Hi,

ich habe folgendes Problem :
Anscheinend habe ich mir einen Trojaner eingefangen, es gab von Antivir eine Meldung. Habe den Trojaner dann in die Quarantäne verschoben.
Nun ist es aber so das sich Firefox nicht mehr öffnen lässt, beim Öffnen von Opera oder Safari werde ich in den IE umgeleitet, welcher anscheinend auch nicht funktioniert. Im Moment bin ich hier mit dem integrierten Browser aus Songbird.
Folgender HiJack-This Log hat sich ergeben :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:28:08, on 01.05.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Avira\AntiVir Desktop\sched.exe
C:\Programme\Acer\Acer eConsole\MediaServerService.exe
C:\Programme\Avira\AntiVir Desktop\avguard.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Programme\Bonjour\mDNSResponder.exe
C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe
C:\Programme\FolderSize\FolderSizeSvc.exe
C:\Programme\Avira\AntiVir Desktop\avshadow.exe
C:\Programme\ICQ6Toolbar\ICQ Service.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Symantec\Norton AntiBot\agent\Bin\NABWatcher.exe
C:\WINDOWS\system32\UAService7.exe
C:\Programme\Virtual CD v8\System\VC8SecS.exe
C:\WINDOWS\Explorer.EXE
C:\Programme\BillP Studios\WinPatrol\winpatrol.exe
C:\Programme\Avira\AntiVir Desktop\avgnt.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\iPod\bin\iPodService.exe
C:\Dokumente und Einstellungen\Florian\Desktop\Skype.exe
C:\Programme\Windows Media Player\wmplayer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\msiexec.exe
c:\programme\avira\antivir desktop\avcenter.exe
C:\WINDOWS\system32\notepad.exe
C:\Programme\Songbird\songbird.exe
C:\DOKUME~1\Florian\LOKALE~1\Temp\Yc3.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Windows Live\Toolbar\wltuser.exe
C:\Programme\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.bearshare.com/sidebar.html?src=ssb
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2431245
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = hxxp://go.microsoft.com/fwlink/?linkid=54834
R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file)
R3 - URLSearchHook: (no name) - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: XfireXO Toolbar - {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Programme\XfireXO\tbXfir.dll
R3 - URLSearchHook: softonic-de3 Toolbar - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll
R3 - URLSearchHook: Softonic Deutsch Toolbar - {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {140BD8E3-C167-11D4-B4A3-080000180323} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Programme\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {6291957C-8CE9-4c90-BEFF-12D9E68CFF30} - C:\Programme\LostGoggles\LGoggles.dll
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programme\Windows Live\Toolbar\wltcore.dll
O2 - BHO: (no name) - {F97DA966-F09D-4cab-BF29-75A0026986EA} - (no file)
O2 - BHO: SMTTB2009 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Programme\HypreCam Toolbar\tbcore3.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: HypreCam Toolbar - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Programme\HypreCam Toolbar\tbcore3.dll
O4 - HKLM\..\Run: [WinPatrol] C:\Programme\BillP Studios\WinPatrol\winpatrol.exe
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [YVIBBBHA8C] C:\DOKUME~1\Florian\LOKALE~1\Temp\Yc3.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Add to Windows &Live Favorites - hxxp://favorites.live.com/quickadd.aspx
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Programme\ICQ7.1\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Programme\ICQ7.1\ICQ.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe (file missing)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Dokumente und Einstellungen\USER\Startmenü\Programme\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\PartyGaming.Net\PartyPokerNet\RunPF.exe
O9 - Extra 'Tools' menuitem: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\PartyGaming.Net\PartyPokerNet\RunPF.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Programme\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1144804388750
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - hxxp://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Acer Media Server - Acer Inc. - C:\Programme\Acer\Acer eConsole\MediaServerService.exe
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Bonjour-Dienst (Bonjour Service) - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: ClipInc 001 (ClipInc001) - Unknown owner - C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe
O23 - Service: Firebird Server - MAGIX Instance (FirebirdServerMAGIXInstance) - MAGIX® - C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe
O23 - Service: Folder Size (FolderSize) - Brio - C:\Programme\FolderSize\FolderSizeSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Programme\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: ICQ Service - Unknown owner - C:\Programme\ICQ6Toolbar\ICQ Service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: LckFldService - Unknown owner - C:\WINDOWS\system32\LckFldService.exe (file missing)
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Unknown owner - C:\Programme\Norton AntiVirus\IWP\NPFMntor.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: ServiceLayer - Nokia. - C:\Programme\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: SymantecAntiBotAgent - Symantec - C:\Programme\Symantec\Norton AntiBot\agent\Bin\NABAgent.exe
O23 - Service: SymantecAntiBotWatcher - Symantec - C:\Programme\Symantec\Norton AntiBot\agent\Bin\NABWatcher.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Sony DADC Austria AG. - C:\WINDOWS\system32\UAService7.exe
O23 - Service: Virtual CD v8 Management Service (VC8SecS) - H+H Software GmbH - C:\Programme\Virtual CD v8\System\VC8SecS.exe

--
End of file - 11634 bytes


Ich habe jetzt auch schon die aktuelle Version von Avira den PC checken lassen (hat auch nichts gebracht), bzw. im Internet geforscht nur scheint keine der Methoden die dort angegeben wurden zu funktionieren.
Hoffentlich könnt ihr mir helfen =)

MfG

Hallo und

bitte nen Vollscan mit Malwarebytes machen und Log posten. Danach OTL:

Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop

• Doppelklick auf die OTL.exe
• Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
• Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
• Unter Extra Registry, wähle bitte Use SafeList
• Klicke nun auf Run Scan links oben
• Wenn der Scan beendet wurde werden 2 Logfiles erstellt
• Poste die Logfiles hier in den Thread.

So das wird etwas mehr :

Malewarebyte :

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4058

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

02.05.2010 14:57:30
mbam-log-2010-05-02 (14-57-30).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|H:\|P:\|)
Durchsuchte Objekte: 508364
Laufzeit: 1 Stunde(n), 21 Minute(n), 24 Sekunde(n)

Infizierte Speicherprozesse: 1
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 21
Infizierte Registrierungswerte: 2
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 6
Infizierte Dateien: 95

Infizierte Speicherprozesse:
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Yc3.exe (FraudPack.Gen) -> No action taken.

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
HKEY_CLASSES_ROOT\acm.acmfactory (Adware.WhenU) -> No action taken.
HKEY_CLASSES_ROOT\acm.acmfactory.1 (Adware.WhenU) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{43382522-a846-46f4-ac57-1f71ae6e1086} (Adware.WhenU) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{572fb162-c0ba-4edf-8cff-e3846153b9b0} (Adware.WhenU) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{72a836d1-bc00-43c0-a941-17960e4fb842} (Adware.WhenU) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{127df9b4-d75d-44a6-af78-8c3a8ceb03db} (Adware.WhenU) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{a9aae1ab-9688-42c5-86f5-c12f6b9015ad} (Adware.WhenU) -> No action taken.
HKEY_CLASSES_ROOT\Typelib\{df901432-1b9f-4f5b-9e56-301c553f9095} (Adware.WhenU) -> No action taken.
HKEY_CURRENT_USER\Software\YVIBBBHA8C (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sshnas (Trojan.Downloader) -> No action taken.
HKEY_CLASSES_ROOT\AppID\ACM.dll (Adware.WhenU) -> No action taken.
HKEY_CLASSES_ROOT\WUSN.1 (Adware.WhenU) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\WhenUSave (Adware.WhenU) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Handle (Malware.Trace) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe (Security.Hijack) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safari.exe (Security.Hijack) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\navigator.exe (Security.Hijack) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe (Security.Hijack) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Userinit.exe (Security.Hijack) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\QZAIB7KITK (Trojan.FakeAlert) -> No action taken.

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\yvibbbha8c (FraudPack.Gen) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\AppCertDlls\appsecdll (Trojan.Agent) -> No action taken.

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
C:\Dokumente und Einstellungen\USER\Anwendungsdaten\NetPumper (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\ZM (Adware.NetPumper) -> No action taken.
C:\Programme\Save (Adware.WhenU) -> No action taken.

Infizierte Dateien:
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Yc3.exe (FraudPack.Gen) -> No action taken.
C:\WINDOWS\Yvyroa.exe (FraudPack.Gen) -> No action taken.
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Ycw.exe (FraudPack.Gen) -> No action taken.
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Ycx.exe (FraudPack.Gen) -> No action taken.
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Ycz.exe (FraudPack.Gen) -> No action taken.
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Yc0.exe (FraudPack.Gen) -> No action taken.
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Yc2.exe (FraudPack.Gen) -> No action taken.
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Yc5.exe (FraudPack.Gen) -> No action taken.
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Yc6.exe (FraudPack.Gen) -> No action taken.
C:\Programme\NetPumper\NetPumperIEProxy.exe (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\shutdown.exe (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\NPNetPumper_Audio.dll (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\NPNetPumper_Video.dll (Trojan.Swizzor) -> No action taken.
C:\Programme\NetPumper\NPNetPumper_Application.dll (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\TurnLog.exe (Adware.NetPumper) -> No action taken.
C:\Programme\PogoSticker\msvcp60.dll (Malware.Packer.Gen) -> No action taken.
P:\System Volume Information\_restore{58FF422C-3EB4-4CBB-B320-C76941377543}\RP87\A0058677.EXE (Trojan.Agent.CK) -> No action taken.
C:\Dokumente und Einstellungen\USER\Anwendungsdaten\NetPumper\USER.ini (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\unins000.dat (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\unins000.exe (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\x.bat (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\README.txt (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\AddUrl.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\compat.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\features.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\index.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\mainwin.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\tips.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\details.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\nphelp.css (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\prefwindow.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\register.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\schedwin.htm (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stretrying.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdadd.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmddetails.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdfolder.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdhelp.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdopen.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdpause.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdprefs.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdremove.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdresume.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdselectall.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\detailwin.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\detailwin-wide.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\mainwin.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\prefw-connections.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\prefw-login.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stcompleted.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stfatal.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stinpro.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stnhelp.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stpaused.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\buttons.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\prefw-monitoring.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\prefw-general.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\prefw-proxy-ftp.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\prefw-proxy-http.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\scunk.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\scresumes.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\scnoresume.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\summary.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\register-1.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\register-2.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\register-3-1.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\register-3-2.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\bandwidthpanel.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdopenfolder.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdaddtoschedule.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\cmdeditschedule.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\apllimit.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\limuser.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\editbandwidth.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\ignlimit.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\limserver.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\limservergold.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\droptoschedule.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\prefw-bandwidth.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\moveicons.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\schedulewin.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\zoombtn.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\starticon.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stopicon.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stqueued.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stscheduled.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\throtdn.gif (Adware.NetPumper) -> No action taken.
C:\Programme\NetPumper\help\images\stanalyzing.gif (Adware.NetPumper) -> No action taken.
C:\Programme\Save\save.db (Adware.WhenU) -> No action taken.
C:\Programme\Save\store.db (Adware.WhenU) -> No action taken.
C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\sshnas21.dll (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\sshnas21.dll (Trojan.Downloader) -> No action taken.
C:\WINDOWS\Tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\h@tkeysh@@k.dll (Trojan.Agent) -> No action taken.
C:\Dokumente und Einstellungen\USER\Lokale Einstellungen\Temp\pey10.tmp (Backdoor.ProRat) -> No action taken.

OTL Nr 1 :

OTL logfile created on: 02.05.2010 14:59:00 - Run 1
OTL by OldTimer - Version 3.2.4.0 Folder = C:\Dokumente und Einstellungen\Florian\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 74,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 75,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 113,67 Gb Total Space | 24,45 Gb Free Space | 21,51% Space Free | Partition Type: FAT32
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive P: | 87,87 Gb Total Space | 20,40 Gb Free Space | 23,21% Space Free | Partition Type: FAT32

Computer Name: ACER
Current User Name: Florian
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Processes (SafeList) ==========

PRC - C:\Dokumente und Einstellungen\Florian\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
PRC - C:\Programme\Songbird\songbird.exe (POTI, Inc.)
PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Symantec\Norton AntiBot\agent\Bin\NABWatcher.exe (Symantec)
PRC - C:\Programme\BillP Studios\WinPatrol\WinPatrol.exe (BillP Studios)
PRC - C:\WINDOWS\system32\oodag.exe (O&O Software GmbH)
PRC - C:\Programme\Virtual CD v8\System\VC8SecS.exe (H+H Software GmbH)
PRC - C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)
PRC - C:\Programme\FolderSize\FolderSizeSvc.exe (Brio)
PRC - C:\Programme\Acer\Acer eConsole\MediaServerService.exe (Acer Inc.)
PRC - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe (Rocket Division Software)


========== Modules (SafeList) ==========

MOD - C:\Dokumente und Einstellungen\Florian\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
MOD - C:\Programme\BillP Studios\WinPatrol\patrolpro.dll (BillP Studios)


========== Win32 Services (SafeList) ==========

SRV - (NPFMntor) -- File not found
SRV - (LckFldService) -- File not found
SRV - (SSHNAS) -- C:\WINDOWS\system32\sshnas21.dll ()
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Hamachi2Svc) -- C:\Programme\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (ICQ Service) -- C:\Programme\ICQ6Toolbar\ICQ Service.exe ()
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (ClipInc001) -- C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe ()
SRV - (SeaPort) -- C:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe (Microsoft Corporation)
SRV - (Fabs) -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
SRV - (spupdsvc) -- C:\WINDOWS\system32\spupdsvc.exe (Microsoft Corporation)
SRV - (FirebirdServerMAGIXInstance) -- C:\Programme\Gemeinsame Dateien\MAGIX Services\Database\bin\fbserver.exe (MAGIX®)
SRV - (GoogleDesktopManager-010108-205858) -- C:\Programme\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (LVSrvLauncher) -- C:\Programme\Gemeinsame Dateien\LogiShrd\SrvLnch\SrvLnch.exe (Logitech Inc.)
SRV - (LVPrcSrv) -- C:\Programme\Gemeinsame Dateien\LogiShrd\LVMVFM\LVPrcSrv.exe (Logitech Inc.)
SRV - (LVCOMSer) -- C:\Programme\Gemeinsame Dateien\LogiShrd\LVCOMSER\LVComSer.exe (Logitech Inc.)
SRV - (OpenVPNService) -- C:\Programme\OpenVPN\bin\openvpnserv.exe ()
SRV - (SbieSvc) -- C:\Programme\SandBoxie\SbieSvc.exe (tzuk)
SRV - (SymantecAntiBotWatcher) -- C:\Programme\Symantec\Norton AntiBot\agent\Bin\NABWatcher.exe (Symantec)
SRV - (SymantecAntiBotAgent) -- C:\Programme\Symantec\Norton AntiBot\agent\Bin\NABAgent.exe (Symantec)
SRV - (O&O Defrag) -- C:\WINDOWS\system32\oodag.exe (O&O Software GmbH)
SRV - (NMIndexingService) -- C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe (Nero AG)
SRV - (LightScribeService) -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (UPnPService) -- C:\Programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe (Magix AG)
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (AdminSVCff) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Web.de Firefox\adminsvcff.exe (hablamax)
SRV - (VC8SecS) -- C:\Programme\Virtual CD v8\System\VC8SecS.exe (H+H Software GmbH)
SRV - (UserAccess7) SecuROM User Access Service (V7) -- C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)
SRV - (FolderSize) -- C:\Programme\FolderSize\FolderSizeSvc.exe (Brio)
SRV - (dxregsvc) -- C:\WINDOWS\System32\dxdllreg.exe (Microsoft Corporation)
SRV - (Acer Media Server) -- C:\Programme\Acer\Acer eConsole\MediaServerService.exe (Acer Inc.)
SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Programme\WinPcap\rpcapd.exe (CACE Technologies)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (StarWindService) -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe (Rocket Division Software)
SRV - (AOL ACS) -- C:\Programme\Gemeinsame Dateien\aol\ACS\AOLacsd.exe (America Online, Inc.)


========== Driver Services (SafeList) ==========

DRV - (MBAMSwissArmy) -- C:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (hamachi) -- C:\WINDOWS\system32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (SLEE_16_DRIVER) -- C:\WINDOWS\system32\drivers\sleen16.sys (Softwareentwicklung Remus - ArchiCrypt )
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\alcxwdm.sys (Realtek Semiconductor Corp.)
DRV - (nvgts) -- C:\WINDOWS\system32\DRIVERS\nvgts.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (MaplomL) -- C:\WINDOWS\system32\drivers\maploml.sys (SlySoft Inc.)
DRV - (Maplom) -- C:\WINDOWS\system32\drivers\maplom.sys (SlySoft Inc.)
DRV - (truecrypt) -- C:\WINDOWS\system32\drivers\truecrypt.sys (TrueCrypt Foundation)
DRV - (nm) -- C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\WINDOWS\system32\drivers\usbaudio.sys (Microsoft Corporation)
DRV - (ACEDRV07) -- C:\WINDOWS\system32\drivers\ACEDRV07.sys (Protect Software GmbH)
DRV - (ultradfg) -- C:\WINDOWS\system32\drivers\ultradfg.sys (DASoft Development Team)
DRV - (hotcore3) -- C:\WINDOWS\system32\drivers\hotcore3.sys (Paragon Software Group)
DRV - (LVUSBSta) -- C:\WINDOWS\system32\drivers\LVUSBSta.sys (Logitech Inc.)
DRV - (PID_PEPI) Logitech QuickCam IM(PID_PEPI) -- C:\WINDOWS\system32\drivers\LV302V32.SYS (Logitech Inc.)
DRV - (pepifilter) -- C:\WINDOWS\system32\drivers\lv302af.sys (Logitech Inc.)
DRV - (LVPr2Mon) -- C:\WINDOWS\system32\drivers\LVPr2Mon.sys ()
DRV - (LVcKap) -- C:\WINDOWS\system32\drivers\Lvckap.sys (Logitech Inc.)
DRV - (tap0901) -- C:\WINDOWS\system32\drivers\tap0901.sys (The OpenVPN Project)
DRV - (teamviewervpn) -- C:\WINDOWS\system32\drivers\teamviewervpn.sys (TeamViewer GmbH)
DRV - (SbieDrv) -- C:\Programme\SandBoxie\SbieDrv.sys (tzuk)
DRV - (SymantecAntiBotDriver) -- C:\Programme\Symantec\Norton AntiBot\agent\driver\AntiBotDriver.sys (Symantec Corporation. )
DRV - (SymantecAntiBotFilter) -- C:\Programme\Symantec\Norton AntiBot\agent\driver\AntiBotFilter.sys (Symantec Corporation. )
DRV - (SymantecAntiBotShim) -- C:\Programme\Symantec\Norton AntiBot\agent\driver\AntiBotShim.sys (Symantec Corporation. )
DRV - (Uim_IM) -- C:\WINDOWS\system32\drivers\Uim_IM.sys (Paragon)
DRV - (UimBus) -- C:\WINDOWS\system32\drivers\UimBus.sys (Windows (R) 2000 DDK provider)
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (VBoxUSBMon) -- C:\WINDOWS\system32\drivers\VBoxUSBMon.sys (innotek GmbH)
DRV - (VBoxDrv) -- C:\WINDOWS\system32\drivers\VBoxDrv.sys ()
DRV - (ElbyCDIO) -- C:\WINDOWS\system32\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV - (AnyDVD) -- C:\WINDOWS\system32\drivers\AnyDVD.sys (SlySoft, Inc.)
DRV - (ElbyCDFL) -- C:\WINDOWS\system32\drivers\ElbyCDFL.sys (SlySoft, Inc.)
DRV - (ElbyDelay) -- C:\WINDOWS\system32\drivers\ElbyDelay.sys (Elaborate Bytes AG)
DRV - (hotcore2) -- C:\WINDOWS\system32\drivers\hotcore2.sys (Paragon Software Group)
DRV - (ATITool) -- C:\WINDOWS\system32\drivers\ATITool.sys ()
DRV - (atksgt) -- C:\WINDOWS\system32\drivers\atksgt.sys ()
DRV - (vdrv8000) -- C:\WINDOWS\system32\drivers\vdrv8000.sys (H+H Software GmbH)
DRV - (Pcatip) -- C:\WINDOWS\system32\drivers\Pcatip.sys (VSO Software)
DRV - (vaxscsi) -- C:\WINDOWS\System32\Drivers\vaxscsi.sys ()
DRV - (lirsgt) -- C:\WINDOWS\system32\drivers\lirsgt.sys ()
DRV - (HHCDHelp.sys) -- C:\WINDOWS\system32\drivers\HHCDHelp.sys (H+H Software GmbH)
DRV - (VClone) -- C:\WINDOWS\system32\DRIVERS\VClone.sys (Elaborate Bytes AG)
DRV - (ADM851X) -- C:\WINDOWS\system32\drivers\ADM851X.SYS (Infineon Technologies AG)
DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology (StarForce))
DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology (StarForce))
DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfvfs02.sys (Protection Technology)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (sfsync02) StarForce Protection Synchronization Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfsync02.sys (Protection Technology)
DRV - (NPF) -- C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies)
DRV - (CLEDX) -- C:\WINDOWS\system32\drivers\cledx.sys (Team H2O)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (Afc) -- C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (NTIDrvr) -- C:\WINDOWS\system32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV - (int15.sys) -- C:\Acer\Empowering Technology\eRecovery\int15.sys ()
DRV - (UBHelper) -- C:\WINDOWS\system32\drivers\UBHelper.sys ()
DRV - (BootScreen) -- C:\WINDOWS\System32\drivers\vidstub.sys ()
DRV - (PVRUSBDriver) -- C:\WINDOWS\system32\drivers\PVRUSBDriver.sys (Windows (R) 2000 DDK provider)
DRV - (wanatw) WAN Miniport (ATW) -- C:\WINDOWS\system32\drivers\wanatw4.sys (America Online, Inc.)
DRV - (PQNTDrv) -- C:\WINDOWS\system32\drivers\PQNTDRV.sys (PowerQuest Corporation)
DRV - (irsir) -- C:\WINDOWS\system32\drivers\irsir.sys (Microsoft Corporation)
DRV - (USBIO) USBIO Driver (usbio.sys) -- C:\WINDOWS\system32\drivers\usbio.sys (Thesycon GmbH, Germany)
DRV - (dsreader) MaxDrive Driver (dsreader.sys) -- C:\WINDOWS\system32\drivers\dsreader.sys (Thesycon GmbH, Germany)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Search
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {5e5ab302-7f65-44cd-8211-c1d4caaccea3} - C:\Programme\XfireXO\tbXfir.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {8dbb6d8e-e4a6-4e3b-9753-af78b226441c} - C:\Programme\Softonic_Deutsch\tbSoft.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\tbsoft.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF - HKLM\software\mozilla\Gran Paradiso 3.0a8\extensions\\Components: C:\Programme\Gran Paradiso\components [2007.10.04 16:17:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Gran Paradiso 3.0a8\extensions\\Plugins: C:\Programme\Gran Paradiso\plugins [2007.10.04 16:17:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.05.01 18:12:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.05.01 18:12:56 | 000,000,000 | ---D | M]

[2008.08.26 17:14:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\Mozilla\Extensions
[2010.02.08 20:53:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\Mozilla\Extensions\songbird@songbirdnest.com
[2010.05.01 09:01:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\Mozilla\Firefox\Profiles\k176t8j6.default\extensions
[2010.05.01 18:12:56 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2010.04.01 18:54:38 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.04.01 18:54:38 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.04.01 18:54:38 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.04.01 18:54:38 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.04.01 18:54:38 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml

Hosts file not found
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (no name) - {140BD8E3-C167-11D4-B4A3-080000180323} - No CLSID value found.
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Programme\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Megaupload Toolbar) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD )
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {6291957C-8CE9-4c90-BEFF-12D9E68CFF30} - C:\Programme\LostGoggles\LGoggles.dll (LostGoggles.com)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O2 - BHO: (no name) - {F97DA966-F09D-4cab-BF29-75A0026986EA} - No CLSID value found.
O2 - BHO: (SMTTB2009 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Programme\HypreCam Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (HypreCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Programme\HypreCam Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Megaupload Toolbar) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD )
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (Alcohol Soft - Alcohol 120% Toolbar) - {1CE4EE89-2D5C-4361-AF3B-D902AB545381} - C:\Programme\Alcohol Soft\Alcohol 120% Toolbar\a120_tb.dll File not found
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (HypreCam Toolbar) - {338B4DFE-2E2C-4338-9E41-E176D497299E} - C:\Programme\HypreCam Toolbar\tbcore3.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Megaupload Toolbar) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\Programme\MegauploadToolbar\megauploadtoolbar.dll (MEGAUPLOAD )
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (SweetIM Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [WinPatrol] C:\Programme\BillP Studios\WinPatrol\WinPatrol.exe (BillP Studios)
O4 - HKCU..\Run: [YVIBBBHA8C] C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Temp\Yc3.exe ()
O4 - HKLM..\RunServices: [] File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run: wininet.dll =
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = FF 00 00 00 [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_07\bin\npjpi160_07.dll (Sun Microsystems, Inc.)
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Programme\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - C:\Programme\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra Button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Dokumente und Einstellungen\USER\Startmenü\Programme\IMVU\Run IMVU.lnk File not found
O9 - Extra Button: PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\PartyGaming.Net\PartyPokerNet\RunPF.exe ()
O9 - Extra 'Tools' menuitem : PartyPoker.net - {F4430FE8-2638-42e5-B849-800749B94EED} - C:\Programme\PartyGaming.Net\PartyPokerNet\RunPF.exe ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O12 - Plugin for: .spop - C:\Programme\Internet Explorer\PLUGINS\NPDocBox.dll (Intertrust Technologies, Inc.)
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab (MessengerStatsClient Class)
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} C:\Programme\Yahoo!\Common\yinsthelper.dll (YInstStarter Class)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1144804388750 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} hxxp://messenger.zone.msn.com/binary/ZIntro.cab32846.cab (ZoneIntro Class)
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} hxxp://java.sun.com/products/plugin/1.4/jinstall-14_02-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_11-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (vistaui.exe) - C:\WINDOWS\System32\vistaui.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O27 - HKLM IFEO\chrome.exe: Debugger - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
O27 - HKLM IFEO\navigator.exe: Debugger - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
O27 - HKLM IFEO\opera.exe: Debugger - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
O27 - HKLM IFEO\safari.exe: Debugger - C:\Programme\Internet Explorer\iexplore.exe (Microsoft Corporation)
O27 - HKLM IFEO\userinit.exe: Debugger - tjpeg.exe ()
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.01.26 12:43:22 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O33 - MountPoints2\{68bac2b6-fea8-11dd-8002-00016cfca9ba}\Shell\AutoRun\command - "" = K:\PStart.exe -- File not found
O33 - MountPoints2\{ecabcc77-b404-11dd-bf5e-0a1bfc62a0ed}\Shell\AutoRun\command - "" = H:\PStart.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk /p \??\L - File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O34 - HKLM BootExecute: (OODBS) - C:\WINDOWS\System32\OODBS.exe (O&O Software GmbH)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: AppSecDll - (C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\Windows Server\mjtppg.dll) - C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\Windows Server\mjtppg.dll File not found
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.05.02 12:25:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\Malwarebytes
[2010.05.02 12:25:19 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.05.02 12:25:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.05.02 12:25:17 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.05.02 12:25:17 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2010.05.02 12:24:47 | 006,153,648 | ---- | C] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\Florian\Desktop\mbam-setup.exe
[2010.05.02 12:24:40 | 000,570,880 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Florian\Desktop\OTL.exe
[2010.05.01 18:12:53 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[2010.04.30 18:13:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\Avira
[2010.04.30 18:08:48 | 000,000,000 | ---D | C] -- C:\Programme\Trend Micro
[2010.04.30 17:43:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\Windows Server
[2010.04.27 19:39:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\.ZMatrix
[2010.04.25 16:29:46 | 000,000,000 | -HSD | C] -- C:\FOUND.006
[2010.04.24 23:10:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Desktop\Musik
[2010.04.19 20:09:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\Regensoft
[2010.04.19 20:09:43 | 000,000,000 | ---D | C] -- C:\Programme\Uniblue
[2010.04.19 20:09:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\Geckofx
[2010.04.19 20:09:06 | 000,000,000 | ---D | C] -- C:\Programme\Regensoft
[2010.04.19 20:08:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\OpenCandy
[2010.04.19 20:08:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\OpenCandy
[2010.04.12 19:37:48 | 000,000,000 | ---D | C] -- C:\Programme\ICQ7.1
[2010.04.08 11:25:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Macromedia
[2010.04.05 21:19:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\LogMeIn Hamachi
[2010.04.05 21:19:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\LogMeIn Hamachi
[2010.04.05 21:19:06 | 000,000,000 | ---D | C] -- C:\Programme\LogMeIn Hamachi
[2010.04.03 17:33:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Anwendungsdaten\TS3Client
[2010.04.03 17:33:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\TeamSpeak 3 Client
[21 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[17 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.05.02 14:38:02 | 000,000,290 | -H-- | M] () -- C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010.05.02 12:25:24 | 000,000,584 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.02 12:25:04 | 006,153,648 | ---- | M] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\Florian\Desktop\mbam-setup.exe
[2010.05.02 12:24:42 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Florian\Desktop\OTL.exe
[2010.05.02 12:23:14 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.05.02 12:22:56 | 000,001,014 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job
[2010.05.02 12:20:40 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.05.02 12:20:34 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.05.02 12:20:32 | 3219,705,856 | -HS- | M] () -- C:\hiberfil.sys
[2010.05.02 12:20:30 | 001,685,633 | ---- | M] () -- C:\WINDOWS\System32\oodbs.lor
[2010.05.01 22:50:28 | 013,893,632 | -H-- | M] () -- C:\Dokumente und Einstellungen\Florian\NTUSER.DAT
[2010.05.01 19:28:38 | 000,977,168 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Unbenannt3.png
[2010.05.01 19:28:04 | 001,010,382 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Unbenannt2.png
[2010.05.01 19:26:54 | 000,892,680 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Unbenannt.png
[2010.05.01 18:28:02 | 000,001,606 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Desktop\HijackThis.lnk
[2010.05.01 18:12:58 | 000,001,474 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2010.05.01 18:10:34 | 000,206,492 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2010.05.01 09:20:48 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Florian\ntuser.ini
[2010.04.30 21:29:48 | 000,002,121 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\iTunes.lnk
[2010.04.30 21:16:02 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2010.04.29 20:37:40 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010.04.29 12:19:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.04.29 12:19:14 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.04.27 19:38:00 | 000,000,699 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Desktop\MSN.lnk
[2010.04.27 18:40:46 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\WINDOWS\System32\CmdLineExt.dll
[2010.04.23 21:17:46 | 000,041,984 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.22 19:59:14 | 000,000,386 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Fraps.lnk
[2010.04.21 20:32:38 | 000,152,576 | ---- | M] () -- C:\WINDOWS\Yvyroa.exe
[2010.04.21 20:32:36 | 000,185,856 | ---- | M] () -- C:\WINDOWS\System32\sshnas21.dll
[2010.04.16 22:26:30 | 000,041,872 | ---- | M] () -- C:\WINDOWS\System32\xfcodec.dll
[2010.04.14 20:15:04 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010.04.12 19:38:56 | 000,001,359 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ICQ7.1.lnk
[2010.04.04 18:25:54 | 000,000,553 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Teamspeak 2 RC2.lnk
[2010.04.03 17:33:16 | 000,001,194 | ---- | M] () -- C:\Dokumente und Einstellungen\Florian\Desktop\TeamSpeak 3 Client.lnk
[21 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[17 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.05.02 12:25:22 | 000,000,584 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.01 19:28:36 | 000,977,168 | ---- | C] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Unbenannt3.png
[2010.05.01 19:28:01 | 001,010,382 | ---- | C] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Unbenannt2.png
[2010.05.01 19:26:52 | 000,892,680 | ---- | C] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Unbenannt.png
[2010.05.01 18:12:57 | 000,001,474 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2010.04.30 18:08:48 | 000,001,606 | ---- | C] () -- C:\Dokumente und Einstellungen\Florian\Desktop\HijackThis.lnk
[2010.04.27 19:38:00 | 000,000,699 | ---- | C] () -- C:\Dokumente und Einstellungen\Florian\Desktop\MSN.lnk
[2010.04.25 17:51:28 | 000,000,290 | -H-- | C] () -- C:\WINDOWS\tasks\{66BA574B-1E11-49b8-909C-8CC9E0E8E015}.job
[2010.04.22 19:59:13 | 000,000,386 | ---- | C] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Fraps.lnk
[2010.04.21 20:32:44 | 000,152,576 | ---- | C] () -- C:\WINDOWS\Yvyroa.exe
[2010.04.21 20:32:35 | 000,185,856 | ---- | C] () -- C:\WINDOWS\System32\sshnas21.dll
[2010.04.16 22:26:30 | 000,041,872 | ---- | C] () -- C:\WINDOWS\System32\xfcodec.dll
[2010.04.12 19:38:55 | 000,001,359 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\ICQ7.1.lnk
[2010.04.04 18:25:53 | 000,000,553 | ---- | C] () -- C:\Dokumente und Einstellungen\Florian\Desktop\Teamspeak 2 RC2.lnk
[2010.04.03 17:33:15 | 000,001,194 | ---- | C] () -- C:\Dokumente und Einstellungen\Florian\Desktop\TeamSpeak 3 Client.lnk
[2010.03.06 21:30:39 | 000,000,000 | ---- | C] () -- C:\WINDOWS\galaxy.ini
[2009.11.11 17:23:06 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Menu.INI
[2009.08.24 19:21:24 | 000,051,712 | ---- | C] () -- C:\WINDOWS\System32\coodest.dll
[2009.08.24 18:49:41 | 008,676,883 | ---- | C] () -- C:\WINDOWS\System32\NCMedia2.dll
[2009.08.22 16:29:02 | 000,000,083 | ---- | C] () -- C:\WINDOWS\wwp.INI
[2009.08.09 17:29:46 | 000,000,032 | ---- | C] () -- C:\WINDOWS\CD_Start.INI
[2009.08.04 09:53:46 | 000,000,083 | ---- | C] () -- C:\WINDOWS\wa.INI
[2009.08.03 00:21:54 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2009.08.03 00:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2009.08.03 00:21:52 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2009.08.03 00:21:52 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2009.06.20 16:51:04 | 000,000,027 | ---- | C] () -- C:\WINDOWS\vc8catsearch.INI
[2008.12.26 01:08:00 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2008.12.26 01:08:00 | 001,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2008.12.26 01:08:00 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2008.12.26 01:08:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2008.11.20 17:30:46 | 000,138,184 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2008.10.15 18:19:33 | 000,066,482 | R--- | C] () -- C:\WINDOWS\System32\lvcoinst.ini
[2008.08.31 18:42:17 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\H@tKeysH@@k.DLL
[2008.07.02 20:03:19 | 000,000,145 | ---- | C] () -- C:\WINDOWS\Eudcedit.ini
[2008.06.09 14:15:34 | 000,011,568 | ---- | C] () -- C:\WINDOWS\System32\drivers\UimFIO.sys
[2008.06.09 14:15:09 | 000,247,560 | ---- | C] () -- C:\WINDOWS\System32\prgiso.dll
[2008.06.02 20:16:45 | 000,000,064 | ---- | C] () -- C:\WINDOWS\ZMatrixSS.ini
[2008.05.26 18:43:50 | 000,006,656 | ---- | C] () -- C:\WINDOWS\System32\CNMVSyd.DLL
[2008.05.26 18:43:09 | 000,000,599 | ---- | C] () -- C:\WINDOWS\System32\CNCMP51.INI
[2008.05.25 17:25:43 | 000,000,151 | ---- | C] () -- C:\WINDOWS\PhotoSnapViewer.INI
[2008.04.06 21:14:48 | 000,000,140 | ---- | C] () -- C:\WINDOWS\MusicMaker.INI
[2008.04.06 20:20:32 | 000,000,351 | ---- | C] () -- C:\WINDOWS\Sampler.INI
[2008.04.06 20:20:32 | 000,000,028 | ---- | C] () -- C:\WINDOWS\Robota.INI
[2008.03.17 11:22:07 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\apache.dll
[2008.03.15 12:29:48 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008.03.11 20:03:17 | 000,000,626 | ---- | C] () -- C:\WINDOWS\BeatBox.INI
[2008.03.11 20:01:01 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\mgxasio2.dll
[2008.03.09 13:26:20 | 000,091,648 | ---- | C] () -- C:\WINDOWS\System32\lua5.1a.dll
[2008.03.07 22:35:22 | 000,000,000 | ---- | C] () -- C:\WINDOWS\oodcnt.INI
[2008.03.05 19:24:54 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys
[2008.02.22 17:48:24 | 004,244,744 | ---- | C] () -- C:\WINDOWS\System32\qtp-mt334.dll
[2008.02.22 17:48:24 | 000,008,192 | ---- | C] () -- C:\WINDOWS\System32\wnaspi32.dll
[2008.02.12 19:20:52 | 000,000,020 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2008.02.05 18:20:08 | 000,025,624 | ---- | C] () -- C:\WINDOWS\System32\drivers\LVPr2Mon.sys
[2008.01.05 19:08:33 | 000,000,736 | ---- | C] () -- C:\WINDOWS\DigimaxMaster.INI
[2008.01.05 17:16:02 | 000,040,960 | ---- | C] () -- C:\WINDOWS\unL270_.dll
[2008.01.02 16:58:57 | 000,000,632 | ---- | C] () -- C:\WINDOWS\Thps3.INI
[2007.12.19 15:53:28 | 000,000,272 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI
[2007.12.17 17:39:07 | 000,554,496 | ---- | C] () -- C:\WINDOWS\System32\dvmsg.dll
[2007.11.01 20:48:03 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2007.10.11 18:33:21 | 000,039,584 | ---- | C] () -- C:\WINDOWS\System32\drivers\VBoxDrv.sys
[2007.09.30 19:04:48 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BlendSettings.ini
[2007.09.20 17:04:55 | 000,000,032 | ---- | C] () -- C:\WINDOWS\System32\Mlkf.dll
[2007.08.22 10:43:24 | 000,005,870 | ---- | C] () -- C:\WINDOWS\GenAmvTool.INI
[2007.08.21 02:26:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest
[2007.08.21 02:26:52 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\dpl100.dll.manifest
[2007.08.16 00:33:14 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2007.08.16 00:30:26 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2007.07.25 15:24:28 | 001,559,040 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2007.07.04 19:38:22 | 000,000,120 | ---- | C] () -- C:\WINDOWS\csmash.ini
[2007.06.18 16:19:44 | 000,000,192 | ---- | C] () -- C:\WINDOWS\CrocChem.INI
[2007.06.18 16:18:37 | 000,000,021 | ---- | C] () -- C:\WINDOWS\crocclip.ini
[2007.05.06 18:16:17 | 000,171,520 | ---- | C] () -- C:\WINDOWS\System32\patchw32.dll
[2007.05.05 20:01:02 | 001,936,528 | ---- | C] () -- C:\WINDOWS\System32\ltmm15.dll
[2007.03.10 13:51:48 | 000,282,624 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2007.03.09 09:12:32 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2007.03.06 11:14:48 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2007.03.06 11:14:48 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest
[2006.12.25 19:01:08 | 000,021,504 | ---- | C] () -- C:\WINDOWS\jestertb.dll
[2006.12.15 15:37:50 | 000,185,344 | ---- | C] () -- C:\WINDOWS\patchw32.dll
[2006.12.09 14:02:10 | 000,047,104 | ---- | C] () -- C:\WINDOWS\System32\KMVIDC32.DLL
[2006.11.10 15:08:50 | 000,024,064 | ---- | C] () -- C:\WINDOWS\System32\drivers\ATITool.sys
[2006.10.26 17:39:26 | 000,002,059 | ---- | C] () -- C:\WINDOWS\wp3.ini
[2006.10.26 15:57:59 | 000,002,059 | ---- | C] () -- C:\WINDOWS\ran2.ini
[2006.10.26 15:57:59 | 000,000,019 | ---- | C] () -- C:\WINDOWS\wp.ini
[2006.10.26 15:57:58 | 000,002,059 | ---- | C] () -- C:\WINDOWS\wp2.ini
[2006.10.26 15:54:33 | 000,002,059 | ---- | C] () -- C:\WINDOWS\guess.ini
[2006.10.26 15:54:26 | 000,002,059 | ---- | C] () -- C:\WINDOWS\dom2.ini
[2006.10.06 15:05:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\turbogo.ini
[2006.10.06 14:56:55 | 000,000,108 | ---- | C] () -- C:\WINDOWS\atarigo.ini
[2006.09.12 13:58:09 | 000,000,061 | ---- | C] () -- C:\WINDOWS\NARBACULARDROP.INI
[2006.09.04 19:52:11 | 000,000,045 | ---- | C] () -- C:\WINDOWS\tkkg_5.ini
[2006.08.12 10:38:12 | 000,000,006 | ---- | C] () -- C:\WINDOWS\System32\cuatro.ini
[2006.08.11 20:58:34 | 000,001,176 | ---- | C] () -- C:\WINDOWS\AZPR3.INI
[2006.08.10 11:54:36 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2006.08.01 19:31:07 | 000,081,332 | ---- | C] () -- C:\WINDOWS\System32\bass.dll
[2006.07.27 14:25:46 | 000,001,062 | ---- | C] () -- C:\WINDOWS\WaveRec.ini
[2006.07.20 12:36:40 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\lame_enc.dll
[2006.06.26 18:30:55 | 000,001,814 | ---- | C] () -- C:\WINDOWS\disney.ini
[2006.06.23 18:36:21 | 000,000,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006.06.21 19:04:44 | 000,000,064 | ---- | C] () -- C:\WINDOWS\frikikmulti.ini
[2006.06.21 17:12:01 | 000,544,256 | ---- | C] () -- C:\WINDOWS\System32\janGraphics.dll
[2006.06.21 17:03:42 | 000,000,834 | ---- | C] () -- C:\WINDOWS\cncscore.ini
[2006.06.21 15:46:33 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll
[2006.06.19 19:34:51 | 000,163,456 | ---- | C] () -- C:\WINDOWS\System32\drivers\vidstub.sys
[2006.06.17 17:55:49 | 000,000,021 | ---- | C] () -- C:\WINDOWS\PMK35_SETUP.ini
[2006.06.15 19:27:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\JCMKR32.INI
[2006.06.12 09:43:43 | 000,000,000 | ---- | C] () -- C:\WINDOWS\pcfriend.INI
[2006.06.11 19:39:51 | 000,223,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\vaxscsi.sys
[2006.06.11 19:36:36 | 000,685,816 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2006.06.07 18:17:00 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2006.06.07 18:16:59 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2006.06.03 00:15:44 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\LDecVorbis.dll
[2006.06.01 18:37:40 | 000,000,115 | ---- | C] () -- C:\WINDOWS\GKDINO3D.INI
[2006.05.31 19:48:03 | 000,000,073 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini
[2006.05.27 19:50:57 | 000,006,768 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2006.05.24 18:57:08 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2006.05.24 18:57:08 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2006.05.23 19:18:13 | 000,000,379 | ---- | C] () -- C:\WINDOWS\editor.INI
[2006.05.21 16:12:28 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PROTOCOL.INI
[2006.05.16 19:47:40 | 000,000,056 | RHS- | C] () -- C:\WINDOWS\System32\4BCD454D7F.sys
[2006.05.16 19:29:33 | 000,000,848 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2006.05.14 09:38:25 | 000,000,112 | ---- | C] () -- C:\WINDOWS\ActiveSkin.INI
[2006.05.06 21:39:12 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2006.05.06 11:48:49 | 000,473,600 | ---- | C] () -- C:\WINDOWS\System32\Harmony.dll
[2006.05.06 11:48:49 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\Unlha32.dll
[2006.05.04 18:44:44 | 000,000,143 | ---- | C] () -- C:\WINDOWS\SIERRA.INI
[2006.05.03 18:54:42 | 000,000,512 | ---- | C] () -- C:\WINDOWS\oleco.ini
[2006.05.02 20:08:33 | 000,000,041 | ---- | C] () -- C:\WINDOWS\DAVILEX.INI
[2006.05.02 18:32:53 | 000,006,188 | ---- | C] () -- C:\WINDOWS\hpdj6122.ini
[2006.05.02 18:32:07 | 000,000,414 | ---- | C] () -- C:\WINDOWS\hpbvspst.ini
[2006.02.24 10:41:59 | 000,438,272 | ---- | C] () -- C:\WINDOWS\System32\OpenQuicktimeLib.dll
[2006.02.24 10:41:59 | 000,061,440 | ---- | C] () -- C:\WINDOWS\System32\libfaac.dll
[2006.02.23 18:36:20 | 001,798,144 | ---- | C] () -- C:\WINDOWS\System32\ltmm_n.dll
[2006.02.23 18:36:20 | 000,262,144 | ---- | C] () -- C:\WINDOWS\System32\LMOggSpl.dll
[2006.02.23 18:36:20 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\LMOggMux.dll
[2006.01.19 06:47:33 | 000,001,728 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini
[2005.12.07 11:31:00 | 000,202,752 | R--- | C] () -- C:\WINDOWS\System32\CddbCdda.dll
[2005.10.20 12:50:20 | 000,000,083 | ---- | C] () -- C:\WINDOWS\ALaunch.ini
[2005.10.02 19:39:13 | 000,000,017 | ---- | C] () -- C:\WINDOWS\System32\WINSETD1.DLL
[2005.09.16 14:14:00 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2005.08.30 00:00:00 | 000,781,312 | ---- | C] () -- C:\WINDOWS\System32\RGSS102J.dll
[2005.08.30 00:00:00 | 000,778,752 | ---- | C] () -- C:\WINDOWS\System32\RGSS102E.dll
[2005.08.30 00:00:00 | 000,771,584 | ---- | C] () -- C:\WINDOWS\System32\RGSS100J.dll
[2005.08.02 22:24:01 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll
[2005.06.21 22:37:42 | 000,045,568 | RHS- | C] () -- C:\WINDOWS\System32\cygz.dll
[2005.05.29 02:45:43 | 000,647,168 | ---- | C] () -- C:\WINDOWS\System32\pqdvdb.dll
[2005.01.26 13:09:36 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005.01.26 12:43:44 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll
[2005.01.26 12:43:00 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll
[2005.01.26 12:43:00 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMP3.dll
[2005.01.26 12:43:00 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll
[2005.01.26 12:43:00 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll
[2004.12.17 17:14:44 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\UBHelper.sys
[2004.09.16 13:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\System32\drivers\ADFUUD.SYS
[2004.09.16 13:26:40 | 000,012,634 | ---- | C] () -- C:\WINDOWS\ADFUUD.SYS
[2004.08.04 05:00:00 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2004.07.13 17:00:22 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\CDNdownload.dll
[2002.10.16 00:54:04 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2001.12.26 16:12:30 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll
[2001.09.03 23:46:38 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Hmpg12.dll
[2001.07.30 16:33:56 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll
[2001.07.23 22:04:36 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll
[1999.01.23 03:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL
[1998.10.11 00:07:38 | 000,088,576 | ---- | C] () -- C:\WINDOWS\System32\Iticheck.dll
[1997.10.18 00:00:00 | 000,022,016 | ---- | C] () -- C:\WINDOWS\System32\DOCOBJ.DLL
[1997.10.18 00:00:00 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\HLINKPRX.DLL
< End of report >

OTL Nr 2 : Extras :


OTL Extras logfile created on: 02.05.2010 14:59:00 - Run 1
OTL by OldTimer - Version 3.2.4.0 Folder = C:\Dokumente und Einstellungen\Florian\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 74,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 75,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 113,67 Gb Total Space | 24,45 Gb Free Space | 21,51% Space Free | Partition Type: FAT32
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive P: | 87,87 Gb Total Space | 20,40 Gb Free Space | 23,21% Space Free | Partition Type: FAT32

Computer Name: ACER
Current User Name: Florian
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Opera.HTML] -- C:\Programme\Opera\Opera.exe (Opera Software)

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "D:\Programme\Microsoft Office\Office\msohtmed.exe" %1 File not found
http [open] -- P:\PROGRA~1\MOZILL~1.DE\FIREFOX.EXE -requestPending -osint -url "%1" File not found
https [open] -- P:\PROGRA~1\MOZILL~1.DE\FIREFOX.EXE -requestPending -osint -url "%1" File not found
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [locate] -- L:\Programme\Locate\Locate32.exe /p "%1" File not found
Directory [Müller Foto] -- "C:\Programme\Müller Foto\Müller Foto\Müller Foto.exe" "%1" ()
Directory [PowerFolder] -- C:\Programme\PowerFolder.com\PowerFolder\PowerFolder.exe -p "%1" ()
Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Programme\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\concept design\onlineTV 2\onlineTV.exe" = C:\Programme\concept design\onlineTV 2\onlineTV.exe:*:EnablednlineTV -- (concept/design GmbH)
"C:\Programme\Windows Live\Messenger\wlcsdk.exe" = C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"L:\Programme\ICQ7.0\ICQ.exe" = L:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- File not found
"L:\Programme\ICQ7.0\aolload.exe" = L:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- File not found
"C:\Programme\ICQ7.1\ICQ.exe" = C:\Programme\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1 -- (ICQ, LLC.)
"C:\Programme\ICQ7.1\aolload.exe" = C:\Programme\ICQ7.1\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\Acer\Acer eConsole\MediaSync.exe" = C:\Programme\Acer\Acer eConsole\MediaSync.exe:LocalSubNet:Enabled:Media Synchoronizer -- (Acer Inc.)
"C:\Programme\Acer\Acer eConsole\eConsole.exe" = C:\Programme\Acer\Acer eConsole\eConsole.exe:LocalSubNet:Enabled:eConsole -- (Acer Inc.)
"C:\Programme\Acer\Acer eConsole\MediaServerService.exe" = C:\Programme\Acer\Acer eConsole\MediaServerService.exe:LocalSubNet:Enabled:Acer Media Server -- (Acer Inc.)
"C:\Programme\ICQLite\ICQLite.exe" = C:\Programme\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite -- File not found
"C:\Programme\concept design\onlineTV 2\onlineTV.exe" = C:\Programme\concept design\onlineTV 2\onlineTV.exe:*:EnablednlineTV -- (concept/design GmbH)
"C:\Programme\Mozilla Firefox\firefox.exe" = C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox -- (Mozilla Corporation)
"C:\Programme\LimeWire\LimeWire.exe" = C:\Programme\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- (Lime Wire, LLC)
"C:\Programme\FrostWire\FrostWire.exe" = C:\Programme\FrostWire\FrostWire.exe:*:Enabled:LimeWire -- (FrostWire Group)
"C:\Programme\uTorrent\uTorrent.exe" = C:\Programme\uTorrent\uTorrent.exe:*:Enabled:µTorrent -- File not found
"C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6 -- File not found
"L:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat" = L:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat:*:Enabledie Schlacht um Mittelerde™ II -- File not found
"L:\Programme\Atari\Neverwinter Nights 2\nwn2main.exe" = L:\Programme\Atari\Neverwinter Nights 2\nwn2main.exe:*:Enabled:Neverwinter Nights 2 Main -- File not found
"L:\Programme\Atari\Neverwinter Nights 2\nwn2main_amdxp.exe" = L:\Programme\Atari\Neverwinter Nights 2\nwn2main_amdxp.exe:*:Enabled:Neverwinter Nights 2 AMD -- File not found
"L:\Programme\Atari\Neverwinter Nights 2\nwupdate.exe" = L:\Programme\Atari\Neverwinter Nights 2\nwupdate.exe:*:Enabled:Neverwinter Nights 2 Updater -- File not found
"L:\Programme\Atari\Neverwinter Nights 2\nwn2server.exe" = L:\Programme\Atari\Neverwinter Nights 2\nwn2server.exe:*:Enabled:Neverwinter Nights 2 Server -- File not found
"L:\Programme\KONAMI\Pro Evolution Soccer 2008\PES2008.exe" = L:\Programme\KONAMI\Pro Evolution Soccer 2008\PES2008.exe:*:Enabled:Pro Evolution Soccer 2008 -- File not found
"P:\Programme\Unreal Tournament 3 (LG)\Binaries\UT3.exe" = P:\Programme\Unreal Tournament 3 (LG)\Binaries\UT3.exe:*:Enabled:Unreal Tournament 3 -- ()
"L:\Programme\KONAMI\Pro Evolution Soccer 2008\PES2008 01.exe" = L:\Programme\KONAMI\Pro Evolution Soccer 2008\PES2008 01.exe:*:Enabled:Pro Evolution Soccer 2008 -- File not found
"C:\Programme\Yahoo!\Messenger\YahooMessenger.exe" = C:\Programme\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger -- File not found
"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"L:\Programme\Veoh Networks\Veoh\VeohClient.exe" = L:\Programme\Veoh Networks\Veoh\VeohClient.exe:*:Enabled:Veoh Client -- File not found
"C:\Programme\Microsoft Games\Age of Empires\EMPIRES.EXE" = C:\Programme\Microsoft Games\Age of Empires\EMPIRES.EXE:*:Enabled:Age of Empires -- (Microsoft Corporation)
"C:\Programme\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" = C:\Programme\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:*:Enabled:Veoh Web Player -- (Veoh Networks)
"P:\Programme\Electronic Arts\Aufstieg des Hexenkönigs\game.dat" = P:\Programme\Electronic Arts\Aufstieg des Hexenkönigs\game.dat:*:Enableder Herr der Ringe™, Aufstieg des Hexenkönigs™ -- (Electronic Arts Inc.)
"P:\Programme\Electronic Arts\Aufstieg des Hexenkönigs\patchget.dat" = P:\Programme\Electronic Arts\Aufstieg des Hexenkönigs\patchget.dat:*isabledatchgrabber -- (Electronic Arts)
"C:\games\DotA Allstars\DotA Allstars.exe" = C:\games\DotA Allstars\DotA Allstars.exe:*:EnabledotA Allstars -- ()
"C:\Programme\Warcraft III\War3.exe" = C:\Programme\Warcraft III\War3.exe:*isabled:Warcraft III -- File not found
"C:\Programme\Windows Live\Messenger\wlcsdk.exe" = C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"K:\PES2008 01.exe" = K:\PES2008 01.exe:*:Enabled:Pro Evolution Soccer 2008 -- File not found
"C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe" = C:\Programme\Tobit ClipInc\Server\ClipInc-Server.exe:*:Enabled:ClipInc Server -- ()
"C:\Programme\Tobit ClipInc\Player\ClipInc-Player.exe" = C:\Programme\Tobit ClipInc\Player\ClipInc-Player.exe:*:Enabled:ClipInc Player -- (Tobit.Software)
"L:\Programme\Zattoo\zattood.exe" = L:\Programme\Zattoo\zattood.exe:*isabled:zattood -- File not found
"L:\Programme\LucasArts\Star Wars Empire at War Forces of Corruption\swfoc.exe" = L:\Programme\LucasArts\Star Wars Empire at War Forces of Corruption\swfoc.exe:*:Enabled:Star Wars(R): Empire at War(TM): Forces of Corruption(TM) -- File not found
"L:\Programme\Warsow 0.5\warsow_x86.exe" = L:\Programme\Warsow 0.5\warsow_x86.exe:*:Enabled:Warsow -- File not found
"L:\Programme\ICQ7.0\ICQ.exe" = L:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- File not found
"L:\Programme\ICQ7.0\aolload.exe" = L:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- File not found
"C:\Programme\Warsow 0.5\warsow_x86.exe" = C:\Programme\Warsow 0.5\warsow_x86.exe:*:Enabled:Warsow -- (Chasseur de bots)
"C:\Dokumente und Einstellungen\Florian\Eigene Dateien\Downloads\openarena-0.8.1\openarena-0.8.1\openarena.exe" = C:\Dokumente und Einstellungen\Florian\Eigene Dateien\Downloads\openarena-0.8.1\openarena-0.8.1\openarena.exe:*:Enabledpenarena -- File not found
"C:\Alien Arena 7_33\crx.exe" = C:\Alien Arena 7_33\crx.exe:*:Enabled:crx -- File not found
"C:\Dokumente und Einstellungen\Florian\temp\TeamViewer\Version5\TeamViewer.exe" = C:\Dokumente und Einstellungen\Florian\temp\TeamViewer\Version5\TeamViewer.exe:*:Enabled:TeamViewer -- (TeamViewer GmbH)
"C:\Programme\GtkRadiant 1.5.0\GtkRadiant.exe" = C:\Programme\GtkRadiant 1.5.0\GtkRadiant.exe:*isabled:GtkRadiant -- ()
"C:\Programme\TeamViewer\Version5\TeamViewer.exe" = C:\Programme\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
"C:\Programme\Xfire\Xfire.exe" = C:\Programme\Xfire\Xfire.exe:*:Enabled:Xfire -- (Xfire Inc.)
"C:\Programme\ICQ7.1\ICQ.exe" = C:\Programme\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1 -- (ICQ, LLC.)
"C:\Programme\ICQ7.1\aolload.exe" = C:\Programme\ICQ7.1\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Dokumente und Einstellungen\Florian\Desktop\Skype.exe" = C:\Dokumente und Einstellungen\Florian\Desktop\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00000407-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium
"{002C9999-0000-0000-C000-000000000112}" = Microsoft Office Web Components
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{01521746-02A6-4A72-00BD-A285DF6B80C6}" = Die Sims 2: Wilde Campus-Jahre
"{02B244A2-7F6A-42E8-A36F-8C385D7A1625}" = Gothic III
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}" = Civilization III
"{0C7B9FAF-9C93-4E3A-9EC5-DE553B5771F0}" = Linguatec Voice Reader Studio
"{0EFC9200-73ED-456D-B579-772CE9D09E80}" = Backgammon XXL Demo
"{0FF1922C-B6C4-40BB-AF30-BEF75A482444}" = Nokia Connectivity Cable Driver
"{1047B3FE-E1EB-4E03-97DE-C5037C2CE9CF}" = TubeHunter
"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6
"{1444B16A-766B-4AD1-8AE8-F0C04C782E2F}" = MySQL Query Browser 1.1
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{1545207E-C6F3-31D7-9918-BDBB65075FBF}" = Microsoft .NET Framework 3.5 Language Pack - deu
"{16E6A5A1-B6ED-4915-86FD-4EBF221D050F}_is1" = concept/design onlineTV 2
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}" = YouTube Downloader 2.5.3
"{1A637513-CC46-4C3B-8114-1E4F1D71CF42}" = Fritz11 WM Edition
"{1AD2EC5E-9A73-452B-8C87-43D2E32C3831}" = Fritz11 WM Edition
"{1ADE23D7-7A1E-4AEC-BA5D-EB8A01BED943}" = DeepBurner v1.8.0.224
"{1B2DBF55-05D4-4072-87D8-689141E262BD}" = Creative ZEN
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{218761F6-CBF6-4973-B910-A33E6563A1EA}" = Windows Live Toolbar-Erweiterung (Windows Live Toolbar)
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{24508D50-EB8F-4FE6-B69D-B4935D8745EF}_is1" = Warsow 0.5
"{26F0A720-21CC-44B5-9F70-E90400EF2018}" = Demoprogramm von Crocodile Chemistry 1.7
"{284FFECA-8714-4E88-930D-4C122D031025}" = Adrenalin - Extreme Show
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{2D5B83B8-98A0-4F9C-AE1D-BED98AE17467}" = MP3 Player Utilities 3.13
"{2DD6C198-FA9A-40B4-8DE5-CE5206E3EB34}" = Smart Menus (Windows Live Toolbar)
"{2DF7B278-D3B6-40A4-B25C-0E7149F439EA}" = 3DMark05
"{2EC1A4D5-4217-4ABF-A783-3706EE405716}" = Mashed
"{2FDFD600-7338-4738-90D5-FC4ACA08DC36}" = Pro Evolution Soccer 2008
"{31CF6C0E-51F0-41D2-B088-A6A143C4303C}" = SweetIM Toolbar for Internet Explorer 3.6
"{31E47E5B-5BC6-4214-8FC6-F5D8B16080B7}" = Invasion
"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java(TM) SE Runtime Environment 6
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32A3A4F4-B792-11D6-A78A-00B0D0160010}" = Java(TM) SE Development Kit 6 Update 1
"{32A3A4F4-B792-11D6-A78A-00B0D0160070}" = Java(TM) SE Development Kit 6 Update 7
"{34DA4427-6C94-45C9-B9CF-C9D7CF1A32C4}" = Dinner Timer Lite
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{385979FE-DC4F-4140-8EAD-A59625000D72}" = NTI Backup NOW! 4
"{39165CF8-0ACA-451F-B1F6-6FB60EB09B00}_is1" = Copy-Discovery 2000 2.00
"{3AF0CCF7-3D25-470A-91D3-ABBBA7F30327}" = OneCare Advisor (Windows Live Toolbar)
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{43602F34-1AA3-44FB-AEB2-D08C2C73743F}" = Paint.NET v3.36
"{43DCF766-6838-4F9A-8C91-D92DA586DFA8}" = Microsoft Windows-Journal-Viewer
"{4572F220-0A56-402E-90F1-4D36DD22F108}" = TubeHunter Ultra
"{4669544E-20E4-4E56-8B44-2E6E1200051F}" = Canon MP-Toolbox 4.1.1.0.mp10
"{48EE6C79-1CE2-4CE8-B511-F2140B6781D6}" = Google Earth Pro
"{49FC50FC-F965-40D9-89B4-CBFF80941031}" = Windows Movie Maker 2.0
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{4D4C8490-9048-4E2C-AF1B-3866D6BC9EC8}" = WEB.DE Firefox Paket
"{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}" = Photo Story 3 for Windows
"{4F81901F-3655-4340-8227-F687F69A3C79}}_is1" = Klebezettel NG (Version 2.6.0.1416)
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{53480330-E1D1-41CA-B8F8-7F78644F7F50}" = O&O Defrag Professional Edition
"{53480870-02D8-48FB-BC27-72C956885168}" = O&O MediaRecovery
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{57734273-8B0C-4716-ACA1-CA9DC4CCC80C}" = Ecopolicy 2.5 Client
"{58D68DF0-4E8B-4E9E-B425-670F9E37C1A8}" = TES Construction Set
"{590942DD-29B9-4BAB-A2BA-41225FB8BEF9}" = TubeBox!
"{5A96225D-A3B7-4535-AE49-3BF217999669}" = RPG Maker Fonts
"{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}" = RGSS-RTP Standard
"{5CE57A26-AF35-11D8-9E00-0004769EEFEB}" = N
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{626B7EA2-B7C2-4277-AE30-A8B452A92B6C}" = Phonetik
"{6444D9D9-CD6C-4464-B970-55C606C944DC}" = Logitech QuickCam
"{6592FDEC-2C1A-413A-9985-25FEC2F0848D}" = Star Wars Empire at War Forces of Corruption
"{65CDEC30-4BF4-48FB-8059-9FC480E4E94F}" = Acer eMode Management
"{663DAC6E-AC75-4A07-A94C-11BC1E214AC0}" = Die Jagd auf den Roten Baron 2
"{66A0EFCD-EF56-4F16-8B04-A1BE121099BD}" = Crashday-demo
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PartitionMagic
"{6E7DD182-9FC6-4651-0095-2E666CC6AF35}" = Die Sims 2
"{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71BFC818-0CED-42D6-9C87-5142918957EE}" = ICQ7.1
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{74EC78BC-B379-4E29-9006-8F161DCAABA6}" = Apple Software Update
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{7677634B-E04E-4D2A-89CE-C6EF2370B498}" = Popupblocker (Windows Live Toolbar)
"{76A07C18-0A69-4A4A-ADAD-EDA7EDBEC7F0}" = AquaSoft DesktopKalender - Aqua Edition
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7784A172-61F1-445E-8368-601607E0DD22}" = MP3 Player Utilities 4.00
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites für Windows Live Toolbar
"{7A16B20F-F23B-42E3-8040-DEA314AC4A6C}" = distributed.net client
"{7ABE1621-5354-4136-A0EA-0BD9CD900B6B}" = Samsung USB Driver
"{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}" = Text-To-Speech-Runtime
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7FBE9D7F-1D67-403E-9589-F3C309146114}" = Ryzom
"{82929BBA-AE2D-4623-BAE3-16C68997B771}" = Fette Sau XS
"{830552AF-E15A-11D8-9E00-0004769EEFEB}" = GLX - Gravity Neo Luxor
"{861C203D-5163-4BE3-BB5A-2561C61888DB}" = MyReader
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{8944ED10-DBF2-4FA9-8B5D-D7E1B046C761}_is1" = ColdCut
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74DEFD-A224-49CC-AB80-4E88BC730125}" = LogMeIn Hamachi
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8CBCA733-4D81-453D-95EB-28FD5C57430A}" = Pearl Harbor II
"{8DF712DA-D325-4FD0-8DE8-E2D78FC3CDC3}" = IL-2 Sturmovik: Forgotten Battles
"{91348578-CC58-4BAB-BAAC-8CE42EFAD592}_is1" = concept/design onlineTV 3
"{92C72ECF-B4BE-11D4-82B0-00A0C936A230}" = Dave Mirra Freestyle BMX
"{9309DD7E-EBFE-3C95-8B47-30D3A012F606}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{96701279-A3ED-4F1E-B3C1-38CDA572ED65}" = Tycoon City - New York Demo
"{9799BD05-5F89-484C-008E-F50592F53440}" = Harry Potter und der Feuerkelch™ Demo
"{99AE7207-8612-4DBA-A8F8-BAE5C633390D}" = Star Wars Empire at War
"{9A200E68-D5F4-4E70-910F-2871753A0E2B}" = Worms World Party
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9A4F72EE-8378-49BD-8C10-301E25907B5B}" = Steganos Safe OEM
"{9B34CAC6-738F-4A20-B428-A115C3E3474C}" = RPGXP
"{9C244239-ED8E-40f1-937F-51C706CD2160}" = Die Sims™ 2 Deluxe
"{A1071AEB-B0EF-3F5F-BC84-83A270EBE496}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A5101403-2C42-40E0-8D9E-5E49E7C3B89E}" = Tycoon City - New York
"{A5F68DC8-0278-4AD8-B413-861509B5F25B}" = ArcSoft Panorama Maker 3
"{A6C2D216-9DAE-43F9-8EFF-F0445E973F52}_is1" = GW-Value
"{A758BE2B-BF83-4769-8800-3B7408A226C1}" = Minigolf One Shot
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AA7D532A-6C19-4168-A887-BF306A431B65}" = Game Cam Lite v1.4
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AB2347E4-153B-4194-AA3B-97C0A662B369}" = PC Connectivity Solution
"{AC073452-EF2A-4333-9FE5-AA97C820813A}" = DirLister
"{AC76BA86-7AD7-1031-7B44-A92000000001}" = Adobe Reader 9.2 - Deutsch
"{AEC0CEBC-0FC7-4716-8222-1C4A742719B1}" = Digimax Master
"{AEDDF5A3-29CE-11D5-A8C2-000102246AAE}" = ubi.com
"{AF37F9DE-0726-439E-BC10-43D9195394D0}" = Firebird SQL Server - MAGIX Edition
"{B0D70EC6-E1CF-4EC3-BE09-FA75470D3902}" = Norton Security Scan
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B26E3B0D-C2FA-4370-B068-7C476766F029}" = Microsoft Works
"{B31924E3-CC3B-4446-8BDB-0633B967F233}" = PVR USB Manager
"{B547CB8D-549A-436E-97B5-E79F911B11E2}" = SDP Downloader
"{B59FE77B-738F-4F1C-AB48-3104895AF676}" = innotek VirtualBox
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B80CC46C-5839-4A48-B051-3CACF23A2718}_is1" = Eraser 5.82
"{B8E11ED9-889E-4FE1-9720-0B72C9E5E436}" = Norton AntiBot
"{B931FB80-537A-4600-00AD-AC5DEDB6C25B}" = Aufstieg des Hexenkönigs™
"{BB2B1599-8681-47EB-B6EC-627F7657810C}" = SetHolidays
"{BC4CA8FA-41D2-4B81-8680-E9B7573D6500}" = PLAYSTATION(R)Network Downloader
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = Athlon 64 Processor Driver
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser
"{C79308BC-63CC-4A0F-A585-2E137EA42A1E}_is1" = Power MP4 iPod PSP 3GP AVI MPG WMV Video Converter 8.9
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CC016F21-3970-11DE-B878-005056806466}" = Google Earth
"{CD49361E-3FE6-457E-90A1-9C59E29B5D02}" = Java DB 10.3.1.4
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D050D7362D214723AD585B541FFB6C11}" = DivX Content Uploader
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D155D300-C235-44FC-981C-F7B34683439C}" = Paragon Drive Backup 8.51 Professional Trial
"{D2FCC1AE-6311-47C5-8130-C6C66D77DD71}" = Nikon Message Center
"{D46BC0D5-DC2A-41AE-9559-E4769780AB8D}" = Rockstar Games präsentiert Tischtennis (Trailer)
"{D6E4E5D6-7693-4BB4-95BA-21F38FAFEE90}" = Safari
"{D8327C6E-A28E-49B6-9F30-F0F9FF735EF8}_is1" = GW-Skillz
"{D89AC4DF-7A00-4D0B-BA99-D582C7974A09}" = Nokia PC Suite
"{D9226EB1-C528-48AC-B423-BD9240E1F60B}" = Opera 9.62
"{D9B4D7EE-481C-4C36-86AB-A8F7417725FF}" = LightScribe 1.6.43.1
"{DA507A38-4B2A-40C0-90AC-E30AAA0B757C}" = Vegas Movie Studio Platinum 9.0
"{DB4B9686-E5F2-4D45-9C78-C45C68BD2F43}" = Virtual CD v8
"{DE0F6FF5-62CB-4B74-9327-0B95E47E07E9}" = Opera 9.50
"{DE60CAE2-4CA8-4A6A-A557-0668004FE889}" = Moorhuhn Kart Extra XXL
"{DEC41CA8-C30F-4F70-9AEE-1B3EEB4A3B62}_is1" = ICQ Language
"{DF6F459C-8B89-4F88-B63F-A2E136BB6B79}" = SweetIM for Messenger 2.8
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E1F4FB82-3EA6-46B6-A18A-9B3A62DA393E}" = hp deskjet 6122
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E36899ED-7F05-45C0-A417-3B60EB9F7965}_is1" = concept/design Hit-Recorder 2
"{E4C7B3EF-B3DB-4BB6-A812-E8FAE47534D3}" = OpenOffice.org 2.2
"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster 2010
"{E67450A7-22A7-4700-97C9-AFCB49F307CC}" = Wars & Warriors: Jeanne d'Arc
"{E6D22FE1-AB5F-42CA-9480-6F70B96DDD88}" = Need for Speed™ Undercover
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{E9E4BB29-FA98-401B-9EDE-9906906E33DE}" = Paragon Festplattenmanager 2007
"{EA3CAE37-C14E-4714-0001-34CAC1099AF9}" = 5star Movie Saver
"{EBA672FF-F80E-48B1-8FC4-616825318810}" = Feederkennung (Windows Live Toolbar)
"{EC028E6B-F3F1-4192-B63E-A7C97302ED5A}" = Acer eConsole
"{EC2F741D-308C-42B4-BD04-9A4853F2E402}" = GtkRadiant 1.5.0
"{ECBD784E-229F-4FB3-ACD6-D8B03D606279}" = Papierkrieg
"{ECCA3728-2753-4C3A-8608-5A41C4AEBDB7}" = Sony Vegas Pro 8.0
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{EE448EE9-3A6A-4BA3-B0EB-04D767570298}" = Crocodile Physics 604 DE
"{EFCE5837-FC21-11D6-9D24-00010240CE95}" = Java 2 Runtime Environment, SE v1.4.1_02
"{EFD8E454-EE12-402A-BFC1-7EA096599CBA}" = Windows Live Outlook-Toolbar (Windows Live Toolbar)
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F3AEF4A3-61EA-4D1F-88BC-FD068496FC1B}" = Google Desktop
"{F3D27930-B9DE-44A5-AA0B-006471E0EA23}" = AGEIA PhysX Unreal Tournament 3 Mods
"{F439D7AF-03F3-4F8E-AEC4-571BFE977C61}" = iTunes
"{F61DD673-0030-4BB2-A382-7E57E97F1031}" = Nero 7 Essentials
"{F850707C-B6A0-4B56-8709-F89CF8F9AC6D}" = Eraser
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FB706A00-C234-4716-AB1F-27DCB192C664}" = Opera 9.26
"{FBBFABCD-E075-457B-A70B-CF40C66CF033}" = Sid Meier's Civilization 4 Demo
"{FC8D21C8-7B29-4104-ADB0-FEE9CA1C7922}" = Folder Size for Windows
"{FD637CD9-B3F7-4F3C-BF07-5991A82FE2CC}" = TubeBox!
"{FDBBAF14-5ED8-49B7-A5BE-1C35668B074D}" = Unreal Tournament 3 (LG)
"{FEB7E760-E4F7-4E8D-8DF8-48554DDE35AF}" = FIFA Fußball-Weltmeisterschaft 2006
"{FF3999BE-1A7B-4738-88AA-97BF14094A4A}" = PictureProject
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"0852D05415AB9A4F1EF451E342267F76C776ED2F" = Windows Driver Package - Nokia Modem (11/03/2006 6.82.0.1)
"4CFD94C379217A02D5EA067615FF789CD731BCDB" = Windows Driver Package - Nokia (WUDFRd) WPD (11/03/2006 6.82.26.2)
"7-Zip" = 7-Zip 4.42
"AC Tool" = AC Tool
"AC3ACM" = AC-3 ACM Codec
"AccessDiver v4.401_is1" = AccessDiver v4.401
"Acoustica_is1" = Acoustica 3.3
"Action Replay Code Manager_is1" = Action Replay Code Manager
"ActionCube" = ActionCube v0.9
"Adobe Acrobat 5.0" = Adobe Acrobat 5.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player
"Advanced ZIP Password Recovery" = Advanced ZIP Password Recovery (remove only)
"Age of Empires Gold 1.0" = Microsoft Age of Empires Gold
"AISNSim2.6.0" = AISNSim
"AMCap" = AMCap
"America Online de" = AOL Deutschland
"AntiFreeze_is1" = AntiFreeze 1.01
"AoE3 Szenario Indianerkämpfe" = AoE3 Szenario Indianerkämpfe 1.0.0
"AoE3 Szenario Mauerfall" = AoE3 Szenario Mauerfall 1.0.0
"AoE3 Szenario Präriekampf V 2.0" = AoE3 Szenario Präriekampf V 2.0 2.0.0
"AoE3 Szenario Schweiz" = AoE3 Szenario Schweiz 1.0.2
"AOL Connectivity Services" = AOL Optimized Dial-In
"AOL YGP Screensaver" = AOL Meine Fotos Bildschirmschoner
"AOLCoach de" = AOL Coach Version 1.0(Build:20040229.1 de)
"Ashampoo ClipFinder_is1" = Ashampoo ClipFinder 1.19
"ATI Display Driver" = ATI Display Driver
"ATITool" = ATITool Overclocking Utility
"Audacity_is1" = Audacity 1.2.6
"AudibleManager" = AudibleManager
"AutoGK" = Auto Gordian Knot 2.48b
"AVI Splitter_is1" = AVI Splitter
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AviSynth" = AviSynth 2.5
"Baldur's Gate" = Baldur's Gate
"BlindWrite 5_is1" = BlindWrite5
"Boilsoft Video Splitter_is1" = Boilsoft Video Splitter 5.16
"BootSkin" = BootSkin
"BrainSpeeder" = BrainSpeeder 1.1.2
"Bridge Building Game" = Bridge Building Game
"Bridge Construction Set" = Bridge Construction Set
"Camtasia Studio 2" = Camtasia Studio 2
"Cannon Smash" = Cannon Smash
"CCleaner" = CCleaner (remove only)
"CDN Netzwerk Quartettspiel" = CDN Netzwerk Quartettspiel 1.6.3
"Cheatbook 07.2009" = Cheatbook 07.2009
"CloneCD" = CloneCD
"CloneDVD2" = CloneDVD2
"CloneDVDmobile" = CloneDVDmobile
"Crazy Browser 3.0.0 Beta2_is1" = Crazy Browser version 3.0.0 Beta2
"Crossword Weaver 8.0" = Crossword Weaver 8.0
"DataStar-Engine" = DataStar-Engine
"DHD Lost Way" = DHD Lost Way
"Digitale Bibliothek 4" = Digitale Bibliothek 4
"Dkill95" = Dkill95
"DotA Allstars Launcher" = DotA Allstars Launcher
"dtVIIscreensaver" = dtVIIscreensaver
"DynaGeo_is1" = DynaGeo 3.0f
"Eets Sneak Peek" = Eets Sneak Peek
"Empire at War Forces of Corruption Mappack" = Empire at War Forces of Corruption Mappack 7.00
"eMule.de 0.46c_is1" = eMule.de 0.46c v17
"eMule_v0.47a" = eMule_v0.47a
"eMusic Promotion" = eMusic - 50 Free MP3 offer
"eragon screensaver" = eragon screensaver
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"Evil Player" = Evil Player v1.22
"EvilLyrics" = EvilLyrics
"FaJo XP File Security Extension_is1" = FaJo XP File Security Extension v1.2
"FileZilla" = FileZilla (remove only)
"FK Desktop_is1" = FK Desktop 2.5
"FLV Player1.33" = FLV Player
"FoxyTunesForFirefox" = FoxyTunes for Firefox
"Fraps" = Fraps
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free Metronome" = Free Metronome 1.1.0 r1
"Free Screen To Video_is1" = Free Screen To Video V 1.2
"Free Video Dub_is1" = Free Video Dub version 1.5
"Free Video to iPod Converter_is1" = Free Video to iPod Converter version 3.2
"Free YouTube to iPod Converter_is1" = Free YouTube to iPod Converter version 3.1
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"Freez FLV to AVI/MPEG/WMV Converter v1.6_is1" = Freez FLV to AVI/MPEG/WMV Converter
"FrostWire" = FrostWire 4.13.1.7 BETA
"Game Jackal_is1" = Game Jackal v3.0.1.9 (32 bit)
"GameSpy Arcade" = GameSpy Arcade
"GBA Release Lister" = GBA Release Lister v0.40
"GNU Backgammon_is1" = GNU Backgammon (2006-04-18 code)
"Goldboxes_1.0" = Goldboxes 1.0
"Google Desktop" = Google Desktop
"Google Updater" = Google Updater
"Gran Paradiso (3.0a8)" = Gran Paradiso (3.0a8)
"GreenBrowser_is1" = GreenBrowser
"GRHitBlockKeyV1" = HitBlock
"GT Ripple_is1" = GT Ripple
"GTK 2.0" = GTK+ Runtime 2.12.12 rev a (nur entfernen)
"GW Prophecies Panorama" = GW Prophecies Panorama
"GW Team Builder_is1" = GW Team Builder 0.8.1
"GW-Plus+_is1" = GW-Plus+
"GW-Search" = GW-Search
"GWV v.1.03_is1" = 1.03
"GWV v.1.04_is1" = 1.04
"Hardcopy(c__hardcopy)" = Hardcopy (c:\hardcopy)
"Hercules" = Hercules
"HEROES" = Heroes
"HijackThis" = HijackThis 2.0.2
"hp print screen utility" = hp print screen utility
"HyperCam 2" = HyperCam 2
"HypreCam Toolbar" = HypreCam Toolbar
"ICQToolbar" = ICQ Toolbar
"Icy Tower v1.3.1_is1" = Icy Tower v1.3.1
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{2FDFD600-7338-4738-90D5-FC4ACA08DC36}" = Pro Evolution Soccer 2008
"InstallShield_{385979FE-DC4F-4140-8EAD-A59625000D72}" = NTI Backup NOW! 4
"InstallShield_{6BE2A4A4-99FB-48ED-AE1E-4E850389F804}" = PowerQuest PartitionMagic 8.0 Demo
"InstallShield_{7FBE9D7F-1D67-403E-9589-F3C309146114}" = Ryzom
"InstallShield_{8DF712DA-D325-4FD0-8DE8-E2D78FC3CDC3}" = IL-2 Sturmovik: Forgotten Battles
"IrfanView" = IrfanView (remove only)
"JAP" = JAP
"Java Application Platform SDK" = Java Application Platform SDK
"Java Web Start" = Java Web Start
"kiki_is1" = kiki the nanobot 1.0.2
"KlipFolio" = KlipFolio (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 5.0.0 (Basic)
"KORG Legacy Collection - DIGITAL EDITION v1.0.0 " = KORG Legacy Collection - DIGITAL EDITION v1.0.0
"Kristanix Kakuro XXL" = Kakuro XXL Demo
"Launchy_21344213_is1" = Launchy 2.0
"LHTTSGED" = L&H TTS3000 Deutsch
"Liberty BASIC v4.0" = Liberty BASIC v4.0
"LimeWire" = LimeWire 4.12.11
"Line Rider Theater Screensaver" = Line Rider Theater Screensaver
"Locate" = Locate32
"LogMeIn Hamachi" = LogMeIn Hamachi
"Loonatics_Unleashed_screensaver" = Loonatics_Unleashed_screensaver Screen Saver
"LostGoggles_is1" = LostGoggles 1.0b2
"lvdrivers_11.70" = Logitech QuickCam-Treiberpaket
"Mad Tracks" = Mad Tracks 1.0
"MAGIX Online Druck Service D" = MAGIX Online Druck Service (D)
"MAGIX Screenshare D" = MAGIX Screenshare
"MAGIX Speed burnR D" = MAGIX Speed burnR
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McLoad Preinstaller" = McLoad Preinstaller
"MegaTrainer XL_is1" = MegaTrainer XL V1.3.3.6
"megauploadtoolbar" = Megaupload Toolbar
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack - deu" = Microsoft .NET Framework 3.5 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Midtown Madness 2.0" = Microsoft Midtown Madness 2
"Monkey 4 Web Demo" = Monkey 4 Web Demo
"Moorhuhn - Im Anflug Demo" = Moorhuhn - Im Anflug Demo (remove only)
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"Mozilla Thunderbird (1.5)" = Mozilla Thunderbird (1.5)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSNINST" = MSN
"Mueller-Fotoservice_is1" = Mueller-Fotoservice
"Müller Foto" = Müller Foto
"myGamersCam" = myGamersCam 1.0
"NarbacularDrop_is1" = Narbacular Drop version 1.4
"NeoPlanet" = NeoPlanet
"NetBattle_is1" = NetBattle
"NetLCR_is1" = NetLCR v3.00.317
"Netscape (7.1)" = Netscape (7.1)
"Nikon FotoShare" = Nikon FotoShare
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NSSSetup.{B0D70EC6-E1CF-4EC3-BE09-FA75470D3902}" = Norton Security Scan (Symantec Corporation)
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Nvu_is1" = Nvu 1.0
"ObjectDock" = ObjectDock
"OpenAL" = OpenAL
"OpenVPN" = OpenVPN 2.1_rc7
"Oxyd® extra_is1" = Oxyd® extra v2.0
"Pack Vista Inspirat 2" = Pack Vista Inspirat 2 1.0
"PartyPokerNet" = PartyPokerNet
"PC Wizard 2007_is1" = PC Wizard 2007.1.73
"PCFriendly" = PCFriendly
"phonostarRadioPlayer_is1" = phonostar-Player Version 2.00.4
"Picasa 3" = Picasa 3
"Pidgin" = Pidgin
"Pogo Sticker" = Pogo Sticker
"PowerFolder" = PowerFolder (Remove Only)
"PSPVideoExpress" = PSP Video Express(remove only)
"Q-Xpress Installer" = Q-Xpress Installer 1.1.4
"Real Desktop Light_is1" = Real Desktop 1.31g Light
"RealPlayer 12.0" = RealPlayer
"Replay Media Catcher" = Replay Media Catcher
"Replay_Converter_1" = Replay Converter 2.8
"Restart_is1" = Restart v1.56
"RipCast 1.3.2 Release 2" = RipCast 1.3.2 Release 2
"Riva FLV Player_is1" = Riva FLV Player
"RocketDock" = RocketDock
"RollerCoaster Tycoon Setup" = Roll
"RPG Maker 2000 Vampires" = RPG Maker 2000 - Vampires Dawn
"RPG Maker 2000 1.07b" = RPG Maker 2000 1.07b
"RPGAdvocates_RTP_1.0" = Common RTP 1.0
"RTP for RM2K (Png, Wav, Midi, Fonts)" = RTP for RM2K (Png, Wav, Midi, Fonts)
"Sandboxie" = Sandboxie 3.22
"Schmaili_is1" = Schmaili 8.3
"SFT Loader" = SFT Loader 2006
"ShrinkTo5 GUI" = ShrinkTo5 GUI
"SimPE_is1" = SimPE 0.58 (alpha)
"Sims2Pack Clean Installer " = Sims2Pack Clean Installer
"Softonic_Deutsch Toolbar" = Softonic_Deutsch Toolbar
"softonic-de3 Toolbar" = softonic-de3 Toolbar
"Söldner - Secret Wars" = Söldner - Secret Wars
"Songbird-release-1438" = Songbird 1.4.3 (Build 1438)
"Speedblox_1.0" = Speedbowling 1.0
"Sphere" = Sphere (remove only)
"Spider Player_is1" = Spider Player 2.3
"Spider-Man 3 Screensaver" = Spider-Man 3 Screensaver
"Spybot - Search & Destroy_is1" = Spybot - Search & Destroy 1.4
"ST5UNST #1" = MZ-WinTranslator V17
"Steam App 410" = Portal: The First Slice
"StepMania" = StepMania (remove only)
"StreetPlugin" = Learn2 Player (Uninstall Only)
"SUPER ©" = SUPER © Version 2009.bld.36 (June 10, 2009)
"Super Screen Recorder_is1" = Super Screen Recorder 3.0
"Super Taxi Driver 2006 Demo" = Super Taxi Driver 2006 Demo 1.0
"SYBEX Power Sudoku Demo_is1" = SYBEX Power Sudoku Demo
"Synaesthete_is1" = Synaesthete (v1.0)
"SyncroSoft Emu" = SyncroSoft Emu (Remove only)
"Syncrosoft's License Control" = Syncrosofts Lizenz Kontrolle
"SysInfo" = Creative Systeminformationen
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamViewer 5" = TeamViewer 5
"The Battle for Numenor-Mod" = The Battle for Numenor-Mod
"Theme Manager" = Theme Manager
"Thoosje Vista Sidebar" = Thoosje Vista Sidebar
"Tobit ClipInc Server" = Tobit.Software clipinc.fx
"Tomb Raider Chronicles" = Tomb Raider Chronicles
"TopDesk" = TopDesk 1.4.2 Trial
"Toribash_is1" = Toribash 3.32
"Total Video Converter 3.11_is1" = Total Video Converter 3.11
"TrueCrypt" = TrueCrypt
"Tunatic" = Tunatic
"tv_enua" = Lernout & Hauspie TruVoice American English TTS Engine
"UEAW v4 " = UEAW v4
"UltraDefrag" = Ultra Defragmenter
"Uninstall_is1" = Uninstall 1.0.0.1
"Uplink Demo" = Uplink Demo (remove only)
"VCP" = Remove Vista Customization Pack v3
"VeryPDF PDF2TXT v3.2_is1" = VeryPDF PDF2TXT v3.2
"Videograbber3.4Flash_is1" = Videograbber3.4Flash
"Videora iPod Converter" = Videora iPod Converter 5.04
"ViewpointMediaPlayer" = Viewpoint Media Player (Remove Only)
"VirtualCloneDrive" = VirtualCloneDrive
"Vista Start Menu_is1" = Vista Start Menu 3.1
"Vista Transformation Pack" = Vista Transformation Pack 8.0
"VistaMizer" = VistaMizer 2.2.1.0
"Visual Task Tips" = Visual Task Tips 2.3
"VLC media player" = VideoLAN VLC media player 0.8.6d
"VobSub" = VobSub v2.23 (Remove Only)
"Wallpaper4U" = Wallpaper4U
"WEB.DE Firefox Browser Update" = WEB.DE Firefox Browser Update
"WhatPulse" = WhatPulse 1.5
"WIC" = Windows Imaging Component
"Wii Video 9" = Wii Video 9 2.25
"WinAce Archiver" = WinAce Archiver
"Winamp" = Winamp (remove only)
"WinCustomize Browser" = WinCustomize Browser
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinPatrol" = WinPatrol 2007
"WinPcapInst" = WinPcap 3.1
"WinRAR archiver" = WinRAR Archivierer
"WinZip" = WinZip
"WM Recorder 11.2" = WM Recorder 11.2
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Worms Armageddon" = Worms Armageddon
"Worms2" = Worms2
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XBTB05231.XBTB05231Too23423lbar" = Alcohol Soft - Alcohol 120% Toolbar
"Xfire" = Xfire (remove only)
"XfireXO Toolbar" = XfireXO Toolbar
"XnView_is1" = XnView 1.82.4
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"XviD" = XviD MPEG-4 Codec
"XviD MPEG4 Video Codec" = XviD MPEG4 Video Codec (remove only)
"XviD_is1" = XviD 1.1 final uninstall
"YInstHelper" = Yahoo! Install Manager
"YouTube Downloader App" = YouTube Downloader App 2.03
"Zattoo" = Zattoo 3.3.4 Beta
"ZENcast Organizer" = ZENcast Organizer
"ZMatrix_is1" = ZMatrix 1.5.2
"Zuma" = Zuma (remove only)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"TeamSpeak 3 Client" = TeamSpeak 3 Client

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 01.05.2010 14:05:32 | Computer Name = ACER | Source = MsiInstaller | ID = 11325
Description = Produkt: Microsoft Office 2000 Premium -- Fehler 1325. "Programme"
ist kein gültiger kurzer Dateiname.

Error - 01.05.2010 14:41:13 | Computer Name = ACER | Source = MsiInstaller | ID = 11325
Description = Produkt: Microsoft Office 2000 Premium -- Fehler 1325. "Programme"
ist kein gültiger kurzer Dateiname.

Error - 01.05.2010 15:00:13 | Computer Name = ACER | Source = MsiInstaller | ID = 11325
Description = Produkt: Microsoft Office 2000 Premium -- Fehler 1325. "Programme"
ist kein gültiger kurzer Dateiname.

Error - 02.05.2010 06:22:57 | Computer Name = ACER | Source = Virtual CD v8 Management Service | ID = 2
Description = OpenFileMapping _VCD_V8_MemSection_ failed, 2

Error - 02.05.2010 06:22:57 | Computer Name = ACER | Source = Virtual CD v8 Management Service | ID = 2
Description = Could not set scsi security, ErrCode: 2

Error - 02.05.2010 06:22:57 | Computer Name = ACER | Source = Virtual CD v8 Management Service | ID = 2
Description = This machine has PAE enabled, please contact the support at H+H Software
GmbH

Error - 02.05.2010 06:40:57 | Computer Name = ACER | Source = MsiInstaller | ID = 11325
Description = Produkt: Microsoft Office 2000 Premium -- Fehler 1325. "Programme"
ist kein gültiger kurzer Dateiname.

Error - 02.05.2010 06:42:50 | Computer Name = ACER | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung yc3.exe, Version 4.4.0.0, fehlgeschlagenes
Modul yc3.exe, Version 4.4.0.0, Fehleradresse 0x0000e574.

Error - 02.05.2010 07:36:42 | Computer Name = ACER | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung iexplore.exe, Version 8.0.6001.18702, fehlgeschlagenes
Modul , Version 0.0.0.0, Fehleradresse 0x00000000.

Error - 02.05.2010 07:37:41 | Computer Name = ACER | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung yc3.exe, Version 4.4.0.0, fehlgeschlagenes
Modul yc3.exe, Version 4.4.0.0, Fehleradresse 0x0000e574.

[ System Events ]
Error - 30.04.2010 18:12:19 | Computer Name = ACER | Source = DCOM | ID = 10010
Description = Der Server "{0002DF01-0000-0000-C000-000000000046}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 01.05.2010 12:28:25 | Computer Name = ACER | Source = DCOM | ID = 10010
Description = Der Server "{0002DF01-0000-0000-C000-000000000046}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 01.05.2010 12:43:32 | Computer Name = ACER | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist
bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
durchgeführt: Starten Sie den Dienst neu..

Error - 01.05.2010 12:44:24 | Computer Name = ACER | Source = Service Control Manager | ID = 7034
Description = Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1
Mal passiert.

Error - 01.05.2010 12:57:30 | Computer Name = ACER | Source = DCOM | ID = 10010
Description = Der Server "{0002DF01-0000-0000-C000-000000000046}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 01.05.2010 13:48:37 | Computer Name = ACER | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist
bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
durchgeführt: Starten Sie den Dienst neu..

Error - 01.05.2010 16:00:22 | Computer Name = ACER | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist
bereits 3 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
durchgeführt: Starten Sie den Dienst neu..

Error - 02.05.2010 06:21:35 | Computer Name = ACER | Source = Dhcp | ID = 1001
Description = Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server
für die Netzwerkkarte mit der Netzwerkadresse 0023C361C67C zugeteilt werden. Der
folgende Fehler ist aufgetreten: %%121. Es wird weiterhin im Hintergrund versucht,
eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen.

Error - 02.05.2010 06:42:24 | Computer Name = ACER | Source = DCOM | ID = 10010
Description = Der Server "{0002DF01-0000-0000-C000-000000000046}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error - 02.05.2010 07:37:22 | Computer Name = ACER | Source = DCOM | ID = 10010
Description = Der Server "{0002DF01-0000-0000-C000-000000000046}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


< End of report >

C:\Dokumente und Einstellungen\USER\Lokale Einstellungen\Temp\pey10.tmp (Backdoor.ProRat) -> No action taken.

Bei Backdoorbefall würde ich format c: plus Neuinstallation von Windows empfehlen...