incedibar entfernen?

OTL logfile created on: 16.08.2012 18:48:02 - Run 1
OTL by OldTimer - Version 3.2.57.0     Folder = D:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,50 Gb Total Physical Memory | 0,53 Gb Available Physical Memory | 35,40% Memory free
3,35 Gb Paging File | 2,37 Gb Available in Paging File | 70,76% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive D: | 74,52 Gb Total Space | 55,42 Gb Free Space | 74,37% Space Free | Partition Type: NTFS
 
Computer Name: NICI-PC | User Name: Besitzer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - D:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools)
PRC - D:\Programme\Java\jre7\bin\java.exe (Oracle Corporation)
PRC - D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - D:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe (Oracle Corporation)
PRC - D:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - D:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - D:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
PRC - D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - D:\Programme\ClamWin\bin\ClamTray.exe (alch)
PRC - D:\WINDOWS\explorer.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - D:\Dokumente und Einstellungen\Besitzer\jagexcache\runescape\LIVE\jaclib.dll ()
MOD - D:\Dokumente und Einstellungen\Besitzer\jagexcache\runescape\LIVE\jagdx.dll ()
MOD - D:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - D:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jp2native.dll ()
MOD - D:\WINDOWS\system32\msdmo.dll ()
MOD - D:\Programme\ClamWin\bin\python23.dll ()
MOD - D:\Programme\ClamWin\lib\shell.pyd ()
MOD - D:\Programme\ClamWin\lib\win32gui.pyd ()
MOD - D:\Programme\ClamWin\lib\win32file.pyd ()
MOD - D:\Programme\ClamWin\lib\win32api.pyd ()
MOD - D:\Programme\ClamWin\lib\win32security.pyd ()
MOD - D:\Programme\ClamWin\lib\win32process.pyd ()
MOD - D:\Programme\ClamWin\lib\win32pipe.pyd ()
MOD - D:\Programme\ClamWin\lib\win32event.pyd ()
MOD - D:\Programme\ClamWin\lib\pythoncom23.dll ()
MOD - D:\Programme\ClamWin\lib\pywintypes23.dll ()
MOD - D:\Programme\ClamWin\lib\_winreg.pyd ()
MOD - D:\Programme\ClamWin\lib\datetime.pyd ()
MOD - D:\Programme\ClamWin\lib\_ssl.pyd ()
MOD - D:\Programme\ClamWin\lib\_sre.pyd ()
MOD - D:\Programme\ClamWin\lib\_socket.pyd ()
MOD - D:\Programme\ClamWin\lib\_bsddb.pyd ()
MOD - D:\Programme\ClamWin\lib\_ctypes.pyd ()
MOD - D:\Programme\ClamWin\lib\wxc.pyd ()
MOD - D:\Programme\ClamWin\lib\wxmsw24h.dll ()
MOD - D:\Programme\ClamWin\lib\mxDateTime.pyd ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (HidServ) -- %SystemRoot%\System32\hidserv.dll File not found
SRV - (AppMgmt) -- %SystemRoot%\System32\appmgmts.dll File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- D:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- D:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (JavaQuickStarterService) -- D:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe (Oracle Corporation)
SRV - (MBAMService) -- D:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (nvUpdatusService) -- D:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (SkypeUpdate) -- D:\Programme\Skype\Updater\Updater.exe (Skype Technologies)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (WDICA) --  File not found
DRV - (PDRFRAME) --  File not found
DRV - (PDRELI) --  File not found
DRV - (PDFRAME) --  File not found
DRV - (PDCOMP) --  File not found
DRV - (PCIDump) --  File not found
DRV - (lbrtfdc) --  File not found
DRV - (i2omgmt) --  File not found
DRV - (cpuz130) -- D:\DOKUME~1\Besitzer\LOKALE~1\Temp\cpuz130\cpuz_x32.sys File not found
DRV - (Changer) --  File not found
DRV - (MBAMSwissArmy) -- D:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (MBAMProtector) -- D:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (RTLE8023xp) -- D:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation                           )
DRV - (IntcAzAudAddService) -- D:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (Monfilt) -- D:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) -- D:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (ahcix86) -- D:\WINDOWS\system32\drivers\ahcix86.sys (Advanced Micro Devices, Inc)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Upgrade to Google Chrome
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MyStart by IncrediBar.com
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7GPMD_deDE469
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\..\SearchScopes\{CFF4DB9B-135F-47c0-9269-B4C6572FD61A}: "URL" = hxxp://mystart.incredibar.com/mb165/?search={searchTerms}&loc=IB_DS&a=6R8Cc4hELR&i=26
IE - HKU\S-1-5-21-854245398-1078081533-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "MyStart Search"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Google.de"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..keyword.URL: "hxxp://mystart.incredibar.com/mb165/?loc=IB_DS&a=6R8Cc4hELR&&i=26&search="
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: D:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: D:\Programme\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: d:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: D:\Programme\Google\Google Updater\2.4.1908.5032\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: D:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: D:\Programme\Web Assistant\Firefox
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: D:\Programme\Mozilla Firefox\components [2012.08.12 21:27:05 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0\extensions\\Components: D:\Programme\Mozilla Thunderbird\components [2012.02.04 23:06:16 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\specialsavings@superfish.com: D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles/2u3osvwq.default\extensions\specialsavings@superfish.com
 
[2012.02.04 23:06:28 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Extensions
[2012.08.16 11:04:36 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\2u3osvwq.default\extensions
[2012.08.12 22:20:50 | 000,000,000 | ---D | M] ("Star Stable Online") -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\2u3osvwq.default\extensions\plugin@starstable.com
[2012.08.12 21:33:19 | 000,002,101 | ---- | M] () -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\2u3osvwq.default\searchplugins\googlede.xml
[2012.08.16 00:09:18 | 000,002,203 | ---- | M] () -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\2u3osvwq.default\searchplugins\MyStart Search.xml
[2012.08.12 20:51:47 | 000,002,301 | ---- | M] () -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\2u3osvwq.default\searchplugins\Search.xml
[2012.08.12 21:20:27 | 000,000,000 | ---D | M] (No name found) -- D:\Programme\Mozilla Firefox\extensions
[2012.07.06 15:20:47 | 000,000,000 | ---D | M] (Java Console) -- D:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2012.02.06 20:31:26 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- D:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2012.07.14 02:15:45 | 000,136,672 | ---- | M] (Mozilla Foundation) -- D:\Programme\mozilla firefox\components\browsercomps.dll
[2012.08.12 20:45:29 | 000,002,364 | ---- | M] () -- D:\Programme\mozilla firefox\searchplugins\babylon.xml
 
========== Chrome  ==========
 
 
O1 HOSTS File: ([2004.11.11 14:00:00 | 000,000,820 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Programme\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - D:\Programme\Google\GoogleToolbarNotifier\5.6.5825.1100\swg.dll (Google Inc.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - D:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [Adobe ARM] D:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [ClamWin] D:\Programme\ClamWin\bin\ClamTray.exe (alch)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] D:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\nvmctray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] D:\Programme\NVIDIA Corporation\nview\nwiz.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-854245398-1078081533-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-854245398-1078081533-839522115-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O15 - HKU\S-1-5-21-854245398-1078081533-839522115-1003\..Trusted Domains: starstable.com ([]* in Trusted sites)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {26CF0ECA-50B9-411D-BA37-86BD6AD53382} hxxp://www.starstable.com/plugin/PXStudioRuntimeAX.cab (PXStudioRuntimeAX Control)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://windowsupdate.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1328411136700 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_33-windows-i586.cab (Java Plug-in 1.6.0_33)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.169.185.97 83.169.185.33
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8DCAE1F8-3F61-47CC-8C02-0DC36BE9E9F0}: DhcpNameServer = 83.169.185.97 83.169.185.33
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) - D:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.08.16 18:34:39 | 000,040,776 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012.08.16 18:02:00 | 000,000,000 | RH-D | C] -- D:\Dokumente und Einstellungen\Besitzer\Recent
[2012.08.16 17:28:30 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Malwarebytes
[2012.08.16 17:28:12 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2012.08.16 17:28:11 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2012.08.16 17:28:10 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbam.sys
[2012.08.16 17:28:10 | 000,000,000 | ---D | C] -- D:\Programme\Malwarebytes' Anti-Malware
[2012.08.16 10:51:26 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Aura
[2012.08.16 10:49:59 | 000,000,000 | ---D | C] -- D:\Programme\Aura
[2012.08.16 00:16:47 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\InstallBrainService
[2012.08.16 00:10:59 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Systweak
[2012.08.16 00:10:58 | 000,017,320 | ---- | C] (Systweak Inc., (Systweak - Download Software utilities for Windows optimization, Scan & Clean Spyware for Free)) -- D:\WINDOWS\System32\roboot.exe
[2012.08.15 07:39:24 | 000,000,000 | -HSD | C] -- D:\Dokumente und Einstellungen\Besitzer\IECompatCache
[2012.08.13 00:30:49 | 000,000,000 | ---D | C] -- D:\Programme\Futuremark
[2012.08.12 22:23:40 | 000,527,192 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAudio2_7.dll
[2012.08.12 22:23:40 | 000,074,072 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAPOFX1_5.dll
[2012.08.12 22:23:39 | 002,106,216 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_43.dll
[2012.08.12 22:23:39 | 001,868,128 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dcsx_43.dll
[2012.08.12 22:23:39 | 000,239,960 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine3_7.dll
[2012.08.12 22:23:38 | 001,998,168 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DX9_43.dll
[2012.08.12 22:23:38 | 000,528,216 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAudio2_6.dll
[2012.08.12 22:23:38 | 000,470,880 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_43.dll
[2012.08.12 22:23:38 | 000,248,672 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx11_43.dll
[2012.08.12 22:23:38 | 000,074,072 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAPOFX1_4.dll
[2012.08.12 22:23:37 | 000,238,936 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine3_6.dll
[2012.08.12 22:23:37 | 000,022,360 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\X3DAudio1_7.dll
[2012.08.12 22:23:36 | 001,974,616 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_42.dll
[2012.08.12 22:23:36 | 000,515,416 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAudio2_5.dll
[2012.08.12 22:23:36 | 000,238,936 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine3_5.dll
[2012.08.12 22:23:35 | 005,501,792 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dcsx_42.dll
[2012.08.12 22:23:35 | 000,453,456 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_42.dll
[2012.08.12 22:23:35 | 000,235,344 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx11_42.dll
[2012.08.12 22:23:34 | 004,178,264 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DX9_41.dll
[2012.08.12 22:23:34 | 001,892,184 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DX9_42.dll
[2012.08.12 22:23:34 | 001,846,632 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_41.dll
[2012.08.12 22:23:34 | 000,453,456 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_41.dll
[2012.08.12 22:23:33 | 000,517,448 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAudio2_4.dll
[2012.08.12 22:23:33 | 000,069,464 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAPOFX1_3.dll
[2012.08.12 22:23:32 | 004,379,984 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DX9_40.dll
[2012.08.12 22:23:32 | 002,036,576 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_40.dll
[2012.08.12 22:23:32 | 000,452,440 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_40.dll
[2012.08.12 22:23:32 | 000,235,352 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine3_4.dll
[2012.08.12 22:23:32 | 000,022,360 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\X3DAudio1_6.dll
[2012.08.12 22:23:31 | 000,514,384 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAudio2_3.dll
[2012.08.12 22:23:31 | 000,235,856 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine3_3.dll
[2012.08.12 22:23:31 | 000,070,992 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAPOFX1_2.dll
[2012.08.12 22:23:31 | 000,023,376 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\X3DAudio1_5.dll
[2012.08.12 22:23:30 | 001,493,528 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_39.dll
[2012.08.12 22:23:30 | 000,509,448 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAudio2_2.dll
[2012.08.12 22:23:30 | 000,467,984 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_39.dll
[2012.08.12 22:23:30 | 000,238,088 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine3_2.dll
[2012.08.12 22:23:30 | 000,068,616 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAPOFX1_1.dll
[2012.08.12 22:23:29 | 003,851,784 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DX9_39.dll
[2012.08.12 22:23:29 | 000,507,400 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAudio2_1.dll
[2012.08.12 22:23:29 | 000,238,088 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine3_1.dll
[2012.08.12 22:23:29 | 000,065,032 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAPOFX1_0.dll
[2012.08.12 22:23:28 | 001,491,992 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_38.dll
[2012.08.12 22:23:28 | 000,467,984 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_38.dll
[2012.08.12 22:23:28 | 000,025,608 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\X3DAudio1_4.dll
[2012.08.12 22:23:27 | 003,850,760 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DX9_38.dll
[2012.08.12 22:23:27 | 000,479,752 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\XAudio2_0.dll
[2012.08.12 22:23:26 | 003,786,760 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DX9_37.dll
[2012.08.12 22:23:26 | 001,420,824 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_37.dll
[2012.08.12 22:23:26 | 000,462,864 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_37.dll
[2012.08.12 22:23:26 | 000,238,088 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine3_0.dll
[2012.08.12 22:23:26 | 000,025,608 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\X3DAudio1_3.dll
[2012.08.12 22:23:25 | 000,267,272 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_10.dll
[2012.08.12 22:23:24 | 003,734,536 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_36.dll
[2012.08.12 22:23:24 | 001,374,232 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_36.dll
[2012.08.12 22:23:24 | 000,444,776 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_36.dll
[2012.08.12 22:23:23 | 003,727,720 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_35.dll
[2012.08.12 22:23:23 | 001,358,192 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_35.dll
[2012.08.12 22:23:23 | 000,444,776 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_35.dll
[2012.08.12 22:23:23 | 000,267,112 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_9.dll
[2012.08.12 22:23:22 | 000,266,088 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_8.dll
[2012.08.12 22:23:22 | 000,017,928 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\X3DAudio1_2.dll
[2012.08.12 22:23:21 | 003,497,832 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_34.dll
[2012.08.12 22:23:21 | 001,124,720 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_34.dll
[2012.08.12 22:23:21 | 000,443,752 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_34.dll
[2012.08.12 22:23:21 | 000,081,768 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xinput1_3.dll
[2012.08.12 22:23:20 | 001,123,696 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\D3DCompiler_33.dll
[2012.08.12 22:23:20 | 000,443,752 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx10_33.dll
[2012.08.12 22:23:20 | 000,261,480 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_7.dll
[2012.08.12 22:23:19 | 003,495,784 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_33.dll
[2012.08.12 22:23:18 | 003,426,072 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_32.dll
[2012.08.12 22:23:18 | 002,414,360 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_31.dll
[2012.08.12 22:23:18 | 000,255,848 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_6.dll
[2012.08.12 22:23:18 | 000,251,672 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_5.dll
[2012.08.12 22:23:18 | 000,237,848 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_4.dll
[2012.08.12 22:23:18 | 000,015,128 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\x3daudio1_1.dll
[2012.08.12 22:23:17 | 000,236,824 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_3.dll
[2012.08.12 22:23:17 | 000,230,168 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_2.dll
[2012.08.12 22:23:17 | 000,229,584 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_1.dll
[2012.08.12 22:23:17 | 000,062,744 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xinput1_2.dll
[2012.08.12 22:23:17 | 000,062,672 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xinput1_1.dll
[2012.08.12 22:23:15 | 002,388,176 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_30.dll
[2012.08.12 22:23:14 | 002,332,368 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_29.dll
[2012.08.12 22:23:14 | 002,323,664 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_28.dll
[2012.08.12 22:23:14 | 000,230,096 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xactengine2_0.dll
[2012.08.12 22:23:14 | 000,061,136 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\xinput9_1_0.dll
[2012.08.12 22:23:14 | 000,014,032 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\x3daudio1_0.dll
[2012.08.12 22:23:13 | 002,337,488 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_25.dll
[2012.08.12 22:23:13 | 002,319,568 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_27.dll
[2012.08.12 22:23:13 | 002,297,552 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_26.dll
[2012.08.12 22:23:12 | 002,222,800 | ---- | C] (Microsoft Corporation) -- D:\WINDOWS\System32\d3dx9_24.dll
[2012.08.12 22:20:54 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\StarStableOnline
[2012.08.12 22:20:54 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\StarStableOnline
[2012.08.12 21:27:05 | 000,000,000 | ---D | C] -- D:\Programme\Mozilla Maintenance Service
[2012.08.12 20:49:22 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Giant Savings
[2012.08.12 20:49:21 | 000,000,000 | ---D | C] -- D:\Programme\Giant Savings
[2012.08.12 20:49:17 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Google
[2012.08.12 20:45:56 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Browser Manager
[2012.08.12 20:45:25 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Tarma Installer
[2012.08.12 20:45:22 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Babylon
[2012.08.12 04:14:30 | 000,000,000 | ---D | C] -- D:\WINDOWS\Logs
[2012.08.09 16:04:35 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Sun
[2012.08.09 16:04:04 | 000,000,000 | ---D | C] -- D:\Programme\Gemeinsame Dateien\Java
[2012.08.09 16:03:43 | 000,000,000 | ---D | C] -- D:\Programme\Oracle
[2012.08.09 16:03:37 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Oracle
[2012.08.09 16:03:33 | 000,227,760 | ---- | C] (Oracle Corporation) -- D:\WINDOWS\System32\javaws.exe
[5 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.08.16 18:47:00 | 000,000,884 | ---- | M] () -- D:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012.08.16 18:34:39 | 000,040,776 | ---- | M] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2012.08.16 18:03:17 | 000,000,069 | ---- | M] () -- D:\Dokumente und Einstellungen\Besitzer\jagex_cl_runescape_LIVE.dat
[2012.08.16 18:01:28 | 000,001,014 | ---- | M] () -- D:\WINDOWS\tasks\Google Software Updater.job
[2012.08.16 18:01:16 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2012.08.16 17:28:13 | 000,000,756 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.08.16 17:14:13 | 000,000,024 | ---- | M] () -- D:\Dokumente und Einstellungen\Besitzer\random.dat
[2012.08.16 11:30:21 | 001,074,636 | ---- | M] () -- D:\WINDOWS\System32\nvdrsdb1.bin
[2012.08.16 11:30:21 | 000,000,001 | ---- | M] () -- D:\WINDOWS\System32\nvdrssel.bin
[2012.08.16 10:51:34 | 000,001,482 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Aura.lnk
[2012.08.16 00:09:40 | 000,000,766 | ---- | M] () -- D:\user.js
[2012.08.15 13:39:09 | 001,074,636 | ---- | M] () -- D:\WINDOWS\System32\nvdrsdb0.bin
[2012.08.15 08:35:37 | 000,130,888 | ---- | M] () -- D:\WINDOWS\System32\FNTCACHE.DAT
[2012.08.15 08:07:53 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerApp.exe
[2012.08.15 08:07:53 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- D:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012.08.12 20:49:16 | 000,302,425 | ---- | M] () -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\funmoods-speeddial.crx
[2012.08.12 20:49:16 | 000,031,470 | ---- | M] () -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\funmoods.crx
[2012.08.12 04:30:20 | 000,013,646 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2012.08.12 04:03:15 | 000,000,696 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2012.08.11 11:02:37 | 000,000,070 | ---- | M] () -- D:\Dokumente und Einstellungen\Besitzer\jagex_cl_runescape_LIVE1.dat
[2012.08.09 16:03:18 | 000,174,064 | ---- | M] (Oracle Corporation) -- D:\WINDOWS\System32\javaw.exe
[2012.08.09 16:03:18 | 000,174,064 | ---- | M] (Oracle Corporation) -- D:\WINDOWS\System32\java.exe
[2012.08.07 04:45:47 | 000,000,772 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Second Life Viewer.lnk
[2012.08.07 04:43:23 | 000,000,006 | ---- | M] () -- D:\Dokumente
[5 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.08.16 17:28:13 | 000,000,756 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.08.16 10:50:20 | 000,001,482 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Aura.lnk
[2012.08.12 20:49:18 | 000,302,425 | ---- | C] () -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\funmoods-speeddial.crx
[2012.08.12 20:49:17 | 000,031,470 | ---- | C] () -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\funmoods.crx
[2012.08.12 20:45:38 | 000,000,766 | ---- | C] () -- D:\user.js
[2012.06.26 21:18:40 | 000,000,074 | ---- | C] () -- D:\Dokumente und Einstellungen\Besitzer\jagex_cl_runescape_LIVE_BETA.dat
[2012.03.07 06:02:21 | 000,000,070 | ---- | C] () -- D:\Dokumente und Einstellungen\Besitzer\jagex_cl_runescape_LIVE1.dat
[2012.02.15 15:00:56 | 000,003,072 | ---- | C] () -- D:\WINDOWS\System32\iacenc.dll
[2012.02.08 16:34:04 | 000,000,069 | ---- | C] () -- D:\Dokumente und Einstellungen\Besitzer\jagex_cl_runescape_LIVE.dat
[2012.02.05 06:19:36 | 000,000,024 | ---- | C] () -- D:\Dokumente und Einstellungen\Besitzer\random.dat
[2012.02.05 05:42:01 | 000,004,608 | ---- | C] () -- D:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.02.04 23:33:23 | 001,074,636 | ---- | C] () -- D:\WINDOWS\System32\nvdrsdb1.bin
[2012.02.04 23:33:23 | 001,074,636 | ---- | C] () -- D:\WINDOWS\System32\nvdrsdb0.bin
[2012.02.04 23:33:23 | 000,000,001 | ---- | C] () -- D:\WINDOWS\System32\nvdrssel.bin
[2012.02.04 23:33:03 | 002,807,708 | ---- | C] () -- D:\WINDOWS\System32\nvdata.data
[2012.02.04 23:08:10 | 000,000,664 | ---- | C] () -- D:\WINDOWS\System32\d3d9caps.dat
[2012.02.04 22:22:34 | 000,002,048 | --S- | C] () -- D:\WINDOWS\bootstat.dat
[2012.02.04 22:17:26 | 000,021,740 | ---- | C] () -- D:\WINDOWS\System32\emptyregdb.dat
[2012.02.04 21:59:43 | 000,004,161 | ---- | C] () -- D:\WINDOWS\ODBCINST.INI
[2012.02.04 21:56:32 | 000,130,888 | ---- | C] () -- D:\WINDOWS\System32\FNTCACHE.DAT
 
========== LOP Check ==========
 
[2012.08.12 20:45:56 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Browser Manager
[2012.08.16 00:16:47 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\InstallBrainService
[2012.08.12 22:30:31 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\StarStableOnline
[2012.08.12 20:45:26 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Tarma Installer
[2012.02.08 19:54:53 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2012.02.08 19:53:57 | 000,000,000 | -HSD | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.08.12 20:45:22 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Babylon
[2012.02.05 04:05:36 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\LibreOffice
[2012.02.05 05:02:50 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\MSNInstaller
[2012.08.09 16:03:37 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Oracle
[2012.07.16 00:55:27 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\SecondLife
[2012.08.16 10:52:17 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Systweak
[2012.02.04 23:06:28 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Thunderbird
[2012.02.08 19:54:39 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\TuneUp Software
 
========== Purity Check ==========
 
 

< End of report >
         

OTL Extras logfile created on: 16.08.2012 18:48:02 - Run 1
OTL by OldTimer - Version 3.2.57.0     Folder = D:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,50 Gb Total Physical Memory | 0,53 Gb Available Physical Memory | 35,40% Memory free
3,35 Gb Paging File | 2,37 Gb Available in Paging File | 70,76% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive D: | 74,52 Gb Total Space | 55,42 Gb Free Space | 74,37% Space Free | Partition Type: NTFS
 
Computer Name: NICI-PC | User Name: Besitzer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[HKEY_USERS\S-1-5-21-854245398-1078081533-839522115-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "D:\Programme\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
https [open] -- "D:\Programme\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Programme\Java\jre6\launch4j-tmp\muCommander.exe" = D:\Programme\Java\jre6\launch4j-tmp\muCommander.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"D:\Programme\SecondLifeViewer\SLVoice.exe" = D:\Programme\SecondLifeViewer\SLVoice.exe:*:Enabled:SLVoice -- (Vivox Inc.)
"D:\Programme\SingularityViewer\SLVoice.exe" = D:\Programme\SingularityViewer\SLVoice.exe:*:Enabled:SLVoice
"D:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe" = D:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe:*:Disabled:Daemonu.exe -- (NVIDIA Corporation)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03CEFC42-378E-4467-9909-DCBAFD38CA9F}" = LibreOffice 3.4
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 33
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 301.42
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 136.27
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.8.15
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.9
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8DF795C-5865-43BB-A547-7FFD0EA753F9}" = LibreOffice 3.4 Help Pack (German)
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"All ATI Software" = ATI - Software Uninstall Utility
"Aura" = Aura
"CCleaner" = CCleaner
"ClamWin Free Antivirus_is1" = ClamWin Free Antivirus 0.97.3
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Google Updater" = Google Updater
"ie8" = Windows Internet Explorer 8
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox 14.0.1 (x86 de)" = Mozilla Firefox 14.0.1 (x86 de)
"Mozilla Thunderbird 10.0 (x86 de)" = Mozilla Thunderbird 10.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSNINST" = MSN
"muCommander" = muCommander (remove only)
"SecondLifeViewer" = SecondLifeViewer (remove only)
"WIC" = Windows Imaging Component
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 04.03.2012 10:01:13 | Computer Name = NICI-PC | Source = Windows Product Activation | ID = 1010
Description = Die Windows-Lizenz wurde aufgrund eines Systemfehlers wiederhergestellt.
 Sie müssen Windows eventuell erneut aktivieren.  
 
Error - 08.03.2012 19:39:27 | Computer Name = NICI-PC | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung secondlife.exe, Version 3.2.6.51478, fehlgeschlagenes
 Modul llcommon.dll, Version 0.0.0.0, Fehleradresse 0x000a0006.
 
Error - 08.03.2012 19:40:13 | Computer Name = NICI-PC | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung secondlife.exe, Version 3.2.6.51478, fehlgeschlagenes
 Modul llcommon.dll, Version 0.0.0.0, Fehleradresse 0x000a0006.
 
Error - 08.03.2012 19:40:21 | Computer Name = NICI-PC | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung secondlife.exe, Version 3.2.6.51478, fehlgeschlagenes
 Modul llcommon.dll, Version 0.0.0.0, Fehleradresse 0x000a0006.
 
Error - 08.03.2012 19:42:02 | Computer Name = NICI-PC | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung secondlife.exe, Version 3.2.6.51478, fehlgeschlagenes
 Modul llcommon.dll, Version 0.0.0.0, Fehleradresse 0x000a0006.
 
Error - 22.04.2012 15:26:52 | Computer Name = NICI-PC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung msnmsgr.exe, Version 14.0.8117.416, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 22.04.2012 15:27:00 | Computer Name = NICI-PC | Source = Application Hang | ID = 1001
Description = Fehlerhafter Speicherbereich 1856831743.
 
Error - 23.05.2012 03:50:32 | Computer Name = NICI-PC | Source = NVIDIA OpenGL Driver | ID = 1
Description = NVIDIA display driver files from different (incompatible) versions 
of the driver have been detected.  NVIDIA OpenGL acceleration is disabled in order
 to maintain system stability.  To resolve this problem, update the NVIDIA display 
driver.  Error code: 4 Visit Drivers - Download NVIDIA Drivers for more information.
 
[ System Events ]
Error - 12.08.2012 15:04:29 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 12.08.2012 15:04:29 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 12.08.2012 15:04:30 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 12.08.2012 15:04:30 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 12.08.2012 15:04:30 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 12.08.2012 15:04:30 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 12.08.2012 15:04:30 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 12.08.2012 15:04:30 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 12.08.2012 15:04:30 | Computer Name = NICI-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
   %%126
 
Error - 16.08.2012 12:01:33 | Computer Name = NICI-PC | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "" auf Volume "HarddiskVolume1" ist im 
Wiederherstellungsfilter der unerwartete Fehler "0xC0000001" aufgetreten. Die Volumeüberwachung
 wurde angehalten.
 
 
< End of report >