Google Suchergebnisse - leitet beim Klick auf das Suchergebnis um

ABACUS	Arag IT GmbH	02.11.2012		
Adobe AIR	Adobe Systems Incorporated	02.11.2012		3.2.0.2070
Adobe Flash Player 11 ActiveX	Adobe Systems Incorporated	02.11.2012	6,00MB	11.4.402.287
Adobe Flash Player 11 Plugin	Adobe Systems Incorporated	02.11.2012	6,00MB	11.4.402.287
Adobe Reader X (10.1.4) - Deutsch	Adobe Systems Incorporated	16.08.2012	124MB	10.1.4
AIDA64 Extreme Edition v1.20	FinalWire Ltd.	09.02.2011	20,1MB	1.20
Angebots Msi	Canada Life Assurance (Irl) Ltd	13.09.2011	133MB	14.0.00
AOWin2010		02.11.2012		
AOWin2010		09.02.2011		
Apple Application Support	Apple Inc.	17.09.2012	64,4MB	2.2.2
Apple Mobile Device Support	Apple Inc.	17.09.2012	23,1MB	6.0.0.59
Apple Software Update	Apple Inc.	21.07.2011	2,38MB	2.1.3.127
AquaSoft PhotoKalender 3	AquaSoft	02.11.2012		3.6.03
ASC Easy 3.9.3	ASC GmbH	03.08.2011	207MB	
ASC Easy Update auf Version 4.5.0	ASC Assekuranz Service Center GmbH	09.10.2012	70,6MB	
AXA Beratungstechnologie	AXA Konzern AG	04.07.2012	196MB	12.1.0
BB-Euro-Tarifrechner		02.11.2012		1.0
Beratungsprogramme W&W-Konzern		02.11.2012		
Bonjour	Apple Inc.	12.10.2011	1,04MB	3.0.0.10
Brother P-touch Address Book 1.1	Brother Industries, Ltd.	05.06.2012	11,7MB	1.1.100
Brother P-touch Editor 5.0	Brother Industries, Ltd.	05.06.2012	22,3MB	5.0.110
CardMinder	PFU	20.07.2011		V4.1L10
CCleaner	Piriform	24.10.2012		3.24
CleverPrint	Abelssoft GmbH	27.07.2011		2.00
CodedColor FotoStudio 2010, 6.1.2	1STEIN	02.12.2011	76,0MB	
CONDOR Angebotssystem	Condor Versicherungsgruppe	02.11.2012		09/2012
Data Access Objects (DAO) 3.5		02.11.2012		
DB_Firebird 1.5.0.4306		02.11.2012		
DHTML Editing Component	Microsoft Corporation	01.04.2011	554KB	6.02.0001
Dialog Tarifprogramm	Dialog Lebensversicherungs-AG	06.12.2011	216MB	1.26.0008
Dir-It!	Wirth New Media Sarl	31.03.2011	630KB	4.00.0000
Direkt Foto System 3.x		04.11.2011	270MB	
ELBE SL	SLP	02.11.2012		1.22.0.357 13.06.2012
ElektrALight	DKV ein Unternehmen der ERGO Versicherungsgruppe	06.09.2012	32,5MB	12.10
Firebird SQL Server - MAGIX Edition	MAGIX AG	23.01.2012	10,1MB	2.1.27.0
FUJIFILM MyFinePix Studio 2.0		15.08.2011		
Fujitsu NetCOBOL Free Run-time	FUJITSU LIMITED	05.09.2012	7,71MB	9.0.0020.0000
Garmin Communicator Plugin	Garmin Ltd or its subsidiaries	25.09.2012	14,6MB	4.0.3
Geldgeschenke DruckShop		02.11.2012		
Generali Versicherungen Beratungssoftware		02.11.2012		
GEWA KV-Rational		02.11.2012		
GEWA KVRATIO		02.11.2012		
Google Chrome	Google Inc.	06.07.2012		22.0.1229.94
Google Earth	Google	21.11.2011	92,7MB	6.1.0.5001
Gothaer Softwarepaket, komplette Deinstallation		02.11.2012		
HanseMerkur ISA Makler	HanseMerkur Krankenversicherung AG	02.11.2012		1.5.0
HanseMerkur ISA Service Extensions	Hanse Merkur	14.05.2012	7,28MB	1.1.4
HanseMerkur-Tarife		02.11.2012		
Hardcopy (C:\Program Files\Hardcopy)	www.hardcopy.de	02.11.2012		2011.07.02
Helvetia Porta	Helvetia Versicherungen Deutschland	02.11.2012		
HP Product Detection	Hewlett-Packard Company	20.07.2011	1,90MB	10.7.9.0
iCloud	Apple Inc.	08.10.2012	47,4MB	2.0.2.187
InterRisk WinRisk 4.9.0	InterRisk Versicherungs-AG Vienna Insurance Group, InterRisk Lebensversicherungs-AG Vienna Insurance Group	28.10.2011	406MB	4.9.246.0
IrfanView (remove only)	Irfan Skiljan	02.11.2012	1,50MB	4.30
iTunes	Apple Inc.	17.09.2012	180MB	10.7.0.21
Janitos Offline-Tarifrechner 3.2.4.0	Fairware24	23.12.2011		
Java 2 Runtime Environment, SE v1.4.2_10	Sun Microsystems, Inc.	11.08.2011	131MB	1.4.2_10
Java 7 Update 9	Oracle	31.08.2012	128MB	7.0.90
Kaspersky Anti-Virus 2013	Kaspersky Lab	02.11.2012		13.0.1.4190
klickTel Telefon- und Branchenbuch + Rückwärtssuche Herbst 2010	telegate MEDIA AG	09.02.2011		1.00.0000
klickTel Telefon- und Branchenbuch + Rückwärtssuche Herbst 2011	telegate MEDIA AG	29.07.2011		1.00.0000
KS-Win 2008	Kraftfahrerschutz e.V.	02.11.2012		1.4.42
KUBUS light ERGO	ITERGO	05.04.2012	2,27GB	12.10
LAN-Fax Dienstprogramme		02.11.2012		
MAGIX 3D Maker (embedded MSI)	MAGIX AG	23.01.2012	19,8MB	6.0.0.8
MAGIX Foto Premium 9	MAGIX AG	02.11.2012		9.0.3.2
MAGIX Online Druck Service	MAGIX AG	23.01.2012	10,2MB	3.4.3.0
MAGIX Screenshare	MAGIX AG	23.01.2012	1,43MB	4.3.6.1987
MAGIX Speed 2 (MSI)	MAGIX AG	23.01.2012	57,9MB	6.0.1.4
MAGIX Xtreme Grafik Designer 5	MAGIX AG	02.11.2012		5.1.2.10977
MailStore Home 5.0.1.6919	deepinvent Software GmbH	24.01.2012	24,1MB	5.0.1.6919
Maitre	Swiss Life Partner	02.11.2012		1.14.0.180
MEAG-Angebotssoftware	MEAG	05.04.2012	22,5MB	1.79.4
Microsoft .NET Framework 1.1		02.11.2012		
Microsoft .NET Framework 1.1 German Language Pack		02.11.2012		
Microsoft .NET Framework 4 Client Profile		09.02.2011	220MB	
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	02.11.2012	38,8MB	4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack		09.02.2011		
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	02.11.2012	2,93MB	4.0.30319
Microsoft .NET Framework 4 Extended		09.02.2011	94,8MB	
Microsoft .NET Framework 4 Extended	Microsoft Corporation	02.11.2012	51,9MB	4.0.30319
Microsoft Access 2000 SR-1 Runtime	Microsoft Corporation	03.08.2011	44,8MB	9.00.3821
Microsoft Dynamics CRM 2011 für Microsoft Office Outlook	Microsoft Corporation	02.11.2012		5.0.9690.2243
Microsoft IntelliType Pro 8.2	Microsoft Corporation	02.11.2012		8.20.469.0
Microsoft LifeCam	Microsoft Corporation	09.02.2011	49,9MB	3.22.270.0
Microsoft Office File Validation Add-In	Microsoft Corporation	16.09.2011	7,95MB	14.0.5130.5003
Microsoft Office Live Add-in 1.5	Microsoft Corporation	02.05.2012	508KB	2.0.4024.1
Microsoft Office Outlook Connector	Microsoft Corporation	01.09.2011	3,36MB	14.0.5118.5000
Microsoft Office Professional Plus 2007	Microsoft Corporation	02.11.2012		12.0.6612.1000
Microsoft Online Services-Anmeldeassistent	Microsoft Corporation	30.05.2012	3,63MB	7.250.4287.0
Microsoft ReportViewer 2010 Redistributable	Microsoft Corporation	29.05.2012	12,4MB	10.0.30319
Microsoft Silverlight	Microsoft Corporation	15.05.2012	142MB	5.1.10411.0
Microsoft SQL Server 2005	Microsoft Corporation	02.11.2012		
Microsoft SQL Server 2005 Compact Edition [ENU]	Microsoft Corporation	01.09.2011	1,69MB	3.1.0000
Microsoft SQL Server 2008	Microsoft Corporation	02.11.2012		
Microsoft SQL Server 2008 Browser	Microsoft Corporation	31.10.2012	8,03MB	10.3.5500.0
Microsoft SQL Server 2008 Native Client	Microsoft Corporation	31.10.2012	3,27MB	10.3.5500.0
Microsoft SQL Server Compact 3.5 SP2 DEU	Microsoft Corporation	29.05.2012	3,69MB	3.5.8082.0
Microsoft SQL Server Native Client	Microsoft Corporation	10.04.2012	2,60MB	9.00.5000.00
Microsoft SQL Server Setup Support Files (English)	Microsoft Corporation	10.04.2012	24,5MB	9.00.5000.00
Microsoft SQL Server VSS Writer	Microsoft Corporation	31.10.2012	2,18MB	10.3.5500.0
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053	Microsoft Corporation	17.06.2011	252KB	8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	12.07.2011	300KB	8.0.59193
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729	Microsoft Corporation	28.10.2011	234KB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17	Microsoft Corporation	27.09.2011	238KB	9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	31.05.2011	596KB	9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	12.07.2011	600KB	9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319	Microsoft Corporation	31.10.2012	11,0MB	10.0.30319
Microsoft Windows Media Video 9 VCM		02.11.2012		
Microsoft Works 6-9 Converter	Microsoft Corporation	13.04.2012	4,56MB	14.0.6120.5002
Microsoft XML Parser	 	19.07.2011	66,0KB	1.00.0000
MKVWin 12-1		10.10.2011		MKVWin 12-1
MobileMe Control Panel	Apple Inc.	24.10.2011	12,9MB	3.1.8.0
MotoHelper 2.1.32 Driver 5.4.0	Motorola	02.11.2012		2.1.32
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	20.07.2011	35,0KB	4.20.9870.0
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	20.07.2011	1,33MB	4.20.9876.0
MV-Makler-und-ADP		02.11.2012		
myphotobook.de	myphotobook GmbH	02.11.2012		1.3.0
MÜNCHENER VEREIN Software-Service		02.11.2012		
Nero Burning ROM 10	Nero AG	13.09.2011	168MB	10.6.10600
Nero BurnRights 10	Nero AG	13.09.2011	6,14MB	4.4.10300.1.100
Outlook Backup Assistant 5 (Vollversion)	Priotecs IT GmbH	31.03.2011	5,93MB	5.0
PhotoCleaner		02.11.2012		
Pixpedia Publisher 3.1.1	1STEIN Corp.	02.12.2011	34,3MB	
POLARIS		02.11.2012		
Power Druckstudio Gold 1		13.09.2012	454MB	
QuickTime	Apple Inc.	21.05.2012	73,2MB	7.72.80.56
RAF	FUJIFILM Corporation	15.08.2011		1.00.0001
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	02.11.2012		6.0.1.5910
RSA SecurID Software Token	RSA, The Security Division of EMC	29.09.2011	19,9MB	4.1.0
RSA Smart Card Middleware 3.5	RSA, The Security Division of EMC	29.09.2011	13,2MB	3.5.3.36
RuntimeInstallieren	SIGNAL IDUNA	20.07.2011	2,28MB	1.20.0001
RV-Win		02.11.2012		
ScanSnap Manager	PFU	20.07.2011		V5.0L21
ScanSnap Organizer	PFU	20.07.2011		V4.1L11
ScanSoft PDF Converter 3.0	ScanSoft, Inc	04.10.2011	78,3MB	3.00.0002
SDK - Angebotsprogramm	Süddeutsche Krankenversicherung a.G.	15.08.2012	583MB	12.07.30
SIGNAL IDUNA Beratungssoftware freie Vertriebe	SIGNAL IDUNA Gruppe	02.11.2012		012.33.0001
Skype™ 5.10	Skype Technologies S.A.	13.09.2012	19,4MB	5.10.116
SQLAnywhere11		02.11.2012		
Swiss Life BeraterBüro	Intelligent Solution Services AG	05.09.2012	191MB	7.45.0271
Swiss Life EVA		02.11.2012		
T-Online 6.0		02.11.2012		
TeamViewer 7	TeamViewer	02.11.2012		7.0.15723
trixiKfz	trixi informationssysteme GmbH	30.05.2011	46,0MB	17.00.0000
Unterstützungsdateien für Microsoft SQL Server 2008-Setup 	Microsoft Corporation	31.10.2012	30,0MB	10.3.5500.0
Vereins-Verwaltung	Dr. Hartmut Braun	02.11.2012		11.6.07.12
VHV Maklerverwaltungsprogramm	VHV Allgemeine Versicherung AG	08.02.2012		1.1.7.0
VHV RECOMAX	VHV Allgemeine Versicherung AG	16.01.2012		7.00
VHV-Tarifprogramm	VHV Allgemeine Versicherung AG	20.09.2012		50.0.37
VIA-P 12.20	ITERGO GmbH	03.07.2012	2,85GB	12.20
VorsorgePLANER	Software für Vorsorge und Finanzplanung GmbH & Co. KG	13.09.2011	123MB	1.0
WebKIS Offline		02.11.2012		
Windows Live Essentials	Microsoft Corporation	01.09.2011		15.4.3538.0513
Windows Live Mesh ActiveX control for remote connections	Microsoft Corporation	01.09.2011	5,57MB	15.4.5722.2
Windows-Treiberpaket - Microsoft (USBCCID) SmartCardReader  (05/17/2005 5.2.3790.2444)	Microsoft	02.11.2012		05/17/2005 5.2.3790.2444
WinRAR 4.11 (32-Bit)	win.rar GmbH	02.11.2012		4.11.0
Zoner Photo Studio 12	ZONER software	02.12.2011	164MB	12.0.1.10
         

OTL logfile created on: 02.11.2012 03:51:27 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Scheuer\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,25 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 50,77% Memory free
6,50 Gb Paging File | 4,75 Gb Available in Paging File | 73,15% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 292,97 Gb Total Space | 195,77 Gb Free Space | 66,82% Space Free | Partition Type: NTFS
Drive E: | 7,53 Gb Total Space | 1,42 Gb Free Space | 18,85% Space Free | Partition Type: NTFS
Drive F: | 172,79 Gb Total Space | 116,20 Gb Free Space | 67,25% Space Free | Partition Type: NTFS
Drive G: | 962,07 Mb Total Space | 484,32 Mb Free Space | 50,34% Space Free | Partition Type: FAT32
 
Computer Name: HAUPT-PC | User Name: Scheuer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Scheuer\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
PRC - C:\Program Files\TeamViewer\Version7\tv_w32.exe (TeamViewer GmbH)
PRC - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
PRC - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Microsoft Dynamics CRM\Client\bin\CrmSqlStartupSvc.exe (Microsoft Corporation)
PRC - C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe ()
PRC - C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe ()
PRC - F:\Versicherungen\InterRisk\WinRiskXA\client\bin\BWUpdater.exe (BISS GmbH)
PRC - C:\Program Files\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann)
PRC - C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe ()
PRC - F:\Versicherungen\KOSYMA\update\bserver3.exe (Brainstorm Informatik GmbH)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe (RSA, The Security Division of EMC.)
PRC - C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
PRC - C:\Program Files\PFU\ScanSnap\Driver\PfuSsMon.exe (PFU LIMITED)
PRC - C:\Windows\SSDriver\fi5110\SsWiaChecker.exe (PFU LIMITED)
PRC - C:\Program Files\PFU\ScanSnap\CardMinder\CardLauncher.exe (PFU LIMITED)
PRC - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
PRC - C:\Windows\System32\atieclxx.exe (AMD)
PRC - C:\Windows\System32\atiesrxx.exe (AMD)
PRC - C:\Windows\System32\PrintDisp.exe (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
PRC - C:\Windows\System32\PrintCtrl.exe (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
PRC - F:\Versicherungen\WebKIS\Tomcat\bin\tomcat5.exe (Apache Software Foundation)
PRC - C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe (The Firebird Project)
PRC - C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe (The Firebird Project)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\dblite.dll ()
MOD - C:\Program Files\WinRAR\rarext.dll ()
MOD - C:\Program Files\Motorola\MotoHelper\MotoHelperAgent.exe ()
MOD - C:\Program Files\Hardcopy\HcDllS.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Program Files\Hardcopy\hcdll2_ex_Win32.exe ()
MOD - C:\Program Files\Hardcopy\hardcopy_03.dll ()
MOD - C:\Program Files\Hardcopy\HcDLL2_30_Win32.dll ()
MOD - C:\Program Files\PFU\ScanSnap\Driver\PfuSsConfig.dll ()
MOD - C:\Program Files\PFU\ScanSnap\Driver\PfuSsExtention.dll ()
MOD - C:\Program Files\PFU\ScanSnap\CardMinder\CardPath.dll ()
MOD - C:\Program Files\PFU\ScanSnap\CardMinder\0407\CardConfig0407.dll ()
MOD - C:\Program Files\PFU\ScanSnap\Driver\SSsltsa.dll ()
MOD - C:\Program Files\PFU\ScanSnap\Driver\PfuSsImgIO.dll ()
 
 
========== Services (SafeList) ==========
 
SRV - (TeamViewer7) -- C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AVP) -- C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (WinRiskXAAppService) -- F:\Versicherungen\InterRisk\WinRiskXA\server\bin\WinRiskXAServer.exe ()
SRV - (CrmSqlStartupSvc) -- C:\Program Files\Microsoft Dynamics CRM\Client\bin\CrmSqlStartupSvc.exe (Microsoft Corporation)
SRV - (MotoHelper) -- C:\Program Files\Motorola\MotoHelper\MotoHelperService.exe ()
SRV - (WinRiskXAServiceHandler) -- F:\Versicherungen\InterRisk\WinRiskXA\client\bin\BWServiceHandler.exe ()
SRV - (WinRiskXASoftwareUpdate) -- F:\Versicherungen\InterRisk\WinRiskXA\client\bin\BWUpdater.exe (BISS GmbH)
SRV - (BserverDienst) -- F:\Versicherungen\KOSYMA\update\bserver3.exe (Brainstorm Informatik GmbH)
SRV - (MSCamSvc) -- C:\Program Files\Microsoft LifeCam\MSCamS32.exe (Microsoft Corporation)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (c2wts) -- C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe (Microsoft Corporation)
SRV - (Fabs) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (Printer Control) -- C:\Windows\System32\PrintCtrl.exe (ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM)
SRV - (FirebirdServerMAGIXInstance) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe (MAGIX®)
SRV - (ApacheTomcatKLV) -- F:\Versicherungen\WebKIS\Tomcat\bin\tomcat5.exe (Apache Software Foundation)
SRV - (ARAGHSQL) -- F:\Versicherungen\DB\ABACUS\fp\HsqlService.exe (Multiplan Consultants Limited)
SRV - (FirebirdServerDefaultInstance) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbserver.exe (The Firebird Project)
SRV - (FirebirdGuardianDefaultInstance) -- C:\Program Files\Firebird\Firebird_1_5\bin\fbguard.exe (The Firebird Project)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (VGPU) -- System32\drivers\rdvgkmd.sys File not found
DRV - (KLIF) -- C:\Windows\System32\drivers\klif.sys (Kaspersky Lab)
DRV - (klmouflt) -- C:\Windows\System32\drivers\klmouflt.sys (Kaspersky Lab)
DRV - (klkbdflt) -- C:\Windows\System32\drivers\klkbdflt.sys (Kaspersky Lab)
DRV - (kneps) -- C:\Windows\System32\drivers\kneps.sys (Kaspersky Lab)
DRV - (KLIM6) -- C:\Windows\System32\drivers\klim6.sys (Kaspersky Lab ZAO)
DRV - (KL1) -- C:\Windows\System32\drivers\kl1.sys (Kaspersky Lab ZAO)
DRV - (kltdi) -- C:\Windows\System32\drivers\kltdi.sys (Kaspersky Lab)
DRV - (Synth3dVsc) -- C:\Windows\System32\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV - (SSHDRV86) -- C:\Windows\System32\drivers\SSHDRV86.sys ()
DRV - (RsFx0105) -- C:\Windows\System32\drivers\RsFx0105.sys (Microsoft Corporation)
DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
DRV - (tsusbhub) -- C:\Windows\System32\drivers\tsusbhub.sys (Microsoft Corporation)
DRV - (dmvsc) -- C:\Windows\System32\drivers\dmvsc.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
DRV - (TsUsbGD) -- C:\Windows\System32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (terminpt) -- C:\Windows\System32\drivers\terminpt.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://nachrichten.t-online.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\..\SearchScopes,DefaultScope = {0118E0F7-9F49-4502-AA50-52CF776CA330}
IE - HKCU\..\SearchScopes\{0118E0F7-9F49-4502-AA50-52CF776CA330}: "URL" = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local;192.168.*.*
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll File not found
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Scheuer\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Scheuer\AppData\Local\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\content_blocker@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\content_blocker@kaspersky.com [2012.11.02 01:57:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\url_advisor@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\url_advisor@kaspersky.com [2012.11.02 01:57:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtual_keyboard@kaspersky.com: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\FFExt\virtual_keyboard@kaspersky.com [2012.11.02 01:57:35 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2012\FFExt\virtualKeyboard@kaspersky.ru
 
[2012.11.02 03:17:45 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\extensions
[2012.11.02 02:00:41 | 000,000,000 | ---D | M] (QuickStores-Toolbar) -- C:\Program Files\mozilla firefox\extensions\quickstores@quickstores.de
 
========== Chrome  ==========
 
CHR - homepage: hxxp://nachrichten.t-online.de/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}
CHR - homepage: hxxp://nachrichten.t-online.de/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Scheuer\AppData\Local\Google\Chrome\Application\22.0.1229.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Scheuer\AppData\Local\Google\Chrome\Application\22.0.1229.94\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Scheuer\AppData\Local\Google\Chrome\Application\22.0.1229.94\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_3_300_262.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin/npABPlugin.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\plugin/npVKPlugin.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\plugin/npUrlAdvisor.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U29 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.2 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll
CHR - plugin: Microsoft Office Live Plug-in for Firefox (Enabled) = C:\Program Files\Microsoft\Office Live\npOLW.dll
CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - Extension: YouTube = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Modul zur Link-Untersuchung = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\
CHR - Extension: Modul zur Link-Untersuchung = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.1.4190_0\
CHR - Extension: SiteRanker = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\dgldkplledicnbnnliodeffobaiaodaf\1.0.0.0_0\
CHR - Extension: Virtuelle Tastatur = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\
CHR - Extension: Virtuelle Tastatur = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.1.4190_0\
CHR - Extension: Google Mail = C:\Users\Scheuer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
 
O1 HOSTS File: ([2012.11.01 10:19:18 | 000,000,027 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Content Blocker Plugin) - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Virtual Keyboard Plugin) - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (URL Advisor Plugin) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (no name) - {10EDB994-47F8-43F7-AE96-F2EA63E9F90F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C424171E-592A-415A-9EB1-DFD6D95D3530} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No CLSID value found.
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [PDF3 Registry Controller] C:\Program Files\ScanSoft\PDF Converter 3.0\RegistryController.exe (ScanSoft, Inc.)
O4 - HKLM..\Run: [PrintDisp] C:\Windows\System32\PrintDisp.exe (ActMask Co.,Ltd - hxxp://www.all2pdf.com)
O4 - HKLM..\Run: [RSA Card Conversion Utility] C:\Program Files\Common Files\RSA Shared\RSA Card Conversion Utility\RSACardConversionUtility.exe (RSA, The Security Division of EMC.)
O4 - HKLM..\Run: [ScanSnap WIA Service Checker] C:\Windows\SSDriver\fi5110\SsWiaChecker.exe (PFU LIMITED)
O4 - HKLM..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" File not found
O4 - HKLM..\RunOnce: [BrowserChoice] C:\Windows\System32\browserchoice.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: Virtuelle Tastatur - {0C4CC089-D306-440D-9772-464E226F6539} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIF5BA~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Links untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 2013\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: vhv.de ([maxnet] https in Vertrauenswürdige Sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 10.9.2)
O16 - DPF: {CAFEEFAC-0014-0002-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.4.2/jinstall-1_4_2_10-windows-i586.cab (Java Plug-in 1.4.2_10)
O16 - DPF: {CAFEEFAC-0017-0000-0009-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_09-windows-i586.cab (Java Plug-in 1.7.0_09)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: Garmin Communicator Plug-In https://static.garmincdn.com/gcp/ie/4.0.3.0/GarminAxControl_32.CAB (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{253A9CB9-9CF4-4CB4-A6C9-48ED5393596E}: DhcpNameServer = 193.189.244.225 193.189.244.206
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ADC195FF-FC71-43F2-BE2B-816D64DB9611}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30 - LSA: Security Packages - (msoidssp) - C:\Windows\System32\msoidssp.dll (Microsoft Corp.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011.08.17 09:16:35 | 000,000,107 | ---- | M] () - E:\autorun.inf -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.11.02 03:39:12 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Scheuer\Desktop\OTL.exe
[2012.11.02 03:35:07 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2012.11.02 03:32:36 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\poqexec.exe
[2012.11.02 03:06:02 | 002,422,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2012.11.02 03:06:02 | 000,045,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2012.11.02 03:05:51 | 000,577,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2012.11.02 03:05:51 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2012.11.02 03:05:51 | 000,035,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2012.11.02 03:03:46 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2012.11.02 03:01:12 | 000,171,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2012.11.02 03:01:12 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2012.11.02 01:49:00 | 000,000,000 | --SD | C] -- C:\Users\Scheuer\AppData\Roaming\Microsoft
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Videos
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Saved Games
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Pictures
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Music
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Links
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Favorites
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Downloads
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Documents
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\Desktop
[2012.11.02 01:49:00 | 000,000,000 | R--D | C] -- C:\Users\Scheuer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Vorlagen
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\AppData\Local\Verlauf
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\AppData\Local\Temporary Internet Files
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Startmenü
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\SendTo
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Recent
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Netzwerkumgebung
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Lokale Einstellungen
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Documents\Eigene Videos
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Documents\Eigene Musik
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Eigene Dateien
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Documents\Eigene Bilder
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Druckumgebung
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Cookies
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\AppData\Local\Anwendungsdaten
[2012.11.02 01:49:00 | 000,000,000 | -HSD | C] -- C:\Users\Scheuer\Anwendungsdaten
[2012.11.02 01:49:00 | 000,000,000 | -H-D | C] -- C:\Users\Scheuer\AppData
[2012.11.02 01:49:00 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Local\Temp
[2012.11.02 01:49:00 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Local\Microsoft
[2012.11.02 01:49:00 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Roaming\Media Center Programs
[2012.11.02 01:47:53 | 000,000,000 | ---D | C] -- C:\Windows\System32\URTTEMP
[2012.11.02 01:47:45 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2012.11.02 01:47:42 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2012.11.02 01:45:18 | 000,000,000 | ---D | C] -- C:\Windows\System32\RTCOM
[2012.11.02 01:45:18 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2012.11.02 01:42:14 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2012.11.02 01:40:20 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2012.11.02 01:29:31 | 000,000,000 | -H-D | C] -- C:\$WINDOWS.~Q
[2012.11.02 01:19:08 | 000,000,000 | -H-D | C] -- C:\$INPLACE.~TR
[2012.11.01 23:59:29 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012.11.01 23:53:44 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Local\VS Revo Group
[2012.11.01 23:22:15 | 000,000,000 | ---D | C] -- C:\Program Files\Unlocker
[2012.11.01 22:14:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Sophos
[2012.11.01 22:07:52 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.11.01 22:02:04 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Roaming\Runscanner.net
[2012.11.01 22:01:59 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Roaming\LavasoftStatistics
[2012.11.01 22:00:54 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Roaming\Ad-Aware Antivirus
[2012.11.01 21:54:37 | 000,000,000 | ---D | C] -- C:\Program Files\Emsisoft Anti-Malware
[2012.11.01 21:54:37 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\Documents\Anti-Malware
[2012.11.01 10:04:21 | 004,991,994 | R--- | C] (Swearware) -- C:\Users\Scheuer\Desktop\cofi.exe
[2012.11.01 09:14:16 | 000,518,144 | ---- | C] (SteelWerX) -- C:\Windows\SWREG.exe
[2012.11.01 09:14:16 | 000,406,528 | ---- | C] (SteelWerX) -- C:\Windows\SWSC.exe
[2012.11.01 09:14:16 | 000,060,416 | ---- | C] (NirSoft) -- C:\Windows\NIRCMD.exe
[2012.11.01 09:14:10 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012.11.01 09:13:58 | 000,000,000 | ---D | C] -- C:\Windows\erdnt
[2012.10.31 14:51:12 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RdpGroupPolicyExtension.dll
[2012.10.31 14:51:11 | 000,192,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpendp_winip.dll
[2012.10.31 14:50:38 | 000,073,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perf-MSSQL$CRM-sqlctr10.3.5500.0.dll
[2012.10.31 14:50:37 | 000,089,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SQSRVRES.DLL
[2012.10.31 13:48:13 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Roaming\Malwarebytes
[2012.10.31 13:48:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.10.31 13:05:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012.10.31 13:05:14 | 000,000,000 | ---D | C] -- C:\Program Files\Spybot - Search & Destroy
[2012.10.31 12:47:28 | 000,000,000 | ---D | C] -- C:\Program Files\Trend Micro
[2012.10.31 12:33:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Anti-Virus 2013
[2012.10.31 12:32:09 | 000,000,000 | ---D | C] -- C:\Windows\ELAMBKUP
[2012.10.31 12:23:15 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012.10.31 12:23:15 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012.10.31 12:23:15 | 000,093,672 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2012.10.25 14:56:44 | 000,000,000 | -H-D | C] -- C:\Windows\$CrmUninstallKB2739504_Mui_1031$
[2012.10.22 11:42:32 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\Documents\RVWin
[2012.10.22 11:42:32 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\AppData\Roaming\RVWIN
[2012.10.19 10:36:55 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\Interessantes
[2012.10.10 16:37:32 | 000,000,000 | ---D | C] -- C:\Users\Scheuer\Desktop\Fotos_Maria_Elsass
[2012.10.08 09:29:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
[2012.10.05 12:46:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VV Vereinsverwaltung
[2012.01.16 11:55:40 | 001,129,320 | ---- | C] (Microsoft Corporation) -- C:\Users\Scheuer\ClientSetupResources.dll
[2012.01.16 11:55:40 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Users\Scheuer\SetupClient.exe
[2012.01.16 11:55:40 | 000,354,664 | ---- | C] (Microsoft Corporation) -- C:\Users\Scheuer\ClientSetup.dll
[2010.10.28 04:34:50 | 004,368,744 | ---- | C] (Microsoft Corporation) -- C:\Users\Scheuer\mfc100u.dll
[2010.10.26 19:08:50 | 000,770,384 | ---- | C] (Microsoft Corporation) -- C:\Users\Scheuer\msvcr100.dll
[2010.10.26 19:08:50 | 000,421,200 | ---- | C] (Microsoft Corporation) -- C:\Users\Scheuer\msvcp100.dll
[2010.10.26 19:08:50 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Users\Scheuer\mfcm100u.dll
[2009.12.01 14:40:19 | 001,495,824 | ---- | C] (Hewlett-Packard Development Company, L.P.                   ) -- C:\Users\Scheuer\Lantreiber.exe
[2009.01.15 17:40:18 | 184,521,568 | ---- | C] (T-Online) -- C:\Users\Scheuer\T-Online_6.0.exe
[2009.01.10 11:52:21 | 017,788,641 | ---- | C] (VHV                                                         ) -- C:\Users\Scheuer\VHV_23.4.00.i.exe
[2009.01.10 11:52:21 | 004,849,303 | ---- | C] (SDK) -- C:\Users\Scheuer\slp_kv_setup.exe
[2009.01.10 11:52:19 | 002,633,928 | ---- | C] (Sammsoft                                                    ) -- C:\Users\Scheuer\AROTrial.exe
[2009.01.10 11:52:19 | 000,153,744 | ---- | C] (Symantec Corporation) -- C:\Users\Scheuer\fixkorgo.exe
 
========== Files - Modified Within 30 Days ==========
 
[2012.11.02 03:43:01 | 000,001,128 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2099175409-3244923250-3961599458-1000UA.job
[2012.11.02 03:39:12 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Scheuer\Desktop\OTL.exe
[2012.11.02 03:21:57 | 000,826,836 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.11.02 03:21:57 | 000,779,848 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.11.02 03:21:57 | 000,196,370 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.11.02 03:21:57 | 000,168,420 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.11.02 03:20:38 | 000,023,632 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.02 03:20:38 | 000,023,632 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.02 03:16:01 | 000,004,838 | ---- | M] () -- C:\Windows\gauss.ini
[2012.11.02 03:15:02 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.02 03:14:33 | 000,000,316 | ---- | M] () -- C:\Windows\tasks\sgugfj.job
[2012.11.02 03:14:21 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.02 03:14:12 | 2616,684,544 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.02 03:12:01 | 000,001,100 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.11.02 03:10:48 | 000,413,106 | RHS- | M] () -- C:\FTSMQ
[2012.11.02 03:10:48 | 000,000,020 | RHS- | M] () -- C:\win7.ld
[2012.11.02 03:00:36 | 000,161,548 | ---- | M] () -- C:\Windows\System32\license.rtf
[2012.11.02 03:00:03 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.11.02 02:49:12 | 000,022,140 | ---- | M] () -- C:\Windows\System32\emptyregdb.dat
[2012.11.02 02:45:20 | 000,543,000 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.11.02 01:46:08 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2012.11.02 01:45:12 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012.11.02 01:40:07 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2012.11.02 00:20:37 | 000,003,368 | ---- | M] () -- C:\Users\Scheuer\Desktop\Windows-Kompatibilitätsbericht.htm
[2012.11.02 00:16:15 | 000,002,543 | ---- | M] () -- C:\Windows\diagwrn.xml
[2012.11.02 00:16:15 | 000,001,890 | ---- | M] () -- C:\Windows\diagerr.xml
[2012.11.01 10:19:18 | 000,000,027 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
[2012.11.01 09:15:44 | 000,002,470 | ---- | M] () -- C:\Windows\ODBC.INI
[2012.11.01 09:11:03 | 004,991,994 | R--- | M] (Swearware) -- C:\Users\Scheuer\Desktop\cofi.exe
[2012.11.01 08:41:05 | 000,001,086 | ---- | M] () -- C:\Users\Scheuer\Documents\cc_20121101_084102.reg
[2012.10.31 17:01:20 | 000,016,974 | ---- | M] () -- C:\Windows\VFRAME32.INI
[2012.10.31 16:55:37 | 000,000,904 | ---- | M] () -- C:\Windows\VPMS.INI
[2012.10.31 15:53:30 | 000,001,572 | ---- | M] () -- C:\Windows\VFORTSCH.INI
[2012.10.31 13:14:31 | 000,587,096 | ---- | M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys
[2012.10.31 13:14:31 | 000,025,944 | ---- | M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klmouflt.sys
[2012.10.31 13:14:31 | 000,025,944 | ---- | M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klkbdflt.sys
[2012.10.31 12:59:04 | 000,038,858 | ---- | M] () -- C:\Users\Scheuer\Documents\cc_20121031_125859.reg
[2012.10.31 12:53:28 | 000,000,978 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.10.31 10:43:00 | 000,001,076 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2099175409-3244923250-3961599458-1000Core.job
[2012.10.31 10:14:42 | 000,001,027 | ---- | M] () -- C:\Users\Scheuer\Desktop\KV-Rational neu.lnk
[2012.10.30 17:10:35 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_netaapl_01009.Wdf
[2012.10.30 11:23:22 | 000,000,358 | ---- | M] () -- C:\Windows\ktel.ini
[2012.10.29 17:47:45 | 000,000,697 | ---- | M] () -- C:\Windows\AdrBook.INI
[2012.10.22 17:02:48 | 000,000,185 | ---- | M] () -- C:\Users\Scheuer\AppData\Roaming\CASUpdateSkip.lst
[2012.10.17 14:38:49 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
[2012.10.15 12:28:07 | 000,696,760 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2012.10.15 12:28:07 | 000,073,656 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.10.15 11:24:12 | 000,001,268 | ---- | M] () -- C:\Windows\NSECOL2.WIN
[2012.10.11 08:41:34 | 000,155,810 | ---- | M] () -- C:\Users\Scheuer\Desktop\MVPExport.CSV
[2012.10.09 10:29:09 | 000,023,214 | ---- | M] () -- C:\Windows\unins000.dat
[2012.10.09 10:28:39 | 000,716,810 | ---- | M] () -- C:\Windows\unins000.exe
[2012.10.05 12:46:25 | 000,000,520 | ---- | M] () -- C:\Users\Public\Desktop\Vereins-Verwaltung.lnk
 
========== Files Created - No Company Name ==========
 
[2012.11.02 03:10:48 | 000,413,106 | RHS- | C] () -- C:\FTSMQ
[2012.11.02 03:10:48 | 000,000,020 | RHS- | C] () -- C:\win7.ld
[2012.11.02 03:08:49 | 000,001,422 | ---- | C] () -- C:\Users\Scheuer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012.11.02 03:02:03 | 2616,684,544 | -HS- | C] () -- C:\hiberfil.sys
[2012.11.02 02:49:12 | 000,022,140 | ---- | C] () -- C:\Windows\System32\emptyregdb.dat
[2012.11.02 01:47:05 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012.11.02 01:46:53 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012.11.02 01:46:08 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.11.02 01:45:12 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2012.11.02 01:11:09 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
[2012.11.02 00:08:07 | 000,003,368 | ---- | C] () -- C:\Users\Scheuer\Desktop\Windows-Kompatibilitätsbericht.htm
[2012.11.02 00:01:54 | 000,002,543 | ---- | C] () -- C:\Windows\diagwrn.xml
[2012.11.02 00:01:54 | 000,001,890 | ---- | C] () -- C:\Windows\diagerr.xml
[2012.11.01 09:14:16 | 000,256,000 | ---- | C] () -- C:\Windows\PEV.exe
[2012.11.01 09:14:16 | 000,208,896 | ---- | C] () -- C:\Windows\MBR.exe
[2012.11.01 09:14:16 | 000,098,816 | ---- | C] () -- C:\Windows\sed.exe
[2012.11.01 09:14:16 | 000,080,412 | ---- | C] () -- C:\Windows\grep.exe
[2012.11.01 09:14:16 | 000,068,096 | ---- | C] () -- C:\Windows\zip.exe
[2012.11.01 08:41:04 | 000,001,086 | ---- | C] () -- C:\Users\Scheuer\Documents\cc_20121101_084102.reg
[2012.10.31 12:59:02 | 000,038,858 | ---- | C] () -- C:\Users\Scheuer\Documents\cc_20121031_125859.reg
[2012.10.30 17:10:35 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_netaapl_01009.Wdf
[2012.10.17 14:38:49 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WUDFUsbccidDriver_01_09_00.Wdf
[2012.10.15 11:24:12 | 000,001,268 | ---- | C] () -- C:\Windows\NSECOL2.WIN
[2012.10.09 10:29:03 | 000,716,810 | ---- | C] () -- C:\Windows\unins000.exe
[2012.10.05 12:46:25 | 000,000,520 | ---- | C] () -- C:\Users\Public\Desktop\Vereins-Verwaltung.lnk
[2012.09.03 13:10:18 | 000,122,880 | RHS- | C] () -- C:\Windows\System32\SSShim8.dll
[2012.08.22 15:01:26 | 000,000,094 | ---- | C] () -- C:\Windows\BBU.INI
[2012.08.22 15:01:02 | 000,000,481 | ---- | C] () -- C:\Windows\BTI.INI
[2012.08.22 15:00:49 | 000,100,864 | ---- | C] () -- C:\Windows\WDBUUI32.DLL
[2012.08.22 15:00:49 | 000,065,536 | ---- | C] () -- C:\Windows\WDBUMK32.DLL
[2012.08.22 15:00:48 | 000,320,512 | ---- | C] () -- C:\Windows\System32\W32MKDE.EXE
[2012.08.22 15:00:48 | 000,110,080 | ---- | C] () -- C:\Windows\System32\W32MKRC.DLL
[2012.08.22 15:00:48 | 000,101,888 | ---- | C] () -- C:\Windows\BUTIL.DLL
[2012.08.22 15:00:48 | 000,053,248 | ---- | C] () -- C:\Windows\BUTIL.EXE
[2012.08.22 15:00:48 | 000,041,472 | ---- | C] () -- C:\Windows\System32\r32.exe
[2012.08.22 15:00:48 | 000,012,288 | ---- | C] () -- C:\Windows\System32\REGOCX32.EXE
[2012.08.22 15:00:47 | 000,038,576 | ---- | C] () -- C:\Windows\System32\NWLOCALE.DLL
[2012.08.09 14:18:44 | 000,000,084 | ---- | C] () -- C:\Users\Scheuer\axa-bt.ini
[2012.07.04 12:37:58 | 000,000,064 | ---- | C] () -- C:\Users\Scheuer\btFrame.user
[2012.07.03 17:07:15 | 000,000,426 | ---- | C] () -- C:\Windows\VICTORIA.INI
[2012.06.27 17:10:16 | 000,000,697 | ---- | C] () -- C:\Windows\AdrBook.INI
[2012.05.14 10:25:31 | 000,002,859 | ---- | C] () -- C:\Windows\HME_ISIS32E.INI
[2012.05.09 03:28:25 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2012.04.24 11:55:31 | 000,000,345 | ---- | C] () -- C:\Users\Scheuer\AppData\Roaming\CASDruckstuecke.ini
[2012.04.20 15:17:59 | 000,081,408 | ---- | C] () -- C:\Windows\System32\drivers\SSHDRV86.sys
[2012.04.20 15:14:03 | 000,025,600 | ---- | C] () -- C:\Windows\System32\VADE232.DLL
[2012.04.20 15:14:02 | 000,544,256 | ---- | C] () -- C:\Windows\System32\ChangeGraphics.dll
[2012.03.13 14:01:12 | 000,029,567 | ---- | C] () -- C:\Windows\kubus.ini
[2012.02.21 16:07:06 | 000,000,196 | ---- | C] () -- C:\Windows\ulead32.ini
[2012.02.01 11:04:38 | 000,000,065 | ---- | C] () -- C:\Windows\BADENIA.INI
[2012.01.16 17:42:12 | 009,387,008 | ---- | C] () -- C:\Users\Scheuer\Client.msi
[2012.01.16 17:42:12 | 005,029,376 | ---- | C] () -- C:\Users\Scheuer\MUISetup_1031_i386.msi
[2012.01.11 13:06:52 | 000,000,999 | ---- | C] () -- C:\Windows\BECCOLOR.INI
[2012.01.09 13:49:08 | 000,000,343 | ---- | C] () -- C:\Users\Scheuer\SpawnCmd.js
[2012.01.09 13:36:28 | 000,097,120 | ---- | C] () -- C:\Users\Scheuer\EnvironmentDiagnostics.chm
[2012.01.09 13:36:28 | 000,007,452 | ---- | C] () -- C:\Users\Scheuer\Readme.htm
[2011.12.19 13:38:41 | 000,175,616 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011.11.29 13:39:03 | 000,000,028 | ---- | C] () -- C:\Windows\System32\lbj.ini
[2011.11.22 15:09:53 | 000,000,026 | ---- | C] () -- C:\Windows\AFORTSCH.INI
[2011.11.10 11:03:45 | 000,317,440 | ---- | C] () -- C:\Windows\UninsVHV.exe
[2011.11.10 10:44:21 | 000,016,974 | ---- | C] () -- C:\Windows\VFRAME32.INI
[2011.11.09 10:56:52 | 000,000,103 | ---- | C] () -- C:\Windows\VHV_SicherungRuecksicherung.ini
[2011.11.09 10:50:57 | 000,000,904 | ---- | C] () -- C:\Windows\VPMS.INI
[2011.11.09 10:50:31 | 000,000,000 | ---- | C] () -- C:\Windows\VMAPO.DAT
[2011.10.10 13:31:31 | 000,000,045 | ---- | C] () -- C:\Windows\MVOPT.INI
[2011.10.10 13:31:30 | 000,000,006 | ---- | C] () -- C:\Windows\MV-CD.INI
[2011.10.10 13:29:46 | 000,000,000 | ---- | C] () -- C:\Program Files\Version.ini
[2011.09.29 14:11:03 | 000,104,651 | ---- | C] () -- C:\Users\Scheuer\OS_2001_nachtrag_78586240_20110721_023618.pdf
[2011.09.13 09:41:14 | 000,000,331 | ---- | C] () -- C:\Windows\axabt.ini
[2011.09.13 09:41:14 | 000,000,052 | ---- | C] () -- C:\Windows\axae.ini
[2011.09.13 09:41:12 | 000,005,968 | ---- | C] () -- C:\Windows\alias.ini
[2011.09.13 09:41:07 | 000,005,128 | ---- | C] () -- C:\Windows\vfrx.ini
[2011.08.30 09:41:36 | 000,023,214 | ---- | C] () -- C:\Windows\unins000.dat
[2011.08.25 13:47:30 | 000,255,848 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2011.08.08 10:04:57 | 000,001,572 | ---- | C] () -- C:\Windows\VFORTSCH.INI
[2011.08.02 10:27:44 | 000,104,614 | ---- | C] () -- C:\Windows\arj.exe
[2011.08.02 10:27:44 | 000,004,838 | ---- | C] () -- C:\Windows\gauss.ini
[2011.07.27 16:12:23 | 000,691,200 | ---- | C] () -- C:\Windows\System32\PrintLog.exe
[2011.07.27 16:12:23 | 000,524,288 | ---- | C] () -- C:\Windows\System32\PrtPass.exe
[2011.07.27 12:42:31 | 000,000,185 | ---- | C] () -- C:\Users\Scheuer\AppData\Roaming\CASUpdateSkip.lst
[2011.07.27 12:40:55 | 000,000,044 | ---- | C] () -- C:\Windows\VOPTCON.INI
[2011.07.20 10:21:08 | 000,000,161 | ---- | C] () -- C:\Windows\DISPARAM.INI
[2011.07.20 10:19:04 | 000,000,842 | ---- | C] () -- C:\Windows\VPL_Apps.ini
[2011.07.20 10:18:53 | 000,000,395 | ---- | C] () -- C:\Windows\gsall.ini
[2011.07.20 10:03:41 | 000,001,068 | ---- | C] () -- C:\Windows\DOCS.INI
[2011.07.19 15:12:37 | 000,195,072 | ---- | C] () -- C:\Windows\System32\Msodeger.dll
[2011.05.31 11:36:16 | 000,001,603 | ---- | C] () -- C:\Windows\CAF.INI
[2011.05.31 11:36:16 | 000,000,429 | ---- | C] () -- C:\Windows\allianzl.ini
[2011.05.31 11:35:13 | 000,003,213 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2011.05.31 11:35:13 | 000,002,470 | ---- | C] () -- C:\Windows\ODBC.INI
[2011.05.31 11:32:40 | 000,012,338 | ---- | C] () -- C:\Windows\Tabaus.ini
[2011.04.12 02:30:05 | 000,826,836 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2011.04.12 02:30:05 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2011.04.12 02:30:05 | 000,196,370 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2011.04.12 02:30:05 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2011.04.11 17:32:23 | 000,156,242 | ---- | C] () -- C:\Users\Scheuer\Tamer_Mahmoud.pdf
[2011.02.09 16:24:42 | 000,000,358 | ---- | C] () -- C:\Windows\ktel.ini
[2010.11.20 22:29:34 | 000,080,896 | ---- | C] () -- C:\Windows\System32\RDVGHelper.exe
[2010.11.20 22:29:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2010.10.26 19:15:44 | 000,119,751 | ---- | C] () -- C:\Users\Scheuer\MSCRMClientEULA.rtf
[2010.10.26 19:06:24 | 000,000,530 | ---- | C] () -- C:\Users\Scheuer\Default_Client_Config.xml
[2010.09.08 16:52:28 | 000,015,679 | ---- | C] () -- C:\Users\Scheuer\invoice-10110095-o-140410-c-123219-d-20100908.pdf
[2010.08.10 10:01:07 | 000,122,098 | ---- | C] () -- C:\Users\Scheuer\nacktes_päpstle_Seite_1.jpg
[2010.08.10 10:01:07 | 000,113,572 | ---- | C] () -- C:\Users\Scheuer\nacktes_päpstle_Seite_2.jpg
[2010.08.10 10:01:07 | 000,059,154 | ---- | C] () -- C:\Users\Scheuer\nacktes_päpstle_Seite_3.jpg
[2010.08.10 09:50:58 | 000,328,865 | ---- | C] () -- C:\Users\Scheuer\nacktes_päpstle.pdf
[2010.08.05 12:16:24 | 004,233,414 | ---- | C] () -- C:\Users\Scheuer\hp_clj4600_handbuch.pdf
[2010.07.07 14:05:33 | 017,780,906 | ---- | C] () -- C:\Users\Scheuer\BedienungsanleitungWebPortalBedienungsanleitungWebPortal.pdf
[2010.05.31 11:59:31 | 000,103,403 | ---- | C] () -- C:\Users\Scheuer\roter Mohn.jpg
[2010.05.31 11:59:12 | 000,125,985 | ---- | C] () -- C:\Users\Scheuer\Katze.jpg
[2010.05.31 11:58:40 | 000,128,943 | ---- | C] () -- C:\Users\Scheuer\3 Pfingstrosen.jpg
[2010.04.07 13:06:31 | 000,135,116 | ---- | C] () -- C:\Users\Scheuer\Widmann_EDV.pdf
[2010.03.31 10:35:50 | 000,178,127 | ---- | C] () -- C:\Users\Scheuer\Dervisbegovic_Senija.pdf
[2010.01.29 16:36:28 | 000,211,572 | ---- | C] () -- C:\Users\Scheuer\DVD_Label.jpg
[2010.01.13 18:31:48 | 000,019,117 | ---- | C] () -- C:\Users\Scheuer\Intersky.mht
[2010.01.07 12:32:07 | 000,349,313 | ---- | C] () -- C:\Users\Scheuer\Condor_Download_20100107_123157.zip
[2010.01.05 19:03:31 | 000,042,931 | ---- | C] () -- C:\Users\Scheuer\WeiFei09_031.JPG
[2009.11.12 14:39:54 | 000,567,191 | ---- | C] () -- C:\Users\Scheuer\Ausweis_2.jpg
[2009.11.12 14:39:28 | 000,690,307 | ---- | C] () -- C:\Users\Scheuer\ausweis_1.jpg
[2009.11.04 11:46:47 | 000,305,202 | ---- | C] () -- C:\Users\Scheuer\Daten & Gebühren UBS (LUX) KEY SELECTION SICAV - GLOBAL ALLOCATION (EUR) B Fonds  A0B8QJ  LU0197216558.mht
[2009.11.03 18:41:38 | 000,095,376 | ---- | C] () -- C:\Users\Scheuer\Hitparade_2009.pdf
[2009.06.22 13:41:40 | 000,048,226 | ---- | C] () -- C:\Users\Scheuer\PGGZVF_ 061.jpg
[2009.06.09 12:14:41 | 000,052,668 | ---- | C] () -- C:\Users\Scheuer\Rechtsschutzversicherung.htm
[2009.04.24 16:31:07 | 000,016,257 | ---- | C] () -- C:\Users\Scheuer\Adressbuch_2.ldif
[2009.04.03 10:40:29 | 000,027,850 | ---- | C] () -- C:\Users\Scheuer\formular_rtf.rtf
[2009.03.19 15:38:28 | 000,444,942 | ---- | C] () -- C:\Users\Scheuer\Aufnahmefähigkeit 001.jpg
[2009.03.19 15:28:08 | 000,190,987 | ---- | C] () -- C:\Users\Scheuer\Meldebestätigung.jpg
[2009.02.25 11:29:43 | 003,546,098 | ---- | C] () -- C:\Users\Scheuer\siemens_gigaset_c325.pdf
[2009.02.16 12:34:20 | 000,032,893 | ---- | C] () -- C:\Users\Scheuer\iTunes Softwarelizenz.rtf
[2009.02.11 15:27:09 | 015,768,645 | ---- | C] () -- C:\Users\Scheuer\iPhone_Benutzerhandbuch.pdf
[2009.02.10 10:30:59 | 000,234,796 | ---- | C] () -- C:\Users\Scheuer\Google Maps.mht
[2009.01.21 18:18:03 | 000,072,120 | ---- | C] () -- C:\Users\Scheuer\Anfahrtshilfe.jpg
[2009.01.10 11:52:22 | 000,062,855 | ---- | C] () -- C:\Users\Scheuer\Vogelgrippe_Merkblatt_Wassersportler1.pdf
[2009.01.10 11:52:21 | 002,508,528 | ---- | C] () -- C:\Users\Scheuer\SetupProKasse50.EXE
[2009.01.10 11:52:21 | 000,138,192 | ---- | C] () -- C:\Users\Scheuer\SCHNEESCHUHPROFI-Tipps und Infos_pdf.htm
[2009.01.10 11:52:21 | 000,090,933 | ---- | C] () -- C:\Users\Scheuer\Versicherungsbestätigung.pdf
[2009.01.10 11:52:21 | 000,013,020 | ---- | C] () -- C:\Users\Scheuer\Quarta_Antonio_2.jpg
[2009.01.10 11:52:21 | 000,000,604 | ---- | C] () -- C:\Users\Scheuer\privat.p7b
[2009.01.10 11:52:20 | 005,272,954 | ---- | C] () -- C:\Users\Scheuer\neptun_27_Prospekt_neu_pdf.htm
[2009.01.10 11:52:20 | 000,042,676 | ---- | C] () -- C:\Users\Scheuer\kfz_kaufvertrag.pdf
[2009.01.10 11:52:20 | 000,002,304 | ---- | C] () -- C:\Users\Scheuer\LOCKFILE.dat
[2009.01.10 11:52:20 | 000,000,000 | ---- | C] () -- C:\Users\Scheuer\PDVD_MediaDisc.PlayList
[2009.01.10 11:52:19 | 002,768,896 | ---- | C] () -- C:\Users\Scheuer\kddat32_2006-08-07_15-25-18.mde
[2009.01.10 11:52:19 | 001,228,918 | ---- | C] () -- C:\Users\Scheuer\Image.nrg
[2009.01.10 11:52:19 | 000,955,771 | ---- | C] () -- C:\Users\Scheuer\ISO1.nri
[2009.01.10 11:52:19 | 000,376,832 | ---- | C] () -- C:\Users\Scheuer\EVAAntragPatch.exe
[2009.01.10 11:52:19 | 000,194,519 | ---- | C] () -- C:\Users\Scheuer\karte2_Allensbach.gif
[2009.01.10 11:52:19 | 000,174,309 | R--- | C] () -- C:\Users\Scheuer\DSC01198_Föllmer9..JPG
[2009.01.10 11:52:19 | 000,166,743 | ---- | C] () -- C:\Users\Scheuer\IMG_4155.JPG
[2009.01.10 11:52:19 | 000,160,324 | ---- | C] () -- C:\Users\Scheuer\IMG_4156.JPG
[2009.01.10 11:52:19 | 000,062,625 | ---- | C] () -- C:\Users\Scheuer\Geiselmann_2.jpg
[2009.01.10 11:52:19 | 000,053,683 | ---- | C] () -- C:\Users\Scheuer\Bootszulassung1.jpg
[2009.01.10 11:52:19 | 000,012,983 | ---- | C] () -- C:\Users\Scheuer\CVersicherungenCSoftworkVorschlag.pdf
[2009.01.10 11:52:19 | 000,002,693 | ---- | C] () -- C:\Users\Scheuer\Einstel.xml
[2009.01.09 12:49:57 | 000,000,027 | ---- | C] () -- C:\Users\Scheuer\version.ini
 
========== ZeroAccess Check ==========
 
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.09.16 15:18:53 | 012,874,752 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2012.11.02 02:27:51 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\1&1 Mail & Media GmbH
[2012.11.02 02:27:51 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Ad-Aware Antivirus
[2012.11.02 02:27:51 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\apkv
[2012.11.02 02:28:26 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\AquaSoft
[2011.12.02 15:49:24 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Ashampoo Slideshow Studio Elements
[2011.12.02 14:47:34 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Burn4U
[2012.11.02 02:28:26 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Byngo
[2012.11.02 02:28:26 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\CodedColor
[2012.11.02 02:28:26 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
[2012.04.05 16:35:20 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Elektra
[2012.11.02 02:28:33 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Foxit Software
[2012.11.02 02:28:33 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Fujitsu
[2012.11.02 02:28:33 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Garmin
[2012.11.02 02:28:33 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\HanseMerkurISAMA
[2012.11.02 02:28:35 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\HartlauerFotoService3
[2012.11.02 02:28:35 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\IrfanView
[2012.11.02 02:28:35 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\klickTel
[2012.11.02 02:28:36 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\MAGIX
[2012.11.02 02:28:43 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Motorola
[2012.11.02 02:28:44 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Notepad++
[2012.11.02 02:28:44 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\PFU
[2012.11.02 02:28:44 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\PhotoCleaner
[2012.11.02 02:28:45 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Pixpedia Publisher
[2012.11.02 02:28:45 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Runscanner.net
[2012.11.02 02:28:45 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\RVWIN
[2012.11.02 02:28:45 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\SiteRanker
[2012.11.02 02:28:45 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\SQL Anywhere 11
[2012.11.02 02:28:45 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\SwissLife
[2012.11.02 02:28:45 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\T-Online
[2012.11.02 02:29:00 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\TeamViewer
[2012.11.02 02:29:00 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\VHV
[2012.06.25 09:33:14 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Windows Live Writer
[2012.11.02 02:29:01 | 000,000,000 | ---D | M] -- C:\Users\Scheuer\AppData\Roaming\Zoner
 
========== Purity Check ==========
 
 

< End of report >
         

OTL Extras logfile created on: 02.11.2012 03:51:27 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Scheuer\Desktop
 Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,25 Gb Total Physical Memory | 1,65 Gb Available Physical Memory | 50,77% Memory free
6,50 Gb Paging File | 4,75 Gb Available in Paging File | 73,15% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 292,97 Gb Total Space | 195,77 Gb Free Space | 66,82% Space Free | Partition Type: NTFS
Drive E: | 7,53 Gb Total Space | 1,42 Gb Free Space | 18,85% Space Free | Partition Type: NTFS
Drive F: | 172,79 Gb Total Space | 116,20 Gb Free Space | 67,25% Space Free | Partition Type: NTFS
Drive G: | 962,07 Mb Total Space | 484,32 Mb Free Space | 50,34% Space Free | Partition Type: FAT32
 
Computer Name: HAUPT-PC | User Name: Scheuer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [userfull] -- cmd.exe /c takeown /f "%1" /r /d j && icacls "%1" /grant Benutzer:F /T /C /L (Microsoft Corporation)
Directory [usernormal] -- cmd.exe /c icacls "%1" /reset /T /C /L (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{039F9D0B-1C98-4C64-814C-9D26F7BCA855}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{19A940B6-6851-4B49-AA92-A6EE1507FFF5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{1FB7D58E-6F2E-4D17-AA48-6327C39237E7}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{2020BF51-E221-4550-B055-D37CFB4E8673}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{319D0111-F4A7-4618-ACA5-3CFA7544B11C}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{31D8B164-EDFF-4A29-A8CA-D90389E4466D}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework\v4.0.30319\smsvchost.exe | 
"{572CFD24-5A5A-495C-A3B6-F68FBFEC2EB5}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe | 
"{7B110DD4-D586-4FE1-AD77-E7CCDA95DD9A}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
"{A13AA54C-AF4E-4D7C-AEFB-9D651FF532C2}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{A8D3BF54-D1DB-4988-8B3A-F709E3D3A6BF}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{ADA4B0DE-A358-48AC-A217-6658CA6CDF41}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{AF569B48-B5A8-4782-994C-F199808F91FC}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D407F147-3836-45B4-BF55-B0FBEDC0FCF7}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | 
"{E0985840-0281-441A-A499-7B960708AFEB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{FECCAFED-91D1-41FD-82F6-9D9724BE2925}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{010848A9-E178-4B55-AF0F-7C63D4D869AB}" = dir=in | app=c:\program files\windows live\contacts\wlcomm.exe | 
"{085F3FB5-C6E7-4506-8B67-F471512D2729}" = protocol=6 | dir=in | app=c:\vhv\vhv maklerverwaltungsprogramm\kommz\vhvmvpclient.exe | 
"{093649AD-F5FF-411B-ACCD-526E80812041}" = dir=in | app=c:\program files\itunes\itunes.exe | 
"{126FE23E-3587-415D-B17A-60748A671428}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{130A7FD7-00C6-4F9F-B3BA-7DAE43EA8D8A}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe | 
"{162643AE-963B-48C7-9A47-67B4443FC7F8}" = protocol=6 | dir=in | app=c:\program files\vhv hannover\vpl_apps\versandzentrale\jre\bin\javaw.exe | 
"{18B3C4CA-6DFC-47B7-A278-4CF38483C194}" = protocol=6 | dir=in | app=c:\vhv\vhv maklerverwaltungsprogramm\kommz\jre\bin\java.exe | 
"{1910BC65-2D75-432D-814F-511A1B8D98DD}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version7\teamviewer.exe | 
"{22F5C0FD-7210-44EE-BCFE-2486A837C806}" = protocol=6 | dir=in | app=f:\versicherungen\vhv\vhv tarifprogramm\vpl_apps\versandzentrale\jre\bin\javaw.exe | 
"{2754EE62-A146-4128-9221-88EE6DED84C3}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{2A450943-9F79-4EF6-8C47-7E4EDC453894}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{31999F69-4932-4E43-B809-E443C00F5E24}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version7\teamviewer_service.exe | 
"{333E60CB-5104-489B-A8B6-75E97DB64577}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{3EE622ED-6482-4E11-B66F-55AF32D9BA56}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{467A8882-A706-4F47-BB76-5C406DFBC8C0}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{49C6A332-BAE0-48CE-83DE-915FDB799034}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe | 
"{4A41FC8A-CBCF-4903-855A-33809E311816}" = protocol=17 | dir=in | app=c:\vhv\vhv maklerverwaltungsprogramm\kommz\jre\bin\java.exe | 
"{4C3105AD-DA4E-4512-B13E-ED7BB179651E}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version7\teamviewer.exe | 
"{5468CDA1-F4DC-44D4-88E7-B9DBC60158B4}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{5482D99C-3A4B-448B-BEC2-94858CC2C1FE}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe | 
"{5AB3D55B-26F0-4A9C-B7D6-8C06D83BEBD1}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{5B016F55-5F64-4A87-87BE-8E9B6DA991C5}" = protocol=6 | dir=in | app=f:\versicherungen\vhv\vhv tarifprogramm\vpl_apps\versandzentrale\vhvkommunikationszentrale.exe | 
"{5D8E4E4D-E985-4BD1-A36C-CDBBC2B47CFD}" = protocol=6 | dir=in | app=c:\program files\vhv hannover\vpl_apps\versandzentrale\vhvkommunikationszentrale.exe | 
"{5FB6C874-9CDE-474F-8C3D-C9B279BE010C}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{65A681E1-C556-4A1B-899F-CCDED8F1E9AC}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version7\teamviewer_service.exe | 
"{688FA4B3-F5EC-4C31-9BD7-382B1EB4E88C}" = protocol=6 | dir=in | app=f:\versicherungen\vhv\vhv tarifprogramm\vpl_apps\versandzentrale\jre\bin\javaw.exe | 
"{71AC7B92-B550-405D-8879-A9C80E8ACDD6}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{7786C7C5-38AF-4DF9-A246-BBB6F426B79B}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{78222845-262E-4C4E-8883-5BCA858910EA}" = protocol=6 | dir=in | app=c:\program files\vhv hannover\vpl_apps\versandzentrale\jre\bin\javaw.exe | 
"{7D1638B9-8A32-4F90-BD6D-A91FD282CE01}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifecam.exe | 
"{8623013B-8D49-4F3F-88B5-3A8B0B928010}" = protocol=6 | dir=in | app=f:\versicherungen\vhv\vhv tarifprogramm\vpl_apps\versandzentrale\vhvkommunikationszentrale.exe | 
"{8B4D2771-6CFB-4C97-B6F8-0513E53640D3}" = protocol=17 | dir=in | app=c:\vhv\vhv maklerverwaltungsprogramm\kommz\jre\bin\java.exe | 
"{9429C969-E3A8-46F6-B7EB-9B8A7F6B00B3}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe | 
"{9AC63C6E-EF60-406C-8C59-734908370281}" = protocol=17 | dir=in | app=c:\program files\vhv hannover\vpl_apps\versandzentrale\vhvkommunikationszentrale.exe | 
"{9B413351-5600-4079-A8D1-33A6B2ECEEB9}" = protocol=6 | dir=in | app=c:\vhv\vhv maklerverwaltungsprogramm\kommz\jre\bin\java.exe | 
"{9E14C388-82EC-40A6-A5AD-B13E4A7E2446}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version7\teamviewer_service.exe | 
"{9EEA2C8A-E0CF-4B3F-9F3D-33B78FF9EBB6}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{A03ED4D6-8978-43C5-A232-BF2F6BBFA0DF}" = protocol=17 | dir=in | app=c:\program files\teamviewer\version7\teamviewer.exe | 
"{AAB5F187-5556-4E89-BF9B-D803D215CBA3}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{ABB0B2C1-7AD4-4A35-AC6F-B7D26103D9CD}" = protocol=17 | dir=in | app=f:\versicherungen\vhv\vhv tarifprogramm\vpl_apps\versandzentrale\vhvkommunikationszentrale.exe | 
"{ACC34735-C8BC-4FE2-BA71-241E9D341E7A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{AECF5E17-E285-442C-B5FB-616708034E04}" = dir=in | app=c:\program files\windows live\mesh\moe.exe | 
"{B43DEAFD-55E6-4F06-A1AF-F08A16A349CF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{B78E47E7-4FE4-4B8C-B0B6-DE7561C8D616}" = protocol=17 | dir=in | app=c:\vhv\vhv maklerverwaltungsprogramm\kommz\vhvmvpclient.exe | 
"{BB0BC0A2-42B4-4088-8CAE-DCFE4E355471}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{BB6096C9-21C0-4CCB-AC66-FC80B08D4640}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifeexp.exe | 
"{BEEDCA98-1C2C-404D-8D27-610DD71A9DB2}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{BF887BAD-F690-4103-8C9E-39902A8435FE}" = protocol=17 | dir=in | app=c:\program files\vhv hannover\vpl_apps\versandzentrale\jre\bin\javaw.exe | 
"{C5B6B44D-2278-46E5-BA87-E372D7CBF4AE}" = protocol=17 | dir=in | app=c:\program files\microsoft lifecam\lifeenc2.exe | 
"{C601E2E0-1BB2-40AB-B30D-64DEC44EA26D}" = protocol=17 | dir=in | app=c:\program files\vhv hannover\vpl_apps\versandzentrale\jre\bin\javaw.exe | 
"{C6955C60-9537-45EF-B9BE-D275A59D9B6E}" = protocol=6 | dir=out | app=system | 
"{C8424C45-4A52-4B3C-9B2A-4E70BE2B1263}" = protocol=17 | dir=in | app=c:\program files\vhv hannover\vpl_apps\versandzentrale\vhvkommunikationszentrale.exe | 
"{C88C0988-7CED-41F4-A123-B9838467926D}" = protocol=6 | dir=in | app=c:\program files\microsoft lifecam\lifetray.exe | 
"{D24B5DC5-5C13-4775-BBA9-98F468B19F8F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{D692402A-D835-4E91-BD70-F5FBBD9F0F8B}" = protocol=17 | dir=in | app=f:\versicherungen\vhv\vhv tarifprogramm\vpl_apps\versandzentrale\vhvkommunikationszentrale.exe | 
"{D7B7F914-1B16-4190-9D34-C85D40EC4060}" = protocol=17 | dir=in | app=f:\versicherungen\vhv\vhv tarifprogramm\vpl_apps\versandzentrale\jre\bin\javaw.exe | 
"{DA33C63A-8F78-492E-A53B-660E3AF62694}" = protocol=6 | dir=in | app=c:\program files\vhv hannover\vpl_apps\versandzentrale\vhvkommunikationszentrale.exe | 
"{E7654D6F-7A02-44CA-866B-92A7EEB20560}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version7\teamviewer.exe | 
"{E952B21A-92DC-43DE-BB17-07897DD6A358}" = protocol=6 | dir=in | app=c:\program files\teamviewer\version7\teamviewer_service.exe | 
"{F9B71874-E363-4A82-B48E-5B1C756B85E1}" = protocol=6 | dir=in | app=c:\vhv\vhv maklerverwaltungsprogramm\kommz\vhvmvpclient.exe | 
"{FAE19A7D-72FE-4B65-886E-68D2F9ED2E3D}" = protocol=17 | dir=in | app=f:\versicherungen\vhv\vhv tarifprogramm\vpl_apps\versandzentrale\jre\bin\javaw.exe | 
"{FB5159E6-13A6-4168-87EC-01210AB4DB48}" = protocol=17 | dir=in | app=c:\vhv\vhv maklerverwaltungsprogramm\kommz\vhvmvpclient.exe | 
"TCP Query User{A6186E83-E4E4-46D3-ABEF-FAD044E6F516}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
"TCP Query User{C7AF121F-7EAF-4E90-9E32-929AABA9A730}F:\versicherungen\java\arag_jre1.5.0_19\bin\java.exe" = protocol=6 | dir=in | app=f:\versicherungen\java\arag_jre1.5.0_19\bin\java.exe | 
"UDP Query User{8C17FDA2-2F46-4DF6-8558-38854A3C642C}F:\versicherungen\java\arag_jre1.5.0_19\bin\java.exe" = protocol=17 | dir=in | app=f:\versicherungen\java\arag_jre1.5.0_19\bin\java.exe | 
"UDP Query User{F4976A73-6FC9-4999-B3C0-578E45A3AC31}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00180407-78E1-11D2-B60F-006097C998E7}" = Microsoft Access 2000 SR-1 Runtime
"{01FE12C6-DEEA-492F-86F9-DD94D8E5DC95}" = MAGIX Foto Premium 9
"{02602409-9189-4567-BC07-562605243B69}" = Windows Live Remote Client Resources
"{02DDD716-E180-4367-9E18-576BD000EEFC}" = Swiss Life BeraterBüro
"{0340FC65-9ED5-42AF-9791-961F5AB154DA}" = CAP GEV Child
"{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion
"{060c0bc3-df11-4bb3-8815-627c8c243fb0}.sdb" = MV-Makler-und-ADP
"{0712638F-559B-4F49-B8BE-BF3AAEE54A38}" = ScanSnap
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0C524D20-0407-0050-8A9E-0C4C490E4E54}" = Microsoft Dynamics CRM 2011 für Microsoft Office Outlook
"{0C524DC1-0407-0050-8121-88490F4D5549}" = Microsoft Dynamics CRM 2011 Language Pack für German
"{0E64B098-8018-4256-BA23-C316A43AD9B0}" = QuickTime
"{0F6F6876-6334-4977-B5DD-CFC12E193420}" = iTunes
"{1269ED0D-BFDB-439D-988C-01AC2125FD10}" = Dialog Tarifprogramm
"{13F054F3-0B07-4D15-9E80-C55B496AB557}" = Garmin Communicator Plugin
"{150F9D4D-F555-41BB-AF49-D9DA8F53A82D}" = KUBUS light ERGO
"{159EC8B7-6866-42BE-9CC6-46E7FC2A9A73}" = TransSELEKT
"{172423F9-522A-483A-AD65-03600CE4CA4F}" = Microsoft Works 6-9 Converter
"{17E7B2A7-5724-4512-ACAF-C8A8A7B31587}" = MAGIX Speed 2 (MSI)
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{19A4A990-5343-4FF7-B3B5-6F046C091EDF}" = Windows Live Remote Client
"{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{227E8782-B2F4-4E97-B0EE-49DE9CC1C0C0}" = Windows Live Remote Service
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{24C4AC5A-67A4-4E1D-B30C-8C7A01712607}" = RSA SecurID Software Token
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 9
"{26FA3721-E325-44DE-8318-6FA434F2A064}" = CardMinder V4.0
"{280E91D7-BBA8-42A2-8F45-00FD89E454B0}_is1" = HanseMerkur ISA Service Extensions
"{2A0FC4FF-8818-4648-A4F2-93D16DB3EF29}" = Updateservice GEV
"{2A231800-A7CF-4223-B8A3-1FD9057BAE96}" = Unterstützungsdateien für Microsoft SQL Server 2008-Setup 
"{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}" = Microsoft SQL Server 2005 Express Edition (KIS)
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{2FF11610-5CB9-4A10-8572-470256CD9878}" = RuntimeInstallieren
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}" = Firebird SQL Server - MAGIX Edition
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{383217E3-8F0C-4B85-92B5-6B579A52B0F1}" = AOWin2010
"{383217E3-8F0C-4B85-92B5-6B579A52B0FC}" = AOWin2010
"{39D6D822-4BB4-46D5-90C8-8C1E5837CEBD}" = klickTel Telefon- und Branchenbuch + Rückwärtssuche Herbst 2011
"{3A65A74A-5B6E-451A-92D8-50F1182BBE9A}" = Windows Live Remote Service Resources
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared
"{47FA2C44-D148-4DBC-AF60-B91934AA4842}" = Adobe AIR
"{49C1A51C-7A09-49AE-9447-90D3945FC6A7}" = MAGIX Screenshare
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008 Browser
"{4E266E5D-F9A6-4AF4-9431-679CF35C25AD}" = Moreba GEV
"{4E8026BF-F024-44D4-8299-3F4694636825}" = ScanSoft PDF Converter 3.0
"{523B2B1B-D8DB-4B41-90FF-C4D799E2758A}" = Nero ControlCenter 10 Help (CHM)
"{539A0EAA-E1BB-4163-9C1E-6C8BF4A17FA2}" = Microsoft SQL Server 2008 Native Client
"{53CFF9B1-4ED7-4114-8ECF-ADD13BC8AC57}" = VHV RECOMAX
"{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}" = Microsoft SQL Server Setup Support Files (English)
"{5482DCBE-D2D1-47B0-A621-DF8E2B0D174C}" = Windows Live Family Safety
"{54FA5000-9FF8-47D5-BF65-4A17BE040242}" = klickTel Telefon- und Branchenbuch + Rückwärtssuche Herbst 2010
"{555868C6-49FB-484F-BB43-8980651A1B00}" = Nero BurnRights 10 Help (CHM)
"{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Anti-Virus 2013
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5AE34761-0D70-4E9A-BF4B-BE366D9E0478}" = ElektrALight
"{5F8F65CC-787E-4DD6-95ED-07DF214DBDB3}" = trixiKfz
"{5FC7AB5C-61FC-42DF-A923-5139BCF10D42}" = Microsoft LifeCam
"{602A58C3-BDF2-4B8A-B9D3-B6D9BACA386A}" = Dir-It!
"{61ED7FB5-495E-4BA7-B4EA-D8E0077353FE}_is1" = Power Druckstudio Gold 1
"{63EC2120-1742-4625-AA47-C6A8AEC9C64C}" = Apple Application Support
"{6474E823-3AB2-FFE2-08B2-D1AF0DA1AAA7}" = myphotobook.de
"{6481496E-555D-4BE5-83F2-55C6C2851A48}" = Beratungsprotokolle
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6C12B6BF-3891-497B-B5CA-3D64DA093947}" = Motorola Mobile Drivers Installation 5.4.0
"{6DD40B68-1851-4BBD-AED6-CD82CB884735}" = Moreba
"{6DFB899F-17A2-48F0-A533-ED8D6866CF38}" = Nero Control Center 10
"{6E5410F7-6FDF-412D-B3D5-9EC985F8FEF4}" = Generali Tarifierungen Gev
"{6E75A7A0-DA88-4F78-8068-2DE42ECBB91E}" = WebKIS Offline
"{6E9CFEF5-0245-411F-8587-CF83DF9D4B05}" = Microsoft SQL Server 2008 Database Engine Services
"{6F3D2F66-F050-45E3-BEB1-6523FE6D6690}" = MotoHelper MergeModules
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7148F0A8-6813-11D6-A77B-00B0D0142100}" = Java 2 Runtime Environment, SE v1.4.2_10
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{735DEB9C-61BD-4D31-994B-92395BBB4E45}" = Microsoft XML Parser
"{7670D32F-DAE6-4E49-8C8B-B3F08B5B1686}" = Microsoft SQL Server Native Client
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7A5D731D-B4B3-490E-B339-75685712BAAB}" = Nero Burning ROM 10
"{7B29AA98-B40C-4D6B-A15B-B6A00D71F133}" = Abgeltungsteuer GEV
"{7EB65C13-CFDC-4312-97B7-92AFBFC2AA18}" = VHV Maklerverwaltungsprogramm
"{832BFF4E-B65C-4AF0-AA0E-52A64705C5F6}" = MAGIX Xtreme Grafik Designer 5
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8393592A-B977-489E-8C78-84E19DE9FE21}" = MAGIX 3D Maker (embedded MSI)
"{83B34C33-5337-4EA9-A886-04D63F486861}" = Stufenmodell GEV
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{85530EE5-B265-4F84-BD2A-DE2BBBC990B7}" = Beratungsprogramme W&W-Konzern
"{859258F8-3F00-4335-BBD5-318F17369012}" = MAGIX Online Druck Service
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{891F6136-6540-495D-95D9-703DA7EDE3AD}" = SDK - Angebotsprogramm
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A6BB58D-82A9-4FC7-B65F-A4EA87A4C138}" = Microsoft Online Services-Anmeldeassistent
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8CC68433-5837-4075-B81F-EA7E4F14CE60}" = iCloud
"{8D86B3AE-F744-4F97-ADDD-6B13345C62FF}_is1" = VorsorgePLANER
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_PROPLUS_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_PROPLUS_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_PROPLUS_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_PROPLUS_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_PROPLUS_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_PROPLUS_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PROPLUS_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_PROPLUS_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_PROPLUS_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_PROPLUS_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{926BD0E8-24A3-41D2-AF9B-340F1A37ED12}" = MobileMe Control Panel
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{943CFD7D-5336-47AF-9418-E02473A5A517}" = Nero BurnRights 10
"{94CAC2F1-C856-47F4-AF24-65A1E75AEDB9}" = MotoHelper MergeModules
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95140000-007A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{95140000-0137-0407-0000-0000000FF1CE}" = Microsoft Works 6-9 Converter
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9B6B24BE-80E7-46C4-9FA5-B167D5E0F345}" = Nero BurningROM 10 Help (CHM)
"{9BD2DD45-8763-4F12-BDC6-958FCFEF0FCB}" = Microsoft IntelliType Pro 8.2
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{9EFC9E98-A218-4D83-BFC5-5E67E318767F}" = GEV Excelloesungen
"{A2397CA0-C472-46CC-83CD-EE54CE2A2117}" = Vera Kompas GEV
"{A31AB657-D929-4B80-A2B2-45E03902A3DD}" = InterRisk WinRisk 4.9.0
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC2E0432-9092-42F8-B4C2-E95DF8ADE82C}" = VHV-Tarifprogramm
"{AC2F9FCC-170E-4B0B-84AB-7307A373570F}" = RSA Smart Card Middleware 3.5
"{AC63EF8A-ABE1-79BB-F8B3-06C06BCA8B3C}" = HanseMerkur ISA Makler
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{ADA12202-A22B-445D-987F-D4CFADA12202}" = VIA-P
"{AF844339-2F8A-4593-81B3-9F4C54038C4E}" = Windows Live MIME IFilter
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{B1275E23-717A-4D52-997A-1AD1E24BC7F3}" = T-Online 6.0
"{B2023017-DEE4-44F7-8A71-CA6084BF534C}" = Brother P-touch Address Book 1.1
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B8381511-3832-4449-B33A-763931D2590B}" = BB-Euro-Tarifrechner
"{B8777FFC-165B-4DDE-B60B-AD5533D9EAD3}" = AquaSoft PhotoKalender 3
"{B8E9F8A1-9F4D-43D5-ABD6-1DF067FAA469}" = Microsoft SQL Server 2008 Database Engine Services
"{BBF0B1C3-EEC1-4AA6-916B-126E895A46D8}" = Fujitsu NetCOBOL Free Run-time
"{BCF16F16-AC0E-4ABE-A9EF-412CF484BA51}" = Windows Live Family Safety
"{C19B3EB6-B54C-3204-A4DF-88432E0C79F7}" = Microsoft ReportViewer 2010 Redistributable
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C6150D8A-86ED-41D3-87BB-F3BB51B0B77F}" = Windows Live ID Sign-in Assistant
"{C821456C-43B2-4A7E-B3E3-BB24DE58705A}" = MEAG-Angebotssoftware
"{C8320AEC-2E97-4C78-81EC-43CF6D248B01}" = Microsoft XML Parser
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{CAE7D1D9-3794-4169-B4DD-964ADBC534EE}" = HP Product Detection
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE7D48A0-CB2A-4293-8C41-68A116430BE9}" = AXA Beratungstechnologie
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{D4DDFAA1-EC37-4529-AD5B-A433ADE68662}" = Apple Mobile Device Support
"{D4F2AFD3-0167-4464-B92F-78AB6DA8A0AA}" = CardMinder
"{DBCDB997-EEEB-4BE9-BAFF-26B4094DBDE6}" = ScanSnap Manager
"{DE5CF410-90B1-4963-ABC3-C23289E52255}" = Angebots Msi
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{DF38C72B-8A86-4727-99D2-FA7CC5E17A24}" = Microsoft SQL Server 2008 RsFx Driver
"{DF9A6075-9308-4572-8932-A4316243C4D9}" = Brother P-touch Editor 5.0
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E2A69F09-B3A1-4E4B-AB8F-16B94981A67B}" = Geldgeschenke DruckShop
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{E58F3B88-3B3E-4F85-9323-04789D979C15}" = ScanSnap Organizer
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E6B43401-E818-4961-AFED-118DD8E87642}" = RAF
"{ED7BE5AA-4E2D-4030-95BA-6CCA4BFABB03}" = BEG-Rechner GEV
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{EFA462DC-DF28-49B4-A82B-D47D2A94AB1E}" = ELBE SL
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0DA699A-5279-49F2-AC5C-1BA58B3CC613}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"{FDC7BD51-0E41-4743-A843-41055F0BCB61}" = FIT GEV
"{FE83F463-7E61-4B18-9FA0-B94B90A0B6B9}" = Nero Burning ROM 10
"{FF0F7090-18DC-43ED-8A3F-F04DBAEC5600}" = Beraterplatz GEV
"{FF460B05-3F84-4A44-886A-13DA143C7C26}" = ScanSnap Organizer
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"812A5AC8-50DA-43D8-B36E-30CDD7FCCAA1_is1" = Outlook Backup Assistant 5 (Vollversion)
"ABACUS" = ABACUS
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AIDA64 Extreme Edition_is1" = AIDA64 Extreme Edition v1.20
"AquaSoft PhotoKalender 3" = AquaSoft PhotoKalender 3
"ASC Easy Updater_is1" = ASC Easy Update auf Version 4.5.0
"ASC Easy_is1" = ASC Easy 3.9.3
"CCleaner" = CCleaner
"CleverPrint_is1" = CleverPrint
"CodedColor_is1" = CodedColor FotoStudio 2010, 6.1.2
"CONDOR Angebotssystem" = CONDOR Angebotssystem
"Data Access Objects (DAO) 3.5" = Data Access Objects (DAO) 3.5
"DB_Firebird 1.5.0.4306" = DB_Firebird 1.5.0.4306
"de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1" = myphotobook.de
"E38B2136962D21A7BDE5AAC98CD1C6EA6B6D0687" = Windows-Treiberpaket - Microsoft (USBCCID) SmartCardReader  (05/17/2005 5.2.3790.2444)
"FinePix Genie_is1" = FUJIFILM MyFinePix Studio 2.0
"Generali Versicherungen Beratungssoftware" = Generali Versicherungen Beratungssoftware
"GEWA KVRATIO" = GEWA KVRATIO
"GEWA KV-Rational" = GEWA KV-Rational
"GSPDEINSTALL" = Gothaer Softwarepaket, komplette Deinstallation
"HanseMerkurISAMA" = HanseMerkur ISA Makler
"HanseMerkur-Tarife" = HanseMerkur-Tarife
"Hardcopy(C__Program Files_Hardcopy)" = Hardcopy (C:\Program Files\Hardcopy)
"HartlauerFotoService3_is1" = Direkt Foto System 3.x
"Helvetia Porta" = Helvetia Porta
"InstallShield_{150F9D4D-F555-41BB-AF49-D9DA8F53A82D}" = KUBUS light ERGO
"InstallShield_{B2023017-DEE4-44F7-8A71-CA6084BF534C}" = Brother P-touch Address Book 1.1
"InstallShield_{BBF0B1C3-EEC1-4AA6-916B-126E895A46D8}" = Fujitsu NetCOBOL Free Run-time
"InstallShield_{DF9A6075-9308-4572-8932-A4316243C4D9}" = Brother P-touch Editor 5.0
"InstallWIX_{560985FB-4B76-4121-9189-7A2CDC7886D6}" = Kaspersky Anti-Virus 2013
"IrfanView" = IrfanView (remove only)
"Janitos Offline-Tarifrechner 3_is1" = Janitos Offline-Tarifrechner 3.2.4.0
"LAN-Fax Dienstprogramme" = LAN-Fax Dienstprogramme
"MAGIX_MSI_Fotos_auf_CD_DVD_9_dlx" = MAGIX Foto Premium 9
"MAGIX_MSI_XtremeGrafik5" = MAGIX Xtreme Grafik Designer 5
"MailStore Home_universal1" = MailStore Home 5.0.1.6919
"Maitre" = Maitre
"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft CRM Client" = Microsoft Dynamics CRM 2011 für Microsoft Office Outlook
"Microsoft IntelliType Pro 8.2" = Microsoft IntelliType Pro 8.2
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft SQL Server 2005" = Microsoft SQL Server 2005
"MKVWin_XX-X_is1" = MKVWin 12-1
"MotoHelper" = MotoHelper 2.1.32 Driver 5.4.0
"MUENCHENER VEREIN" = MÜNCHENER VEREIN Software-Service
"PhotoCleaner" = PhotoCleaner
"pixpedia-de_is1" = Pixpedia Publisher 3.1.1
"POLARIS" = POLARIS
"PROPLUS" = Microsoft Office Professional Plus 2007
"R:BASE 76 Runtime for VV" = Vereins-Verwaltung
"RV-Win" = RV-Win
"SIGNAL IDUNA Beratungssoftware externe Vertriebe" = SIGNAL IDUNA Beratungssoftware freie Vertriebe
"SQLAnywhere11" = SQLAnywhere11
"Swiss Life EVA" = Swiss Life EVA
"TeamViewer 7" = TeamViewer 7
"VIA-P 12.20" = VIA-P 12.20
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.11 (32-Bit)
"WMV9_VCM" = Microsoft Windows Media Video 9 VCM
"YTdetect" = Yahoo! Detect
"ZonerPhotoStudio12_DE_is1" = Zoner Photo Studio 12
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"KS-Win 2008" = KS-Win 2008
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 03.08.2012 03:59:00 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 9000
Description = 
 
Error - 03.08.2012 03:59:00 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 7040
Description = 
 
Error - 03.08.2012 03:59:00 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 7042
Description = 
 
Error - 03.08.2012 03:59:00 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 9002
Description = 
 
Error - 03.08.2012 03:59:00 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 03.08.2012 03:59:02 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 03.08.2012 03:59:02 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 3028
Description = 
 
Error - 03.08.2012 03:59:02 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 3058
Description = 
 
Error - 03.08.2012 03:59:02 | Computer Name = Haupt-PC | Source = Windows Search Service | ID = 7010
Description = 
 
Error - 07.08.2012 13:36:17 | Computer Name = Haupt-PC | Source = Application Hang | ID = 1002
Description = Programm OUTLOOK.EXE, Version 12.0.6661.5003 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf 
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 1224    Startzeit: 01cd74c228e37cdd    Endzeit: 15    Anwendungspfad:
 C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE    Berichts-ID: 53acf146-e0b6-11e1-b540-002215263d69

 
Error - 08.08.2012 04:27:13 | Computer Name = Haupt-PC | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16447 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf 
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: 15b4    Startzeit: 01cd753f43653bdc    Endzeit: 15    Anwendungspfad:
 C:\Program Files\Internet Explorer\iexplore.exe    Berichts-ID:   
 
[ OSession Events ]
Error - 01.06.2011 05:33:16 | Computer Name = Haupt-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6557.5001, Microsoft Office Version: 12.0.6425.1000. This session lasted 37
 seconds with 0 seconds of active time.  This session ended with a crash.
 
Error - 16.11.2011 12:47:14 | Computer Name = Haupt-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 17972
 seconds with 420 seconds of active time.  This session ended with a crash.
 
Error - 08.12.2011 08:54:44 | Computer Name = Haupt-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6612.1000, Microsoft Office Version: 12.0.6612.1000. This session lasted 5452
 seconds with 60 seconds of active time.  This session ended with a crash.
 
Error - 22.12.2011 12:11:12 | Computer Name = Haupt-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 1, Application Name: Microsoft Office Excel, Application Version:
 12.0.6654.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 426
 seconds with 60 seconds of active time.  This session ended with a crash.
 
Error - 06.06.2012 12:28:28 | Computer Name = Haupt-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 1314
 seconds with 360 seconds of active time.  This session ended with a crash.
 
Error - 13.08.2012 05:49:46 | Computer Name = Haupt-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
 12.0.6661.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 2772
 seconds with 240 seconds of active time.  This session ended with a crash.
 
Error - 07.09.2012 11:19:20 | Computer Name = Haupt-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6661.5003, Microsoft Office Version: 12.0.6612.1000. This session lasted 30
 seconds with 0 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 01.11.2012 22:02:14 | Computer Name = Haupt-PC | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
 
Error - 01.11.2012 22:02:14 | Computer Name = Haupt-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 01.11.2012 22:03:41 | Computer Name = Haupt-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   KLIM6
 
Error - 01.11.2012 22:08:31 | Computer Name = Haupt-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Windows Search" wurde nicht richtig gestartet.
 
Error - 01.11.2012 22:14:17 | Computer Name = Haupt-PC | Source = atikmdag | ID = 52236
Description = CPLIB :: General - Invalid Parameter
 
Error - 01.11.2012 22:14:17 | Computer Name = Haupt-PC | Source = atikmdag | ID = 43029
Description = Display is not active
 
Error - 01.11.2012 22:15:25 | Computer Name = Haupt-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   KLIM6
 
Error - 01.11.2012 22:34:39 | Computer Name = Haupt-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 01.11.2012 22:34:44 | Computer Name = Haupt-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80080005 fehlgeschlagen: Sicherheitsupdate für Windows 7 (KB2731847)
 
Error - 01.11.2012 22:34:57 | Computer Name = Haupt-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070643 fehlgeschlagen: Updaterollup 11 für Microsoft Dynamics CRM 2011
 für Outlook (KB2739504)
 
 
< End of report >