![]() |
|
Plagegeister aller Art und deren Bekämpfung: Server ist ausgelastet und meine Netzwerke funktionieren nichtWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() | #1 |
![]() | ![]() Server ist ausgelastet und meine Netzwerke funktionieren nicht Hallo Miteinander, ich bin neu hier und habe folgendes Problem, ich bin dabei eine neue WLAN Antenne anzuschliesen was ich leider nicht kann da ich keine Netzwerke auswählen kann, findet bitte den Anhang, und heute am Vormittag habe ich den Computer aufgedreht und diese Meldung ist aufgetaucht "Server ist ausgelastet" dann habe ich ein paar Virenscanner aktiviert wo 6 Trojaner gefunden wurden, die Fehlermeldung ist zwar weg aber der Computer nachwievor sehr langsam und das Netzwerk erstellen geht auch noch nicht, dann habe ich in diesem Forum OTL gefunden und befolgt ohne Erfolg Könnt ihr mir bitte helfen Danke euch lg. Kapsel OTL logfile created on: 29.07.2013 15:01:37 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Markus\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000C07 | Country: Austria | Language: DEA | Date Format: dd.MM.yyyy 2,99 Gb Total Physical Memory | 2,36 Gb Available Physical Memory | 78,91% Memory free 4,83 Gb Paging File | 4,25 Gb Available in Paging File | 88,01% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74,53 Gb Total Space | 6,17 Gb Free Space | 8,28% Space Free | Partition Type: NTFS Computer Name: MARKUS-PC | User Name: Markus | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Documents and Settings\Markus\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\WINDOWS\system32\ATWTUSB.EXE () PRC - C:\WINDOWS\system32\o2flash.exe (O2Micro International) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Program Files\NETGEAR\NETGEAR Storage Central Manager Utility\Z-SANService.exe (Zetera Corporation) PRC - C:\WINDOWS\system32\HPZipm12.exe (HP) ========== Modules (No Company Name) ========== MOD - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.DEU () MOD - C:\Program Files\Avira\AntiVir Desktop\sqlite3.dll () MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll () MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll () MOD - C:\WINDOWS\system32\ATWTUSB.EXE () MOD - C:\WINDOWS\system32\BBPDFPortMon.dll () ========== Services (SafeList) ========== SRV - (HidServ) -- %SystemRoot%\System32\hidserv.dll File not found SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirWebService) -- C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirMailService) -- C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (WTService) -- C:\WINDOWS\system32\ATWTUSB.EXE () SRV - (O2Flash) -- C:\WINDOWS\system32\o2flash.exe (O2Micro International) SRV - (Z-SANService) -- C:\Program Files\NETGEAR\NETGEAR Storage Central Manager Utility\Z-SANService.exe (Zetera Corporation) SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP) ========== Driver Services (SafeList) ========== DRV - (WDICA) -- File not found DRV - (qahd) -- System32\drivers\dqklh.sys File not found DRV - (PDRFRAME) -- File not found DRV - (PDRELI) -- File not found DRV - (PDFRAME) -- File not found DRV - (PDCOMP) -- File not found DRV - (PCIDump) -- File not found DRV - (lbrtfdc) -- File not found DRV - (i2omgmt) -- File not found DRV - (cleanhlp) -- C:\Program Files\Emsisoft Anti-Malware\cleanhlp32.sys File not found DRV - (Changer) -- File not found DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira Operations GmbH & Co. KG) DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira Operations GmbH & Co. KG) DRV - (avkmgr) -- C:\WINDOWS\system32\drivers\avkmgr.sys (Avira Operations GmbH & Co. KG) DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH) DRV - (FJGSDisk) -- C:\WINDOWS\system32\drivers\FJGSDisk.sys (FUJITSU LIMITED) DRV - (vhidmini) -- C:\WINDOWS\system32\drivers\walvhid.sys (Windows (R) Win 7 DDK provider) DRV - (O2MDRDR) -- C:\WINDOWS\system32\drivers\o2media.sys (O2Micro ) DRV - (O2SDRDR) -- C:\WINDOWS\system32\drivers\o2sd.sys (O2Micro) DRV - (O2SCBUS) -- C:\WINDOWS\system32\drivers\ozscr.sys (O2Micro) DRV - (moufiltr) -- C:\WINDOWS\system32\drivers\moufiltr.sys (Windows (R) Codename Longhorn DDK provider) DRV - (IntcAzAudAddService) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.) DRV - (AR5211) -- C:\WINDOWS\system32\drivers\ar5211.sys (Atheros Communications, Inc.) DRV - (ZetBus) -- C:\WINDOWS\system32\drivers\ZetBus.sys (Zetera Corporation) DRV - (ZetSFD) -- C:\WINDOWS\system32\drivers\ZetSFD.sys (Zetera Corporation) DRV - (ZetMPD) -- C:\WINDOWS\system32\drivers\ZetMPD.sys (Zetera Corporation) DRV - (SFSZ) -- C:\WINDOWS\system32\drivers\sfsz.sys (DataPlow, Incorporated) DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell) DRV - (AgereSoftModem) -- C:\WINDOWS\system32\drivers\AGRSM.sys (Agere Systems) DRV - (BVRPMPR5) -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS (BVRP Software) DRV - (FUJ02E3) -- C:\WINDOWS\system32\drivers\fuj02e3.sys (FUJITSU LIMITED) DRV - (SMCIRDA) -- C:\WINDOWS\system32\drivers\smcirda.sys (SMC) DRV - (FUJ02B1) -- C:\WINDOWS\system32\drivers\fuj02b1.sys (FUJITSU LIMITED) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?} IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = IE - HKU\S-1-5-21-1614895754-515967899-839522115-1006\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ IE - HKU\S-1-5-21-1614895754-515967899-839522115-1006\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1614895754-515967899-839522115-1006\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKU\S-1-5-21-1614895754-515967899-839522115-1006\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKU\S-1-5-21-1614895754-515967899-839522115-1006\..\SearchScopes\{8F44C408-85D8-452B-BDCB-F1D702EFB5D3}: "URL" = hxxp://websearch.ask.com/redirect?client=ie&tb=ORJ&o=100000027&src=crm&q={searchTerms}&locale=de_US&apn_ptnrs=^U3&apn_dtid=^OSJ000^YY^AT&apn_uid=5A016FDB-CB6D-499D-9D36-26CE0C139896&apn_sauid=74D94FCC-64F6-41B6-9995-A259B6DEBF78 IE - HKU\S-1-5-21-1614895754-515967899-839522115-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1614895754-515967899-839522115-1006\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_38: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) ========== Chrome ========== CHR - default_search_provider: Google (Enabled) CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google ![]() CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms} CHR - homepage: hxxp://www.google.com/ O1 HOSTS File: ([2011.07.18 12:19:59 | 000,000,759 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: HPC67EA8 HP001B78C67EA8 O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\RunOnce: ["C:\WINDOWS\system32\cmd.exe"] "C:\WINDOWS\system32\cmd.exe" /c "rmdir /s /q "C:\Program Files\jv16 PowerTools 2013"" File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 8 O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O7 - HKU\S-1-5-21-1614895754-515967899-839522115-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06) O16 - DPF: {CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 195.202.138.3 195.202.128.3 62.40.128.2 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1BF80522-CA3D-40C0-B599-8FF27C839E1D}: DhcpNameServer = 195.202.138.3 195.202.128.3 62.40.128.2 O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation) O20 - Winlogon\Notify\FJWSEL: DllName - (FJWSWNP.dll) - C:\WINDOWS\System32\FJWSWNP.dll (FUJITSU LIMITED) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2011.07.12 09:18:21 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) ========== Files/Folders - Created Within 30 Days ========== [2013.07.29 15:00:08 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Markus\Desktop\OTL.exe [2013.07.29 09:28:56 | 000,000,000 | ---D | C] -- C:\Program Files\Emsisoft Anti-Malware [2013.07.29 09:28:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Markus\My Documents\Anti-Malware [2013.07.29 07:48:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Markus\Application Data\Malwarebytes [2013.07.29 07:48:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\Malwarebytes [2013.07.28 19:56:21 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MRT [2013.07.28 17:50:08 | 000,044,224 | R--- | C] (BVRP Software) -- C:\WINDOWS\System32\drivers\BVRPMPR5.SYS [2013.07.23 13:55:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Markus\Desktop\Forum [2013.07.22 17:00:57 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Markus\Application Data\XnView [2013.07.22 16:23:28 | 000,000,000 | RH-D | C] -- C:\AHCache [2013.07.22 15:55:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Markus\Application Data\AVS4YOU [2013.07.22 15:55:22 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Application Data\AVS4YOU [2013.07.22 15:54:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\AVSMedia [2013.07.22 15:54:34 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msxml3a.dll [2013.07.22 15:54:34 | 000,000,000 | ---D | C] -- C:\Program Files\AVS4YOU [2013.07.20 13:50:59 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Markus\My Documents\Eigene Datenquellen [33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2013.07.29 15:07:00 | 000,001,098 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2013.07.29 15:00:11 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Markus\Desktop\OTL.exe [2013.07.29 14:46:24 | 000,000,024 | -HS- | M] () -- C:\Documents and Settings\Markus\Application Data\Win4665 Config DB.dlx [2013.07.29 14:46:24 | 000,000,024 | -HS- | M] () -- C:\Documents and Settings\Markus\Application Data\System3192SettingsDB.dat [2013.07.29 14:32:07 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2013.07.29 14:29:21 | 000,001,094 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2013.07.29 14:29:18 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2013.07.29 11:21:09 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2013.07.29 09:13:01 | 000,383,588 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2013.07.29 09:13:01 | 000,053,942 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2013.07.28 12:56:08 | 000,016,384 | ---- | M] () -- C:\Documents and Settings\Markus\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2013.07.28 12:38:41 | 000,002,237 | ---- | M] () -- C:\Documents and Settings\All Users\Desktop\SolidWorks 2004 SP03.lnk [2013.07.28 12:38:39 | 000,001,250 | ---- | M] () -- C:\Program Files\SolidWorksswxJRNL.BAK [2013.07.27 12:51:30 | 003,135,204 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Fahrwerk Kinematik.pdf [2013.07.25 19:20:10 | 001,351,524 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Tokai Univ SEF.pdf [2013.07.25 19:12:45 | 001,402,472 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Tokai Univ Design report.pdf [2013.07.25 07:56:47 | 000,244,599 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\FullManual NETGEAR.pdf [2013.07.24 18:02:01 | 000,000,284 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job [2013.07.24 16:03:39 | 000,223,224 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2013.07.24 15:53:03 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK [2013.07.23 17:09:31 | 000,066,430 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Webcam.JPG [2013.07.18 19:01:32 | 004,410,054 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Wankpol HA 18.7.2013.bmp [2013.07.18 14:01:15 | 000,030,621 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Werbeschild auf Dach.JPG [2013.07.16 13:55:55 | 004,410,054 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Paradigma ungefähr 3.bmp [2013.07.16 13:43:10 | 003,583,206 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Nickpol HA 28.6.2013.bmp [2013.07.16 13:36:38 | 004,410,054 | ---- | M] () -- C:\Documents and Settings\Markus\Desktop\Paradigma ungefähr 2.bmp [33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2013.07.29 14:46:24 | 000,000,024 | -HS- | C] () -- C:\Documents and Settings\Markus\Application Data\Win4665 Config DB.dlx [2013.07.29 14:46:24 | 000,000,024 | -HS- | C] () -- C:\Documents and Settings\Markus\Application Data\System3192SettingsDB.dat [2013.07.27 12:51:30 | 003,135,204 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\Fahrwerk Kinematik.pdf [2013.07.25 19:20:10 | 001,351,524 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\Tokai Univ SEF.pdf [2013.07.25 19:12:45 | 001,402,472 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\Tokai Univ Design report.pdf [2013.07.25 07:56:47 | 000,244,599 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\FullManual NETGEAR.pdf [2013.07.23 17:09:31 | 000,066,430 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\Webcam.JPG [2013.07.18 19:01:31 | 004,410,054 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\Wankpol HA 18.7.2013.bmp [2013.07.18 14:01:15 | 000,030,621 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\Werbeschild auf Dach.JPG [2013.07.16 13:55:54 | 004,410,054 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\Paradigma ungefähr 3.bmp [2013.07.16 13:34:39 | 004,410,054 | ---- | C] () -- C:\Documents and Settings\Markus\Desktop\Paradigma ungefähr 2.bmp [2013.03.23 12:32:24 | 000,000,221 | ---- | C] () -- C:\WINDOWS\NCLogConfig.ini [2012.09.04 08:57:47 | 000,000,721 | ---- | C] () -- C:\Documents and Settings\Markus\swxJRNL.swj [2012.02.17 09:20:21 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll [2012.02.09 21:47:17 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat [2011.11.14 20:48:25 | 000,868,072 | ---- | C] () -- C:\WINDOWS\System32\ATWTUSB.EXE [2011.11.14 20:48:25 | 000,739,048 | ---- | C] () -- C:\WINDOWS\System32\AtwtusbIcon.exe [2011.11.14 20:48:25 | 000,486,632 | ---- | C] () -- C:\WINDOWS\RmTablet.exe [2011.11.14 20:48:25 | 000,151,272 | ---- | C] () -- C:\WINDOWS\System32\Calibration.exe [2011.11.14 20:48:25 | 000,052,896 | ---- | C] () -- C:\WINDOWS\System32\InstallService.exe [2011.11.14 20:48:23 | 000,007,678 | ---- | C] () -- C:\WINDOWS\aiptbl.ini [2011.09.09 09:46:35 | 000,016,384 | ---- | C] () -- C:\Documents and Settings\Markus\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.09.03 13:46:40 | 000,000,218 | ---- | C] () -- C:\Documents and Settings\Markus\.recently-used.xbel [2011.08.30 15:39:27 | 000,000,017 | ---- | C] () -- C:\Documents and Settings\Markus\.gtk-bookmarks [2011.07.18 12:18:38 | 000,000,129 | ---- | C] () -- C:\Documents and Settings\Markus\Local Settings\Application Data\fusioncache.dat [2011.07.13 15:29:43 | 000,001,250 | ---- | C] () -- C:\Program Files\SolidWorksswxJRNL.BAK ========== ZeroAccess Check ========== [2010.12.09 17:15:09 | 000,002,048 | -HS- | M] () -- C:\WINDOWS\Installer\{a3919cc1-c752-8d62-305a-2a28fb8bdc49}\@ [2010.12.09 17:15:09 | 000,000,000 | -HSD | M] -- C:\WINDOWS\Installer\{a3919cc1-c752-8d62-305a-2a28fb8bdc49}\L [2012.06.03 17:10:55 | 000,000,000 | -HSD | M] -- C:\WINDOWS\Installer\{a3919cc1-c752-8d62-305a-2a28fb8bdc49}\U [2012.06.03 12:06:39 | 000,002,048 | -HS- | M] () -- C:\Documents and Settings\Markus\Local Settings\Application Data\{a3919cc1-c752-8d62-305a-2a28fb8bdc49}\@ [2010.12.09 17:15:09 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\Markus\Local Settings\Application Data\{a3919cc1-c752-8d62-305a-2a28fb8bdc49}\L [2010.12.09 17:15:09 | 000,000,000 | -HSD | M] -- C:\Documents and Settings\Markus\Local Settings\Application Data\{a3919cc1-c752-8d62-305a-2a28fb8bdc49}\U [2011.07.12 13:14:53 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shdocvw.dll -- [2008.04.14 02:12:05 | 001,499,136 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = C:\WINDOWS\system32\wbem\fastprox.dll -- [2009.02.09 14:10:48 | 000,473,600 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] "" = wbemess.dll -- [2008.04.14 02:12:08 | 000,273,920 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both ========== LOP Check ========== [2012.09.26 12:40:31 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\036DFF9802D490FBDAFE9F1B7B07D287 [2011.07.13 15:20:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Bluebeam Software [2013.06.27 17:09:24 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Boole & Partners [2011.11.14 20:48:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\Tablet [2011.07.12 19:22:39 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Application Data\{429CAD59-35B1-4DBC-BB6D-1DB246563521} [2012.10.10 08:08:04 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Markus\Application Data\CallingID [2013.01.11 11:15:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Markus\Application Data\gtk-2.0 [2012.01.26 17:27:47 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Markus\Application Data\InfoGraph [2012.02.05 15:20:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Markus\Application Data\KISSsoft AG [2013.07.22 18:38:15 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Markus\Application Data\XnView ========== Purity Check ========== < End of report > OTL Extras logfile created on: 29.07.2013 15:01:37 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Markus\Desktop Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000C07 | Country: Austria | Language: DEA | Date Format: dd.MM.yyyy 2,99 Gb Total Physical Memory | 2,36 Gb Available Physical Memory | 78,91% Memory free 4,83 Gb Paging File | 4,25 Gb Available in Paging File | 88,01% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files Drive C: | 74,53 Gb Total Space | 6,17 Gb Free Space | 8,28% Space Free | Partition Type: NTFS Computer Name: MARKUS-PC | User Name: Markus | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%* exefile [open] -- "%1" %* piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [Betrachten mit XnView] -- "C:\Program Files\XnView\xnview.exe" "%1" Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{069730C2-755A-485B-A205-27A1AAFA836A}" = InstantShareAlert "{0A65A3BD-54B5-4d0d-B084-7688507813F5}" = SlideShow "{15C0AF59-4877-49B6-B8C6-A61CE54515F5}" = cp_OnlineProjectsConfig "{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer "{1A9DEF19-760C-4e01-958F-D9B8E6C61B90}" = c5100_Help "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer "{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress "{26A24AE4-039D-4CA4-87B4-2F83216038FF}" = Java(TM) 6 Update 38 "{29ED20C9-5E15-4969-9279-25BF3727A3DA}" = iTunes "{2F58D60D-2BFD-4467-9B4D-64E7355C329D}" = Sonic_PrimoSDK "{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6 "{33BF0960-DBA3-4187-B6CC-C969FCFA2D25}" = SkinsHP1 "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{363790D2-DA98-41DD-9C9F-69FA36B169DE}" = PanoStandAlone "{41E776A5-9B12-416D-9A12-B4F7B044EBED}" = CP_Package_Basic1 "{420D1B97-3695-4A30-8E1A-463229E732C5}" = SolidWorks 2004 SP03 "{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm "{469ED3E8-D21E-40E8-B00F-63516D26FAE3}" = O2Micro Flash Memory Card Windows Driver "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant "{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder "{5C4E94D5-6A1A-4D12-B9FF-7CAAF179933B}" = Z88Aurora V2 "{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg "{6696D9A4-28A8-4F5A-8E9A-2E8974C8C39C}" = RandMap "{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder "{68763C27-235D-4165-A961-FDEA228CE504}" = AiOSoftwareNPI "{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox "{70B6A483-F815-4879-9AA4-3DCE9BCC61A0}" = Shock Sensor Utility "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{736C803C-DD3B-4015-BC51-AFB9E67B9076}" = Readme "{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour "{7BE9E7AD-ECA9-484F-8BA7-93BFB967970D}" = BayMP (x86) "{7C03270C-4FAB-4F5C-B10D-52FEDA190790}" = DocumentViewerQFolder "{7E7B7865-6C80-4373-8BC1-C2EB9431F9DE}" = ProductContextNPI "{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status "{83F7144B-CE67-483B-BB16-AE66902439E4}" = eDrawings 2004 SP03 "{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder "{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}" = DocProc "{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}" = Unload "{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003 "{90510407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Visio Professional 2003 "{96AA6C50-BF67-417E-BF6B-8A754DDD11E8}" = OZ711 SCR Driver V3.0.1.6B "{996512CF-F35B-48DE-9291-557FA5316967}" = ScannerCopy "{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}" = Apple Mobile Device Support "{A29800BA-0BF1-4E63-9F31-DF05A87F4104}" = InstantShareDevices "{A3672E1B-021F-4F50-A891-609471CCF941}" = NETGEAR Storage Central Manager Utility "{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder "{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.7) - Deutsch "{B2157760-AA3C-4E2E-BFE6-D20BC52495D9}" = cp_PosterPrintConfig "{B3B9BC18-2A09-4728-9B46-12E85FF3F628}" = C5100 "{B6286A44-7505-471A-A72B-04EC2DB2F442}" = CueTour "{B69CFE29-FD03-4E0A-87A7-6ED97F98E5B3}" = CP_Panorama1Config "{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}" = HP Software Update "{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}" = HP Photosmart, Officejet and Deskjet 7.0.A "{BF91B0A2-52DC-4230-B44F-7C34FA861D41}" = Wireless Selector "{C1C6767D-B395-43CB-BF99-051B58B86DA6}" = PhotoGallery "{C6579A65-9CAE-4B31-8B6B-3306E0630A66}" = Apple Software Update "{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter "{C8753E28-2680-49BF-BD48-DD38FD086EFE}" = AiO_Scan_CDA "{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver "{C9E14402-3631-4182-B377-6B0DFB1C0339}" = QuickTime "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{DBC20735-34E6-4E97-A9E5-2066B66B243D}" = TrayApp "{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack "{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}" = Fujitsu System Extension Utility "{ED2C557E-9C18-41FF-B58E-A05EEF0B3B5F}" = CP_CalendarTemplates1 "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F157460F-720E-482f-8625-AD7843891E5F}" = InstantShareDevicesMFC "{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan "{F6076EF9-08E1-442F-B6A2-BFB61B295A14}" = Fax_CDA "{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations "{FBB980B0-63F8-4B48-8D65-90F1D9F81D9F}" = NewCopy_CDA "{FE7E1DD7-EBCE-4696-ADE2-22BDBF2372DA}" = DocumentViewer "2B77EDB2643AA62CA7DD23F4E52CA138F61AF7B8" = Windows Driver Package - Intel net (02/25/2007 11.1.0.86) "A5F682C869AF68EB8EDD49BDADFC08B7DF1C11C3" = Windows Driver Package - Intel (NETw4x32) net (02/25/2007 11.1.0.86) "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Agere Systems Soft Modem" = Agere Systems HDA Modem "Avira AntiVir Desktop" = Avira Antivirus Premium "D1E8C9A9258DD7BF813A3525430A4EB3576736EA" = Windows Driver Package - Intel net (02/25/2007 11.1.0.86) "F316136B5BACF2CDDD1D6092EB528F1C5A142CC4" = Windows Driver Package - FUJITSU (FUJ02E3) System (01/17/2004 1.00) "FC9E80E6E67400E836A009325C6E1CF5D77EFB1D" = Windows Driver Package - Intel (w29n51) net (02/08/2007 9.0.4.33) "Google Chrome" = Google Chrome "HDMI" = Intel(R) Graphics Media Accelerator Driver "HP Document Viewer" = HP Document Viewer 7.0 "HP Imaging Device Functions" = HP Imaging Device Functions 7.0 "HP Photo & Imaging" = HP Photosmart Premier Software 6.5 "HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0 "HPOCR" = OCR Software by I.R.I.S 7.0 "ie8" = Windows Internet Explorer 8 "InfoCAD Studienversion" = InfoCAD Studienversion 11.2 "InstallShield_{469ED3E8-D21E-40E8-B00F-63516D26FAE3}" = O2Micro Flash Memory Card Windows Driver "InstallShield_{70B6A483-F815-4879-9AA4-3DCE9BCC61A0}" = Shock Sensor Utility "InstallShield_{96AA6C50-BF67-417E-BF6B-8A754DDD11E8}" = OZ711 SCR Driver V3.0.1.6B "InstallShield_{BF91B0A2-52DC-4230-B44F-7C34FA861D41}" = Wireless Selector "InstallShield_{E8A5B78F-4456-4511-AB3D-E7BFFB974A7A}" = Fujitsu System Extension Utility "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Rmtablet" = USB Tablet Manager "Screwtool_is1" = Screwtool 1.2.2 "SynTPDeinstKey" = Synaptics Pointing Device Driver "Windows XP Service Pack" = Windows XP Service Pack 3 ========== HKEY_USERS Uninstall List ========== [HKEY_USERS\S-1-5-21-1614895754-515967899-839522115-1006\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Fachwerk" = Fachwerk "Fachwerk3D" = Fachwerk3D ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 28.07.2013 07:42:05 | Computer Name = MARKUS-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: Continuously busy for more than a second Error - 28.07.2013 07:42:05 | Computer Name = MARKUS-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledEvent 2101750 Error - 28.07.2013 07:42:05 | Computer Name = MARKUS-PC | Source = Bonjour Service | ID = 100 Description = Task Scheduling Error: m->NextScheduledSPRetry 2101750 Error - 28.07.2013 08:38:40 | Computer Name = MARKUS-PC | Source = WinMgmt | ID = 28 Description = WinMgmt konnte die Kernteile nicht initialisieren. Mögliche Ursache hierfür könnte eine beschädigte WinMgmt-Version, ein WinMgmt-Repositoryaktualisierungsfehler oder nicht genügend Speicherplatz oder Arbeitsspeicher sein. Error - 28.07.2013 11:26:36 | Computer Name = MARKUS-PC | Source = WinMgmt | ID = 28 Description = WinMgmt konnte die Kernteile nicht initialisieren. Mögliche Ursache hierfür könnte eine beschädigte WinMgmt-Version, ein WinMgmt-Repositoryaktualisierungsfehler oder nicht genügend Speicherplatz oder Arbeitsspeicher sein. Error - 28.07.2013 13:10:37 | Computer Name = MARKUS-PC | Source = WinMgmt | ID = 28 Description = WinMgmt konnte die Kernteile nicht initialisieren. Mögliche Ursache hierfür könnte eine beschädigte WinMgmt-Version, ein WinMgmt-Repositoryaktualisierungsfehler oder nicht genügend Speicherplatz oder Arbeitsspeicher sein. Error - 28.07.2013 16:00:18 | Computer Name = MARKUS-PC | Source = WinMgmt | ID = 28 Description = WinMgmt konnte die Kernteile nicht initialisieren. Mögliche Ursache hierfür könnte eine beschädigte WinMgmt-Version, ein WinMgmt-Repositoryaktualisierungsfehler oder nicht genügend Speicherplatz oder Arbeitsspeicher sein. Error - 29.07.2013 01:38:34 | Computer Name = MARKUS-PC | Source = WinMgmt | ID = 28 Description = WinMgmt konnte die Kernteile nicht initialisieren. Mögliche Ursache hierfür könnte eine beschädigte WinMgmt-Version, ein WinMgmt-Repositoryaktualisierungsfehler oder nicht genügend Speicherplatz oder Arbeitsspeicher sein. Error - 29.07.2013 03:28:54 | Computer Name = MARKUS-PC | Source = crypt32 | ID = 131083 Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . Error - 29.07.2013 03:28:54 | Computer Name = MARKUS-PC | Source = crypt32 | ID = 131083 Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. . [ System Events ] Error - 29.07.2013 03:03:43 | Computer Name = MARKUS-PC | Source = sr | ID = 1 Description = Beim Verarbeiten der Datei "" auf Volume "HarddiskVolume1" ist im Wiederherstellungsfilter der unerwartete Fehler "0xC0000001" aufgetreten. Die Volumeüberwachung wurde angehalten. Error - 29.07.2013 03:09:40 | Computer Name = MARKUS-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Computer Browser" wurde mit folgendem Fehler beendet: %%1060 Error - 29.07.2013 03:22:52 | Computer Name = MARKUS-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Computer Browser" wurde mit folgendem Fehler beendet: %%1060 Error - 29.07.2013 04:57:02 | Computer Name = MARKUS-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Computer Browser" wurde mit folgendem Fehler beendet: %%1060 Error - 29.07.2013 05:24:59 | Computer Name = MARKUS-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Computer Browser" wurde mit folgendem Fehler beendet: %%1060 Error - 29.07.2013 05:34:43 | Computer Name = MARKUS-PC | Source = Dhcp | ID = 1002 Description = Die IP-Adresslease 81.217.25.60 für die Netzwerkkarte mit der Netzwerkadresse 0017422E8C4D wurde durch den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet). Error - 29.07.2013 06:22:39 | Computer Name = MARKUS-PC | Source = Dhcp | ID = 1002 Description = Die IP-Adresslease 192.168.0.2 für die Netzwerkkarte mit der Netzwerkadresse 0017422E8C4D wurde durch den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet). Error - 29.07.2013 07:04:27 | Computer Name = MARKUS-PC | Source = Dhcp | ID = 1002 Description = Die IP-Adresslease 192.168.0.2 für die Netzwerkkarte mit der Netzwerkadresse 0017422E8C4D wurde durch den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet). Error - 29.07.2013 07:14:19 | Computer Name = MARKUS-PC | Source = Dhcp | ID = 1002 Description = Die IP-Adresslease 192.168.0.2 für die Netzwerkkarte mit der Netzwerkadresse 0017422E8C4D wurde durch den DHCP-Server 172.16.100.153 abgelehnt (der DHCP-Server hat eine DHCPNACK-Meldung gesendet). Error - 29.07.2013 08:31:56 | Computer Name = MARKUS-PC | Source = Service Control Manager | ID = 7023 Description = Der Dienst "Computer Browser" wurde mit folgendem Fehler beendet: %%1060 < End of report > |
Themen zu Server ist ausgelastet und meine Netzwerke funktionieren nicht |
0xc0000001, 192.168.0.2, antivir, ausgelastet, avira, bho, bonjour, browser, computer, emsisoft, error, firefox, flash player, helper, homepage, langsam, logfile, netgear, officejet, plug-in, problem, realtek, registry, rojaner gefunden, scan, security, sehr langsam, server, software, speicherplatz, trojaner |