BKA Trojaner XP desktop Sperrung auch im abgesicherten Modus

OTL logfile created on: 08.02.2013 14:29:54 - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = G:\
Microsoft Windows XP Service Pack 2 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
511,00 Mb Total Physical Memory | 287,00 Mb Available Physical Memory | 56,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): G:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = G: | %SystemRoot% = G:\WINDOWS | %ProgramFiles% = G:\Programme
Drive C: | 3,77 Gb Total Space | 3,75 Gb Free Space | 99,66% Space Free | Partition Type: FAT32
Drive D: | 14,88 Gb Total Space | 13,12 Gb Free Space | 88,16% Space Free | Partition Type: FAT32
Drive G: | 23,45 Gb Total Space | 17,98 Gb Free Space | 76,69% Space Free | Partition Type: NTFS
 
Computer Name: NINE | User Name: Janine
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Win32 Services (SafeList) ==========
 
SRV - (AppMgmt) --  File not found
SRV - (Kodak AiO Network Discovery Service) -- G:\Programme\Kodak\AiO\Center\EKAiOHostService.exe (Eastman Kodak Company)
SRV - (TGCM_ImportWiFiSvc) -- G:\Programme\o2\Mobile Connection Manager\ImpWiFiSvc.exe (Telefónica I+D)
SRV - (DCService.exe) -- G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DatacardService\DCService.exe ()
SRV - (Microsoft Office Groove Audit Service) -- D:\Office12\GrooveAuditService.exe (Microsoft Corporation)
SRV - (odserv) -- G:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose) -- G:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (WDICA) --  File not found
DRV - (Scutum50) --  File not found
DRV - (RT73) --  File not found
DRV - (PDRFRAME) --  File not found
DRV - (PDRELI) --  File not found
DRV - (PDFRAME) --  File not found
DRV - (PDCOMP) --  File not found
DRV - (PCIDump) --  File not found
DRV - (lbrtfdc) --  File not found
DRV - (i2omgmt) --  File not found
DRV - (hwusbdev) --  File not found
DRV - (Changer) --  File not found
DRV - (tidnet) -- G:\WINDOWS\system32\drivers\tidnet.sys (Telefónica I+D)
DRV - (huawei_enumerator) -- G:\WINDOWS\system32\drivers\ew_jubusenum.sys (Huawei Technologies Co., Ltd.)
DRV - (ewusbnet) -- G:\WINDOWS\system32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) -- G:\WINDOWS\system32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (ew_hwusbdev) -- G:\WINDOWS\system32\drivers\ew_hwusbdev.sys (Huawei Technologies Co., Ltd.)
DRV - (videX32) -- G:\WINDOWS\system32\drivers\videX32.sys (VIA Technologies, Inc.)
DRV - (VIAudio) VIA AC'97 Audio Controller (WDM) -- G:\WINDOWS\system32\drivers\viaudios.sys (VIA Technologies, Inc.)
DRV - (Vsp) -- G:\WINDOWS\system32\drivers\vsp.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-746137067-796845957-725345543-1004\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.freemail.de/
IE - HKU\S-1-5-21-746137067-796845957-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: G:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_287.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0:  File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: G:\Programme\VLC Media Player\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: G:\Programme\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Components: G:\Programme\Firefox\components [2012.10.20 11:17:17 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 16.0.1\extensions\\Plugins: G:\Programme\Firefox\plugins
 
[2012.10.20 11:40:41 | 000,000,000 | ---D | M] (No name found) -- G:\Dokumente und Einstellungen\Janine\Anwendungsdaten\Mozilla\Extensions
File not found (No name found) -- 
 
O1 HOSTS File: ([2013.02.07 22:25:09 | 000,000,098 | ---- | M]) - G:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - G:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe ARM] G:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Conime] G:\WINDOWS\system32\conime.exe (Microsoft Corporation)
O4 - HKLM..\Run: [EKAIO2StatusMonitor] G:\WINDOWS\system32\spool\drivers\w32x86\3\EKAiO2MUI.exe (Eastman Kodak Company)
O4 - HKLM..\Run: [GrooveMonitor] D:\Office12\GrooveMonitor.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NWEReboot]  File not found
O4 - Startup: G:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\AudioDeck.lnk = G:\Programme\VIA Technologies, Inc\VIA Audio Driver Setup Program\AudioDeck\AudioDeck.exe ()
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-746137067-796845957-725345543-1004\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - D:\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Office12\REFIEBAR.DLL (Microsoft Corporation)
O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} hxxp://liveupdate.msi.com.tw/autobios/LOnline/install.cab (WebSDev Control)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - G:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - G:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - G:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - G:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - G:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - G:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - G:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - G:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - G:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - G:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: G:\Dokumente und Einstellungen\Janine\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: G:\Dokumente und Einstellungen\Janine\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{33a56c05-1803-11e0-bbce-001109cfa233}\Shell - "" = AutoRun
O33 - MountPoints2\{33a56c05-1803-11e0-bbce-001109cfa233}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{33a56c05-1803-11e0-bbce-001109cfa233}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{6f3252ce-6d57-11e2-bc28-001109cfa233}\Shell - "" = AutoRun
O33 - MountPoints2\{6f3252ce-6d57-11e2-bc28-001109cfa233}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{6f3252ce-6d57-11e2-bc28-001109cfa233}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{8237859c-17df-11e0-bbcb-001109cfa233}\Shell - "" = AutoRun
O33 - MountPoints2\{8237859c-17df-11e0-bbcb-001109cfa233}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{8237859c-17df-11e0-bbcb-001109cfa233}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{ac726b18-17e1-11e0-bbcd-001109cfa233}\Shell - "" = AutoRun
O33 - MountPoints2\{ac726b18-17e1-11e0-bbcd-001109cfa233}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{ac726b18-17e1-11e0-bbcd-001109cfa233}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{ac726b1c-17e1-11e0-bbcd-001109cfa233}\Shell - "" = AutoRun
O33 - MountPoints2\{ac726b1c-17e1-11e0-bbcd-001109cfa233}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{ac726b1c-17e1-11e0-bbcd-001109cfa233}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{e093a88c-5a7a-11df-bb68-001109cfa233}\Shell - "" = AutoRun
O33 - MountPoints2\{e093a88c-5a7a-11df-bb68-001109cfa233}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{e093a88c-5a7a-11df-bb68-001109cfa233}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{e3c5463a-0a86-11df-bb12-001109cfa233}\Shell - "" = AutoRun
O33 - MountPoints2\{e3c5463a-0a86-11df-bb12-001109cfa233}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{e3c5463a-0a86-11df-bb12-001109cfa233}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O33 - MountPoints2\{e3c5463e-0a86-11df-bb12-001109cfa233}\Shell - "" = AutoRun
O33 - MountPoints2\{e3c5463e-0a86-11df-bb12-001109cfa233}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{e3c5463e-0a86-11df-bb12-001109cfa233}\Shell\AutoRun\command - "" = H:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.02.07 22:25:07 | 002,237,440 | R--- | C] (OldTimer Tools) -- G:\OTLPE.exe
[2013.02.07 22:25:06 | 000,000,000 | ---D | C] -- G:\_OTL
[2013.02.07 17:07:30 | 000,000,000 | RH-D | C] -- G:\Dokumente und Einstellungen\Janine\Recent
[2013.02.07 16:58:57 | 000,000,000 | ---D | C] -- G:\WINDOWS\Prefetch
[2013.02.07 16:49:57 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1btxx.sys
[2013.02.07 16:49:57 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1raxx.sys
[2013.02.07 16:49:57 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1pdxx.sys
[2013.02.07 16:49:57 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1mdxx.sys
[2013.02.07 16:49:57 | 000,004,255 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\adv01nt5.dll
[2013.02.07 16:49:57 | 000,003,967 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\adv02nt5.dll
[2013.02.07 16:49:57 | 000,003,775 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\adv11nt5.dll
[2013.02.07 16:49:57 | 000,003,711 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\adv09nt5.dll
[2013.02.07 16:49:57 | 000,003,647 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\adv07nt5.dll
[2013.02.07 16:49:57 | 000,003,615 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\adv05nt5.dll
[2013.02.07 16:49:57 | 000,003,135 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\adv08nt5.dll
[2013.02.07 16:49:56 | 000,701,952 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati2mtag.sys
[2013.02.07 16:49:56 | 000,327,168 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati2mtaa.sys
[2013.02.07 16:49:56 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinrvxx.sys
[2013.02.07 16:49:56 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atintuxx.sys
[2013.02.07 16:49:56 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1rvxx.sys
[2013.02.07 16:49:56 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinxsxx.sys
[2013.02.07 16:49:56 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinbtxx.sys
[2013.02.07 16:49:56 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinraxx.sys
[2013.02.07 16:49:56 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1tuxx.sys
[2013.02.07 16:49:56 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1xsxx.sys
[2013.02.07 16:49:56 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinxbxx.sys
[2013.02.07 16:49:56 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1xbxx.sys
[2013.02.07 16:49:56 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinsnxx.sys
[2013.02.07 16:49:56 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1snxx.sys
[2013.02.07 16:49:56 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\atv04nt5.dll
[2013.02.07 16:49:56 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\ati1ttxx.sys
[2013.02.07 16:49:56 | 000,021,183 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\atv01nt5.dll
[2013.02.07 16:49:56 | 000,017,279 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\atv10nt5.dll
[2013.02.07 16:49:56 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinpdxx.sys
[2013.02.07 16:49:56 | 000,014,143 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\atv06nt5.dll
[2013.02.07 16:49:56 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinttxx.sys
[2013.02.07 16:49:56 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\drivers\atinmdxx.sys
[2013.02.07 16:49:56 | 000,011,359 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\atv02nt5.dll
[2013.02.07 16:49:55 | 000,035,456 | ---- | C] (Microsoft Corporation) -- G:\WINDOWS\System32\drivers\bthprint.sys
[2013.02.07 16:49:55 | 000,015,423 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2013.02.07 16:49:54 | 001,309,184 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\drivers\mtlstrm.sys
[2013.02.07 16:49:54 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- G:\WINDOWS\System32\drivers\mtxparhm.sys
[2013.02.07 16:49:54 | 000,180,360 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\drivers\ntmtlfax.sys
[2013.02.07 16:49:54 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- G:\WINDOWS\System32\drivers\s3gnbm.sys
[2013.02.07 16:49:54 | 000,129,535 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\drivers\slnt7554.sys
[2013.02.07 16:49:54 | 000,126,686 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\drivers\mtlmnt5.sys
[2013.02.07 16:49:54 | 000,030,080 | ---- | C] (Microsoft Corporation) -- G:\WINDOWS\System32\drivers\rndismpx.sys
[2013.02.07 16:49:54 | 000,013,776 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\drivers\recagent.sys
[2013.02.07 16:49:54 | 000,012,672 | ---- | C] (Microsoft Corporation) -- G:\WINDOWS\System32\drivers\mutohpen.sys
[2013.02.07 16:49:54 | 000,003,901 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\siint5.dll
[2013.02.07 16:49:53 | 000,870,784 | ---- | C] (ATI Technologies Inc. ) -- G:\WINDOWS\System32\ati3d1ag.dll
[2013.02.07 16:49:53 | 000,404,990 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\drivers\slntamr.sys
[2013.02.07 16:49:53 | 000,377,984 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\ati2dvaa.dll
[2013.02.07 16:49:53 | 000,229,376 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\ati2cqag.dll
[2013.02.07 16:49:53 | 000,201,728 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\ati2dvag.dll
[2013.02.07 16:49:53 | 000,095,424 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\drivers\slnthal.sys
[2013.02.07 16:49:53 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\watv10nt.sys
[2013.02.07 16:49:53 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\watv06nt.sys
[2013.02.07 16:49:53 | 000,013,240 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\drivers\slwdmsup.sys
[2013.02.07 16:49:53 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\wadv11nt.sys
[2013.02.07 16:49:53 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\wadv09nt.sys
[2013.02.07 16:49:53 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\wadv07nt.sys
[2013.02.07 16:49:53 | 000,011,325 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\vchnt5.dll
[2013.02.07 16:49:53 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- G:\WINDOWS\System32\drivers\wadv08nt.sys
[2013.02.07 16:49:53 | 000,006,016 | ---- | C] (Microsoft Corporation) -- G:\WINDOWS\System32\drivers\smbali.sys
[2013.02.07 16:49:52 | 001,888,992 | ---- | C] (ATI Technologies Inc. ) -- G:\WINDOWS\System32\ati3duag.dll
[2013.02.07 16:49:52 | 001,737,856 | ---- | C] (Matrox Graphics Inc.) -- G:\WINDOWS\System32\mtxparhd.dll
[2013.02.07 16:49:52 | 000,516,768 | ---- | C] (ATI Technologies Inc. ) -- G:\WINDOWS\System32\ativvaxx.dll
[2013.02.07 16:49:52 | 000,086,016 | ---- | C] (Conexant) -- G:\WINDOWS\System32\mdmxsdk.dll
[2013.02.07 16:49:52 | 000,032,768 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\ativtmxx.dll
[2013.02.07 16:49:52 | 000,032,285 | ---- | C] (Conexant Systems, Inc.) -- G:\WINDOWS\System32\hsfcisp2.dll
[2013.02.07 16:49:52 | 000,023,040 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\ativmvxx.ax
[2013.02.07 16:49:52 | 000,009,728 | ---- | C] (ATI Technologies Inc.) -- G:\WINDOWS\System32\ativdaxx.ax
[2013.02.07 16:49:51 | 000,397,056 | ---- | C] (S3 Graphics, Inc.) -- G:\WINDOWS\System32\s3gnb.dll
[2013.02.07 16:49:51 | 000,286,792 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\slextspk.dll
[2013.02.07 16:49:51 | 000,188,508 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\slgen.dll
[2013.02.07 16:49:51 | 000,073,832 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\slcoinst.dll
[2013.02.07 16:49:51 | 000,073,796 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\slserv.exe
[2013.02.07 16:49:51 | 000,032,866 | ---- | C] (Smart Link) -- G:\WINDOWS\System32\slrundll.exe
[2013.02.07 16:49:51 | 000,032,866 | ---- | C] (Smart Link) -- G:\WINDOWS\slrundll.exe
[2013.02.07 16:49:51 | 000,028,672 | ---- | C] (Microsoft Corporation) -- G:\WINDOWS\System32\vidcap.ax
[2013.02.07 16:46:49 | 000,000,000 | ---D | C] -- G:\WINDOWS\ServicePackFiles
[2013.02.07 16:44:50 | 000,000,000 | ---D | C] -- G:\WINDOWS\EHome
[2013.02.07 16:40:34 | 000,000,000 | ---D | C] -- G:\Programme\Service Pack 2
[2013.02.02 17:43:18 | 000,000,000 | ---D | C] -- G:\Dokumente und Einstellungen\Janine\Anwendungsdaten\Telefónica
[2013.02.02 17:42:29 | 001,112,288 | ---- | C] (Microsoft Corporation) -- G:\WINDOWS\System32\wdfcoinstaller01007.dll
[2013.02.02 17:42:29 | 001,112,288 | ---- | C] (Microsoft Corporation) -- G:\WINDOWS\System32\drivers\WdfCoInstaller01007.dll
[2013.02.02 17:42:13 | 000,000,000 | ---D | C] -- G:\Programme\HUAWEI Modem Driver
[2013.02.02 17:41:46 | 000,000,000 | ---D | C] -- G:\Dokumente und Einstellungen\All Users\Startmenü\Programme\o2
[2013.02.02 17:41:39 | 000,000,000 | ---D | C] -- G:\Programme\o2
[1 G:\WINDOWS\System32\*.tmp files -> G:\WINDOWS\System32\*.tmp -> ]
[1 G:\WINDOWS\*.tmp files -> G:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2013.02.08 14:17:18 | 095,023,320 | ---- | M] () -- G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\netdislw.pad
[2013.02.08 14:16:51 | 000,002,048 | --S- | M] () -- G:\WINDOWS\bootstat.dat
[2013.02.08 14:16:50 | 536,399,872 | -HS- | M] () -- G:\hiberfil.sys
[2013.02.07 16:58:38 | 000,264,616 | ---- | M] () -- G:\WINDOWS\System32\FNTCACHE.DAT
[2013.02.07 16:55:52 | 000,000,210 | RHS- | M] () -- G:\boot.ini
[2013.02.07 16:29:48 | 000,003,206 | ---- | M] () -- G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\netdislw.js
[2013.02.07 16:29:48 | 000,000,804 | ---- | M] () -- G:\Dokumente und Einstellungen\Janine\Startmenü\Programme\Autostart\runctf.lnk
[2013.02.07 16:29:07 | 000,013,646 | ---- | M] () -- G:\WINDOWS\System32\wpa.dbl
[2013.02.02 17:43:14 | 000,001,717 | ---- | M] () -- G:\Dokumente und Einstellungen\All Users\Desktop\Mobile Connection Manager.lnk
[2013.02.02 17:42:48 | 000,000,000 | -H-- | M] () -- G:\WINDOWS\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2013.02.02 17:41:46 | 000,000,000 | ---D | M] -- G:\Dokumente und Einstellungen\All Users\Startmenü\Programme\o2
[1 G:\WINDOWS\System32\*.tmp files -> G:\WINDOWS\System32\*.tmp -> ]
[1 G:\WINDOWS\*.tmp files -> G:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2013.02.07 17:00:11 | 000,000,718 | ---- | C] () -- G:\Dokumente und Einstellungen\Janine\Startmenü\Programme\Outlook Express.lnk
[2013.02.07 16:49:56 | 000,064,352 | ---- | C] () -- G:\WINDOWS\System32\drivers\ativmc20.cod
[2013.02.07 16:49:55 | 000,129,045 | ---- | C] () -- G:\WINDOWS\System32\drivers\cxthsfs2.cty
[2013.02.07 16:49:54 | 000,067,866 | ---- | C] () -- G:\WINDOWS\System32\drivers\netwlan5.img
[2013.02.07 16:49:52 | 000,081,920 | ---- | C] () -- G:\WINDOWS\System32\ieencode.dll
[2013.02.07 16:29:48 | 000,003,206 | ---- | C] () -- G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\netdislw.js
[2013.02.07 16:29:48 | 000,000,804 | ---- | C] () -- G:\Dokumente und Einstellungen\Janine\Startmenü\Programme\Autostart\runctf.lnk
[2013.02.07 16:29:30 | 095,023,320 | ---- | C] () -- G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\netdislw.pad
[2013.02.02 19:43:28 | 536,399,872 | -HS- | C] () -- G:\hiberfil.sys
[2013.02.02 17:43:14 | 000,001,717 | ---- | C] () -- G:\Dokumente und Einstellungen\All Users\Desktop\Mobile Connection Manager.lnk
[2013.02.02 17:42:48 | 000,000,000 | -H-- | C] () -- G:\WINDOWS\System32\drivers\Msft_Kernel_ew_jubusenum_01007.Wdf
[2011.07.27 09:28:01 | 000,000,125 | -HS- | C] () -- G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
[2010.03.08 15:02:44 | 000,032,768 | ---- | C] () -- G:\WINDOWS\System32\UnAudioNT.dll
[2010.03.08 15:02:44 | 000,003,351 | ---- | C] () -- G:\WINDOWS\System32\drivers\vsp.sys
[2010.02.28 17:10:17 | 000,001,272 | ---- | C] () -- G:\WINDOWS\System32\drivers\alcxinit.dat
[2010.01.26 16:37:23 | 000,000,000 | ---- | C] () -- G:\WINDOWS\nsreg.dat
[2010.01.25 17:24:21 | 000,058,880 | ---- | C] () -- G:\Dokumente und Einstellungen\Janine\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.01.25 17:11:39 | 000,002,048 | --S- | C] () -- G:\WINDOWS\bootstat.dat
[2010.01.25 17:06:03 | 000,021,740 | ---- | C] () -- G:\WINDOWS\System32\emptyregdb.dat
[2010.01.25 16:52:46 | 000,004,161 | ---- | C] () -- G:\WINDOWS\ODBCINST.INI
[2010.01.25 16:51:34 | 000,264,616 | ---- | C] () -- G:\WINDOWS\System32\FNTCACHE.DAT
[2008.02.01 08:18:14 | 000,009,216 | ---- | C] () -- G:\WINDOWS\System32\drivers\FlashSys.sys
[2006.10.27 16:26:56 | 000,069,632 | ---- | C] () -- G:\WINDOWS\System32\vuins32.dll
[2004.08.04 13:00:00 | 013,107,200 | ---- | C] () -- G:\WINDOWS\System32\oembios.bin
[2004.08.04 13:00:00 | 000,673,088 | ---- | C] () -- G:\WINDOWS\System32\mlang.dat
[2004.08.04 13:00:00 | 000,478,738 | ---- | C] () -- G:\WINDOWS\System32\perfh007.dat
[2004.08.04 13:00:00 | 000,457,840 | ---- | C] () -- G:\WINDOWS\System32\perfh009.dat
[2004.08.04 13:00:00 | 000,272,128 | ---- | C] () -- G:\WINDOWS\System32\perfi009.dat
[2004.08.04 13:00:00 | 000,269,480 | ---- | C] () -- G:\WINDOWS\System32\perfi007.dat
[2004.08.04 13:00:00 | 000,218,003 | ---- | C] () -- G:\WINDOWS\System32\dssec.dat
[2004.08.04 13:00:00 | 000,092,552 | ---- | C] () -- G:\WINDOWS\System32\perfc007.dat
[2004.08.04 13:00:00 | 000,075,858 | ---- | C] () -- G:\WINDOWS\System32\perfc009.dat
[2004.08.04 13:00:00 | 000,046,258 | ---- | C] () -- G:\WINDOWS\System32\mib.bin
[2004.08.04 13:00:00 | 000,034,478 | ---- | C] () -- G:\WINDOWS\System32\perfd007.dat
[2004.08.04 13:00:00 | 000,028,626 | ---- | C] () -- G:\WINDOWS\System32\perfd009.dat
[2004.08.04 13:00:00 | 000,027,440 | ---- | C] () -- G:\WINDOWS\System32\drivers\secdrv.sys
[2004.08.04 13:00:00 | 000,004,569 | ---- | C] () -- G:\WINDOWS\System32\secupd.dat
[2004.08.04 13:00:00 | 000,004,461 | ---- | C] () -- G:\WINDOWS\System32\oembios.dat
[2004.08.04 13:00:00 | 000,001,788 | ---- | C] () -- G:\WINDOWS\System32\Dcache.bin
[2004.08.04 13:00:00 | 000,000,741 | ---- | C] () -- G:\WINDOWS\System32\noise.dat
 
========== LOP Check ==========
 
[2011.07.27 16:30:56 | 000,000,000 | ---D | M] -- G:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Temp
[2010.06.05 13:56:59 | 000,000,000 | ---D | M] -- G:\Dokumente und Einstellungen\Janine\Anwendungsdaten\Sony
[2013.02.02 17:43:18 | 000,000,000 | ---D | M] -- G:\Dokumente und Einstellungen\Janine\Anwendungsdaten\Telefónica
[2011.07.26 15:50:55 | 000,000,000 | ---D | M] -- G:\Dokumente und Einstellungen\Janine\Anwendungsdaten\Temp
[2011.01.04 10:10:58 | 000,000,000 | ---D | M] -- G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DatacardService
[2011.07.27 09:28:08 | 000,000,000 | ---D | M] -- G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft
 
========== Purity Check ==========
 
< End of report >
         

OTL Extras logfile created on: 08.02.2013 14:29:54 - Run 
OTLPE by OldTimer - Version 3.1.48.0     Folder = G:\
Microsoft Windows XP Service Pack 2 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
511,00 Mb Total Physical Memory | 287,00 Mb Available Physical Memory | 56,00% Memory free
1,00 Gb Paging File | 1,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): G:\pagefile.sys 768 1536 [binary data]
 
%SystemDrive% = G: | %SystemRoot% = G:\WINDOWS | %ProgramFiles% = G:\Programme
Drive C: | 3,77 Gb Total Space | 3,75 Gb Free Space | 99,66% Space Free | Partition Type: FAT32
Drive D: | 14,88 Gb Total Space | 13,12 Gb Free Space | 88,16% Space Free | Partition Type: FAT32
Drive G: | 23,45 Gb Total Space | 17,98 Gb Free Space | 76,69% Space Free | Partition Type: NTFS
 
Computer Name: NINE | User Name: Janine
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet001
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "D:\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "D:\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "G:\Programme\VLC Media Player\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- D:\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "G:\Programme\VLC Media Player\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"9322:TCP" = 9322:TCP:*:Enabled:EKDiscovery
"5353:UDP" = 5353:UDP:*:Enabled:Bonjour Port 5353
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
 
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Office12\OUTLOOK.EXE" = D:\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"D:\Office12\groove.exe" = D:\Office12\groove.exe:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"D:\Office12\ONENOTE.EXE" = D:\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"G:\Programme\Kodak\AiO\Center\AiOHomeCenter.exe" = G:\Programme\Kodak\AiO\Center\AiOHomeCenter.exe:*:Enabled:Kodak.AiO.HomeCenter -- (Eastman Kodak Company)
"G:\Programme\Kodak\AiO\Center\Kodak.Statistics.exe" = G:\Programme\Kodak\AiO\Center\Kodak.Statistics.exe:*:Enabled:Kodak.AiO.Statistics -- (Eastman Kodak Company)
"G:\Programme\Kodak\AiO\Center\NetworkPrinterDiscovery.exe" = G:\Programme\Kodak\AiO\Center\NetworkPrinterDiscovery.exe:*:Enabled:Kodak.AiO.SetupUtility -- (Eastman Kodak Company)
"G:\Programme\Kodak\AiO\Firmware\KodakAiOUpdater.exe" = G:\Programme\Kodak\AiO\Firmware\KodakAiOUpdater.exe:*:Enabled:Kodak.AiO.FwUpdater -- (Eastman Kodak Company)
"G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kodak\Installer\Setup.exe" = G:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Kodak\Installer\Setup.exe:*:Enabled:Kodak.AiO.Installer -- (Eastman Kodak Company)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0645A454-AD44-4F0D-99CF-6B762735AD1F}" = aioprnt
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{27EF8E7F-88D1-4ec5-ADE2-7E447FDF114E}" = Kodak AIO Printer
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{56BA241F-580C-43D2-8403-947241AAE633}" = center
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}" = Microsoft .NET Framework 2.0
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7B63B2922B174135AFC0E1377DD81EC2}" = 
"{8DC42D05-680B-41B0-8878-6C14D24602DB}" = QuickTime
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (German) 12
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{91120000-002E-0000-0000-0000000FF1CE}" = Microsoft Office Ultimate 2007
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser
"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI - Deutsch
"{BE94C681-68E2-4561-8ABC-8D2E799168B4}" = essentials
"{BFBCF96F-7361-486A-965C-54B17AC35421}" = ocr
"{DA5BDB2A-12F0-4343-8351-21AAEB293990}" = PreReq
"{E0F274B7-592B-4669-8FB8-8D9825A09858}" = KODAK All-in-One Software
"{FE24086F-3B0C-4C47-A874-97A7B8E2FBBE}" = aioscnnr
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"CCleaner" = CCleaner
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"HUAWEI DataCard Driver" = HUAWEI DataCard Driver 4.20.12.00
"ie8" = Windows Internet Explorer 8
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager
"Lexmark Supplies Monitor" = Lexmark Supplies Monitor
"Microsoft .NET Framework 2.0" = Microsoft .NET Framework 2.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Mobile Partner" = Mobile Partner
"Mozilla Firefox 16.0.1 (x86 de)" = Mozilla Firefox 16.0.1 (x86 de)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"o2DE" = Mobile Connection Manager
"ULTIMATER" = Microsoft Office Ultimate 2007
"VIA Audio Driver Setup Program" = VIA Audio Driver Setup Program
"VLC media player" = VLC media player 2.0.4
"VN_VUIns_Rhine_VIA" = VIA Rhine-Family Fast-Ethernet Adapter
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
 
< End of report >