GVU Trojaner erfolgreich entfernt?

schlokz

Ich hatte (habe?) den GVU Trojaner auf meinem System und ihn nach der Trojaner-Board Anleitung "GVU-Trojaner entfernen" entfernt. Bei dem Scan mit Anti-Malware wurde der GVU Trojaner auch nicht mehr aufgeführt. Es wurden aber 4 Einträge mit adware adrotator gefunden die ich gleich von Anti-Malware löschen lasse habe.

Habe ich den GVU Trojaner und den adware adrotator erfolgreich entfernt?

Inhalt der OTL.txt:

OTL logfile created on: 06.07.2012 20:33:25 - Run 1
OTL by OldTimer - Version 3.2.53.1 Folder = C:\Users\Scholle\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

2,99 Gb Total Physical Memory | 2,06 Gb Available Physical Memory | 68,74% Memory free
6,19 Gb Paging File | 5,38 Gb Available in Paging File | 86,89% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 60,24 Gb Total Space | 4,44 Gb Free Space | 7,37% Space Free | Partition Type: NTFS
Drive D: | 159,10 Gb Total Space | 2,77 Gb Free Space | 1,74% Space Free | Partition Type: NTFS

Computer Name: LAPTOP-ACER | User Name: Scholle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012.07.06 20:28:32 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Scholle\Desktop\OTL.exe
PRC - [2012.07.03 18:21:30 | 004,273,976 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe
PRC - [2012.07.03 18:21:29 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe
PRC - [2010.11.05 08:46:42 | 000,204,800 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Users\Scholle\AppData\Local\Temp\RtkBtMnt.exe
PRC - [2009.12.23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
PRC - [2008.10.29 08:29:41 | 002,927,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008.10.16 17:26:20 | 000,860,160 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Intel\WiFi\bin\EvtEng.exe
PRC - [2008.10.16 16:54:34 | 000,466,944 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe
PRC - [2008.07.20 11:45:06 | 000,182,808 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008.06.04 14:03:36 | 000,817,672 | ---- | M] (Dritek System Inc.) -- C:\Programme\Launch Manager\QtZgAcer.EXE
PRC - [2008.06.02 10:25:40 | 000,024,576 | ---- | M] () -- C:\Programme\Acer\Empowering Technology\Service\ETService.exe
PRC - [2008.05.14 17:05:30 | 000,500,784 | ---- | M] (Egis Incorporated) -- C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe
PRC - [2008.05.07 10:19:26 | 006,139,904 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008.03.25 16:25:06 | 000,050,952 | ---- | M] (UPEK Inc.) -- C:\Programme\Common Files\SPBA\upeksvr.exe
PRC - [2008.01.10 18:03:00 | 000,233,472 | ---- | M] (Acer Incorporated) -- C:\Programme\Acer\Acer VCM\RS_Service.exe
PRC - [2007.10.23 11:56:18 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe
PRC - [2006.10.27 01:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe
PRC - [2006.10.26 14:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\VS7DEBUG\mdm.exe


========== Modules (No Company Name) ==========

MOD - [2007.10.23 11:56:18 | 000,200,704 | ---- | M] () -- C:\Windows\PLFSetI.exe


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Unknown] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall)
SRV - [2012.07.03 18:21:29 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2012.06.17 12:14:57 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2010.06.11 10:28:44 | 000,085,096 | ---- | M] (Autodesk) [Disabled | Stopped] -- C:\Programme\Common Files\Autodesk Shared\Service\AdskScSrv.exe -- (Autodesk Licensing Service)
SRV - [2009.12.23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2008.10.16 17:26:20 | 000,860,160 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV - [2008.10.16 16:54:34 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV - [2008.07.20 11:45:06 | 000,354,840 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2008.06.02 10:25:40 | 000,024,576 | ---- | M] () [Auto | Running] -- C:\Programme\Acer\Empowering Technology\Service\ETService.exe -- (ETService)
SRV - [2008.05.14 17:05:30 | 000,500,784 | ---- | M] (Egis Incorporated) [Auto | Running] -- C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe -- (eDataSecurity Service)
SRV - [2008.01.21 04:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2008.01.21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008.01.10 18:03:00 | 000,233,472 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Programme\Acer\Acer VCM\RS_Service.exe -- (RS_Service)
SRV - [2006.10.27 01:47:54 | 000,065,824 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2006.10.26 20:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006.10.26 15:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
SRV - [2006.10.26 14:40:34 | 000,335,872 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\VS7DEBUG\mdm.exe -- (MDM)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | Disabled | Stopped] -- system32\DRIVERS\mausbcv.sys -- (MAUSBCV) Service for M-Audio Conectiv (WDM)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\a4djusb.sys -- (a4djusb)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\a4djavs.sys -- (a4djavs)
DRV - [2012.07.03 18:21:54 | 000,054,232 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012.07.03 18:21:53 | 000,721,000 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012.07.03 18:21:53 | 000,353,688 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012.07.03 18:21:53 | 000,057,656 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2012.07.03 18:21:53 | 000,035,928 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr.sys -- (AswRdr)
DRV - [2012.07.03 18:21:53 | 000,021,256 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012.05.31 23:11:58 | 000,436,792 | ---- | M] (Duplex Secure Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\sptd.sys -- (sptd)
DRV - [2012.03.07 01:02:43 | 000,024,408 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswKbd.sys -- (aswKbd)
DRV - [2011.07.19 11:28:06 | 000,013,312 | ---- | M] (June Fabrics Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\pneteth.sys -- (pneteth)
DRV - [2008.12.16 06:05:40 | 000,048,128 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\L1E60x86.sys -- (L1E)
DRV - [2008.11.17 07:40:22 | 003,668,480 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Intel(R)
DRV - [2008.07.18 18:23:00 | 007,545,824 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2008.06.25 07:05:06 | 000,044,064 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2008.01.21 04:23:26 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUSB)
DRV - [2007.10.19 00:36:54 | 000,008,704 | ---- | M] (Conexant Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\XAudio.sys -- (XAudio)
DRV - [2007.08.28 14:05:38 | 000,016,512 | ---- | M] (M-Audio) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\MADFU.sys -- (MADFU)
DRV - [2007.03.28 07:51:40 | 000,043,008 | ---- | M] (Winbond Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winbondcir.sys -- (winbondcir)
DRV - [2007.01.26 08:32:18 | 000,069,632 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\int15.sys -- (int15)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://homepage.acer.com/rdr.aspx?b=ACAW&l=0407&s=2&o=vp32&d=1008&m=aspire_6930g
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = hxxp://global.acer.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKCU\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = hxxp://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7RNRZ_de
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {F7D60AA2-2380-43F2-ABD7-03562BB73B19}:1.9.1
FF - prefs.js..extensions.enabledItems: {DDB1B6A9-D07A-4C85-A44C-BA0AC0A3C49A}:1.9.1
FF - prefs.js..extensions.enabledItems: plugin@yontoo.com:1.20.00
FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.69: C:\Program Files\VistaCodecPack\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{F7D60AA2-2380-43F2-ABD7-03562BB73B19}: C:\Users\Scholle\AppData\Local\{F7D60AA2-2380-43F2-ABD7-03562BB73B19} [2011.07.16 20:51:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{DDB1B6A9-D07A-4C85-A44C-BA0AC0A3C49A}: C:\Users\Nadine\AppData\Local\{DDB1B6A9-D07A-4C85-A44C-BA0AC0A3C49A} [2011.06.23 17:44:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012.07.06 19:41:27 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.06.17 12:14:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.11.13 10:59:41 | 000,000,000 | ---D | M]

[2009.04.04 13:54:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Scholle\AppData\Roaming\mozilla\Extensions
[2012.05.02 16:40:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Scholle\AppData\Roaming\mozilla\Firefox\Profiles\9u0guiy5.default\extensions
[2010.04.28 09:34:01 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Scholle\AppData\Roaming\mozilla\Firefox\Profiles\9u0guiy5.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.03.31 12:50:25 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Scholle\AppData\Roaming\mozilla\Firefox\Profiles\9u0guiy5.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.06.22 21:20:55 | 000,000,000 | ---D | M] (Yontoo Layers) -- C:\Users\Scholle\AppData\Roaming\mozilla\Firefox\Profiles\9u0guiy5.default\extensions\plugin@yontoo.com
[2011.11.13 10:59:43 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.06.17 12:14:57 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.07.05 18:46:50 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.02.17 17:59:27 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.02.17 17:59:27 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.02.17 17:59:27 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.17 17:59:27 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.17 17:59:27 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.17 17:59:27 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Adobe PDF Reader Link Helper) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Yontoo Layers) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Programme\PageRage\YontooIEClient.dll (Yontoo Technology, Inc.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKCU\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Programme\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Programme\Launch Manager\QtZgAcer.EXE (Dritek System Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [PLFSetI] C:\Windows\PLFSetI.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableCAD = 1
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_D183CA64F05FDD98.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} hxxp://game.zylom.com/activex/zylomgamesplayer.cab (Zylom Games Player)
O16 - DPF: {CAC677B6-4963-4305-9066-0BD135CD9233} https://as.photoprintit.de/ips-opdata/layout/default_cms01/activex/IPSUploader4.cab (IPSUploader4 Control)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{83690C32-844B-42E8-A396-AE3E9D20C871}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AWinNotifyVitaKey MC3000: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found
O20 - Winlogon\Notify\spba: DllName - (C:\Program Files\Common Files\SPBA\homefus2.dll) - C:\Programme\Common Files\SPBA\homefus2.dll (UPEK Inc.)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{35f9881f-209b-11e0-af02-f1a7ea64e997}\Shell - "" = AutoRun
O33 - MountPoints2\{35f9881f-209b-11e0-af02-f1a7ea64e997}\Shell\AutoRun\command - "" = E:\Startme.exe
O33 - MountPoints2\{4920eb3d-f0ef-11df-9094-fb494a573398}\Shell\AutoRun\command - "" = G:\Menu.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

========== Files/Folders - Created Within 30 Days ==========

[2012.07.06 20:28:58 | 000,595,968 | ---- | C] (OldTimer Tools) -- C:\Users\Scholle\Desktop\OTL.exe
[2012.07.06 19:46:49 | 000,000,000 | ---D | C] -- C:\Users\Scholle\AppData\Roaming\Malwarebytes
[2012.07.06 19:46:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.07.06 19:46:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.07.06 19:46:39 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.07.06 19:46:39 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.06.18 12:57:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eTeks Sweet Home 3D
[2012.06.14 19:20:52 | 000,000,000 | ---D | C] -- C:\Users\Scholle\AppData\Local\Macromedia
[2012.06.13 09:59:09 | 000,000,000 | ---D | C] -- C:\BigFishGamesCache
[2007.08.13 17:46:00 | 000,102,912 | ---- | C] (Albert L Faber) -- C:\Users\Scholle\AppData\Local\CDRip.dll
[2007.01.18 21:09:54 | 000,623,616 | ---- | C] (Ivan Bischof ©2003 - 2005) -- C:\Users\Scholle\AppData\Local\No23 Recorder.exe
[2006.12.11 19:13:14 | 000,013,872 | ---- | C] (Un4seen Developments) -- C:\Users\Scholle\AppData\Local\basscd.dll
[2006.12.11 19:13:12 | 000,097,336 | ---- | C] (Un4seen Developments) -- C:\Users\Scholle\AppData\Local\bass.dll

========== Files - Modified Within 30 Days ==========

[2012.07.06 20:30:47 | 000,302,592 | ---- | M] () -- C:\Users\Scholle\Desktop\eve8ch37.exe
[2012.07.06 20:28:58 | 000,169,599 | ---- | M] () -- C:\ProgramData\nvModes.001
[2012.07.06 20:28:32 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Users\Scholle\Desktop\OTL.exe
[2012.07.06 20:26:46 | 000,000,000 | ---- | M] () -- C:\Windows\System32\LogConfigTemp.xml
[2012.07.06 20:26:22 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.07.06 20:26:19 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.07.06 20:26:17 | 000,000,318 | ---- | M] () -- C:\Windows\tasks\GlaryInitialize.job
[2012.07.06 20:25:40 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012.07.06 20:25:40 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012.07.06 20:25:34 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.07.06 20:25:29 | 3215,839,232 | -HS- | M] () -- C:\hiberfil.sys
[2012.07.06 20:24:42 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2012.07.06 20:24:31 | 000,000,204 | ---- | M] () -- C:\Users\Scholle\defogger_reenable
[2012.07.06 20:19:25 | 000,051,398 | ---- | M] () -- C:\Users\Scholle\Desktop\547460_359473864123474_194093268_n.jpg
[2012.07.06 20:12:43 | 000,103,157 | ---- | M] () -- C:\Users\Scholle\Desktop\Unbenannt.jpg
[2012.07.06 20:03:45 | 000,056,919 | ---- | M] () -- C:\Users\Scholle\Desktop\417543_234134896707375_1876800351_n.jpg
[2012.07.06 19:50:11 | 000,618,442 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.07.06 19:50:11 | 000,587,178 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.07.06 19:50:11 | 000,122,842 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.07.06 19:50:11 | 000,101,250 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.07.06 19:46:41 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.07.06 19:44:08 | 000,169,599 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2012.07.06 19:41:29 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2012.07.04 23:02:30 | 000,001,833 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.07.04 22:54:11 | 004,503,728 | ---- | M] () -- C:\ProgramData\l_u0_0.pad
[2012.07.04 22:52:51 | 000,000,680 | ---- | M] () -- C:\Users\Scholle\AppData\Local\d3d9caps.dat
[2012.07.03 18:21:54 | 000,054,232 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswTdi.sys
[2012.07.03 18:21:53 | 000,721,000 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2012.07.03 18:21:53 | 000,353,688 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSP.sys
[2012.07.03 18:21:53 | 000,057,656 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswMonFlt.sys
[2012.07.03 18:21:53 | 000,035,928 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswRdr.sys
[2012.07.03 18:21:53 | 000,021,256 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswFsBlk.sys
[2012.07.03 18:21:32 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.07.03 18:21:28 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\System32\aswBoot.exe
[2012.06.29 12:27:14 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini
[2012.06.21 19:07:07 | 000,086,312 | ---- | M] () -- C:\Users\Scholle\Desktop\sony ta f190 anleitung en.pdf
[2012.06.14 19:21:23 | 001,337,380 | ---- | M] () -- C:\Users\Scholle\Desktop\Kaffee-bei-Bernte.jpg

========== Files Created - No Company Name ==========

[2012.07.06 20:30:44 | 000,302,592 | ---- | C] () -- C:\Users\Scholle\Desktop\eve8ch37.exe
[2012.07.06 20:24:16 | 000,000,204 | ---- | C] () -- C:\Users\Scholle\defogger_reenable
[2012.07.06 20:19:24 | 000,051,398 | ---- | C] () -- C:\Users\Scholle\Desktop\547460_359473864123474_194093268_n.jpg
[2012.07.06 20:12:43 | 000,103,157 | ---- | C] () -- C:\Users\Scholle\Desktop\Unbenannt.jpg
[2012.07.06 20:03:44 | 000,056,919 | ---- | C] () -- C:\Users\Scholle\Desktop\417543_234134896707375_1876800351_n.jpg
[2012.07.06 19:46:41 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.07.04 23:07:57 | 000,032,768 | ---- | C] () -- C:\Windows\System32\drivers\sp_rsdrv2.sys
[2012.07.04 23:02:30 | 000,001,833 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.07.04 23:01:22 | 3215,839,232 | -HS- | C] () -- C:\hiberfil.sys
[2012.07.03 17:31:42 | 004,503,728 | ---- | C] () -- C:\ProgramData\l_u0_0.pad
[2012.06.21 19:07:07 | 000,086,312 | ---- | C] () -- C:\Users\Scholle\Desktop\sony ta f190 anleitung en.pdf
[2012.06.14 19:21:33 | 001,337,380 | ---- | C] () -- C:\Users\Scholle\Desktop\Kaffee-bei-Bernte.jpg
[2012.03.23 21:54:08 | 000,237,568 | ---- | C] () -- C:\Windows\System32\lame_enc.dll
[2012.03.23 21:54:08 | 000,110,080 | ---- | C] () -- C:\Windows\System32\advd.dll
[2012.03.23 21:54:08 | 000,023,040 | ---- | C] () -- C:\Windows\System32\auth.dll
[2012.01.20 21:22:11 | 000,000,412 | ---- | C] () -- C:\Windows\wiso.ini
[2011.12.03 15:07:23 | 000,187,664 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011.10.22 13:38:32 | 000,284,160 | ---- | C] () -- C:\Windows\unin0407.exe
[2011.06.22 21:18:38 | 000,000,120 | ---- | C] () -- C:\Users\Scholle\AppData\Local\Opisucipisozo.dat
[2011.06.22 21:18:38 | 000,000,000 | ---- | C] () -- C:\Users\Scholle\AppData\Local\Nconeri.bin
[2010.09.22 11:19:51 | 000,000,030 | ---- | C] () -- C:\Windows\System32\brss01a.ini
[2010.09.03 22:26:33 | 000,000,193 | ---- | C] () -- C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
[2010.04.06 14:02:34 | 000,000,680 | ---- | C] () -- C:\Users\Scholle\AppData\Local\d3d9caps.dat
[2009.09.21 17:54:26 | 000,000,080 | ---- | C] () -- C:\Users\Scholle\AppData\Roaming\tintsnft.sys
[2009.06.05 20:42:38 | 000,001,024 | ---- | C] () -- C:\Users\Scholle\.rnd
[2009.04.21 10:40:27 | 000,001,473 | ---- | C] () -- C:\Users\Scholle\AppData\Local\RecConfig.xml
[2009.04.20 14:13:15 | 000,000,000 | ---- | C] () -- C:\ProgramData\LauncherAccess.dt
[2009.04.17 20:08:11 | 000,000,578 | ---- | C] () -- C:\Users\Scholle\AppData\Roaming\AutoGK.ini
[2009.04.10 14:14:44 | 000,000,283 | ---- | C] () -- C:\Users\Scholle\AppData\Roaming\burnaware.ini
[2009.04.08 23:47:43 | 000,169,599 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.04.08 22:01:45 | 000,157,184 | ---- | C] () -- C:\Users\Scholle\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.04.08 20:44:06 | 000,169,599 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.04.05 20:37:12 | 000,000,395 | ---- | C] () -- C:\Users\Scholle\AppData\Roaming\settings.ini
[2009.04.01 23:36:16 | 000,000,000 | ---- | C] () -- C:\Users\Scholle\AppData\Roaming\wklnhst.dat
[2007.08.13 17:46:00 | 000,155,136 | ---- | C] () -- C:\Users\Scholle\AppData\Local\lame_enc.dll
[2006.10.26 01:06:48 | 000,064,000 | ---- | C] () -- C:\Users\Scholle\AppData\Local\vorbisenc.dll
[2006.10.26 01:06:48 | 000,019,456 | ---- | C] () -- C:\Users\Scholle\AppData\Local\vorbisfile.dll
[2006.10.26 01:06:46 | 000,143,872 | ---- | C] () -- C:\Users\Scholle\AppData\Local\vorbis.dll
[2006.10.26 01:06:36 | 000,015,872 | ---- | C] () -- C:\Users\Scholle\AppData\Local\ogg.dll
[2005.08.23 22:34:06 | 000,029,184 | ---- | C] () -- C:\Users\Scholle\AppData\Local\no23xwrapper.dll

========== LOP Check ==========

[2011.12.28 18:34:01 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\4D
[2008.07.30 04:10:28 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Acer GameZone Console
[2010.11.02 09:40:19 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\AllDup
[2010.04.23 13:22:35 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Amazon
[2012.01.08 18:07:09 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\AnvSoft
[2009.10.13 22:12:25 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Ashampoo
[2010.08.28 19:33:57 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Autodesk
[2009.09.14 20:51:43 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\BOM
[2010.05.19 09:21:42 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Canneverbe Limited
[2012.04.06 10:03:12 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\concept design
[2009.11.11 10:03:08 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\DAEMON Tools Lite
[2009.06.05 09:34:58 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\DeepBurner
[2009.07.05 19:38:01 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\DiscoSW
[2010.09.03 21:05:26 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Duden
[2012.05.31 23:37:52 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\DVDVideoSoft
[2009.06.15 18:27:49 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\eSobi
[2012.02.05 14:39:12 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\GlarySoft
[2012.01.08 20:30:50 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\HandBrake
[2012.05.13 12:21:57 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\IrfanView
[2012.05.31 21:44:27 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\korAccount
[2009.09.21 17:53:51 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\M-Audio
[2009.04.09 10:16:43 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Mp3tag
[2012.03.18 22:49:15 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Need for Speed World
[2009.04.28 11:46:18 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\OpenOffice.org
[2009.04.20 14:13:33 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Samsung
[2010.09.03 22:34:23 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Soluto
[2011.07.31 10:36:13 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Sony
[2009.04.01 23:36:25 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Template
[2012.03.05 21:39:07 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\Tonium
[2009.04.06 22:12:10 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\TuneUp Software
[2012.01.08 16:03:55 | 000,000,000 | ---D | M] -- C:\Users\Scholle\AppData\Roaming\XMedia Recode
[2012.07.06 20:26:17 | 000,000,318 | ---- | M] () -- C:\Windows\Tasks\GlaryInitialize.job
[2012.07.06 20:24:42 | 000,032,530 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



< End of report >





Inhalt der extras.txt:

OTL Extras logfile created on: 06.07.2012 20:33:25 - Run 1
OTL by OldTimer - Version 3.2.53.1 Folder = C:\Users\Scholle\Desktop
Windows Vista Home Premium Edition Service Pack 1 (Version = 6.0.6001) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18882)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

2,99 Gb Total Physical Memory | 2,06 Gb Available Physical Memory | 68,74% Memory free
6,19 Gb Paging File | 5,38 Gb Available in Paging File | 86,89% Paging File free
Paging file location(s): c:\pagefile.sys 0 0 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 60,24 Gb Total Space | 4,44 Gb Free Space | 7,37% Space Free | Partition Type: NTFS
Drive D: | 159,10 Gb Total Space | 2,77 Gb Free Space | 1,74% Space Free | Partition Type: NTFS

Computer Name: LAPTOP-ACER | User Name: Scholle | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-3916757414-2618155453-2582326197-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1E7140AC-8BA1-4EAC-93D9-EE5FC96DE40F}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{32992E82-650F-4ABF-B7A8-8E1B62D3DFC5}" = dir=in | app=c:\program files\acer\acer vcm\vc.exe |
"{4DE100A7-F4F0-4A4D-BA90-AEFDADD8D0A1}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{5D1EF858-1B67-44B6-A7E8-BE08754158BE}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{67BB7C21-4BF3-4EAD-B657-2975088F3959}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{75A9B006-F9ED-4CD1-9743-768860765EB0}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{7BD65B90-A3F1-4D8C-9E90-4999B8EBA804}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe |
"{98675AEC-6C77-40F2-A73F-1950412DC8F6}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{A405B681-DD04-4D21-AA48-5A6644F67171}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{B3D45A7D-8AD2-4E2C-8D15-B27610520A8F}" = protocol=6 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe |
"{BEEEEE1F-50B1-48DF-B05F-7ACE0E6D17B3}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\client\agentsvc.exe |
"{C7020868-5C09-4543-84E2-D350C146AC30}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{C85FEC7E-E97F-4733-8472-9B9496BA9BCA}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{F379E883-67C7-49F2-8958-99E77B830FD4}" = protocol=17 | dir=in | app=c:\program files\newtech infosystems\nti backup now 5\backupsvc.exe |
"TCP Query User{266B012F-9240-41E1-AEE8-3CE805099107}C:\program files\nero\nero8\nero home\nerohome.exe" = protocol=6 | dir=in | app=c:\program files\nero\nero8\nero home\nerohome.exe |
"TCP Query User{371EEA40-78C7-475E-B48C-097209B7C6AB}C:\program files\kyodai mahjongg 2006\kmj.exe" = protocol=6 | dir=in | app=c:\program files\kyodai mahjongg 2006\kmj.exe |
"TCP Query User{7997D4E3-E548-4CFD-B5CF-3AD1FD93D25D}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=6 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"TCP Query User{97D9F328-6AE7-4DE4-9D72-930FC6374E12}C:\program files\icq6.5\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq6.5\icq.exe |
"TCP Query User{CB9EB862-0D3C-4ADF-AE7C-AEBD894D35D5}C:\program files\soulseekns\slsk.exe" = protocol=6 | dir=in | app=c:\program files\soulseekns\slsk.exe |
"TCP Query User{DD1ACC93-710C-430B-A385-5F662C86CDFF}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{3982AD05-0827-4224-B0C3-83928962B8E5}C:\program files\nero\nero8\nero home\nerohome.exe" = protocol=17 | dir=in | app=c:\program files\nero\nero8\nero home\nerohome.exe |
"UDP Query User{44552403-AB4B-46F0-8CE5-E03EF117062A}C:\program files\kyodai mahjongg 2006\kmj.exe" = protocol=17 | dir=in | app=c:\program files\kyodai mahjongg 2006\kmj.exe |
"UDP Query User{57E2ED0C-8F36-4651-A11C-4F88ACEBB243}C:\program files\soulseekns\slsk.exe" = protocol=17 | dir=in | app=c:\program files\soulseekns\slsk.exe |
"UDP Query User{AA35DA25-7192-41E1-A3EA-5FB535A94912}C:\programdata\electronic arts\need for speed world\data\nfsw.exe" = protocol=17 | dir=in | app=c:\programdata\electronic arts\need for speed world\data\nfsw.exe |
"UDP Query User{AB061B0C-94A5-4791-8AB0-574982096847}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{FA70580C-F113-4F91-9631-5DD4EDA131A2}C:\program files\icq6.5\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq6.5\icq.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{047F790A-7A2A-4B6A-AD02-38092BA63DAC}" = Acer VCM
"{04B45310-A5FE-4425-BFCA-1A6D8920DE74}" = OpenOffice.org 3.0
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{10F498FF-5392-4DF3-8F73-FE172A9F3800}" = Winbond CIR Device Drivers
"{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now Standard
"{13D85C14-2B85-419F-AC41-C7F21E68B25D}" = Acer eSettings Management
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{22B0E143-2B0B-435B-9F56-136A3D16065F}" = No23 Recorder
"{23B8A91D-680B-462B-87AD-3D70F7341731}" = iTunes
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20
"{3108C217-BE83-42E4-AE9E-A56A2A92E549}" = Atheros Communications Inc.(R) AR8121/AR8113/AR8114 Gigabit/Fast Ethernet Driver
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{450063AA-643B-417C-8CF5-405BA3F4EF40}" = Autodesk Design Review 2009
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{51C91B84-7B46-4FE7-8999-8228CFA75F89}" = Intel(R) Integrated Performance Primitives RTI 4.0
"{5545EEE1-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2627.01)
"{5545EEE4-FA36-4F76-B6BE-5696E7F4E2D6}" = VBA (2701.01)
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57265292-228A-41FA-9AEC-4620CBCC2739}" = Acer eAudio Management
"{5783F2D7-7001-0407-0002-0060B0CE6BBA}" = AutoCAD 2009 - Deutsch
"{58E5844B-7CE2-413D-83D1-99294BF6C74F}" = Acer ePower Management
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Acer eRecovery Management
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}" = Mahjong Escape Ancient China
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111692950}" = Mahjongg Artifacts
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8F1B6239-FEA0-450A-A950-B05276CE177C}" = Acer Empowering Technology
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00B2-0409-0000-0000000FF1CE}" = Microsoft Save as PDF or XPS Add-in for 2007 Microsoft Office programs
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A5B876D-A900-4AAB-B557-DE827BE46E6C}" = Nero 8 Essentials
"{A5633652-3795-4829-BB0B-644F0279E279}" = Acer eDataSecurity Management
"{A77255C4-AFCB-44A3-BF0F-2091A71FFD9E}" = Acer Crystal Eye Webcam 2.0.8
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1033-7B44-A83000000003}" = Adobe Reader 8.3.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E6015AB2-13D1-4136-819B-51874DC307F5}" = ITCH
"{E6CFBFB5-9232-410C-B353-AF6E614B2681}" = LightScribe System Software 1.10.16.1
"{EA08048C-3823-4DC8-B169-1D5D11FFC19F}_is1" = PDF-XChange 4
"{EB879750-CCBD-4013-BFD5-0294D4DA5BD0}" = Apple Application Support
"{ECCD28B2-8798-4D16-8126-625D728294A1}" = SPBA 5.8
"{EFC04D3F-A152-47E7-8517-EE0F6201AFEF}" = Apple Mobile Device Support
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F9FD80CE-0448-4D4F-8BCD-77FC514C3F99}" = Vista Codec Package
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"4D Planen" = zdynamix 4D Planen
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AFPL Ghostscript 8.54" = AFPL Ghostscript 8.54
"AFPL Ghostscript Fonts" = AFPL Ghostscript Fonts
"AllDup_is1" = AllDup 3.0.2
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.9
"Any Video Converter_is1" = Any Video Converter 3.3.2
"Audiograbber" = Audiograbber 1.83 SE
"Audiograbber-Lame" = Audiograbber Lame-MP3-Plugin
"AutoCAD 2009 - Deutsch" = AutoCAD 2009 - Deutsch
"Autodesk Design Review 2009" = Autodesk Design Review 2009
"AutoGK" = Auto Gordian Knot 2.55
"avast" = avast! Free Antivirus
"AviSynth" = AviSynth 2.5
"CNXT_MODEM_HDA_HSF" = HDAUDIO Soft Data Fax Modem with SmartCP
"dBpoweramp [Calculate Audio CRC] Codec" = dBpoweramp [Calculate Audio CRC] Codec
"dBpoweramp FLAC Codec" = dBpoweramp FLAC Codec
"dBpoweramp Monkeys Audio Codec" = dBpoweramp Monkeys Audio Codec
"dBpowerAMP Music Converter" = dBpowerAMP Music Converter
"DVD Shrink_is1" = DVD Shrink 3.2
"DVDx 4.0 Open Edition" = DVDx 4.0 Open Edition
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Free DVD Decrypter_is1" = Free DVD Decrypter version 1.5.6.908
"Free M4a to MP3 Converter_is1" = Free M4a to MP3 Converter 7.0
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"Glary Utilities_is1" = Glary Utilities 2.43.0.1419
"GridVista" = Acer GridVista
"HandBrake" = HandBrake 0.9.3
"InstallShield_{12EFA1A4-AC3B-443C-8143-237EDE760403}" = NTI Backup Now 5
"IrfanView" = IrfanView (remove only)
"Kyodai Mahjongg 2006_is1" = Kyodai Mahjongg 2006 v1.42
"LManager" = Launch Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.61.0.1400
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MixMeister BPM Analyzer_is1" = MixMeister BPM Analyzer 1.0
"Mozilla Firefox 13.0.1 (x86 de)" = Mozilla Firefox 13.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Mp3tag" = Mp3tag v2.44
"NVIDIA Drivers" = NVIDIA Drivers
"SolSuite_is1" = SolSuite 2011 v11.11
"Soulseek2" = SoulSeek 157 NS 13e
"Steinberg WaveLab 5.01b" = Steinberg WaveLab 5.01b
"SUPER ©" = SUPER © Version 2009.bld.36 (June 10, 2009)
"Sweet Home 3D_is1" = Sweet Home 3D version 3.5
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions
"VobSub" = VobSub v2.23 (Remove Only)
"Winamp" = Winamp
"XMedia Recode" = XMedia Recode 3.0.6.0
"XviD MPEG4 Video Codec" = XviD MPEG4 Video Codec (remove only)

========== Last 20 Event Log Errors ==========

[ Application Events ]
Error - 06.07.2012 14:07:11 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:07:13 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:07:13 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:07:17 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:07:17 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:07:25 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:07:25 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:07:26 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:07:26 | Computer Name = Laptop-Acer | Source = Windows Search Service | ID = 3013
Description =

Error - 06.07.2012 14:26:42 | Computer Name = Laptop-Acer | Source = WinMgmt | ID = 10
Description =

[ OSession Events ]
Error - 11.08.2010 04:33:00 | Computer Name = Laptop-Acer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 1402
seconds with 960 seconds of active time. This session ended with a crash.

Error - 02.09.2010 06:29:30 | Computer Name = Laptop-Acer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 7658
seconds with 1920 seconds of active time. This session ended with a crash.

Error - 02.09.2010 06:29:57 | Computer Name = Laptop-Acer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 10
seconds with 0 seconds of active time. This session ended with a crash.

Error - 13.09.2010 04:42:47 | Computer Name = Laptop-Acer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6085
seconds with 4500 seconds of active time. This session ended with a crash.

Error - 14.09.2010 04:45:55 | Computer Name = Laptop-Acer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 6861
seconds with 5160 seconds of active time. This session ended with a crash.

Error - 13.03.2012 08:53:01 | Computer Name = Laptop-Acer | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 12187
seconds with 8220 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 04.07.2012 16:57:15 | Computer Name = Laptop-Acer | Source = Service Control Manager | ID = 7001
Description =

Error - 04.07.2012 16:57:23 | Computer Name = Laptop-Acer | Source = DCOM | ID = 10005
Description =

Error - 04.07.2012 17:01:35 | Computer Name = Laptop-Acer | Source = HTTP | ID = 15016
Description =

Error - 05.07.2012 13:57:54 | Computer Name = Laptop-Acer | Source = HTTP | ID = 15016
Description =

Error - 05.07.2012 14:01:20 | Computer Name = Laptop-Acer | Source = Service Control Manager | ID = 7009
Description =

Error - 05.07.2012 14:01:24 | Computer Name = Laptop-Acer | Source = Service Control Manager | ID = 7000
Description =

Error - 05.07.2012 14:04:10 | Computer Name = Laptop-Acer | Source = Service Control Manager | ID = 7022
Description =

Error - 06.07.2012 13:38:11 | Computer Name = Laptop-Acer | Source = HTTP | ID = 15016
Description =

Error - 06.07.2012 13:42:43 | Computer Name = Laptop-Acer | Source = HTTP | ID = 15016
Description =

Error - 06.07.2012 14:25:37 | Computer Name = Laptop-Acer | Source = HTTP | ID = 15016
Description =


< End of report >




im Anhang die gmer.txt