |
| FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.57\npGoogleUpdate3.dll |
| FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.65\npGoogleUpdate3.dll |
| FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.69\npGoogleUpdate3.dll |
| FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll |
| FF - plugin: C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll |
| FF - plugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll |
| FF - plugin: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrlui.dll |
| FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npdeployJava1.dll |
| FF - plugin: C:\Program Files (x86)\Mozilla Firefox\plugins\npmusicn.dll |
| FF - plugin: C:\Program Files (x86)\Musicnotes\npmusicn.dll |
| FF - plugin: C:\Program Files (x86)\Musicnotes\NPSibelius.dll |
| FF - plugin: C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll |
| FF - plugin: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll |
| FF - plugin: C:\Users\Verena\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll |
| FF - plugin: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll |
| . |
| ============= SERVICES / DRIVERS =============== |
| . |
| R0 TPDIGIMN;TPDIGIMN;C:\Windows\system32\DRIVERS\ApsHM64.sys --> C:\Windows\system32\DRIVERS\ApsHM64.sys [?] |
| R1 lenovo.smi;Lenovo System Interface Driver;C:\Windows\system32\DRIVERS\smiifx64.sys --> C:\Windows\system32\DRIVERS\smiifx64.sys [?] |
| R1 vwififlt;Virtual WiFi Filter Driver;C:\Windows\system32\DRIVERS\vwififlt.sys --> C:\Windows\system32\DRIVERS\vwififlt.sys [?] |
| R2 AdobeARMservice;Adobe Acrobat Update Service;C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-6-6 64952] |
| R2 AntiVirSchedulerService;Avira AntiVir Planer;C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [2010-6-26 136360] |
| R2 AntiVirService;Avira AntiVir Guard;C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [2010-6-26 269480] |
| R2 avgntflt;avgntflt;C:\Windows\system32\DRIVERS\avgntflt.sys --> C:\Windows\system32\DRIVERS\avgntflt.sys [?] |
| R2 LENOVO.CAMMUTE;Lenovo Camera Mute;C:\Program Files\Lenovo\HOTKEY\cammute.exe [2009-12-10 54632] |
| R2 LENOVO.MICMUTE;Lenovo Microphone Mute;C:\Program Files\Lenovo\HOTKEY\micmute.exe [2009-12-10 44984] |
| R2 RichVideo64;Cyberlink RichVideo64 Service(CRVS);C:\Program Files\CyberLink\Shared files\RichVideo64.exe [2011-2-15 386344] |
| R2 TPHKSVC;Anzeige am Bildschirm;C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe [2009-12-10 62904] |
| R2 TurboB;Turbo Boost UI Monitor driver;C:\Windows\system32\DRIVERS\TurboB.sys --> C:\Windows\system32\DRIVERS\TurboB.sys [?] |
| R2 UNS;Intel(R) Management & Security Application User Notification Service;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-5-4 2320920] |
| R3 5U877;USB Video Device;C:\Windows\system32\DRIVERS\5U877.sys --> C:\Windows\system32\DRIVERS\5U877.sys [?] |
| R3 HECIx64;Intel(R) Management Engine Interface;C:\Windows\system32\DRIVERS\HECIx64.sys --> C:\Windows\system32\DRIVERS\HECIx64.sys [?] |
| R3 Impcd;Impcd;C:\Windows\system32\DRIVERS\Impcd.sys --> C:\Windows\system32\DRIVERS\Impcd.sys [?] |
| R3 IntcDAud;Intel(R) Display-Audio;C:\Windows\system32\DRIVERS\IntcDAud.sys --> C:\Windows\system32\DRIVERS\IntcDAud.sys [?] |
| R3 NETw5s64;Intel(R) Wireless WiFi Link Adaptertreiber für Windows 7 64-Bit;C:\Windows\system32\DRIVERS\NETw5s64.sys --> C:\Windows\system32\DRIVERS\NETw5s64.sys [?] |
| R3 RTL8167;Realtek 8167 NT Driver;C:\Windows\system32\DRIVERS\Rt64win7.sys --> C:\Windows\system32\DRIVERS\Rt64win7.sys [?] |
| R3 vwifimp;Microsoft Virtual WiFi Miniport Service;C:\Windows\system32\DRIVERS\vwifimp.sys --> C:\Windows\system32\DRIVERS\vwifimp.sys [?] |
| S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] |
| S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-3-18 138576] |
| S2 gupdate;Google Update Service (gupdate);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-9-8 135664] |
| S3 btusbflt;Bluetooth USB Filter;C:\Windows\system32\drivers\btusbflt.sys --> C:\Windows\system32\drivers\btusbflt.sys [?] |
| S3 btwl2cap;Bluetooth L2CAP Service;C:\Windows\system32\DRIVERS\btwl2cap.sys --> C:\Windows\system32\DRIVERS\btwl2cap.sys [?] |
| S3 fssfltr;fssfltr;C:\Windows\system32\DRIVERS\fssfltr.sys --> C:\Windows\system32\DRIVERS\fssfltr.sys [?] |
| S3 fsssvc;Windows Live Family Safety Service;C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-9-23 1493352] |
| S3 gupdatem;Google Update-Dienst (gupdatem);C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-9-8 135664] |
| S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit;C:\Windows\system32\DRIVERS\netw5v64.sys --> C:\Windows\system32\DRIVERS\netw5v64.sys [?] |
| S3 PCDSRVC{127174DC-C366ED8B-06020000}_0;PCDSRVC{127174DC-C366ED8B-06020000}_0 - PCDR Kernel Mode Service Helper Driver;C:\Program Files\PC-Doctor\pcdsrvc_x64.pkms [2010-5-7 24560] |
| S3 Power Manager DBC Service;Power Manager DBC Service;C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe [2010-5-4 75112] |
| S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;C:\Windows\system32\Drivers\RtsUStor.sys --> C:\Windows\system32\Drivers\RtsUStor.sys [?] |
| S3 RTL2832U_IRHID;HID Infrared Remote Receiver;C:\Windows\System32\drivers\RTL2832U_IRHID.sys [2010-7-25 44320] |
| S3 RTL2832UBDA;REALTEK 2832U BDA Driver;C:\Windows\System32\drivers\RTL2832UBDA.sys [2010-7-25 117152] |
| S3 RTL2832UUSB;REALTEK 2832U USB Driver;C:\Windows\System32\drivers\RTL2832UUSB.sys [2010-7-25 38944] |
| S3 SrvHsfHDA;SrvHsfHDA;C:\Windows\system32\DRIVERS\VSTAZL6.SYS --> C:\Windows\system32\DRIVERS\VSTAZL6.SYS [?] |
| S3 SrvHsfV92;SrvHsfV92;C:\Windows\system32\DRIVERS\VSTDPV6.SYS --> C:\Windows\system32\DRIVERS\VSTDPV6.SYS [?] |
| S3 SrvHsfWinac;SrvHsfWinac;C:\Windows\system32\DRIVERS\VSTCNXT6.SYS --> C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [?] |
| S3 stdriver;Sound tap driver Upper Class Filter Driver v2.0.0.0;C:\Windows\system32\DRIVERS\stdriver64.sys --> C:\Windows\system32\DRIVERS\stdriver64.sys [?] |
| S3 TurboBoost;TurboBoost;C:\Program Files\Intel\TurboBoost\TurboBoost.exe [2009-9-29 126392] |
| S3 WatAdminSvc;Windows-Aktivierungstechnologieservice;C:\Windows\system32\Wat\WatAdminSvc.exe --> C:\Windows\system32\Wat\WatAdminSvc.exe [?] |
| S3 WSDPrintDevice;WSD-Druckunterstützung durch UMB;C:\Windows\system32\DRIVERS\WSDPrint.sys --> C:\Windows\system32\DRIVERS\WSDPrint.sys [?] |
| S4 wlcrasvc;Windows Live Mesh remote connections service;C:\Program Files\Windows Live\Mesh\wlcrasvc.exe [2010-9-22 57184] |
| . |
| =============== File Associations =============== |
| . |
| JSEFile=%SystemRoot%\SysWow64\CScript.exe "%1" %* |
| VBEFile=%SystemRoot%\SysWow64\CScript.exe "%1" %* |
| VBSFile=%SystemRoot%\SysWow64\CScript.exe "%1" %* |
| . |
| =============== Created Last 30 ================ |
| . |
| 2012-02-24 05:56:45 69000 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{83D42F49-D9F8-461E-B88D-322F02054C64}\offreg.dll |
| 2012-02-18 09:42:29 8602168 ----a-w- C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{83D42F49-D9F8-461E-B88D-322F02054C64}\mpengine.dll |
| 2012-02-16 14:07:56 -------- d-----w- C:\c0b4e7214b8be99048 |
| . |
| ==================== Find3M ==================== |
| . |
| 2012-01-26 23:52:58 279656 ------w- C:\Windows\System32\MpSigStub.exe |
| 2011-12-04 09:25:45 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl |
| 2003-10-29 15:47:10 7266378 ----a-w- C:\Program Files\FINALE.EXE |
| 2003-10-29 15:40:58 5095424 ----a-w- C:\Program Files\FINRES32.DLL |
| 2003-10-28 13:44:44 114766 ----a-w- C:\Program Files\FINMIDI.DLL |
| 2003-10-28 10:34:05 180224 ----a-w- C:\Program Files\AIOLib.dll |
| 1999-12-02 20:01:20 32704 ----a-w- C:\Program Files\FINMID16.DLL |
| 1999-12-02 20:01:18 12800 ----a-w- C:\Program Files\FINMID32.DLL |
| . |
| ============= FINISH: 8:53:01,38 =============== |
25.02.2012, 09:33
Baum-Darstellung