Foren Neuling, Problem mit searchsafer

OTL Extras logfile created on: 15.09.2012 16:31:33 - Run 1
OTL by OldTimer - Version 3.2.61.4     Folder = C:\Users\Freude\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,97 Gb Total Physical Memory | 1,52 Gb Available Physical Memory | 51,14% Memory free
5,93 Gb Paging File | 4,24 Gb Available in Paging File | 71,41% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,66 Gb Total Space | 405,74 Gb Free Space | 87,13% Space Free | Partition Type: NTFS
 
Computer Name: FREUDE-PC | User Name: Freude | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-764809747-1689136315-3530896507-1000\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0CE91300-DE16-4F6A-8A6E-C96B282EC1A5}" = rport=445 | protocol=6 | dir=out | app=system | 
"{13152FAB-82E3-401A-A629-6BE42527FEFC}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{1534A4AC-6E82-4146-B04D-185C59A8FC21}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{1962CEAF-1C7E-4D06-8C58-DF928C3CEA49}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{1A86EEEC-53D9-4360-93D3-48F437830F74}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{2D86BD72-9049-41D2-8ECE-08BDAAF7D59D}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{2F48EEE3-FE7A-48CB-AEB9-E63B2DAEC6CB}" = lport=137 | protocol=17 | dir=in | app=system | 
"{405A5728-950D-4399-8993-097C813B2C51}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner | 
"{40AF3CFA-AE84-41BE-AD20-8029355F3DC2}" = rport=138 | protocol=17 | dir=out | app=system | 
"{45FF59F7-F4FE-4460-8A4C-01C52A39DCD7}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{515F8272-3EAA-46D1-A8B8-47D89DF82FBC}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{5194177E-1E26-4D57-89F9-EC43681EEB06}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{5547D67A-540F-4236-AAA7-F53AB6629FC7}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{6EAD9D7D-D3D3-44CE-A8B7-8975AF82E7EF}" = lport=138 | protocol=17 | dir=in | app=system | 
"{74C059A0-AF7F-4405-ADE4-D0E271D6BDD5}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{872E98AC-3AEE-49B1-8F88-78B583989AAE}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{8A2503BF-E666-4E50-9CF9-9F748361D0AF}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{8DC87F36-84A2-431E-BC89-E5B36BF276AC}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{8E167ACC-E16A-4B13-BFA3-8A1DEC41A1D0}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{9F248CD4-19C1-44A0-A896-03E154D47F2C}" = lport=445 | protocol=6 | dir=in | app=system | 
"{AB696CD9-1C04-40C0-9EC9-1AC596A2473C}" = rport=139 | protocol=6 | dir=out | app=system | 
"{B5F3A2D4-0C08-4142-910B-546807C7069A}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{B91AC00A-FCC8-4DFC-904A-248DC5408B6F}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{C2DDA800-7388-4C06-B586-897349E7141B}" = rport=137 | protocol=17 | dir=out | app=system | 
"{D7566700-42F3-4070-92AD-5088A85B963F}" = lport=139 | protocol=6 | dir=in | app=system | 
"{EE9BEE52-7582-499D-8348-B5B8A64E7CB3}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02A9C2D6-949D-419A-95C5-84226103A5AF}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{03A1B4A4-C17D-41F6-B642-AFC512F0A036}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{137C8AF8-9C76-425F-8538-FE8800D80789}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{22C611CB-F3C5-4098-A71E-950DE53F0F27}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{30EB4B0C-6EF4-4931-9A07-FE09924A5AAD}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{357DCD3B-FE75-4A2C-8BAF-1CBF6F77D855}" = dir=in | app=c:\program files\hp\quickplay\qpservice.exe | 
"{3B3B4A1E-45DE-4452-B324-D0256C42F7E0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{4AF97B7C-5EFF-4A16-8AAC-1B7939C129E7}" = protocol=6 | dir=out | app=system | 
"{5463DE96-7823-4886-BE3A-DF2EC1D77219}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{5C66EA0F-C1FE-495F-9299-A3599B2B3CD9}" = dir=in | app=c:\program files\windows live\mesh\moe.exe | 
"{78E87501-AF0F-45AC-8C6A-EE7899FEB86C}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{8AC462BF-BBC4-4F2F-AA46-6BAE4AF66D9E}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9529CE96-B531-489A-B575-F72B3476765A}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{9CEFF3D9-C90F-4AFD-BC0C-9B845CB62441}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{A5BD0602-1BED-40B5-910E-AC3F5E9E55D9}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{A737DABB-D477-421C-BB1D-AA2D3144B5A2}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{AE55222E-50F4-46DE-A51C-047D34538414}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{B45EE26F-2B27-4985-9C44-5E20F9F0C87C}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{BF147D1E-1C3D-4BBD-91F2-9A6C5BE431DC}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{BF51925D-C3B7-4F04-B319-4A2B1E7E2176}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{C57861B1-6C1F-4B1F-93DE-0AD1609AFA84}" = dir=in | app=c:\program files\hp\quickplay\qp.exe | 
"{CCDB724D-95D8-4B09-82BA-13219D7EB277}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{D81FF2C1-A1A9-4B62-9926-E67566EEC331}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{F21609F3-6BCD-4FA8-969C-97D70A6B4254}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{FC0CF972-B42B-4F31-85FC-FDCFF99C8BED}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{FE327E37-C119-4963-82A6-D0BFAE821EFE}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"TCP Query User{6B151374-0EB9-4064-8A81-64FFDC2E06DA}C:\program files\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | 
"UDP Query User{BEF28273-6189-41EE-AA0B-2B407880633B}C:\program files\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\plugin-container.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0F842B77-56EA-4AAF-8295-81A022350B5E}" = Microsoft Security Client
"{122ADF8C-DDA1-480C-9936-C88F2825B265}" = Apple Application Support
"{1280E900-35DA-4E08-A700-B79A5B2B8532}" = Microsoft Antimalware Service DE-DE Language Pack
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 29
"{2D6E3D97-1FDF-4993-AC75-72F59EC445C5}" = Windows Live Family Safety
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{345AFAE2-614C-4E3C-865D-3E6EDA7D94A3}" = Nitro Reader 2
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 3.7
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{50779A29-834E-4E36-BBEB-B7CABC67A825}" = Microsoft Security Client DE-DE Language Pack
"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6AD9F5F3-5BD0-4000-BD9C-B536CF86D988}" = iTunes
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7FB6B1B7-075B-4B7F-BEB6-97584F73C7B5}" = Brother MFL-Pro Suite DCP-J515W
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8F1ADE4D-EFAC-4F5A-B346-23C2687FAF50}" = Apple Mobile Device Support
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}" = Cisco Systems VPN Client 5.0.07.0290
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 280.26
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 280.19
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.4.28
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.2.23.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C6579A65-9CAE-4B31-8B6B-3306E0630A66}" = Apple Software Update
"{C779648B-410E-4BBA-B75B-5815BCEFE71D}" = Safari
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DA7DF8E2-4B8F-4286-97FE-DE3FFFE9B728}" = iCloud
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F5A4F780-DF0C-444F-BA82-637CCF5C8052}" = Windows Live Family Safety
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FDB3B167-F4FA-461D-976F-286304A57B2A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.6
"AudibleDownloadManager" = Audible Download Manager
"ChatZum Toolbar" = ChatZum Toolbar
"conduitEngine" = Conduit Engine
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"Free YouTube Download 3_is1" = Free YouTube Download 3 version 3.0.12.804
"InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}" = CyberLink YouCam
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft Security Client" = Microsoft Security Essentials
"Mozilla Firefox 14.0.1 (x86 de)" = Mozilla Firefox 14.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"PhotoScape" = PhotoScape
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"SystemRequirementsLab" = System Requirements Lab
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.01 (32-Bit)
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 02.12.2011 15:29:38 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 1076
 
Error - 02.12.2011 15:29:39 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 02.12.2011 15:29:39 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 2074
 
Error - 02.12.2011 15:29:39 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 2074
 
Error - 02.12.2011 15:29:40 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 02.12.2011 15:29:40 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 3244
 
Error - 02.12.2011 15:29:40 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 3244
 
Error - 02.12.2011 15:29:41 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 02.12.2011 15:29:41 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 4243
 
Error - 02.12.2011 15:29:41 | Computer Name = Freude-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 4243
 
[ System Events ]
Error - 26.07.2012 03:50:03 | Computer Name = Freude-PC | Source = Disk | ID = 262155
Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR4 gefunden.
 
Error - 08.08.2012 15:28:30 | Computer Name = Freude-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?08.?08.?2012 um 21:25:30 unerwartet heruntergefahren.
 
Error - 08.08.2012 15:29:43 | Computer Name = Freude-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 21.08.2012 05:25:55 | Computer Name = Freude-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 05.09.2012 14:15:49 | Computer Name = Freude-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?05.?09.?2012 um 17:32:56 unerwartet heruntergefahren.
 
Error - 05.09.2012 14:16:59 | Computer Name = Freude-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 13.09.2012 14:34:11 | Computer Name = Freude-PC | Source = volsnap | ID = 393283
Description = Die Schattenkopie des erstellten Volumes "C:" konnte nicht installiert
 werden.
 
Error - 15.09.2012 05:14:28 | Computer Name = Freude-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 15.09.2012 05:22:44 | Computer Name = Freude-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?15.?09.?2012 um 11:20:58 unerwartet heruntergefahren.
 
Error - 15.09.2012 05:23:57 | Computer Name = Freude-PC | Source = DCOM | ID = 10016
Description = 
 
 
< End of report >
         

OTL logfile created on: 15.09.2012 16:31:33 - Run 1
OTL by OldTimer - Version 3.2.61.4     Folder = C:\Users\Freude\Desktop
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,97 Gb Total Physical Memory | 1,52 Gb Available Physical Memory | 51,14% Memory free
5,93 Gb Paging File | 4,24 Gb Available in Paging File | 71,41% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 465,66 Gb Total Space | 405,74 Gb Free Space | 87,13% Space Free | Partition Type: NTFS
 
Computer Name: FREUDE-PC | User Name: Freude | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Freude\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (Nitro PDF Software)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_3_300_271.exe (Adobe Systems, Inc.)
PRC - C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Programme\ChatZum Toolbar\tbunsq4D2C.tmp\TbHelper2.exe ()
PRC - C:\Programme\Microsoft Security Client\msseces.exe (Microsoft Corporation)
PRC - c:\Programme\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Live\Mail\wlmail.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - C:\Programme\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
PRC - C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
PRC - C:\Programme\Audible\Bin\AudibleDownloadHelper.exe (Audible, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Programme\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programme\IDT\WDM\sttray.exe (IDT, Inc.)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\stacsv.exe (IDT, Inc.)
PRC - C:\Programme\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
PRC - C:\Programme\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
PRC - C:\Programme\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
PRC - C:\Programme\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\AEstSrv.exe (Andrea Electronics Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\626d0ac2f4ada682d7ca6c4ebf821469\CustomMarshalers.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\2ec98ab0193d64e95b7d09d094deed97\Accessibility.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll ()
MOD - C:\Programme\ChatZum Toolbar\tbunsq4D2C.tmp\TbHelper2.exe ()
MOD - C:\Programme\ChatZum Toolbar\tbunsq4D2C.tmp\TbCommonUtils.dll ()
MOD - C:\Programme\OpenOffice.org 3\program\libxml2.dll ()
MOD - C:\Programme\OpenOffice.org 3\program\libxslt.dll ()
MOD - C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
MOD - C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Programme\Brother\BrUtilities\BrLogAPI.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (NitroReaderDriverReadSpool2) -- C:\Programme\Nitro PDF\Reader 2\NitroPDFReaderDriverService2.exe (Nitro PDF Software)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) -- C:\Programme\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (NisSrv) -- c:\Programme\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
SRV - (MsMpSvc) -- c:\Programme\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
SRV - (fsssvc) -- C:\Programme\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (nvUpdatusService) -- C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (wlidsvc) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (wlcrasvc) -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV - (STacSV) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\stacsv.exe (IDT, Inc.)
SRV - (CVPND) -- C:\Programme\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
SRV - (BrYNSvc) -- C:\Programme\Browny02\BrYNSvc.exe (Brother Industries, Ltd.)
SRV - (McComponentHostService) -- C:\Programme\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (AESTFilters) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9691412ff1876250\AEstSrv.exe (Andrea Electronics Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (NisDrv) -- C:\Windows\System32\drivers\NisDrvWFP.sys (Microsoft Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (TsUsbGD) -- C:\Windows\System32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (STHDA) -- C:\Windows\System32\drivers\stwrt.sys (IDT, Inc.)
DRV - (CVPNDRVA) -- C:\Windows\System32\drivers\CVPNDRVA.sys (Cisco Systems, Inc.)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (RSUSBSTOR) -- C:\Windows\System32\drivers\RtsUStor.sys (Realtek Semiconductor Corp.)
DRV - (WSDPrintDevice) -- C:\Windows\System32\drivers\WSDPrint.sys (Microsoft Corporation)
DRV - (DNE) -- C:\Windows\System32\drivers\dne2000.sys (Deterministic Networks, Inc.)
DRV - (CVirtA) -- C:\Windows\System32\drivers\CVirtA.sys (Cisco Systems, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.chatzum.com/
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.chatzum.com/?q={searchTerms}
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.chatzum.com/
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 75 69 E9 B2 CA 42 CC 01  [binary data]
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\..\URLSearchHook: {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Programme\ChatZum Toolbar\tbunsq4D2C.tmp\tbhelper.dll ()
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\..\SearchScopes,DefaultScope = {96bd48dd-741b-41ae-ac4a-aff96ba00f7e}
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\..\SearchScopes\{641F7B39-D833-44C0-8B5F-33F40DBDEDDB}: "URL" = hxxp://search.chatzum.com/?q={searchTerms}
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\..\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}: "URL" = hxxp://search.chatzum.com/?q={SearchTerms}
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.chatzum.com/
IE - HKU\S-1-5-21-764809747-1689136315-3530896507-1003\..\URLSearchHook: {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Programme\ChatZum Toolbar\tbunsq4D2C.tmp\tbhelper.dll ()
 
========== FireFox ==========
 
FF - prefs.js..browser.search.selectedEngine: "Search Safer"
FF - prefs.js..browser.startup.homepage: "hxxp://searchsafer.com/"
FF - prefs.js..extensions.enabledAddons: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.4
FF - prefs.js..extensions.enabledAddons: amznUWL2@amazon.com:1.9
FF - prefs.js..extensions.enabledAddons: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.15.1.0
FF - prefs.js..extensions.enabledAddons: {ADFA33FD-16F5-4355-8504-DF4D664CFE83}:1.0.17
FF - prefs.js..keyword.URL: "hxxp://utils.chatzum.com/?url="
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_271.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files\Nitro PDF\Reader 2\npnitromozilla.dll ( )
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.09.05 20:17:04 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.08.21 11:29:33 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.09.05 20:17:04 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.08.21 11:29:33 | 000,000,000 | ---D | M]
 
[2011.07.15 11:25:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Freude\AppData\Roaming\mozilla\Extensions
[2012.09.15 15:56:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Freude\AppData\Roaming\mozilla\Firefox\Profiles\4aekb2rq.default\extensions
[2012.08.23 18:52:47 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\Freude\AppData\Roaming\mozilla\Firefox\Profiles\4aekb2rq.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.08.12 14:08:52 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Freude\AppData\Roaming\mozilla\Firefox\Profiles\4aekb2rq.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2012.09.15 15:56:04 | 000,000,000 | ---D | M] (ChatZum Toolbar) -- C:\Users\Freude\AppData\Roaming\mozilla\Firefox\Profiles\4aekb2rq.default\extensions\{ADFA33FD-16F5-4355-8504-DF4D664CFE83}
[2012.08.23 18:52:46 | 000,243,317 | ---- | M] () (No name found) -- C:\Users\Freude\AppData\Roaming\mozilla\firefox\profiles\4aekb2rq.default\extensions\amznUWL2@amazon.com.xpi
[2012.09.15 15:56:07 | 000,000,642 | ---- | M] () -- C:\Users\Freude\AppData\Roaming\mozilla\firefox\profiles\4aekb2rq.default\searchplugins\search-safer.xml
[2012.05.30 19:15:15 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.05.30 19:15:17 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2012.09.05 20:17:04 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.03 06:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2012.02.22 12:13:21 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.02.22 12:13:21 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.02.22 12:13:21 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.22 12:13:21 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.22 12:13:21 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.22 12:13:21 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2 - BHO: (Windows Live Messenger Companion Helper) - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Programme\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (TBSB09850 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Programme\ChatZum Toolbar\tbunsq4D2C.tmp\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (ChatZum Toolbar) - {37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - C:\Programme\ChatZum Toolbar\tbunsq4D2C.tmp\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-764809747-1689136315-3530896507-1000\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [BrStsMon00] C:\Program Files\Browny02\Brother\BrStMonW.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4 - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray.exe (IDT, Inc.)
O4 - HKU\S-1-5-21-764809747-1689136315-3530896507-1000..\Run: [MobileDocuments] C:\Programme\Common Files\Apple\Internet Services\ubd.exe (Apple Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-764809747-1689136315-3530896507-1003..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - Startup: C:\Users\Freude\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Free YouTube Download - C:\Users\Freude\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O9 - Extra Button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Programme\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DE88AC52-2C19-4F62-8DA0-1C2CC70651A7}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Programme\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.09.15 16:14:57 | 000,599,552 | ---- | C] (OldTimer Tools) -- C:\Users\Freude\Desktop\OTL.exe
[2012.09.15 15:55:51 | 000,000,000 | ---D | C] -- C:\Program Files\ChatZum Toolbar
[2012.09.15 15:18:38 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Roaming\Nitro PDF
[2012.09.15 15:17:45 | 000,027,152 | ---- | C] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalmon2.dll
[2012.09.15 15:17:45 | 000,018,448 | ---- | C] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalui2.dll
[2012.09.15 15:17:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Nitro PDF
[2012.09.15 15:17:35 | 000,000,000 | ---D | C] -- C:\Program Files\Nitro PDF
[2012.09.15 15:17:35 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Nitro PDF
[2012.09.15 15:16:32 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Roaming\Downloaded Installations
[2012.09.15 15:16:06 | 033,144,504 | ---- | C] (Nitro PDF Software) -- C:\Users\Freude\Desktop\nitro_pdf_reader45.exe
[2012.09.15 11:24:15 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{A1EA1EFB-5B7F-49FB-8CC9-4E7ADC118433}
[2012.09.15 11:15:12 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{43C3731D-7F8C-41C5-AF17-C18EA618546F}
[2012.09.13 20:52:34 | 000,000,000 | ---D | C] -- C:\Users\Freude\Desktop\Originals
[2012.09.13 20:34:17 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{2543E445-6F97-4BB5-A5BA-3850A0FD0873}
[2012.09.12 18:39:01 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
[2012.09.12 18:39:00 | 000,240,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2012.09.12 18:39:00 | 000,187,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2012.09.12 18:38:51 | 000,490,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2012.09.12 01:07:45 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{9F99E411-FA2A-46EF-ACBE-86B57DD7B527}
[2012.09.11 10:52:55 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{438FFA8D-D826-4242-BDC5-3BE3F8D9A4C1}
[2012.09.10 12:47:45 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{27C95143-20E3-4509-B1DC-5FE71F7664FE}
[2012.09.09 18:52:14 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{CADF8DAE-7FD7-4092-8EFF-C424DF823A8F}
[2012.09.09 05:22:10 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{D08BBD77-B408-4177-811E-5D1776E0614C}
[2012.09.06 13:11:53 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{DDD73C74-6177-4F2D-B93A-C85729029A59}
[2012.09.05 20:18:17 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{CDDBC94B-C866-422D-AE63-A4517B5727B9}
[2012.09.03 23:28:24 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{9A8B6B0E-4C60-4845-B3AA-816DEADF08F3}
[2012.09.03 10:09:37 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{3F5CFD83-AD3E-44D4-8488-50AF3D6402DE}
[2012.09.02 20:17:42 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{394D5BD9-4FF8-4488-9B95-0592F9710103}
[2012.09.01 19:24:18 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{39CE7222-896A-463F-B8AF-CEB1F9A33439}
[2012.08.23 18:52:42 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{3F08AB93-8D36-4584-8838-482ED6BD0870}
[2012.08.21 11:26:44 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{D879C16F-3ED2-43DA-BFA4-4505E299B6F7}
[2012.08.20 10:38:36 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{52B8F332-B456-46CC-A536-2ADBC442FB7F}
[2012.08.19 18:09:18 | 000,627,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012.08.19 18:09:17 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.08.19 18:09:16 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.08.19 18:09:16 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.08.19 18:09:16 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.08.19 18:09:14 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2012.08.19 18:09:13 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2012.08.19 18:09:09 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2012.08.19 18:01:33 | 000,000,000 | ---D | C] -- C:\Users\Freude\AppData\Local\{D703893A-26C2-4D6B-8475-67143D91FF88}
 
========== Files - Modified Within 30 Days ==========
 
[2012.09.15 16:35:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.09.15 16:15:00 | 000,599,552 | ---- | M] (OldTimer Tools) -- C:\Users\Freude\Desktop\OTL.exe
[2012.09.15 15:31:36 | 001,831,025 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 9 ausschnitt.jpg
[2012.09.15 15:30:50 | 001,704,441 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 9.jpg
[2012.09.15 15:29:30 | 000,711,889 | ---- | M] () -- C:\Users\Freude\Desktop\Valentine's Card 3_page1_image1.jpg
[2012.09.15 15:28:32 | 000,126,916 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 8.jpg
[2012.09.15 15:17:44 | 000,001,993 | ---- | M] () -- C:\Users\Public\Desktop\Nitro Reader.lnk
[2012.09.15 15:16:26 | 033,144,504 | ---- | M] (Nitro PDF Software) -- C:\Users\Freude\Desktop\nitro_pdf_reader45.exe
[2012.09.15 15:08:24 | 004,346,722 | ---- | M] () -- C:\Users\Freude\Desktop\Valentine's Card 3.pdf
[2012.09.15 14:48:22 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.09.15 11:30:32 | 000,021,840 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.15 11:30:32 | 000,021,840 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.15 11:27:43 | 000,661,104 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.09.15 11:27:43 | 000,622,250 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.09.15 11:27:43 | 000,133,542 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.09.15 11:27:43 | 000,109,332 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.09.15 11:23:08 | 000,000,247 | ---- | M] () -- C:\ProgramData\hpqp.ini
[2012.09.15 11:22:38 | 2389,905,408 | -HS- | M] () -- C:\hiberfil.sys
[2012.09.15 11:13:14 | 000,293,312 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.09.13 21:33:59 | 000,057,048 | ---- | M] () -- C:\Users\Freude\Desktop\blaaaaaaaaa.JPG
[2012.09.13 21:17:38 | 000,120,772 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 7 mit herz.jpg
[2012.09.13 21:17:26 | 000,120,772 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 7.jpg
[2012.09.13 20:56:03 | 000,028,638 | ---- | M] () -- C:\Users\Freude\Desktop\Pink heart.jpg
[2012.09.13 20:52:34 | 000,311,107 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 6.jpg
[2012.09.13 20:46:20 | 000,373,014 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 4.jpg
[2012.09.13 20:43:48 | 000,469,995 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 2.jpg
[2012.09.13 20:40:46 | 000,186,066 | ---- | M] () -- C:\Users\Freude\Desktop\save the date 1.jpg
[2012.09.13 01:52:52 | 000,027,152 | ---- | M] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalmon2.dll
[2012.09.13 01:52:52 | 000,018,448 | ---- | M] (Nitro PDF Software) -- C:\Windows\System32\nitrolocalui2.dll
[2012.09.12 20:30:01 | 000,007,334 | ---- | M] () -- C:\Users\Freude\Desktop\OpenDocument Text (neu) (2).odt
[2012.09.12 20:23:39 | 000,058,650 | ---- | M] () -- C:\Users\Freude\Desktop\scriptina.zip
[2012.09.12 20:11:02 | 000,042,031 | ---- | M] () -- C:\Users\Freude\Desktop\konfettiherz_daiquiri_1.jpg
[2012.09.12 12:09:26 | 000,038,665 | ---- | M] () -- C:\Users\Freude\Desktop\229_hochzeitsparty_bad_brueckenau_std.jpg
[2012.09.11 17:56:32 | 000,013,610 | ---- | M] () -- C:\Users\Freude\Desktop\detective fiction.odt
[2012.09.11 17:56:32 | 000,000,102 | -H-- | M] () -- C:\Users\Freude\Desktop\.~lock.detective fiction.odt#
[2012.09.11 10:53:54 | 000,000,102 | -H-- | M] () -- C:\Users\Freude\Desktop\.~lock.OpenDocument Text (neu).odt#
[2012.09.03 16:49:20 | 000,076,513 | ---- | M] () -- C:\Users\Freude\Desktop\d.JPG
[2012.09.01 19:37:54 | 001,908,272 | ---- | M] () -- C:\Users\Freude\Desktop\Abiturzeugnis Freude.pdf
[2012.09.01 19:17:53 | 000,099,039 | ---- | M] () -- C:\Users\Freude\Desktop\CV Freude.pdf
[2012.08.30 01:15:30 | 003,782,214 | ---- | M] () -- C:\chatzum_nt.exe
[2012.08.22 19:16:46 | 000,240,496 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2012.08.22 19:16:36 | 000,187,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\drivers\FWPKCLNT.SYS
[2012.08.20 10:38:47 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.08.20 10:38:46 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
 
========== Files Created - No Company Name ==========
 
[2012.09.15 15:31:36 | 001,831,025 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 9 ausschnitt.jpg
[2012.09.15 15:30:50 | 001,704,441 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 9.jpg
[2012.09.15 15:28:32 | 000,126,916 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 8.jpg
[2012.09.15 15:20:06 | 000,711,889 | ---- | C] () -- C:\Users\Freude\Desktop\Valentine's Card 3_page1_image1.jpg
[2012.09.15 15:17:44 | 000,001,993 | ---- | C] () -- C:\Users\Public\Desktop\Nitro Reader.lnk
[2012.09.15 15:17:43 | 000,002,495 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nitro Reader 2.lnk
[2012.09.15 15:08:24 | 004,346,722 | ---- | C] () -- C:\Users\Freude\Desktop\Valentine's Card 3.pdf
[2012.09.13 21:33:58 | 000,057,048 | ---- | C] () -- C:\Users\Freude\Desktop\blaaaaaaaaa.JPG
[2012.09.13 21:17:38 | 000,120,772 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 7 mit herz.jpg
[2012.09.13 20:56:02 | 000,028,638 | ---- | C] () -- C:\Users\Freude\Desktop\Pink heart.jpg
[2012.09.13 20:53:27 | 000,120,772 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 7.jpg
[2012.09.13 20:51:01 | 000,311,107 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 6.jpg
[2012.09.13 20:46:20 | 000,373,014 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 4.jpg
[2012.09.13 20:43:48 | 000,469,995 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 2.jpg
[2012.09.13 20:40:46 | 000,186,066 | ---- | C] () -- C:\Users\Freude\Desktop\save the date 1.jpg
[2012.09.12 20:30:01 | 000,007,334 | ---- | C] () -- C:\Users\Freude\Desktop\OpenDocument Text (neu) (2).odt
[2012.09.12 20:23:38 | 000,058,650 | ---- | C] () -- C:\Users\Freude\Desktop\scriptina.zip
[2012.09.12 20:11:01 | 000,042,031 | ---- | C] () -- C:\Users\Freude\Desktop\konfettiherz_daiquiri_1.jpg
[2012.09.12 12:09:24 | 000,038,665 | ---- | C] () -- C:\Users\Freude\Desktop\229_hochzeitsparty_bad_brueckenau_std.jpg
[2012.09.11 17:55:47 | 000,000,102 | -H-- | C] () -- C:\Users\Freude\Desktop\.~lock.detective fiction.odt#
[2012.09.11 16:28:01 | 000,013,610 | ---- | C] () -- C:\Users\Freude\Desktop\detective fiction.odt
[2012.09.11 10:53:54 | 000,000,102 | -H-- | C] () -- C:\Users\Freude\Desktop\.~lock.OpenDocument Text (neu).odt#
[2012.09.03 16:49:20 | 000,076,513 | ---- | C] () -- C:\Users\Freude\Desktop\d.JPG
[2012.09.01 19:37:49 | 001,908,272 | ---- | C] () -- C:\Users\Freude\Desktop\Abiturzeugnis Freude.pdf
[2012.09.01 19:17:50 | 000,099,039 | ---- | C] () -- C:\Users\Freude\Desktop\CV Freude.pdf
[2012.08.30 01:15:30 | 003,782,214 | ---- | C] () -- C:\chatzum_nt.exe
[2011.11.03 22:47:51 | 000,007,603 | ---- | C] () -- C:\Users\Freude\AppData\Local\Resmon.ResmonCfg
[2011.08.07 20:08:47 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2011.08.07 20:07:56 | 000,000,050 | ---- | C] () -- C:\Windows\System32\BRIDF10B.DAT
[2011.07.15 11:20:28 | 000,000,247 | ---- | C] () -- C:\ProgramData\hpqp.ini
[2010.11.21 02:46:14 | 000,661,104 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2010.11.21 02:46:14 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2010.11.21 02:46:14 | 000,133,542 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2010.11.21 02:46:14 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
 
========== LOP Check ==========
 
[2011.11.02 20:37:55 | 000,000,000 | ---D | M] -- C:\Users\Freude\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012.09.15 15:16:32 | 000,000,000 | ---D | M] -- C:\Users\Freude\AppData\Roaming\Downloaded Installations
[2011.08.12 14:09:19 | 000,000,000 | ---D | M] -- C:\Users\Freude\AppData\Roaming\DVDVideoSoft
[2011.08.12 14:08:51 | 000,000,000 | ---D | M] -- C:\Users\Freude\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.09.15 15:20:03 | 000,000,000 | ---D | M] -- C:\Users\Freude\AppData\Roaming\Nitro PDF
[2011.07.15 11:40:27 | 000,000,000 | ---D | M] -- C:\Users\Freude\AppData\Roaming\OpenOffice.org
[2012.09.13 21:11:54 | 000,000,000 | ---D | M] -- C:\Users\Freude\AppData\Roaming\PhotoScape
[2011.08.12 11:51:16 | 000,000,000 | ---D | M] -- C:\Users\Freude\AppData\Roaming\Windows Live Writer
[2009.07.14 06:53:46 | 000,015,248 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >