Hallo,

die Dateien habe ich hochgeladen, wenn tatsächlich da was dran ist oder war muss man davon ausgehen das dies sehr professionell gemacht wurde (die Jungs haben genügend Kohle so was zu beauftragen), vermute das jemand sehr fit sein muss um da was zu finden. Wäre toll ihr findet was :-).

Vor zwei Tagen habe ich den ESET Scanner drüber laufen lassen der hat auch 6 Objekte gefunden.

So, jetzt der Malwarebytes Scan:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4092

Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18904

12.05.2010 07:34:34
mbam-log-2010-05-12 (07-34-34).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 131280
Laufzeit: 7 Minute(n), 4 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 1
Infizierte Dateiobjekte der Registrierung: 5
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\smss32.exe (Trojan.FakeAlert) -> No action taken.

Infizierte Dateiobjekte der Registrierung:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\buy-security-essentials.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\is-software-download.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\download-soft-package.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\download-software-package.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\get-key-se10.com\http (Hijack.TrustedZone) -> Bad: (2) Good: (4) -> No action taken.

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
C:\Users\PM\AppData\Local\Temp\svchost.exe (Trojan.Agent) -> No action taken.

Wie schlimm ist das?

...und noch das OTL Logfile

OTL logfile created on: 12.05.2010 07:41:01 - Run 1
OTL by OldTimer - Version 3.2.4.1 Folder = C:\Users\PM\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18904)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 32,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 66,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 586,12 Gb Total Space | 393,03 Gb Free Space | 67,06% Space Free | Partition Type: NTFS
Drive D: | 10,00 Gb Total Space | 5,29 Gb Free Space | 52,89% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DELL
Current User Name: PM
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Processes (SafeList) ==========

PRC - [2010.05.12 07:39:41 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Users\PM\Desktop\OTL.exe
PRC - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Programme\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010.04.13 00:46:36 | 001,135,912 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe
PRC - [2010.03.20 12:22:30 | 001,070,240 | ---- | M] (Mischel Internet Security) -- C:\Programme\TrojanHunter 5.3\THGuard.exe
PRC - [2010.02.23 08:39:16 | 000,638,232 | ---- | M] (Microsoft Corporation) -- C:\Programme\Internet Explorer\iexplore.exe
PRC - [2010.02.18 11:43:20 | 000,490,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Common Files\Java\Java Update\jucheck.exe
PRC - [2009.12.31 13:03:58 | 000,320,768 | ---- | M] (Panda Security) -- C:\Programme\Panda Security\WaAgent\WasAgent\WasAgent.exe
PRC - [2009.10.13 17:58:08 | 000,143,360 | ---- | M] (NinjaTrader) -- C:\Programme\NinjaTrader 6.5\bin\NinjaTrader.exe
PRC - [2009.10.08 18:25:02 | 000,173,312 | ---- | M] (Panda Security, S.L.) -- C:\Programme\Panda Security\WAC\pavFnSvr.exe
PRC - [2009.10.08 15:35:06 | 000,191,744 | ---- | M] (Panda Security) -- C:\Programme\Panda Security\WAC\PsCtrlC.exe
PRC - [2009.09.17 15:48:16 | 000,295,680 | ---- | M] (Panda Security) -- C:\Programme\Panda Security\WaAgent\WasLpMng\WASLPMNG.exe
PRC - [2009.09.17 15:48:16 | 000,206,080 | ---- | M] (Panda Security) -- C:\Programme\Panda Security\WaAgent\WasWD\WasWD.exe
PRC - [2009.09.17 09:51:34 | 000,140,544 | ---- | M] (Panda Security) -- C:\Programme\Panda Security\WaAgent\Scheduler\PavSched.exe
PRC - [2009.08.17 22:54:54 | 012,957,536 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\OUTLOOK.EXE
PRC - [2009.08.12 11:55:24 | 000,368,896 | ---- | M] (Panda Security) -- C:\Programme\Panda Security\WAC\PsCtrlS.exe
PRC - [2009.07.18 05:12:12 | 000,257,440 | R--- | M] (Adobe Systems, Inc.) -- C:\Windows\System32\Macromed\Flash\FlashUtil10c.exe
PRC - [2009.07.14 12:28:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2009.07.03 12:58:34 | 000,183,040 | ---- | M] (Panda Security, S.L.) -- C:\Programme\Panda Security\WAC\pavsrvx86.exe
PRC - [2009.07.03 12:58:34 | 000,110,336 | ---- | M] (Panda Security, S.L.) -- C:\Programme\Panda Security\WAC\avengine.exe
PRC - [2009.06.18 12:52:00 | 000,087,296 | ---- | M] (Panda Security International) -- C:\Programme\Panda Security\WAC\WEBPROXY.EXE
PRC - [2009.05.21 11:13:58 | 000,206,064 | ---- | M] (SupportSoft, Inc.) -- C:\Programme\Dell Support Center\bin\sprtcmd.exe
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.04.11 08:27:28 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conime.exe
PRC - [2009.04.08 10:56:24 | 000,226,560 | ---- | M] (Panda Security International) -- C:\Programme\Panda Security\WAC\PSHost.exe
PRC - [2009.04.06 21:08:28 | 000,592,384 | ---- | M] (Jugaari) -- C:\Programme\Jugaari\Jaadu VNC Connect\JaaduConnect.exe
PRC - [2009.03.30 22:53:52 | 000,198,160 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Common Files\Real\Update_OB\realsched.exe
PRC - [2009.03.18 12:26:14 | 000,282,624 | ---- | M] (PFGBEST.com) -- C:\Programme\PFGBest\PFGAPI\PFGAPI.exe
PRC - [2008.12.29 22:22:36 | 001,692,224 | ---- | M] (UltraVNC) -- C:\Programme\UltraVNC\winvnc.exe
PRC - [2008.12.19 13:32:50 | 000,108,288 | ---- | M] (Panda Security) -- C:\Programme\Panda Security\WAC\PSIMSVC.EXE
PRC - [2008.08.14 00:04:44 | 000,201,968 | ---- | M] (SupportSoft, Inc.) -- C:\Programme\Dell Support Center\bin\sprtsvc.exe
PRC - [2008.04.30 14:52:32 | 000,027,440 | ---- | M] (Panda Software International) -- C:\Programme\Panda Security\WAC\psksvc.exe
PRC - [2008.01.19 09:38:38 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Defender\MSASCui.exe
PRC - [2008.01.19 09:33:39 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2008.01.19 09:33:39 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe
PRC - [2007.10.05 19:34:28 | 000,184,352 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvraidservice.exe
PRC - [2007.09.26 00:03:29 | 000,093,208 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\Gaming Software\LWEMon.exe
PRC - [2007.09.24 14:57:16 | 001,024,000 | ---- | M] (Creative Technology Ltd) -- C:\Windows\System32\CTxfispi.exe
PRC - [2007.06.26 20:27:46 | 000,312,320 | ---- | M] (shbox.de) -- C:\Programme\FreePDF_XP\fpassist.exe
PRC - [2007.05.23 21:02:36 | 000,139,264 | ---- | M] (Primax Electronics Ltd.) -- C:\Windows\System32\pmxmiced.exe
PRC - [2007.04.17 16:22:22 | 000,184,320 | ---- | M] (Creative Technology Ltd) -- C:\Programme\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe
PRC - [2006.11.08 16:01:54 | 000,049,152 | ---- | M] (Primax Electronics Ltd.) -- C:\Windows\System32\ico.exe
PRC - [2006.09.11 05:40:34 | 000,086,960 | ---- | M] (Macrovision Corporation) -- C:\Programme\Common Files\InstallShield\UpdateService\issch.exe


========== Modules (SafeList) ==========

MOD - [2010.05.12 07:39:41 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Users\PM\Desktop\OTL.exe
MOD - [2009.04.11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll
MOD - [2008.01.19 09:33:00 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx


========== Win32 Services (SafeList) ==========

SRV - [2010.04.16 08:33:40 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2009.12.31 13:03:58 | 000,320,768 | ---- | M] (Panda Security) [Auto | Running] -- C:\Programme\Panda Security\WaAgent\WasAgent\WasAgent.exe -- (WASAgent)
SRV - [2009.10.08 18:25:02 | 000,173,312 | ---- | M] (Panda Security, S.L.) [Auto | Running] -- C:\Program Files\Panda Security\WAC\pavFnSvr.exe -- (PavFnSvr)
SRV - [2009.09.25 03:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009.09.17 15:48:16 | 000,295,680 | ---- | M] (Panda Security) [Auto | Running] -- C:\Program Files\Panda Security\WaAgent\WasLpMng\WASLPMNG.exe -- (PavWASLpMng)
SRV - [2009.09.17 15:48:16 | 000,206,080 | ---- | M] (Panda Security) [Auto | Running] -- C:\Programme\Panda Security\WaAgent\WasWD\WasWD.exe -- (WASWD)
SRV - [2009.09.17 09:51:34 | 000,140,544 | ---- | M] (Panda Security) [Auto | Running] -- C:\Program Files\Panda Security\WaAgent\Scheduler\PavSched.exe -- (PavAt3Scheduler)
SRV - [2009.08.12 11:55:24 | 000,368,896 | ---- | M] (Panda Security) [Auto | Running] -- C:\Program Files\Panda Security\WAC\PsCtrlS.exe -- (Panda Software Controller)
SRV - [2009.07.14 12:28:00 | 000,239,648 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2009.07.03 12:58:34 | 000,183,040 | ---- | M] (Panda Security, S.L.) [Auto | Running] -- C:\Program Files\Panda Security\WAC\pavsrvx86.exe -- (PavSrv)
SRV - [2009.04.08 10:56:24 | 000,226,560 | ---- | M] (Panda Security International) [Auto | Running] -- C:\Program Files\Panda Security\WAC\PSHost.exe -- (PSHost)
SRV - [2008.12.29 22:22:36 | 001,692,224 | ---- | M] (UltraVNC) [Auto | Running] -- C:\Program Files\UltraVNC\WinVNC.exe -- (uvnc_service)
SRV - [2008.12.19 13:32:50 | 000,108,288 | ---- | M] (Panda Security) [Auto | Running] -- C:\Program Files\Panda Security\WAC\PSIMSVC.EXE -- (PSImSvc)
SRV - [2008.08.14 00:04:44 | 000,201,968 | ---- | M] (SupportSoft, Inc.) [Auto | Running] -- C:\Program Files\Dell Support Center\bin\sprtsvc.exe -- (sprtsvc_dellsupportcenter) SupportSoft Sprocket Service (dellsupportcenter)
SRV - [2008.04.30 14:52:32 | 000,027,440 | ---- | M] (Panda Software International) [Auto | Running] -- C:\Program Files\Panda Security\WAC\psksvc.exe -- (PskSvc)
SRV - [2008.01.19 09:38:24 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.05.31 09:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007.05.31 09:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2007.01.25 19:31:34 | 000,093,048 | ---- | M] (CACE Technologies) [On_Demand | Stopped] -- C:\Program Files\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental)


========== Driver Services (SafeList) ==========

DRV - [2009.10.21 10:43:38 | 000,199,688 | ---- | M] (Panda Security, S.L.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\neti1640.sys -- (NETIMFLT01060040)
DRV - [2009.10.07 11:06:20 | 000,041,480 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\System32\drivers\nsfim.sys -- (NSFIM)
DRV - [2009.09.30 23:07:44 | 000,075,016 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\System32\drivers\APPFLT.SYS -- (APPFLT)
DRV - [2009.09.25 14:54:06 | 000,159,112 | ---- | M] (Panda Security, S.L.) [TDI Layer] [Kernel | System | Running] -- C:\Windows\System32\drivers\NETFLTDI.SYS -- (NETFLTDI)
DRV - [2009.09.25 14:54:04 | 000,193,800 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\System32\drivers\idsflt.sys -- (IDSFLT)
DRV - [2009.09.25 14:54:04 | 000,022,024 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\System32\drivers\fnetmon.sys -- (FNETMON)
DRV - [2009.09.25 14:54:02 | 000,053,256 | ---- | M] (Panda Security, S.L.) [Kernel | System | Running] -- C:\Windows\System32\drivers\dsaflt.sys -- (DSAFLT)
DRV - [2009.08.05 14:15:40 | 000,047,624 | ---- | M] (Panda Security, S.L.) [File_System | Auto | Running] -- C:\Windows\System32\drivers\amm8660.sys -- (AmFSM)
DRV - [2009.07.14 20:54:00 | 009,557,216 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2009.06.30 09:37:16 | 000,028,552 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\Windows\system32\drivers\pavboot.sys -- (pavboot)
DRV - [2009.01.23 10:49:06 | 000,038,816 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2008.04.22 16:27:15 | 000,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2008.04.22 16:27:15 | 000,019,000 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2008.04.22 16:27:15 | 000,017,464 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2007.11.08 05:39:22 | 000,131,616 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvrd32.sys -- (nvrd32)
DRV - [2007.11.08 05:39:22 | 000,110,624 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvstor32.sys -- (nvstor32)
DRV - [2007.09.24 14:58:36 | 001,175,064 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ha20x2k.sys -- (ha20x2k)
DRV - [2007.09.24 14:58:34 | 000,158,744 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctsfm2k.sys -- (ctsfm2k)
DRV - [2007.09.24 14:58:34 | 000,129,048 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctoss2k.sys -- (ossrv)
DRV - [2007.09.24 14:58:34 | 000,095,768 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\emupia2k.sys -- (emupia)
DRV - [2007.09.24 14:58:34 | 000,014,360 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctprxy2k.sys -- (ctprxy2k)
DRV - [2007.09.24 14:58:10 | 000,525,336 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ctaud2k.sys -- (ctaud2k) Creative Audio Driver (WDM)
DRV - [2007.09.24 14:58:10 | 000,511,000 | ---- | M] (Creative Technology Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ctac32k.sys -- (ctac32k)
DRV - [2007.09.24 14:57:12 | 001,324,056 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\CTEXFIFX.dll -- (CTEXFIFX.DLL)
DRV - [2007.09.24 14:57:12 | 000,072,728 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\CTHWIUT.DLL -- (CTHWIUT.DLL)
DRV - [2007.09.24 14:57:08 | 000,171,032 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\CT20XUT.DLL -- (CT20XUT.DLL)
DRV - [2007.09.14 05:41:28 | 000,051,608 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2007.09.14 05:41:20 | 000,014,744 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2007.09.14 05:41:12 | 000,029,208 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmHidLo.sys -- (WmHidLo)
DRV - [2007.09.14 05:41:02 | 000,029,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2007.09.14 05:40:54 | 000,019,352 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2007.06.01 14:41:00 | 000,018,432 | ---- | M] (Primax Electronics Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pmxmouse.sys -- (pmxmouse)
DRV - [2007.05.24 17:44:00 | 000,019,008 | ---- | M] (Primax Electronics Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\pmxusblf.sys -- (pmxusblf)
DRV - [2007.04.25 17:02:28 | 000,179,712 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\b57nd60x.sys -- (b57nd60x)
DRV - [2007.01.25 19:31:34 | 000,042,000 | ---- | M] (CACE Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\npf.sys -- (NPF)
DRV - [2006.11.02 11:51:45 | 000,900,712 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2006.11.02 11:51:38 | 000,420,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2006.11.02 11:51:34 | 000,316,520 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2006.11.02 11:51:32 | 000,297,576 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2006.11.02 11:51:25 | 000,235,112 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2006.11.02 11:51:25 | 000,232,040 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2006.11.02 11:51:00 | 000,147,048 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2006.11.02 11:50:45 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2006.11.02 11:50:41 | 000,112,232 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2006.11.02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006.11.02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006.11.02 11:50:35 | 000,098,408 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2006.11.02 11:50:24 | 000,088,680 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2006.11.02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006.11.02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006.11.02 11:50:16 | 000,071,784 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2006.11.02 11:50:13 | 000,040,040 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2006.11.02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006.11.02 11:50:10 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2006.11.02 11:50:10 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2006.11.02 11:50:10 | 000,038,504 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid2.sys -- (SiSRaid2)
DRV - [2006.11.02 11:50:10 | 000,037,480 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2006.11.02 11:50:09 | 000,067,688 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2006.11.02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006.11.02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006.11.02 11:50:05 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2006.11.02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006.11.02 11:50:04 | 000,065,640 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2006.11.02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006.11.02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006.11.02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006.11.02 11:49:53 | 000,028,776 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2006.11.02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006.11.02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006.11.02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006.11.02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006.11.02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006.11.02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006.11.02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
DRV - [2006.11.02 09:36:43 | 002,028,032 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\atikmdag.sys -- (R300)
DRV - [2006.11.02 09:30:55 | 000,200,704 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\e1e6032.sys -- (e1express) Intel(R)
DRV - [2006.11.02 09:30:54 | 000,117,760 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [2005.11.25 17:43:48 | 000,031,896 | ---- | M] (DemoForge, LLC) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dfmirage.sys -- (dfmirage)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.de/ig/dell?hl=de&client=dell-row&channel=de&ibd=6080422

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = file://C:/Users/PM/Music/Temp/Tunebite/.downloading/profile/rrproxy_ie_4b86a036.pac

========== FireFox ==========

FF - prefs.js..browser.startup.homepage: "about:blank"
FF - prefs.js..network.proxy.autoconfig_url: "file://C:/Users/PM/Music/Temp/Tunebite/.downloading/profile/rrproxy_ie_4b86a036.pac"
FF - prefs.js..network.proxy.no_proxies_on: "*.local"
FF - prefs.js..network.proxy.type: 2

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.05.01 22:20:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.05.01 22:20:17 | 000,000,000 | ---D | M]

[2010.04.10 21:23:28 | 000,000,000 | ---D | M] -- C:\Users\PM\AppData\Roaming\mozilla\Extensions
[2009.02.28 21:53:16 | 000,000,000 | ---D | M] -- C:\Users\PM\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org
[2010.05.06 19:18:04 | 000,000,000 | ---D | M] -- C:\Users\PM\AppData\Roaming\mozilla\Firefox\Profiles\4b51cluw.default\extensions
[2010.04.13 07:14:28 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\PM\AppData\Roaming\mozilla\Firefox\Profiles\4b51cluw.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.04.10 21:23:11 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2010.04.01 18:54:38 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.04.01 18:54:38 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.04.01 18:54:38 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.04.01 18:54:38 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.04.01 18:54:38 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (&Yahoo! Toolbar Helper) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Programme\Real\RealPlayer\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll File not found
O2 - BHO: (Tunebite_WebRipPlugin Class) - {AA102584-3B97-47e7-B9BC-75D54C110A7D} - C:\Programme\RapidSolution\Tunebite\plugins\IE\TB_WebRipIePlugin.dll (RapidSolution Software)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programme\Dell\BAE\BAE.dll (Dell Inc.)
O3 - HKLM\..\Toolbar: (Yahoo! Toolbar) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll (Yahoo! Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [CTxfiHlp] C:\Windows\System32\Ctxfihlp.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [DellSupportCenter] C:\Program Files\Dell Support Center\bin\sprtcmd.exe (SupportSoft, Inc.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [dscactivate] C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe ( )
O4 - HKLM..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe (shbox.de)
O4 - HKLM..\Run: [ Malwarebytes Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NVRaidService] C:\Windows\System32\nvraidservice.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [Panda Software Controller Client] C:\Program Files\Panda Security\WAC\PSCtrlC.exe (Panda Security)
O4 - HKLM..\Run: [PMX Daemon] C:\Windows\System32\ico.exe (Primax Electronics Ltd.)
O4 - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKLM..\Run: [THGuard] C:\Program Files\TrojanHunter 5.3\THGuard.exe (Mischel Internet Security)
O4 - HKLM..\Run: [TkBellExe] C:\Program Files\Common Files\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [UpdReg] C:\Windows\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [VolPanel] C:\Program Files\Creative\Sound Blaster X-Fi\Volume Panel\VolPanlu.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe File not found
O4 - HKCU..\Run: [ISUSPM Startup] C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe (InstallShield Software Corporation)
O4 - HKCU..\Run: [ISUSScheduler] C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe (Macrovision Corporation)
O4 - HKCU..\Run: [JaaduVNCConnect] C:\Program Files\Jugaari\Jaadu VNC Connect\JaaduConnect.exe (Jugaari)
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Panda Security\WAC\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Panda Security\WAC\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files\Panda Security\WAC\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files\Panda Security\WAC\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files\Panda Security\WAC\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files\Panda Security\WAC\pavlsp.dll (Panda Software International)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Program Files\Panda Security\WAC\pavlsp.dll (Panda Software International)
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {439B6D3C-A359-4D73-8515-2AFE8CF90C08} hxxp://www.tradesignalonline.com/gallery/components/axts5we.cab (TradeSignal 5 Web Edition)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} hxxp://download.eset.com/special/eos/OnlineScanner.cab (OnlineScanner Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} hxxp://acs.pandasoftware.com/activescan/cabs/as2stubie.cab (ActiveScan 2.0 Installer Class)
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-29-0.cab (EPUImageControl Class)
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} https://www.rcgdirect.com/jtrader/pats/downloads/j2re-14203-i586-p.exe (Java Plug-in 1.4.2_03)
O16 - DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab (Java Plug-in 1.6.0)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.10 217.237.151.115
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img24.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2010.05.12 07:39:31 | 000,570,880 | ---- | C] (OldTimer Tools) -- C:\Users\PM\Desktop\OTL.exe
[2010.05.12 07:26:06 | 000,000,000 | ---D | C] -- C:\Users\PM\AppData\Roaming\Malwarebytes
[2010.05.12 07:25:58 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.05.12 07:25:57 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.05.12 07:25:57 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2010.05.12 07:25:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.05.10 21:16:57 | 000,000,000 | ---D | C] -- C:\Programme\ESET
[2010.05.10 13:11:43 | 000,000,000 | ---D | C] -- C:\ProgramData\sentinel
[2010.05.10 13:11:16 | 000,193,800 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\idsflt.sys
[2010.05.10 13:11:16 | 000,053,256 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\dsaflt.sys
[2010.05.10 13:11:16 | 000,041,480 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\nsfim.sys
[2010.05.10 13:10:27 | 000,159,112 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\NETFLTDI.SYS
[2010.05.10 13:10:27 | 000,075,016 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\APPFLT.SYS
[2010.05.10 13:10:27 | 000,022,024 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\fnetmon.sys
[2010.05.10 13:10:23 | 000,047,624 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\amm8660.sys
[2010.05.10 13:08:34 | 000,000,000 | RHSD | C] -- C:\Windows\PSICache
[2010.05.10 12:56:16 | 000,000,000 | ---D | C] -- C:\Programme\QS
[2010.05.10 09:54:46 | 000,028,552 | ---- | C] (Panda Security, S.L.) -- C:\Windows\System32\drivers\pavboot.sys
[2010.05.10 09:54:45 | 000,000,000 | ---D | C] -- C:\Programme\Panda Security
[2010.05.07 10:04:42 | 000,000,000 | ---D | C] -- C:\Users\PM\AppData\Roaming\TrojanHunter
[2010.05.07 08:32:31 | 000,000,000 | ---D | C] -- C:\ProgramData\TrojanHunter
[2010.05.07 08:32:28 | 000,000,000 | ---D | C] -- C:\Programme\TrojanHunter 5.3
[2010.05.07 07:33:18 | 000,000,000 | ---D | C] -- C:\Users\PM\Desktop\Bilder Dell
[2010.05.01 22:22:24 | 000,000,000 | ---D | C] -- C:\Programme\iPod
[2010.05.01 22:22:17 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2010.05.01 22:19:56 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime
[2010.05.01 22:17:43 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour
[2010.04.27 00:04:42 | 000,353,592 | ---- | C] (DivX, Inc.) -- C:\Windows\System32\DivXControlPanelApplet.cpl
[2010.04.25 16:16:44 | 000,000,000 | ---D | C] -- C:\Users\PM\{73b44331-9959-49b5-b042-ed960ab27474}
[2010.04.18 13:31:35 | 000,000,000 | ---D | C] -- C:\Users\PM\AppData\Roaming\FileZilla
[2010.04.18 13:31:31 | 000,000,000 | ---D | C] -- C:\Programme\FileZilla FTP Client
[2010.04.17 11:07:23 | 000,000,000 | ---D | C] -- C:\Users\PM\Desktop\wordpress
[2010.04.15 09:20:43 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX
[2010.04.14 10:09:24 | 000,000,000 | ---D | C] -- C:\Users\PM\AppData\Roaming\TeamViewer
[2010.04.14 10:09:19 | 000,000,000 | ---D | C] -- C:\Users\PM\temp
[2010.04.14 07:36:15 | 003,600,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2010.04.14 07:36:15 | 003,548,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2010.04.14 07:36:09 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2010.04.14 07:35:49 | 000,220,672 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codecp.acm
[2010.04.14 07:35:49 | 000,062,464 | ---- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) -- C:\Windows\System32\l3codeca.acm
[2008.04.22 16:32:10 | 000,060,928 | ---- | C] ( ) -- C:\Windows\System32\a3d.dll
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2010.05.12 07:42:06 | 005,505,024 | -HS- | M] () -- C:\Users\PM\NTUSER.DAT
[2010.05.12 07:40:31 | 000,054,016 | ---- | M] () -- C:\Windows\System32\drivers\woshknxc.sys
[2010.05.12 07:39:41 | 000,570,880 | ---- | M] (OldTimer Tools) -- C:\Users\PM\Desktop\OTL.exe
[2010.05.12 07:26:06 | 000,198,588 | ---- | M] () -- C:\Windows\System32\drivers\APPFCONT.DAT.bck
[2010.05.12 07:26:06 | 000,198,588 | ---- | M] () -- C:\Windows\System32\drivers\APPFCONT.DAT
[2010.05.12 07:26:00 | 000,000,820 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.12 07:21:31 | 002,188,731 | ---- | M] () -- C:\Users\PM\Desktop\Urteil.pdf
[2010.05.12 07:21:31 | 000,559,654 | ---- | M] () -- C:\Users\PM\Desktop\IFK.pdf
[2010.05.12 07:14:12 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.05.12 07:14:12 | 000,003,696 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.05.12 06:58:00 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.05.11 09:58:00 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.05.11 09:26:00 | 000,000,474 | ---- | M] () -- C:\Windows\tasks\Ad-Aware Update (Weekly).job
[2010.05.10 21:14:14 | 000,032,594 | ---- | M] () -- C:\ProgramData\nvModes.001
[2010.05.10 21:14:12 | 000,000,120 | ---- | M] () -- C:\Windows\System32\drivers\etc\NetAdapt.cfg.bck
[2010.05.10 21:14:12 | 000,000,120 | ---- | M] () -- C:\Windows\System32\drivers\etc\NetAdapt.cfg
[2010.05.10 21:14:08 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.05.10 20:36:48 | 000,064,748 | ---- | M] () -- C:\Windows\System32\DVCState-{00000002-00000000-00000004-00001102-00000005-60021102}.rfx
[2010.05.10 20:36:48 | 000,054,408 | ---- | M] () -- C:\Windows\System32\BMXStateBkp-{00000002-00000000-00000004-00001102-00000005-60021102}.rfx
[2010.05.10 20:36:48 | 000,054,408 | ---- | M] () -- C:\Windows\System32\BMXState-{00000002-00000000-00000004-00001102-00000005-60021102}.rfx
[2010.05.10 20:29:41 | 001,427,212 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010.05.10 20:29:41 | 000,621,714 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.05.10 20:29:41 | 000,589,884 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.05.10 20:29:41 | 000,123,452 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.05.10 20:29:41 | 000,101,896 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.05.10 18:05:33 | 000,001,132 | ---- | M] () -- C:\Windows\System32\drivers\APPFLTR.CFG.bck
[2010.05.10 18:05:33 | 000,001,132 | ---- | M] () -- C:\Windows\System32\drivers\APPFLTR.CFG
[2010.05.10 18:05:33 | 000,000,252 | ---- | M] () -- C:\Windows\System32\drivers\etc\IdsFlt.cfg.bck
[2010.05.10 18:05:33 | 000,000,252 | ---- | M] () -- C:\Windows\System32\drivers\etc\IdsFlt.cfg
[2010.05.10 18:05:33 | 000,000,068 | ---- | M] () -- C:\Windows\System32\drivers\etc\NetFlt.cfg.bck
[2010.05.10 18:05:33 | 000,000,068 | ---- | M] () -- C:\Windows\System32\drivers\etc\NetFlt.cfg
[2010.05.10 18:05:33 | 000,000,056 | ---- | M] () -- C:\Windows\System32\drivers\etc\DsaFlt.cfg.bck
[2010.05.10 18:05:33 | 000,000,056 | ---- | M] () -- C:\Windows\System32\drivers\etc\DsaFlt.cfg
[2010.05.10 18:05:32 | 000,303,044 | ---- | M] () -- C:\Windows\System32\drivers\etc\DsaFlt.rls.bck
[2010.05.10 18:05:32 | 000,303,044 | ---- | M] () -- C:\Windows\System32\drivers\etc\DsaFlt.rls
[2010.05.10 18:05:31 | 000,000,068 | ---- | M] () -- C:\Windows\System32\drivers\etc\NetLoc.wlt.bck
[2010.05.10 18:05:31 | 000,000,068 | ---- | M] () -- C:\Windows\System32\drivers\etc\NetLoc.wlt
[2010.05.10 13:56:32 | 000,032,594 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2010.05.10 13:13:36 | 000,000,072 | ---- | M] () -- C:\Windows\System32\drivers\etc\NetAR.wlt.bck
[2010.05.10 13:13:36 | 000,000,072 | ---- | M] () -- C:\Windows\System32\drivers\etc\NetAR.wlt
[2010.05.10 13:13:18 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.05.10 13:13:07 | 3218,436,096 | -HS- | M] () -- C:\hiberfil.sys
[2010.05.10 13:12:03 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2010.05.10 13:12:02 | 000,524,288 | -HS- | M] () -- C:\Users\PM\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2010.05.10 13:12:02 | 000,065,536 | -HS- | M] () -- C:\Users\PM\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2010.05.10 13:12:01 | 004,129,108 | -H-- | M] () -- C:\Users\PM\AppData\Local\IconCache.db
[2010.05.10 13:10:23 | 000,000,133 | ---- | M] () -- C:\Windows\AdminIE.ini
[2010.05.10 12:54:02 | 001,079,720 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010.05.10 12:51:51 | 000,010,908 | ---- | M] () -- C:\Users\PM\Documents\Poolwassererwärmung.xlsx
[2010.05.08 18:02:04 | 033,998,065 | ---- | M] () -- C:\Users\PM\Desktop\Outflexx-Katalog-2009[1].pdf
[2010.05.08 14:37:57 | 000,298,784 | ---- | M] () -- C:\Users\PM\Desktop\Angebot CM Langenfeld engl RHMCPM 130709.pptx
[2010.05.07 12:41:29 | 000,001,393 | ---- | M] () -- C:\Users\PM\Desktop\DivX Movies.lnk
[2010.05.07 12:41:16 | 000,000,919 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk
[2010.05.07 10:21:56 | 000,028,160 | ---- | M] () -- C:\Users\PM\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.07 08:32:32 | 000,059,392 | R--- | M] () -- C:\Windows\System32\streamhlp.dll
[2010.05.07 08:32:31 | 000,000,816 | ---- | M] () -- C:\Users\PM\Desktop\TrojanHunter.lnk
[2010.05.07 07:22:16 | 000,000,016 | ---- | M] () -- C:\Users\PM\AppData\Roaming\fbknso.dat
[2010.05.06 10:36:38 | 000,221,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2010.05.05 10:19:47 | 000,000,016 | ---- | M] () -- C:\Users\PM\AppData\Roaming\qvjsge.dat
[2010.05.05 09:53:50 | 000,270,484 | ---- | M] () -- C:\Users\PM\Desktop\Konto MTH.PDF
[2010.05.05 09:13:13 | 000,274,839 | ---- | M] () -- C:\Users\PM\Desktop\Antwort ARAG 26042010.PDF
[2010.05.03 19:36:30 | 000,055,808 | ---- | M] () -- C:\Users\PM\Desktop\Projekt Funpoker Business modell 2010-04-30.doc
[2010.05.03 08:14:34 | 000,153,189 | ---- | M] () -- C:\Users\PM\Documents\ErlaeuterungzuTop6BusinessParkStuttgart.pdf
[2010.05.03 08:13:25 | 000,119,380 | ---- | M] () -- C:\Users\PM\Desktop\ErlaeuterungzuTop15BusinessParkStuttgart2.pdf
[2010.05.02 22:06:09 | 000,010,429 | ---- | M] () -- C:\Users\PM\Desktop\TKN Real Estate Investment Funds.docx
[2010.05.02 17:06:49 | 000,157,646 | ---- | M] () -- C:\Users\PM\Desktop\e69c03a2b6.jpg
[2010.05.01 22:22:46 | 000,001,804 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010.05.01 22:20:04 | 000,001,728 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2010.04.29 12:19:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.04.29 12:19:14 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.04.27 00:04:42 | 000,353,592 | ---- | M] (DivX, Inc.) -- C:\Windows\System32\DivXControlPanelApplet.cpl
[2010.04.26 08:34:23 | 000,011,305 | ---- | M] () -- C:\Users\PM\Documents\Inflationskalkulation.xlsx
[2010.04.22 20:21:32 | 000,000,680 | ---- | M] () -- C:\Users\PM\AppData\Local\d3d9caps.dat
[2010.04.21 20:42:04 | 092,506,339 | ---- | M] () -- C:\Users\PM\Desktop\BEHNCKE_Preisliste_2010.pdf
[2010.04.21 08:33:02 | 000,013,452 | ---- | M] () -- C:\Users\PM\Desktop\Handbuch Immobilieninvestition 2010.docx
[2010.04.20 16:10:54 | 000,170,944 | ---- | M] () -- C:\Users\PM\Desktop\Vermietung von Handelsimmobilien MVO.pdf
[2010.04.20 10:16:49 | 000,464,896 | ---- | M] () -- C:\Users\PM\Documents\Klagerwiderung__313265_PM20042010.doc
[2010.04.19 20:32:12 | 000,576,738 | ---- | M] () -- C:\Users\PM\Desktop\ExposeBSPBusinessparkStuttgart.pdf
[2010.04.19 11:01:45 | 005,463,752 | ---- | M] () -- C:\Users\PM\Desktop\FINAL INVESTMENT PROPOSAL 01-03-2010-2.pdf
[2010.04.16 20:52:34 | 000,262,372 | ---- | M] () -- C:\Users\PM\Desktop\http___clicks.aweber.pdf
[2010.04.15 09:21:47 | 000,000,959 | ---- | M] () -- C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2010.04.14 20:42:32 | 000,653,824 | ---- | M] () -- C:\Users\PM\Desktop\Anschreiben Mieter 14042010KM.doc
[2010.04.14 19:30:51 | 000,039,424 | ---- | M] () -- C:\Users\PM\Desktop\example bank confirmation.doc
[2010.04.14 15:38:22 | 001,456,416 | ---- | M] () -- C:\Users\PM\Desktop\TeamViewerQS_dieprozessoren_01.exe
[2010.04.13 07:15:24 | 000,002,075 | ---- | M] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2010.04.12 08:04:56 | 000,362,479 | ---- | M] () -- C:\Users\PM\Desktop\Serviceheft.PDF
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2010.05.12 07:40:31 | 000,054,016 | ---- | C] () -- C:\Windows\System32\drivers\woshknxc.sys
[2010.05.12 07:26:00 | 000,000,820 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.05.12 07:21:31 | 002,188,731 | ---- | C] () -- C:\Users\PM\Desktop\Urteil.pdf
[2010.05.12 07:21:31 | 000,559,654 | ---- | C] () -- C:\Users\PM\Desktop\IFK.pdf
[2010.05.10 13:11:31 | 000,198,588 | ---- | C] () -- C:\Windows\System32\drivers\APPFCONT.DAT.bck
[2010.05.10 13:11:31 | 000,198,588 | ---- | C] () -- C:\Windows\System32\drivers\APPFCONT.DAT
[2010.05.10 13:11:31 | 000,001,132 | ---- | C] () -- C:\Windows\System32\drivers\APPFLTR.CFG.bck
[2010.05.10 13:11:31 | 000,001,132 | ---- | C] () -- C:\Windows\System32\drivers\APPFLTR.CFG
[2010.05.10 13:08:18 | 000,000,133 | ---- | C] () -- C:\Windows\AdminIE.ini
[2010.05.08 18:02:04 | 033,998,065 | ---- | C] () -- C:\Users\PM\Desktop\Outflexx-Katalog-2009[1].pdf
[2010.05.08 14:37:57 | 000,298,784 | ---- | C] () -- C:\Users\PM\Desktop\Angebot CM Langenfeld engl RHMCPM 130709.pptx
[2010.05.07 08:32:31 | 000,000,816 | ---- | C] () -- C:\Users\PM\Desktop\TrojanHunter.lnk
[2010.05.07 08:32:28 | 000,059,392 | R--- | C] () -- C:\Windows\System32\streamhlp.dll
[2010.05.07 07:22:16 | 000,000,016 | ---- | C] () -- C:\Users\PM\AppData\Roaming\fbknso.dat
[2010.05.05 10:19:47 | 000,000,016 | ---- | C] () -- C:\Users\PM\AppData\Roaming\qvjsge.dat
[2010.05.05 09:53:50 | 000,270,484 | ---- | C] () -- C:\Users\PM\Desktop\Konto MTH.PDF
[2010.05.05 09:13:12 | 000,274,839 | ---- | C] () -- C:\Users\PM\Desktop\Antwort ARAG 26042010.PDF
[2010.05.03 19:36:30 | 000,055,808 | ---- | C] () -- C:\Users\PM\Desktop\Projekt Funpoker Business modell 2010-04-30.doc
[2010.05.03 08:14:34 | 000,153,189 | ---- | C] () -- C:\Users\PM\Documents\ErlaeuterungzuTop6BusinessParkStuttgart.pdf
[2010.05.03 08:13:25 | 000,119,380 | ---- | C] () -- C:\Users\PM\Desktop\ErlaeuterungzuTop15BusinessParkStuttgart2.pdf
[2010.05.02 21:08:02 | 000,010,429 | ---- | C] () -- C:\Users\PM\Desktop\TKN Real Estate Investment Funds.docx
[2010.05.02 17:11:00 | 000,157,646 | ---- | C] () -- C:\Users\PM\Desktop\e69c03a2b6.jpg
[2010.05.01 22:22:46 | 000,001,804 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2010.05.01 22:20:04 | 000,001,728 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2010.05.01 18:35:33 | 000,010,908 | ---- | C] () -- C:\Users\PM\Documents\Poolwassererwärmung.xlsx
[2010.04.26 08:34:23 | 000,011,305 | ---- | C] () -- C:\Users\PM\Documents\Inflationskalkulation.xlsx
[2010.04.21 20:42:02 | 092,506,339 | ---- | C] () -- C:\Users\PM\Desktop\BEHNCKE_Preisliste_2010.pdf
[2010.04.21 08:33:02 | 000,013,452 | ---- | C] () -- C:\Users\PM\Desktop\Handbuch Immobilieninvestition 2010.docx
[2010.04.20 16:10:54 | 000,170,944 | ---- | C] () -- C:\Users\PM\Desktop\Vermietung von Handelsimmobilien MVO.pdf
[2010.04.20 10:15:41 | 000,464,896 | ---- | C] () -- C:\Users\PM\Documents\Klagerwiderung__313265_PM20042010.doc
[2010.04.19 20:32:12 | 000,576,738 | ---- | C] () -- C:\Users\PM\Desktop\ExposeBSPBusinessparkStuttgart.pdf
[2010.04.19 11:01:45 | 005,463,752 | ---- | C] () -- C:\Users\PM\Desktop\FINAL INVESTMENT PROPOSAL 01-03-2010-2.pdf
[2010.04.16 20:52:34 | 000,262,372 | ---- | C] () -- C:\Users\PM\Desktop\http___clicks.aweber.pdf
[2010.04.15 09:22:30 | 000,001,393 | ---- | C] () -- C:\Users\PM\Desktop\DivX Movies.lnk
[2010.04.15 09:22:00 | 000,000,919 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Player.lnk
[2010.04.15 09:21:47 | 000,000,959 | ---- | C] () -- C:\Users\Public\Desktop\DivX Plus Converter.lnk
[2010.04.14 20:42:28 | 000,653,824 | ---- | C] () -- C:\Users\PM\Desktop\Anschreiben Mieter 14042010KM.doc
[2010.04.14 15:38:17 | 001,456,416 | ---- | C] () -- C:\Users\PM\Desktop\TeamViewerQS_dieprozessoren_01.exe
[2010.04.14 14:56:54 | 000,001,337 | ---- | C] () -- C:\Users\PM\Documents\root_Ca.cer
[2010.04.13 07:15:24 | 000,002,075 | ---- | C] () -- C:\Users\Public\Desktop\Google Earth.lnk
[2010.04.12 08:04:56 | 000,362,479 | ---- | C] () -- C:\Users\PM\Desktop\Serviceheft.PDF
[2009.12.31 11:47:52 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2009.12.13 16:52:33 | 000,043,520 | ---- | C] () -- C:\Windows\System32\CmdLineExt03.dll
[2009.10.13 17:57:48 | 000,098,304 | ---- | C] () -- C:\Windows\System32\NtDirect.dll
[2009.09.17 09:52:39 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.08.06 21:02:34 | 000,000,137 | ---- | C] () -- C:\Windows\oports.INI
[2009.07.20 09:22:10 | 000,036,363 | ---- | C] () -- C:\Windows\CSTBox.INI
[2008.12.25 15:20:58 | 000,004,922 | ---- | C] () -- C:\Windows\WinSig.ini
[2008.12.25 15:20:58 | 000,002,467 | ---- | C] () -- C:\Windows\WinRos.ini
[2008.10.07 09:13:30 | 000,197,912 | ---- | C] () -- C:\Windows\System32\physxcudart_20.dll
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2008.05.22 10:21:29 | 000,116,224 | ---- | C] () -- C:\Windows\System32\redmonnt.dll
[2008.04.22 16:32:11 | 000,876,544 | ---- | C] () -- C:\Windows\System32\TEACico2.dll
[2008.04.22 16:32:10 | 000,046,606 | ---- | C] () -- C:\Windows\System32\instwdm.ini
[2008.04.22 16:32:10 | 000,000,054 | ---- | C] () -- C:\Windows\System32\ctzapxx.ini
[2008.04.22 16:14:52 | 000,000,307 | ---- | C] () -- C:\Windows\System32\KILL.INI
[2008.04.22 08:50:28 | 000,003,072 | ---- | C] () -- C:\Windows\CTXFIGER.DLL
[2008.04.22 08:50:22 | 000,105,472 | ---- | C] () -- C:\Windows\System32\APOMngr.dll
[2008.04.22 08:50:22 | 000,067,072 | ---- | C] () -- C:\Windows\System32\CmdRtr.dll
[2008.04.22 08:47:27 | 000,131,062 | ---- | C] () -- C:\Windows\System32\DellPM.ini
[2007.01.25 19:31:36 | 000,053,299 | ---- | C] () -- C:\Windows\System32\pthreadVC.dll
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 12:25:44 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
< End of report >

...Und der Extras Text

OTL Extras logfile created on: 12.05.2010 07:41:01 - Run 1
OTL by OldTimer - Version 3.2.4.1 Folder = C:\Users\PM\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18904)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 32,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 66,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 586,12 Gb Total Space | 393,03 Gb Free Space | 67,06% Space Free | Partition Type: NTFS
Drive D: | 10,00 Gb Total Space | 5,29 Gb Free Space | 52,89% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded

Computer Name: DELL
Current User Name: PM
Logged in as Administrator.

Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [Digital Photo Professional] -- C:\Program Files\Canon\Digital Photo Professional\DPPViewer.exe /path "%1" (CANON INC.)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2706266412-2156551646-3589691431-1000]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02F8FF57-FBC2-43E0-9A1B-5D870343C366}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{0CD6BBC8-37DD-4C77-B2D8-62EA49C63B6D}" = lport=10500 | protocol=6 | dir=in | name=nt port |
"{1C7690B2-65E9-45D3-B98E-CA203E0BCFF0}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{3BA88A16-0EBF-4B33-8B5F-5EA95ACCC81C}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{497A4C15-22AA-408F-8543-0A6B36005BEC}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{4C6B2C07-2A2A-4925-84BF-77059ABC41D3}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{4D4FD955-180D-4E3B-BE2B-E791731EFA55}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{5875B991-F512-400E-98A5-72663984733E}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{70E80794-A088-4442-A418-6ACFEBC92E4C}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{7198A7B2-178F-4110-B182-07B31AC08AE2}" = lport=990 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{A855F6A2-2D47-4781-A376-4E5656EEA3FE}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{A9910CF0-9DBF-4009-9877-05CB7178B509}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{AD36B913-0B3B-4E2A-85F1-E1D8646B0CD0}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{B47532F6-9AEB-4D59-8030-EBC9CA73C225}" = lport=10505 | protocol=6 | dir=in | name=nt port price |
"{B4CE65FE-85E4-4403-B452-F8F462DE2976}" = lport=26675 | protocol=6 | dir=in | name=@%systemroot%\windowsmobile\wmdcbase.exe,-4006 |
"{C6ABF55C-61DF-40EA-8E07-EDAA51369B15}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{CF7CAC06-6C8D-45E8-A640-F807C6F75A12}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{DA9CD943-D3BF-4DEF-8526-3B66E3243879}" = rport=5679 | protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{DB211CEA-BB10-4C06-89CE-12CB3CAA0C71}" = lport=999 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |
"{DD1BEA18-F53E-4936-911A-F3AD96FB7BE5}" = lport=5721 | protocol=6 | dir=in | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{FFFFA55D-CF59-4A5A-B76B-BBF80A92FC51}" = lport=5678 | protocol=6 | dir=in | app=%systemroot%\windowsmobile\wmdhost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{04E09291-C65F-4A5E-A24E-EA9815C99FC6}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{0A492323-BB1E-40A3-A4AA-83211DD9C0A9}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{156AAF15-3F08-47A8-9271-712300055A58}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{198FD5F7-0006-4DBF-9C68-C3E2F95F1B1D}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{19E7A2AA-0CBA-4EC8-8B7C-802CC145B46F}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{44FC7B88-FA41-4DC6-84C3-8C64BBC536CF}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{56475B73-903A-41CB-9E71-508A84815DB0}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{69CF9597-D463-4768-A726-ADF3A540D36A}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{73BF5BFE-951D-46C4-886F-08485B3E8B56}" = protocol=17 | dir=in | app=c:\program files\panda security\waagent\wasagent\wasagent.exe |
"{76BDC7D7-BD14-4704-AFC9-C0A6B77FC73F}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{76EB5698-5D92-4AA2-B51A-4C5B41BF91F2}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{900608EB-3876-46B5-8B63-19349C425CF2}" = protocol=17 | dir=in | app=c:\program files\ultravnc\vncviewer.exe |
"{9D9A4C45-044E-4C68-8B9B-08941AEC874E}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{9DBBB5B7-389D-43EC-890A-5BF04F49DF6A}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{A2A7D5DE-2F2D-41C0-BCE6-A96C1FF9DAFF}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{A2AB0B61-DDBA-49F2-BD24-994E4BC98092}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{A44620F1-FFE9-4FBF-8DFC-7C45D709AEE3}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{A550B2D8-5BF1-4C41-8EE7-67ED96BE5FCA}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{B72072B3-03DF-4093-8359-D78D1CEBD966}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{B9957004-1661-48CE-8D59-88495BA77632}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{BF526349-8118-469B-AB5F-9AB8CDCD3407}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{CB314821-45F9-4E01-890A-2072769BF577}" = protocol=17 | dir=in | app=c:\program files\itunes\itunes.exe |
"{D2CDF050-C32F-4ECB-9312-26830E94C78E}" = protocol=6 | dir=in | app=c:\program files\itunes\itunes.exe |
"{D38D0A27-D9EA-4870-86BF-97C95B236EFA}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{D91B71BE-2CF4-4572-B8EF-1F0B019C7A79}" = protocol=6 | dir=in | app=c:\program files\limewire\limewire.exe |
"{D94F171F-DA2F-41AA-90F5-3552CAB376CF}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{E5CA9E62-A55E-455A-B6E2-B01043E6BBD9}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{EC398748-B6FB-490D-909E-CA6BD5028A70}" = protocol=6 | dir=in | app=c:\program files\panda security\waagent\wasagent\wasagent.exe |
"{F09D5283-8BD4-47FE-BFF5-2CC0FE867E59}" = protocol=6 | dir=in | app=c:\program files\ultravnc\vncviewer.exe |
"{FBF09AF0-BE8A-4277-95E7-5FDDECF3E322}" = protocol=17 | dir=in | app=c:\program files\limewire\limewire.exe |
"TCP Query User{15E8E227-CBC8-42B8-9DA2-D0156A449372}C:\program files\zattoo\zattoo.exe" = protocol=6 | dir=in | app=c:\program files\zattoo\zattoo.exe |
"TCP Query User{2D5BFCFC-F63A-4815-86C7-3B42C45F2F12}C:\program files\ninjatrader 6.5\bin\ninjatrader.exe" = protocol=6 | dir=in | app=c:\program files\ninjatrader 6.5\bin\ninjatrader.exe |
"TCP Query User{70EFD497-54AC-48C9-B793-5DDED3937AFD}C:\program files\internet explorer\iexplore.exe" = protocol=6 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"TCP Query User{A5F07C28-4D35-411E-B69B-17B3DF4A0AF7}C:\program files\ninjatrader 6.5\bin\ninjatrader.exe" = protocol=6 | dir=in | app=c:\program files\ninjatrader 6.5\bin\ninjatrader.exe |
"TCP Query User{B68714CF-7A68-493C-ADDC-56903279F578}C:\program files\esignal\winros.exe" = protocol=6 | dir=in | app=c:\program files\esignal\winros.exe |
"TCP Query User{E217D3FF-5895-44B5-973C-771B3AD6729D}C:\program files\zattoo\zattood.exe" = protocol=6 | dir=in | app=c:\program files\zattoo\zattood.exe |
"TCP Query User{EA74ACA1-4023-4C8C-81D2-349AA6278795}C:\program files\realvnc\vnctool\vnctool.exe" = protocol=6 | dir=in | app=c:\program files\realvnc\vnctool\vnctool.exe |
"UDP Query User{3972D5AE-ECC5-4777-A1E0-F6E9E0DEAD79}C:\program files\esignal\winros.exe" = protocol=17 | dir=in | app=c:\program files\esignal\winros.exe |
"UDP Query User{47F1AB3A-861B-4720-8F11-7692E7184AF0}C:\program files\zattoo\zattoo.exe" = protocol=17 | dir=in | app=c:\program files\zattoo\zattoo.exe |
"UDP Query User{4EE2B8FD-0DAA-4AF7-97AC-B69722304193}C:\program files\realvnc\vnctool\vnctool.exe" = protocol=17 | dir=in | app=c:\program files\realvnc\vnctool\vnctool.exe |
"UDP Query User{AAEA316B-CC70-4074-A0A4-B23A1F146A0C}C:\program files\zattoo\zattood.exe" = protocol=17 | dir=in | app=c:\program files\zattoo\zattood.exe |
"UDP Query User{C21DCFBB-38D6-4BA2-8AD5-4319CA8F312D}C:\program files\internet explorer\iexplore.exe" = protocol=17 | dir=in | app=c:\program files\internet explorer\iexplore.exe |
"UDP Query User{DDF2BA67-0FD6-41BE-B31F-09FD47B04C6C}C:\program files\ninjatrader 6.5\bin\ninjatrader.exe" = protocol=17 | dir=in | app=c:\program files\ninjatrader 6.5\bin\ninjatrader.exe |
"UDP Query User{F7911A92-5595-4DD1-9554-911CC86AF534}C:\program files\ninjatrader 6.5\bin\ninjatrader.exe" = protocol=17 | dir=in | app=c:\program files\ninjatrader 6.5\bin\ninjatrader.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04B45310-A5FE-4425-BFCA-1A6D8920DE74}" = OpenOffice.org 3.0
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{08C0729E-3E50-11DF-9D81-005056806466}" = Google Earth
"{08E81ABD-79F7-49C2-881F-FD6CB0975693}" = Roxio Creator Data
"{09760D42-E223-42AD-8C3E-55B47D0DDAC3}" = Roxio Creator DE
"{0B284412-8118-4E68-8C67-A094C053A4FA}" = Mobile Golf Scorer
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{163D89DD-7386-412D-837F-D2B3131780D3}" = QuickSet
"{18A5DFF2-8A95-49F3-873F-743CB5549F3D}" = Canon ScanGear Starter
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{18F11181-EA1A-42AE-AF89-4867C7F7A6FA}" = Sound Blaster X-Fi
"{19C2EC4E-2EC4-46E6-B838-0F8C6BD87E6B}" = NinjaTrader 6.5
"{1A683509-DF09-4E31-A9B2-AEAB9D10F33D}" = PFGAPI
"{1F54DAFA-9261-4A62-B59D-6C9F26B48FE4}" = Roxio Creator Tools
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 19
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2FA3875D-907B-4B14-94C3-F1D9FDC31CC2}" = Panda Endpoint Agent
"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Roxio Update Manager
"{3248F0A8-6813-11D6-A77B-00B0D0160000}" = Java(TM) SE Runtime Environment 6
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{448E2D77-E504-4221-B2C2-93646B344729}" = Mouse Suite for Desktop Computers
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{5CD29180-A95E-11D3-A4EB-00C04F7BDB2C}" = Benutzerhandbuch
"{5DB65884-C963-4454-AABA-4CA3089281FA}" = NVIDIA PhysX
"{5ECB3A3C-980B-4D12-9724-25DCB07A1F47}" = iTunes
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6D08D180-EC52-4093-9B50-59E7AB3C3CF4}" = DVR-Studio HD
"{7148F0A8-6813-11D6-A77B-00B0D0142030}" = Java 2 Runtime Environment, SE v1.4.2_03
"{73A4F29F-31AC-4EBD-AA1B-0CC5F18C8F83}" = Roxio Creator Audio
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B63B2922B174135AFC0E1377DD81EC2}" =
"{7C2A954E-A0F7-4225-8738-221B56EC2818}" = OCO Trader
"{7E91306C-899F-45F3-B5E9-4B480A27A63D}" = Tiger Woods PGA TOUR 2004
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{864785DF-6D78-4A38-B66F-845BC5741843}" = liteCAM Evaluation
"{8649802A-88A1-4F85-A606-4B91821EFE3E}" = Tunebite
"{88C5855E-D109-4C42-A35B-D3A0F4B8356E}" = PFGAPI
"{8A253629-0511-4854-8B4E-46E57E66005C}" = Bonjour
"{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8}" = SWAT 4
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_BASICR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_BASICR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_BASICR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_BASICR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_BASICR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_BASICR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_BASICR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_BASICR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile-Gerätecenter
"{91120000-0013-0000-0000-0000000FF1CE}" = Microsoft Office Basic 2007
"{91120000-0013-0000-0000-0000000FF1CE}_BASICR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-0013-0000-0000-0000000FF1CE}_BASICR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{9DE1BE03-AFE2-4CDB-BFEB-D06D736CD01A}" = Apple Mobile Device Support
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A81300000003}" = Adobe Reader 8.1.7 - Deutsch
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B2C3BB6B-E005-4246-B8E5-DF0A4D073CDC}" = PixiePack Codec Pack
"{B6A26DE5-F2B5-4D58-9570-4FC760E00FCD}" = Roxio Creator Copy
"{BBF0A67B-5DBA-452F-9D2E-6F168BC226E4}" = Need for Speed™ SHIFT
"{BEEFC4F8-2909-48B3-AFAA-55D3533FDEDD}" = Creative MediaSource 5
"{C576C82C-EE87-11D6-B031-0000CB597465}" = A.F.7 Merge your files 1.3
"{C5961323-A2E5-4FAB-B92D-DBF6C282F0F5}" = Logitech Gaming Software 5.01
"{C99C0593-3B48-41D9-B42F-6E035B320449}" = Broadcom Management Programs
"{CA9BCD4D-B782-4637-8F1F-F9A328D3C244}" = CanoScan Toolbox Ver4.9
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CEF7CA61-EB77-418D-A149-C4BF7AECA6FF}" = tradesignal web edition
"{E3BFEE55-39E2-4BE0-B966-89FE583822C1}" = Dell Support Center (Support Software)
"{E7044E25-3038-4A76-9064-344AC038043E}" = Windows Mobile-Gerätecenter: Treiberupdate
"{ECA1A3B6-898F-4DCE-9F04-714CF3BA126B}" = Adobe Flash Player 10 Plugin
"{ED439A64-F018-4DD4-8BA5-328D85AB09AB}" = Roxio Creator DE
"{EECE6974-133B-4FD0-BFB0-B58532A804B1}" = Jaadu VNC Connect
"{F1D3253B-34F3-40E9-891F-1AA3EE1BFC67}" = Mobile Golf Scorer nur Pocket PC
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{FB26C16F-C677-4680-89FE-C01319315152}" = Panda Endpoint Protection
"{FD023F61-65E9-465C-B558-7C64EB2B97E6}" = Dell Handbuch zum Einstieg
"82A44D22-9452-49FB-00FB-CEC7DCAF7E23" = EA SPORTS online 2004
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"AFPL Ghostscript 8.54" = AFPL Ghostscript 8.54
"AFPL Ghostscript Fonts" = AFPL Ghostscript Fonts
"BASICR" = Microsoft Office Basic 2007
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DivX Setup.divx.com" = DivX-Setup
"DPP" = Canon Utilities Digital Photo Professional 3.6
"EOS Utility" = Canon Utilities EOS Utility
"ESET Online Scanner" = ESET Online Scanner v3
"FileZilla Client" = FileZilla Client 3.3.2.1
"FreePDF_XP" = FreePDF XP (Remove only)
"GSTrader Real Console" = GSTrader Real Console
"InstallShield_{8E1CCF20-9E12-4824-BD59-7AD9E0486DD8}" = SWAT 4
"LimeWire" = LimeWire 5.4.6
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mirage Driver_is1" = Mirage Driver 1.1
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Open Ports Scanner_is1" = Open Ports Scanner 2.4
"OpenAL" = OpenAL
"PhotoStitch" = Canon Utilities PhotoStitch
"Picture Style Editor" = Canon Utilities Picture Style Editor
"RealPlayer 6.0" = RealPlayer
"Redirection Port Monitor" = RedMon - Redirection Port Monitor
"Tomb Raider III" = Tomb Raider III
"TrojanHunter_is1" = TrojanHunter 5.3
"Ultravnc2_is1" = UltraVNC 1.0.5.3
"Veetle TV" = Veetle TV 0.9.17
"VLC media player" = VLC media player 0.9.9
"WinPcapInst" = WinPcap 4.0
"WinRAR archiver" = WinRAR
"Yahoo! Companion" = Yahoo! Toolbar
"Zattoo" = Zattoo 3.3.4 Beta

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Trader Workstation" = Trader Workstation

========== Last 10 Event Log Errors ==========

Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!

< End of report >