Systemübernahme oder/und Malware? - WIN XP

Logfile of random's system information tool 1.08 (written by random/random)
Run by %user% at 2010-08-22 19:05:01
Microsoft Windows XP Home Edition Service Pack 3
System drive C: has 25 GB (33%) free of 76 GB
Total RAM: 511 MB (53% free)
 
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:07:53, on 22.08.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
 
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Norman_VirusControl\Npm\bin\ELOGSVC.EXE
C:\Norman_VirusControl\Ngs\Bin\Nprosec.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Norman_VirusControl\Npm\Bin\Zanda.exe
C:\Norman_VirusControl\npm\bin\nvoy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\Gemeinsame Dateien\Seagate\Schedule2\schedul2.exe
C:\PROGRA~1\Iomega\System32\AppServices.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Norman_VirusControl\Npm\Bin\scheduler.exe
C:\Norman_VirusControl\Npm\Bin\Njeeves.exe
C:\Norman_VirusControl\nse\bin\NSESVC.EXE
C:\WINDOWS\System32\alg.exe
C:\Norman_VirusControl\Npm\Bin\ZLH.EXE
C:\Programme\FreePDF_XP\fpassist.exe
C:\Programme\BillP Studios\WinPatrol\winpatrol.exe
C:\Norman_VirusControl\Nvc\bin\nvcoas.exe
C:\Programme\Seagate\DiscWizard\TimounterMonitor.exe
C:\Programme\Gemeinsame Dateien\Seagate\Schedule2\schedhlp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Software\SpyBot_search_and_destroy\TeaTimer.exe
C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
C:\Programme\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
C:\Norman_VirusControl\Nvc\Bin\Nip.exe
C:\Norman_VirusControl\Nvc\Bin\cclaw.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Dokumente und Einstellungen\***\Desktop\RSIT.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Programme\trend micro\***.exe
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 
 
h**p://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 
 
h**p://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 
 
h**p://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
 
h**p://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - 
 
C:\Software\SpyBot_search_and_destroy\SDHelper.dll
O2 - BHO: IE DOM Explorer - {CC7E636D-39AA-49b6-B511-65413DA137A1} - C:\Programme\Internet Explorer 
 
Developer Toolbar\IEDevToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - 
 
C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - 
 
C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Übersetzer - {FF284F5C-7CF9-4682-8701-D467C1DBB99F} - 
 
C:\Software\AT-PROMPT_Translator\PRMTIE\prmtie.dll
O3 - Toolbar: Developer Toolbar - {CC962137-2E78-4f94-975E-FC0C07DBD78F} - C:\Programme\Internet Explorer 
 
Developer Toolbar\IEDevToolbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Norman ZANDA] "C:\Norman_VirusControl\Npm\Bin\ZLH.EXE" /LOAD /SPLASH
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [InCD] C:\Programme\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [FreePDF Assistant] C:\Programme\FreePDF_XP\fpassist.exe
O4 - HKLM\..\Run: [PCMService] "C:\Software_Multimedia\CyberLink_Home_Cinema\PowerCinema\PCMService.exe"
O4 - HKLM\..\Run: [ASM] "C:\Software\AOL_Active Security Monitor\ASMonitor.exe" HIDEMAIN
O4 - HKLM\..\Run: [WinPatrol] C:\Programme\BillP Studios\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [DiscWizardMonitor.exe] C:\Programme\Seagate\DiscWizard\DiscWizardMonitor.exe
O4 - HKLM\..\Run: [AcronisTimounterMonitor] C:\Programme\Seagate\DiscWizard\TimounterMonitor.exe
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Programme\Gemeinsame 
 
Dateien\Seagate\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [OutpostFeedBack] "C:\Programme\Agnitum\Outpost Firewall Pro\feedback.exe" 
 
/dump:os_startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [OutpostMonitor] "C:\PROGRA~1\Agnitum\OUTPOS~1\op_mon.exe" /tray /noservice
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\software_multimedia\quicktime\QTTask.exe" -atboottime
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Software\Malwarebytes_Anti-Malware\mbamgui.exe 
 
/install /silent
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Software\SpyBot_search_and_destroy\TeaTimer.exe
O4 - HKCU\..\Run: [softwareuptodate] C:\Programme\Software-UpToDate\Software_UpToDate_Client.exe /reminder
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: Outpost Firewall Pro Quick Tune - {44627E97-789B-40d4-B5C2-58BD171129A1} - 
 
C:\Programme\Agnitum\Outpost Firewall Pro\ie_bar.dll
O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - 
 
C:\Software\AT-PROMPT_Translator\PRMTIE\prmtie5.htm
O9 - Extra 'Tools' menuitem: Übersetzen - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - 
 
C:\Software\AT-PROMPT_Translator\PRMTIE\prmtie5.htm
O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - 
 
C:\Software\AT-PROMPT_Translator\PRMTIE\options.htm
O9 - Extra 'Tools' menuitem: Übersetzungsoptionen anpassen - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - 
 
C:\Software\AT-PROMPT_Translator\PRMTIE\options.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - 
 
C:\Software\SpyBot_search_and_destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - 
 
{DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Software\SpyBot_search_and_destroy\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network 
 
Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - 
 
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Microsoft AntiSpyware helper - {F6BCBA72-9ABD-468B-A538-619F72A8EC8C} - (no file)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F6BCBA72-9ABD-468B-A538-619F72A8EC8C} - (no 
 
file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - 
 
C:\Programme\Messenger\msmsgs.exe
O9 - Extra button: Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Programme\Agnitum\Outpost 
 
Firewall 1.0\trash.exe (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Show Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - 
 
C:\Programme\Agnitum\Outpost Firewall 1.0\trash.exe (file missing) (HKCU)
O9 - Extra button: Microsoft AntiSpyware helper - {F6BCBA72-9ABD-468B-A538-619F72A8EC8C} - (no file) 
 
(HKCU)
O9 - Extra 'Tools' menuitem: Microsoft AntiSpyware helper - {F6BCBA72-9ABD-468B-A538-619F72A8EC8C} - (no 
 
file) (HKCU)
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - 
 
h**p://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.4.2.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - 
 
h**p://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase6770.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - 
 
h**p://a1540.g.akamai.net/7/1540/52/20041101/qtinstall.info.apple.com/pthalo/de/win/QuickTimeInstaller.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - 
 
h**p://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1111772620406
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - 
 
h**p://ax.emsisoft.com/asquared.cab
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Java Runtime Environment 1.4.1_02) - 
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} (Java Plug-in 1.6.0_03) - 
O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} (Java Plug-in 1.6.0_04) - 
O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} (Java Plug-in 1.6.0_05) - 
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} (Java Plug-in 1.6.0_07) - 
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} (Java Plug-in 1.6.0_20) - 
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - h**p://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - 
 
h**p://h30043.www3.hp.com/aio/de/check/qdiagh.cab?326
O17 - HKLM\System\CCS\Services\Tcpip\..\{A97CD352-26B5-4316-AA25-BB698327EA98}: NameServer = 
 
69.50.176.197,195.225.176.31
O20 - AppInit_DLLs: c:\progra~1\agnitum\outpos~1\wl_hook.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - 
 
C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - 
 
C:\WINDOWS\System32\browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Programme\Gemeinsame 
 
Dateien\Seagate\Schedule2\schedul2.exe
O23 - Service: Agnitum Client Security Service (acssrv) - Agnitum Ltd. - 
 
C:\PROGRA~1\Agnitum\OUTPOS~1\acs.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - 
 
C:\Software_Multimedia\CyberLink_Home_Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - 
 
C:\Software_Multimedia\CyberLink_Home_Cinema\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Programme\CyberLink\Shared 
 
Files\CLML_NTService\CLMLServer.exe
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - 
 
C:\Norman_VirusControl\Npm\bin\ELOGSVC.EXE
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Programme\Ahead\InCD\InCDsrv.exe
O23 - Service: Iomega App Services - Iomega Corporation - C:\PROGRA~1\Iomega\System32\AppServices.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - 
 
C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Programme\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LogoMedia TranslateDotNet Server - LogoMedia Corporation - C:\Software\Power 
 
Translator\LogoMedia TranslateDotNet Server.exe
O23 - Service: Norman NJeeves - Norman ASA - C:\Norman_VirusControl\Npm\Bin\Njeeves.exe
O23 - Service: Norman ZANDA - Norman ASA - C:\Norman_VirusControl\Npm\Bin\Zanda.exe
O23 - Service: Norman Security service (NPROSECSVC) - Norman ASA - 
 
C:\Norman_VirusControl\Ngs\Bin\Nprosec.exe
O23 - Service: Norman Scanner Engine Service (nsesvc) - Norman ASA - 
 
C:\Norman_VirusControl\nse\bin\NSESVC.EXE
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - 
 
C:\Norman_VirusControl\Nvc\bin\nvcoas.exe
O23 - Service: Norman Resource Provider (NVOY) - Norman ASA - C:\Norman_VirusControl\npm\bin\nvoy.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - 
 
C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: O&O Defrag 2000 (OOD2000) - O&O Software GmbH - C:\WINDOWS\system32\OOD2000.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SiSoftware Deployment Agent Service (SandraAgentSrv) - SiSoftware - C:\Software\SiSoftware 
 
Sandra Lite 2009.SP2\RpcAgentSrv.exe
O23 - Service: Norman Scheduler Service (Scheduler) - Norman ASA - 
 
C:\Norman_VirusControl\Npm\Bin\scheduler.exe
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
O23 - Service: Zope instance at C:\Plone\parts\instance (Zope_-722186511) - Unknown owner - 
 
C:\Plone\python\PythonService.exe
O23 - Service: Zope instance at C:\Plone\Data (Zope_29920312) - Unknown owner - 
 
C:\Plone\Python\PythonService.exe
 
--
End of file - 13181 bytes
 
======Scheduled tasks folder======
 
C:\WINDOWS\tasks\Ad-Aware Update (Daily 1).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 2).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 3).job
C:\WINDOWS\tasks\Ad-Aware Update (Daily 4).job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\FRU Task #Hewlett-Packard#hp psc 1200 series#1085903485.job
 
======Registry dump======
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper 
 
Objects\{53707962-6F74-2D53-2644-206D7942484F}]
Spybot-S&D IE Protection - C:\Software\SpyBot_search_and_destroy\SDHelper.dll [2009-01-26 1879896]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper 
 
Objects\{CC7E636D-39AA-49b6-B511-65413DA137A1}]
IE DOM Explorer - C:\Programme\Internet Explorer Developer Toolbar\IEDevToolbar.dll [2005-09-12 258048]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper 
 
Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Programme\Java\jre6\bin\jp2ssv.dll [2010-08-04 41760]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper 
 
Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2010-08-04 79648]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{FF284F5C-7CF9-4682-8701-D467C1DBB99F} - Übersetzer - C:\Software\AT-PROMPT_Translator\PRMTIE\prmtie.dll 
 
[2005-01-12 434176]
{CC962137-2E78-4f94-975E-FC0C07DBD78F} - Developer Toolbar - C:\Programme\Internet Explorer Developer 
 
Toolbar\IEDevToolbar.dll [2005-09-12 258048]
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"=C:\WINDOWS\System32\NvCpl.dll [2003-10-06 5058560]
"Norman ZANDA"=C:\Norman_VirusControl\Npm\Bin\ZLH.EXE [2009-10-07 189824]
"NeroFilterCheck"=C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]
"nwiz"=nwiz.exe /install []
"InCD"=C:\Programme\Ahead\InCD\InCD.exe [2005-07-25 1397760]
"FreePDF Assistant"=C:\Programme\FreePDF_XP\fpassist.exe [2005-05-27 145920]
"PCMService"=C:\Software_Multimedia\CyberLink_Home_Cinema\PowerCinema\PCMService.exe [2005-04-20 127118]
"ASM"=C:\Software\AOL_Active Security Monitor\ASMonitor.exe [2006-11-07 2500096]
"WinPatrol"=C:\Programme\BillP Studios\WinPatrol\winpatrol.exe [2010-05-31 323976]
"DiscWizardMonitor.exe"=C:\Programme\Seagate\DiscWizard\DiscWizardMonitor.exe [2007-05-04 1195096]
"AcronisTimounterMonitor"=C:\Programme\Seagate\DiscWizard\TimounterMonitor.exe [2007-05-04 1966560]
"Acronis Scheduler2 Service"=C:\Programme\Gemeinsame Dateien\Seagate\Schedule2\schedhlp.exe [2007-05-04 
 
149024]
"OutpostFeedBack"=C:\Programme\Agnitum\Outpost Firewall Pro\feedback.exe [2009-09-23 436552]
"Adobe Reader Speed Launcher"=C:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe [2010-06-20 35760]
"OutpostMonitor"=C:\PROGRA~1\Agnitum\OUTPOS~1\op_mon.exe [2009-09-23 1270080]
"SunJavaUpdateSched"=C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe [2010-05-14 248552]
"QuickTime Task"=C:\software_multimedia\quicktime\QTTask.exe [2010-08-10 421888]
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Malwarebytes' Anti-Malware"=C:\Software\Malwarebytes_Anti-Malware\mbamgui.exe [2010-04-29 437584]
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"NvMediaCenter"=C:\WINDOWS\System32\NVMCTRAY.DLL [2003-10-06 49152]
"SpybotSD TeaTimer"=C:\Software\SpyBot_search_and_destroy\TeaTimer.exe [2009-03-05 2260480]
"softwareuptodate"=C:\Programme\Software-UpToDate\Software_UpToDate_Client.exe [2009-01-03 1229312]
 
C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart
hp psc 1000 series.lnk - C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
hpoddt01.exe.lnk - C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
Microsoft Office.lnk - C:\Programme\Microsoft Office\Office\OSA9.EXE
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="c:\progra~1\agnitum\outpos~1\wl_hook.dll"
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2007-02-15 236928]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll 
 
[2006-10-18 133632]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"authentication packages"=msv1_0
relog_ap
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Lavasoft Ad-Aware Service]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
 
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
 
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1
 
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofi
 
le\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Software_Multimedia\CyberLink_Home_Cinema\PowerCinema\PowerCinema.exe"="C:\Software_Multimedia\CyberLi
 
nk_Home_Cinema\PowerCinema\PowerCinema.exe:*:Enabled:PowerCinema"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network 
 
Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Software\SiSoftware Sandra Lite 2009.SP2\RpcAgentSrv.exe"="C:\Software\SiSoftware Sandra Lite 
 
2009.SP2\RpcAgentSrv.exe:*:Enabled:SiSoftware Deployment Agent Service"
"C:\Software\SiSoftware Sandra Lite 2009.SP2\WNt500x86\RpcSandraSrv.exe"="C:\Software\SiSoftware Sandra 
 
Lite 2009.SP2\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service"
"C:\Programme\Opera10\opera.exe"="C:\Programme\Opera10\opera.exe:*:Enabled:Opera Internet Browser"
 
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile
 
\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network 
 
Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
 
======File associations======
 
.js - open - "C:\Software\Macromedia\Dreamweaver MX\Dreamweaver.exe" "%1"
 
======List of files/folders created in the last 1 months======
 
2010-08-22 19:05:08 ----D---- C:\Programme\trend micro
2010-08-22 19:05:01 ----D---- C:\rsit
2010-08-22 18:39:05 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Malwarebytes
2010-08-22 18:35:55 ----A---- C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2010-08-22 18:35:50 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
2010-08-22 18:35:47 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2010-08-18 20:12:58 ----D---- C:\WINDOWS\system32\NtmsData
2010-08-17 20:48:04 ----A---- C:\Dokumente und Einstellungen\All 
 
Users\Anwendungsdaten\Microsoft.SqlServer.Compact.351.32.bc
2010-08-16 14:15:56 ----D---- C:\Programme\Windows Live Safety Center
2010-08-13 23:37:30 ----D---- C:\Programme\OpenOffice.org 3
2010-08-13 04:01:52 ----HDC---- C:\WINDOWS\$NtUninstallKB982214$
2010-08-13 03:37:09 ----HDC---- C:\WINDOWS\$NtUninstallKB2115168$
2010-08-13 03:11:09 ----HDC---- C:\WINDOWS\$NtUninstallKB981852$
2010-08-13 02:08:22 ----HDC---- C:\WINDOWS\$NtUninstallKB2079403$
2010-08-13 00:34:35 ----HDC---- C:\WINDOWS\$NtUninstallKB2160329$
2010-08-13 00:13:51 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2010-08-12 19:04:29 ----A---- C:\WINDOWS\system32\javaws.exe
2010-08-12 19:04:29 ----A---- C:\WINDOWS\system32\javaw.exe
2010-08-12 19:04:29 ----A---- C:\WINDOWS\system32\java.exe
2010-08-11 21:39:28 ----D---- C:\6bb7b46ce20d692917dab5c3
2010-08-11 21:38:28 ----HDC---- C:\WINDOWS\$NtUninstallKB981997$
2010-08-11 21:21:52 ----HDC---- C:\WINDOWS\$NtUninstallKB982665$
2010-08-11 19:45:54 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2010-08-07 19:26:36 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Soluto
2010-08-06 01:30:44 ----RSH---- C:\WINDOWS\system32\nbDX.dll
2010-08-06 01:30:43 ----RSH---- C:\WINDOWS\system32\msfDX.dll
2010-08-06 01:30:42 ----RSH---- C:\WINDOWS\system32\flvDX.dll
2010-08-05 13:25:37 ----HDC---- C:\WINDOWS\$NtUninstallKB2286198$
2010-08-01 00:37:03 ----D---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\vlc
 
======List of files/folders modified in the last 1 months======
 
2010-08-22 19:05:08 ----RD---- C:\Programme
2010-08-22 19:05:07 ----D---- C:\WINDOWS\Prefetch
2010-08-22 19:01:08 ----D---- C:\Daten
2010-08-22 18:36:00 ----D---- C:\WINDOWS\system32\drivers
2010-08-22 18:35:42 ----RD---- C:\Software
2010-08-22 18:29:54 ----A---- C:\WINDOWS\Filzip.ini
2010-08-22 14:47:24 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Spybot - Search & 
 
Destroy
2010-08-22 14:46:44 ----D---- C:\WINDOWS\Debug
2010-08-22 14:46:44 ----D---- C:\WINDOWS
2010-08-22 14:46:34 ----AD---- C:\WINDOWS\Temp
2010-08-22 14:15:44 ----D---- C:\WINDOWS\system32\CatRoot2
2010-08-22 13:37:08 ----D---- C:\Norman_VirusControl
2010-08-21 22:19:07 ----N---- C:\WINDOWS\SchedLgU.Txt
2010-08-21 17:28:26 ----SD---- C:\WINDOWS\Tasks
2010-08-20 19:39:35 ----D---- C:\WINDOWS\system32\Filt
2010-08-20 12:58:01 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan
2010-08-19 01:14:19 ----A---- C:\WINDOWS\ULEAD32.INI
2010-08-19 00:53:59 ----D---- C:\WINDOWS\system32
2010-08-18 19:11:33 ----D---- C:\Dokumente und Einstellungen
2010-08-18 14:20:18 ----D---- C:\WINDOWS\system32\Restore
2010-08-17 20:48:47 ----SHD---- C:\WINDOWS\Installer
2010-08-17 20:48:28 ----DC---- C:\WINDOWS\system32\DRVSTORE
2010-08-17 20:48:12 ----SD---- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Microsoft
2010-08-16 17:42:05 ----HD---- C:\WINDOWS\inf
2010-08-16 14:16:00 ----SD---- C:\WINDOWS\Downloaded Program Files
2010-08-15 14:39:22 ----D---- C:\Temp
2010-08-13 23:44:20 ----RSD---- C:\WINDOWS\assembly
2010-08-13 23:39:56 ----RSD---- C:\WINDOWS\Fonts
2010-08-13 20:21:40 ----D---- C:\Programme\OpenOffice.org 2.4
2010-08-13 14:49:34 ----D---- C:\Software_Multimedia
2010-08-13 14:49:12 ----D---- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple Computer
2010-08-13 13:57:00 ----D---- C:\Programme\FreePDF_XP
2010-08-13 04:17:50 ----D---- C:\WINDOWS\Microsoft.NET
2010-08-13 04:02:01 ----RSHD---- C:\WINDOWS\system32\dllcache
2010-08-13 03:38:51 ----HD---- C:\WINDOWS\$hf_mig$
2010-08-13 01:14:48 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-08-13 01:12:55 ----D---- C:\WINDOWS\WinSxS
2010-08-13 00:57:01 ----D---- C:\Programme\Internet Explorer
2010-08-13 00:55:56 ----D---- C:\WINDOWS\ie8updates
2010-08-12 20:05:51 ----D---- C:\Programme\Opera10
2010-08-12 19:12:20 ----D---- C:\Programme\Gemeinsame Dateien\Java
2010-08-12 19:04:02 ----D---- C:\Programme\Java
2010-08-11 21:38:40 ----D---- C:\Programme\Movie Maker
2010-08-11 12:52:29 ----D---- C:\Programme\a2-free
2010-08-11 12:50:24 ----D---- C:\Programme\Bryce5
2010-08-06 12:51:37 ----D---- C:\WINDOWS\system32\drivers\etc
2010-08-03 20:09:31 ----A---- C:\WINDOWS\system32\MRT.exe
2010-08-01 18:16:50 ----D---- C:\Programme\Revo Uninstaller
2010-08-01 14:02:13 ----D---- C:\Programme\jv16 PowerTools
2010-07-27 08:29:42 ----A---- C:\WINDOWS\system32\shell32.dll
2010-07-25 19:44:19 ----D---- C:\Programme\Mozilla Thunderbird
2010-07-25 18:09:52 ----D---- C:\Programme\Mozilla Firefox
2010-07-25 14:05:34 ----D---- C:\Plone
 
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 
R0 AVG Anti-Rootkit;AVG Anti-Rootkit; C:\WINDOWS\System32\DRIVERS\avgarkt.sys [2007-01-31 5632]
R0 iomdisk;Iomega Devices Disk Filter Services; C:\WINDOWS\System32\DRIVERS\iomdisk.sys [2002-07-31 30258]
R0 Lbd;Lbd; C:\WINDOWS\system32\DRIVERS\Lbd.sys [2010-06-04 64288]
R0 OODrvled;OODrvled; C:\WINDOWS\system32\DRIVERS\OODrvled.sys [2004-09-22 15488]
R0 pfc;Padus ASPI Shell; C:\WINDOWS\system32\drivers\pfc.sys [2001-03-14 13644]
R0 ppa3;Herkömmlicher Iomega Parallelanschluss-Filtertreiber; C:\WINDOWS\System32\DRIVERS\ppa3.sys 
 
[2008-04-13 17664]
R0 PxHelp20;PxHelp20; C:\WINDOWS\System32\Drivers\PxHelp20.sys [2007-03-08 43528]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2007-08-26 120992]
R0 timounter;Acronis True Image Backup Archive Explorer; C:\WINDOWS\system32\DRIVERS\timntr.sys 
 
[2007-08-26 392320]
R0 viaagp;VIA AGP-Bus-Filter; C:\WINDOWS\System32\DRIVERS\viaagp.sys [2008-04-13 42240]
R1 AFS2K;AFS2k; C:\WINDOWS\system32\drivers\AFS2K.sys [2004-05-30 82380]
R1 AmdK7;AMD K7-Prozessortreiber; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2008-04-14 41856]
R1 AvgArCln;Avg Anti-Rootkit Clean Driver; C:\WINDOWS\System32\DRIVERS\AvgArCln.sys [2007-01-18 3968]
R1 GhPciScan;GhostPciScanner; \??\C:\Programme\Symantec\Norton Ghost 2003\ghpciscan.sys []
R1 InCDPass;InCDPass; C:\WINDOWS\System32\DRIVERS\InCDPass.sys [2005-07-25 29696]
R1 incdrm;InCD Reader; C:\WINDOWS\system32\drivers\incdrm.sys [2005-07-25 28672]
R1 NGS;Norman General Security Driver; \??\c:\norman_viruscontrol\ngs\bin\ngs.sys []
R1 NPROSEC;Norman Security driver; \??\C:\Norman_VirusControl\Ngs\Bin\nprosec.sys []
R1 SandBox;SandBox; C:\WINDOWS\system32\DRIVERS\SandBox.sys [2009-08-28 714112]
R1 SBRE;SBRE; \??\C:\WINDOWS\system32\drivers\SBREdrv.sys []
R2 Aspi32;Aspi32; C:\WINDOWS\system32\drivers\Aspi32.sys [2002-08-14 17005]
R2 DzlDvc2p;Dazzle DVC II PCI Device; C:\WINDOWS\System32\DRIVERS\DzlDvc2p.sys [2001-08-24 117860]
R2 Ndiskio;Ndiskio; \??\c:\norman_viruscontrol\nse\bin\ndiskio.sys []
R2 tifsfilter;Acronis True Image FS Filter; C:\WINDOWS\system32\DRIVERS\tifsfilt.sys [2007-08-26 32768]
R2 V7;V7; C:\WINDOWS\system32\drivers\V7.sys [2000-03-10 7196]
R3 afw;Agnitum firewall driver; C:\WINDOWS\system32\DRIVERS\afw.sys [2009-02-18 31128]
R3 afwcore;afwcore; C:\WINDOWS\system32\drivers\afwcore.sys [2009-09-14 256792]
R3 ALCXWDM;Service for Avance AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2001-11-01 
 
243964]
R3 ASWFilt;ASWFilt; C:\WINDOWS\system32\Filt\ASWFilt.dll [2009-08-28 33920]
R3 MBAMSwissArmy;MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\mbamswissarmy.sys []
R3 ms_mpu401;Microsoft MPU-401 MIDI UART-Treiber; C:\WINDOWS\system32\drivers\msmpu401.sys [2001-08-17 
 
2944]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2003-10-06 1550043]
R3 NvcMFlt;NvcMFlt; C:\WINDOWS\system32\DRIVERS\nvcw32mf.sys [2009-10-08 21832]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-08-18 5888]
R3 rtl8139;NT-Treiber für Realtek RTL8139(A/B/C)-basierten PCI-Fast Ethernetadapter; 
 
C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-03 20992]
R3 usbuhci;Miniporttreiber für universellen Microsoft USB-Hostcontroller; 
 
C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R4 InCDfs;InCD File System; C:\WINDOWS\system32\drivers\InCDfs.sys [2005-07-25 101504]
S3 Ad-Watch Connect Filter;Ad-Watch Connect Kernel Filter; \??\C:\WINDOWS\system32\drivers\NSDriver.sys []
S3 CCDECODE;Untertiteldecoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 CXLWIRE;USB Hybrid Video Capture (DVB-T/PAL); C:\WINDOWS\system32\drivers\ctxusbtv.sys [2005-04-14 
 
85120]
S3 HPZid412;IEEE-1284.4 Driver HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [2002-11-27 50960]
S3 HPZipr12;Print Class Driver for IEEE-1284.4 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys 
 
[2002-11-27 16080]
S3 HPZius12;USB to IEEE-1284.4 Translation Driver HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys 
 
[2002-11-27 22384]
S3 Lavasoft Kernexplorer;Lavasoft helper driver; \??\C:\Programme\Lavasoft\Ad-Aware\KernExplorer.sys []
S3 MPE;BDA MPE-Filter; C:\WINDOWS\system32\DRIVERS\MPE.sys [2008-04-13 15232]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink-Konvertierung; C:\WINDOWS\system32\drivers\MSTEE.sys 
 
[2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI-Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV-/Videoverbindung; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 nv4;nv4; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2003-10-06 1550043]
S3 nvcfsr;nvcfsr; \??\C:\NORMAN_VIRUSCONTROL\Nvc\BIN\nvcfsr.sys []
S3 nvcoafl51;nvcoafl51; \??\C:\NORMAN_VIRUSCONTROL\nvc\BIN\nvcoafl51.sys []
S3 nvcoaft51;nvcoaft51; \??\C:\NORMAN_VIRUSCONTROL\nvc\BIN\nvcoaft51.sys []
S3 nvcoarc51;nvcoarc51; \??\C:\NORMAN_VIRUSCONTROL\nvc\BIN\nvcoarc51.sys []
S3 SANDRA;SANDRA; \??\C:\Software\SiSoftware Sandra Lite 2009.SP2\WNt500x86\Sandra.sys []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 SPR132;SPRx32 Serial Smart Card Reader; C:\WINDOWS\System32\DRIVERS\SPR132.sys [2002-12-23 181908]
S3 SPRx32 USB Smart Card Reader;SPRx32 USB Smart Card Reader; C:\WINDOWS\System32\DRIVERS\spr332.sys 
 
[2003-12-23 47132]
S3 streamip;BDA-IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 TTCinergyT2;TerraTec Cinergy T² Driver (TTCinergyT2.sys); C:\WINDOWS\System32\Drivers\TTCinergyT2.sys 
 
[2004-09-29 16640]
S3 TVICHW32;TVICHW32; \??\C:\WINDOWS\System32\DRIVERS\TVICHW32.SYS []
S3 usbccgp;Microsoft Standard-USB-Haupttreiber; C:\WINDOWS\System32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 usbprint;Microsoft USB-Druckerklasse; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;USB-Scannertreiber; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;USB-Massenspeichertreiber; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;World Standard Teletext-Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; 
 
C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; 
 
C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]
S3 XUIF;X10 USB Wireless Transceiver; C:\WINDOWS\System32\Drivers\x10ufx2.sys [2004-01-16 17408]
S4 agp440;Intel AGP-Bus-Filter; C:\WINDOWS\System32\DRIVERS\agp440.sys [2008-04-13 42368]
S4 agpCPQ;Compaq AGP-Bus-Filter; C:\WINDOWS\System32\DRIVERS\agpCPQ.sys [2008-04-13 44928]
S4 alim1541;ALI AGP-Bus-Filter; C:\WINDOWS\System32\DRIVERS\alim1541.sys [2008-04-13 42752]
S4 amdagp;AMD AGP-Bus-Filtertreiber; C:\WINDOWS\System32\DRIVERS\amdagp.sys [2008-04-13 43008]
S4 cbidf;cbidf; C:\WINDOWS\System32\DRIVERS\cbidf2k.sys [2001-08-17 13952]
S4 sisagp;SIS AGP-Bus-Filter; C:\WINDOWS\System32\DRIVERS\sisagp.sys [2008-04-13 40960]
 
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
 
R2 AcrSch2Svc;Acronis Scheduler2 Service; C:\Programme\Gemeinsame Dateien\Seagate\Schedule2\schedul2.exe 
 
[2007-05-04 411168]
R2 acssrv;Agnitum Client Security Service; C:\PROGRA~1\Agnitum\OUTPOS~1\acs.exe [2009-09-23 1338560]
R2 eLoggerSvc6;Norman eLogger service 6; C:\Norman_VirusControl\Npm\bin\ELOGSVC.EXE [2009-10-07 152904]
R2 Iomega App Services;Iomega App Services; C:\PROGRA~1\Iomega\System32\AppServices.exe [2002-07-31 73728]
R2 Norman ZANDA;Norman ZANDA; C:\Norman_VirusControl\Npm\Bin\Zanda.exe [2009-10-07 411016]
R2 NPROSECSVC;Norman Security service; C:\Norman_VirusControl\Ngs\Bin\Nprosec.exe [2009-10-07 124232]
R2 NVOY;Norman Resource Provider; C:\Norman_VirusControl\npm\bin\nvoy.exe [2009-10-07 128328]
R2 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\System32\nvsvc32.exe [2003-10-06 81920]
R3 Norman NJeeves;Norman NJeeves; C:\Norman_VirusControl\Npm\Bin\Njeeves.exe [2009-10-07 276712]
R3 nsesvc;Norman Scanner Engine Service; C:\Norman_VirusControl\nse\bin\NSESVC.EXE [2010-06-14 282624]
R3 nvcoas;Norman Virus Control on-access component; C:\Norman_VirusControl\Nvc\bin\nvcoas.exe [2009-10-07 
 
197960]
R3 Scheduler;Norman Scheduler Service; C:\Norman_VirusControl\Npm\Bin\scheduler.exe [2009-10-07 132424]
S2 CLCapSvc;CyberLink Background Capture Service (CBCS); 
 
C:\Software_Multimedia\CyberLink_Home_Cinema\PowerCinema\Kernel\TV\CLCapSvc.exe [2005-04-20 221257]
S2 CLSched;CyberLink Task Scheduler (CTS); 
 
C:\Software_Multimedia\CyberLink_Home_Cinema\PowerCinema\Kernel\TV\CLSched.exe [2005-04-20 110663]
S2 CyberLink Media Library Service;CyberLink Media Library Service; C:\Programme\CyberLink\Shared 
 
Files\CLML_NTService\CLMLServer.exe [2005-04-20 61440]
S2 Fax;Fax; C:\WINDOWS\system32\fxssvc.exe [2008-04-14 268800]
S2 GhostStartService;GhostStartService; C:\PROGRA~1\Symantec\NORTON~1\GHOSTS~2.EXE [2002-08-14 200704]
S2 InCDsrv;InCD Helper; C:\Programme\Ahead\InCD\InCDsrv.exe [2005-07-25 876032]
S2 JavaQuickStarterService;Java Quick Starter; C:\Programme\Java\jre6\bin\jqs.exe [2010-07-17 153376]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service; C:\Programme\Lavasoft\Ad-Aware\AAWService.exe 
 
[2010-08-11 1355416]
S2 OOD2000;O&O Defrag 2000; C:\WINDOWS\system32\OOD2000.exe [2001-04-06 238080]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [2007-02-21 73728]
S2 Zope_29920312;Zope instance at C:\Plone\Data; C:\Plone\Python\PythonService.exe [2008-07-27 10240]
S2 Zope_-722186511;Zope instance at C:\Plone\parts\instance; C:\Plone\python\PythonService.exe [2008-07-27 
 
10240]
S3 aspnet_state;ASP.NET-Zustandsdienst; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe 
 
[2008-07-25 34312]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; 
 
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication 
 
Foundation\infocard.exe [2008-07-29 881664]
S3 LogoMedia TranslateDotNet Server;LogoMedia TranslateDotNet Server; C:\Software\Power 
 
Translator\LogoMedia TranslateDotNet Server.exe [2003-09-26 626688]
S3 SandraAgentSrv;SiSoftware Deployment Agent Service; C:\Software\SiSoftware Sandra Lite 
 
2009.SP2\RpcAgentSrv.exe [2008-12-11 98488]
S3 WMPNetworkSvc;Windows Media Player-Netzwerkfreigabedienst; C:\Programme\Windows Media 
 
Player\WMPNetwk.exe [2006-11-03 920576]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe 
 
[2008-04-14 14336]
S3 x10nets;X10 Device Network Service; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [2001-11-12 20480]
S4 NetTcpPortSharing;Net.Tcp-Portfreigabedienst; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows 
 
Communication Foundation\SMSvcHost.exe [2008-07-29 132096]
 
-----------------EOF-----------------
         

logfile of random's system information tool 1.08 2010-08-22 19:08:02
 
======Uninstall list======
 
@promt Office 7 EGGE Special Edition-->MsiExec.exe /I{23F5601D-CC32-42D3-AE8A-785B96330EBC}
-->C:\WINDOWS\IsUn0407.exe -fC:\WINDOWS\orun32.isu
-->C:\WINDOWS\NuNInst.exe /UNINSTALL
-->C:\WINDOWS\UNNeroVision.exe /UNINSTALL
-->C:\WINDOWS\UNNMP.exe /UNINSTALL
-->C:\WINDOWS\UNNVEContent.exe /UNINSTALL
-->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
7-Zip 4.62-->"C:\Software\Packer\7-Zip\Uninstall.exe"
a² free 1.1-->C:\Programme\a2_free\unins000.exe
Acrobat.com-->MsiExec.exe /X{287ECFA4-719A-2143-A09B-D6A12DE54E40}
Active Disk-->C:\WINDOWS\unvise32.exe C:\Programme\Iomega\AutoDisk\uninstal.log
Active Security Monitor 2.0.0.18-->"C:\Software\AOL_Active Security Monitor\unins000.exe"
ActiveState ActivePython 2.5.2.2-->MsiExec.exe /I{A2E24BD9-085B-410F-AAD0-5EB5FA5D73D2}
Ad-Aware-->"C:\Dokumente und Einstellungen\All 
 
Users\Anwendungsdaten\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe" REMOVE=TRUE 
 
MODIFY=FALSE
Ad-Aware-->C:\Dokumente und Einstellungen\All 
 
Users\Anwendungsdaten\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}\Ad-AwareInstallation.exe
Adobe AIR-->c:\Programme\Gemeinsame Dateien\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe 
 
-arp:uninstall
Adobe AIR-->MsiExec.exe /I{A2BCA9F1-566C-4805-97D1-7FDC93386723}
Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_ActiveX.exe -maintain 
 
activex
Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\FlashUtil10i_Plugin.exe -maintain plugin
Adobe Reader 9.3.3 MUI-->MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-A91000000001}
Adobe Shockwave Player 11.5-->"C:\WINDOWS\system32\Adobe\Shockwave 11\uninstaller.exe"
AFPL Ghostscript 8.51-->C:\Programme\gs\uninstgs.exe "C:\Programme\gs\gs8.51\uninstal.txt"
AFPL Ghostscript Fonts-->C:\Programme\gs\uninstgs.exe "C:\Programme\gs\fonts\uninstal.txt"
Agnitum Outpost Firewall 1.0 SDK-->C:\PROGRA~1\Agnitum\OUTPOS~1.0SD\UNWISE.EXE 
 
C:\PROGRA~1\Agnitum\OUTPOS~1.0SD\INSTALL.LOG
Agnitum Outpost Firewall Pro-->C:\PROGRA~1\Agnitum\OUTPOS~1.0\uninst.exe
Apple Application Support-->MsiExec.exe /I{A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}
Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
Arachnophilia 5.3-->C:\Software\Arachnophilia\unins000.exe
a-squared HiJackFree 3.0-->"C:\Programme\a2-free\unins000.exe"
AusLogics Disk Defrag-->"C:\Software\Auslogics\AusLogics Disk Defrag\unins000.exe"
authorPOINT Lite-->MsiExec.exe /I{53239B61-ACEE-47A9-8FB9-CE24DCDA1605}
AVG Anti-Rootkit Free-->C:\Software\AVG Anti-Rootkit Free\Uninstall.exe
Bernd Ott's Software-UpToDate-->MsiExec.exe /X{24575C8E-0CDB-493D-9BA3-1BCBA955EBC7}
Bryce 5.5c-->C:\WINDOWS\unvise32.exe C:\Programme\DAZ\Bryce 5.5\Bryce Uninstall.log
Bryce Lightning 2.0a-->C:\WINDOWS\unvise32.exe C:\Programme\DAZ\Bryce Lightning 2.0\Bryce Lightning 
 
Uninstall.log
CCleaner-->"C:\Software\CCleaner\uninst.exe"
CDex - Open Source Digital Audio CD Extractor-->C:\Software_Multimedia\CDex\uninstall.exe
CHIP System-Check-Tool 1.1.0.1-->"C:\Software\CHIP System-Check-Tool\unins000.exe"
CHIPDRIVE Geldkarten-Manager 1.63-->C:\Software\CHIPDRIVE\Geldkarten-Manager\unins000.exe
CHIPDRIVE SIM Manager Pro v3.3-->"C:\Software\CHIPDRIVE\SIM Manager Pro\unins000.exe"
CHIPDRIVE Smartcard Viewer v1.07-->C:\Software\CHIPDRIVE\Tools\SCViewer\unins000.exe
Cinergy*Digital 2-->RunDll32 
 
C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{F67BF1DF-8461-46DA-BAF2-DAE86548C547}\setup.exe" 
 
-l0x7 
Compatibility Pack für 2007 Office System-->MsiExec.exe /X{90120000-0020-0407-0000-0000000FF1CE}
Corel SVG Viewer-->MsiExec.exe /X{E32D1370-414D-45CC-950A-7320BA6022C5}
CorelDRAW Graphics Suite 12-->MsiExec.exe /I{505AFDC0-5E72-4928-8368-5DEA385E3647}
CUT&GLUE-2000-->C:\WINDOWS\st6unst.exe -n "C:\Software\CutGlue-200\ST6UNST.LOG" 
Dawn-->MsiExec.exe /I{459E0590-ECD4-490E-9E52-3EF1F1782225}
DAZ|Studio 1.2.0.1-->C:\WINDOWS\unvise32.exe C:\Programme\DAZ\Studio\DAZ Studio Uninstall.log
DivX Codec-->C:\WINDOWS\unvise32.exe c:\software_multimedia\divx_v5\DivX Bundle.log
DivX Player 2.1-->C:\WINDOWS\unvise32.exe c:\software_multimedia\divx_v5\divx player 2.0 alpha\DivX Player 
 
2.1\uninstal.log
Dr. Hardware 2003 4.0.0d-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\D2003GER.INF, 
 
DefaultUninstall.ntx86
DVDExpress-->C:\WINDOWS\IsUn0407.exe -fC:\Programme\Dazzle\Mediamatics\DVDExpress\Uninst.isu
DVDit! LE-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{3B24D221-448E-11D4-A499-0050DA6E827C}\Setup.exe" 
 
-L0x7
FeedReader-->"C:\Software\FeedReader\unins000.exe"
FileZilla (remove only)-->"C:\Programme\FileZilla\uninstall.exe"
FileZilla Client 3.3.3-->C:\Programme\FileZilla\uninstall.exe
Filzip 3.03-->"C:\Software\Packer\Filzip\unins004.exe"
FoneSync-->C:\WINDOWS\IsUninst.exe -fC:\Programme\FoneSync\Uninst.isu 
 
-c"C:\Programme\FoneSync\UninstSupport.dll"
Forté Agent-->C:\FORTEA~1\UNWISE.EXE C:\FORTEA~1\INSTALL.LOG "Uninstall Forté Agent"
FreePDF XP (Remove only)-->C:\Programme\FreePDF_XP\fpsetup.exe /r
GetRight-->C:\Software\GetRight\GETRIGHT.EXE /UNINSTALL
GSview 4.7-->c:\programme\gs\Ghostgum\gsview\uninstgs.exe "c:\programme\gs\Ghostgum\gsview\uninstal.txt"
GTK+ 2.6.9 runtime environment-->"C:\Software\gimp2.0\GTK2.0\unins000.exe"
HARDiNFO Professional-->"C:\Dokumente und Einstellungen\All 
 
Users\Anwendungsdaten\{1D120369-6CAA-496A-8FAA-4023E5437462}\HARDiNFO Professional.exe" REMOVE=TRUE 
 
MODIFY=FALSE
HARDiNFO Professional-->C:\Dokumente und Einstellungen\All 
 
Users\Anwendungsdaten\{1D120369-6CAA-496A-8FAA-4023E5437462}\HARDiNFO Professional.exe
HijackThis 1.99.1-->C:\Software\HijackThis\HijackThis.exe /uninstall
Hotfix for Microsoft .NET Framework 3.0 (KB932471)-->C:\WINDOWS\system32\msiexec.exe /promptrestart 
 
/uninstall {ECD292A0-0347-4244-8C24-5DBCE990FB40} /package {BAF78226-3200-4DB4-BE33-4D922A799840}
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)-->C:\WINDOWS\system32\msiexec.exe /package 
 
{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)-->C:\WINDOWS\system32\msiexec.exe /package 
 
{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ 
 
REBOOTPROMPT=""
Hotfix for Windows Media Format 11 SDK 
 
(KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
Hotfix für Windows Internet Explorer 7 
 
(KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe"
Hotfix für Windows Media Player 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB961118)-->"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB970653-v3)-->"C:\WINDOWS\$NtUninstallKB970653-v3$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB976098-v2)-->"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB979306)-->"C:\WINDOWS\$NtUninstallKB979306$\spuninst\spuninst.exe"
Hotfix für Windows XP (KB981793)-->"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"
Hotspot Shield 1.04-->C:\Software\Hotspot Shield\Uninstall.exe
HP Foto- und Bildbearbeitung 2.0 - All-in-One-->MsiExec.exe /X{9867A917-5D17-40DE-83BA-BEA5293194B1}
HP Foto und Bildbearbeitung 2.0 - hp psc 1200 series-->C:\Programme\Hewlett-Packard\Digital 
 
Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Setup\hpzscr01.exe -datfile hposcr02.dat -forcereboot
HP Foto- und Bildbearbeitung 2.0 All-in-One Treiber -->MsiExec.exe 
 
/X{6ECB39BD-73C2-44DD-B1A0-898207C58D8B}
HP Print Diagnostic Utility-->MsiExec.exe /I{E14B8A08-42B3-4676-9E91-1D39F8158DA1}
hp psc 1200 series-->MsiExec.exe /X{C900EF06-2E76-49C7-8DB0-41F629B21DC5}
HP Speicher-Disc-->MsiExec.exe /X{B376402D-58EA-45EA-BD50-DD924EB67A70}
Internet Explorer Developer Toolbar-->MsiExec.exe /I{21480284-6396-431C-9114-B4B38C9FA67F}
Iomega Automatic Backup-->C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe 
 
/M{42ABF3F2-2C5E-43FA-BBFF-58E4295F23CA} 
Iomega Backup 4.4-->C:\WINDOWS\UNIN0407.EXE -f"C:\Programme\Iomega\Iomega Backup\DeIsL1.isu" 
 
-c"C:\Programme\Iomega\Iomega Backup\uninst.dll"
IomegaWare-->C:\WINDOWS\unvise32.exe C:\Programme\Iomega\uninstal.log
IrfanView (remove only)-->C:\Software\Iview\iv_uninstall.exe
IZArc 3.4.1.6-->C:\Software\Packer\IZArc\unins000.exe
J2SE Runtime Environment 5.0 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
Jarte-->C:\Software\Jarte_Texteditor\unins000.exe
Java 2 Runtime Environment, SE v1.4.2_05-->MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142050}
Java Web Start-->"C:\Programme\Java Web Start\uninst-javaws.exe"
Java(TM) 6 Update 21-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216010FF}
JavaScriptDesigner SE Delphi-->C:\Software\JavaScriptDesigner\unins000.exe
JENOPTIK JD4100z3-->C:\WINDOWS\IsUninst.exe -f"C:\Programme\JENOPTIK Camera Europe GmbH\JENOPTIK 
 
JD4100z3\Uninst.isu"
jv16 PowerTools 2008-->"C:\Programme\jv16 PowerTools 2008\unins000.exe"
jv16 PowerTools 2010-->"C:\Programme\jv16 PowerTools\Uninstall\uninstall.exe" "/U:C:\Programme\jv16 
 
PowerTools\Uninstall\uninstall.xml"
Karen's WhoIs-->C:\Programme\Karens_PowerTools\WhoIs\uninst.exe
L&H TTS3000 Deutsch-->RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\LHTTSGED.inf, Uninstall
Language Engineering Power Translator-->MsiExec.exe /I{66EDF2E5-6C37-4939-A837-FBF2C52F91CD}
Lavasoft Reghance 2.1-->C:\Software\LAVASO~1\UNWISE.EXE C:\Software\LAVASO~1\INSTALL.LOG
Lernout & Hauspie TruVoice American English TTS Engine-->RunDll32 advpack.dll,LaunchINFSection 
 
C:\WINDOWS\INF\tv_enua.inf, Uninstall
LiveReg (Symantec Corporation)-->C:\Programme\Gemeinsame Dateien\Symantec Shared\LiveReg\VcSetup.exe 
 
/REMOVE
LiveUpdate 1.80 (Symantec Corporation)-->C:\Programme\Symantec\LiveUpdate\LSETUP.EXE /U
Macromedia Dreamweaver MX-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{8B4AB829-DFD3-436D-B808-D9733D76C590}\Setup.exe" 
 
-l0x7 mmUninstall
Macromedia Extension Manager-->RunDll32 
 
C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield 
 
Installation Information\{A5BA14E0-7384-11D4-BAE7-00409631A2C8}\setup.exe" -l0x7 mmUninstall
Malwarebytes' Anti-Malware-->"C:\Software\Malwarebytes_Anti-Malware\unins000.exe"
MediaShow 3.0-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{D5A9B7C0-8751-11D8-9D75-000129760D75}\setup.exe" 
 
-uninstall
Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU-->MsiExec.exe 
 
/I{9309DD7E-EBFE-3C95-8B47-30D3A012F606}
Microsoft .NET Framework 2.0 Service Pack 2-->MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}
Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU-->MsiExec.exe 
 
/I{A1071AEB-B0EF-3F5F-BC84-83A270EBE496}
Microsoft .NET Framework 3.0 Service Pack 2-->MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}
Microsoft .NET Framework 3.5 Language Pack - DEU-->c:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET 
 
Framework 3.5 Language Pack - deu\setup.exe
Microsoft .NET Framework 3.5 Language Pack - deu-->MsiExec.exe /I{1545207E-C6F3-31D7-9918-BDBB65075FBF}
Microsoft .NET Framework 3.5 SP1-->C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 
 
SP1\setup.exe
Microsoft .NET Framework 3.5 SP1-->MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}
Microsoft AutoRoute 2001-->MsiExec.exe /I{4D719053-5593-11D3-8F25-0060085C1758}
Microsoft Compression Client Pack 1.0 for Windows 
 
XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft DirectX Transform optional components-->RUNDLL32.EXE ADVPACK.DLL,LaunchINFSection 
 
C:\WINDOWS\INF\DXTXTRA.INF,UNINSTALL.NT,12
Microsoft Internationalized Domain Names Mitigation 
 
APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
Microsoft National Language Support Downlevel 
 
APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
Microsoft Office Converter Pack-->MsiExec.exe /X{6EECB283-E65F-40EF-86D3-D51BF02A8D43}
Microsoft Office PowerPoint Viewer 2003-->MsiExec.exe /X{90AF0407-6000-11D3-8CFE-0150048383C9}
Microsoft Picture It! Foto 2001-->MsiExec.exe /I{D28FDA7D-15C6-48A2-9868-6BCB28BE6254}
Microsoft User-Mode Driver Framework Feature Pack 
 
1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17-->MsiExec.exe 
 
/X{9A25302D-30C0-39D9-BD6F-21E6EC160475}
Microsoft Word 2000 SR-1-->MsiExec.exe /I{00170407-78E1-11D2-B60F-006097C998E7}
Microsoft Word in Works Suite-Add-In-->MsiExec.exe /I{C5DB5FBF-F037-4BEE-A110-257E89EDD8BB}
Microsoft Works 2001-Setup-Start-->C:\Programme\Microsoft Works Suite 2001\Setup\Launcher.exe D:\
Microsoft Works 6.0-->MsiExec.exe /I{D0AC6844-79D4-11D4-AFEE-00C04F443448}
Microsoft XML Parser und SDK-->MsiExec.exe /I{3E908702-AF35-4611-9518-955DA24B7E07}
MovieStar-->C:\WINDOWS\IsUn0407.exe -fC:\Programme\Dazzle\MovieStar\MovieStar.isu
Mozilla Firefox (3.6.8)-->C:\Programme\Mozilla Firefox\uninstall\helper.exe
Mozilla Thunderbird (3.1.1)-->C:\Programme\Mozilla Thunderbird\uninstall\helper.exe
MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
MSXML 4.0 SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
MSXML 6.0 Parser (KB933579)-->MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
Music-DVD on CD and DVD-->MsiExec.exe /I{8AB6D950-AF93-4FBB-9599-A7F09BD1EE6E}
Nero - Burning Rom-->MsiExec.exe /X{A4D7B764-4140-11D4-88EB-0050DA3579C0}
Nero BurnRights (Ahead Software)-->C:\WINDOWS\UNNeroBurnRights.exe /UNINSTALL
Nero Suite-->C:\Programme\Gemeinsame Dateien\Ahead\Uninstall\setup.exe /uninstall ExtraUninstallID=""
Netscape Browser (remove only)-->"C:\Programme\Netscape\NSUninst.exe"
Norton Ghost-->MsiExec.exe /I{6975E810-C92F-45F0-0BFD-187B312F10E8}
NVC 5.20-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup 
 
"C:\Norman_VirusControl\NVC\BIN\DelNVC5.exe"
NVIDIA Display Driver-->C:\WINDOWS\System32\nvudisp.exe Uninstall C:\WINDOWS\System32\nvdisp.nvu,NVIDIA 
 
Display Driver
NVIDIA Windows 2000/XP Display Drivers-->rundll32.exe C:\WINDOWS\System32\nvinstnt.dll,NvUninstallNT4 
 
nv4_disp.inf
O&O Defrag 2000 Freeware Edition-->RunDll32 
 
C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield 
 
Installation Information\{E86E5246-AA7E-11D4-88C9-00105ADBE398}\Setup.exe" 
O&O DriveLED-->MsiExec.exe /I{53480150-81CB-4A86-B378-86B6F08AF80B}
OmniPage SE-->MsiExec.exe /I{6249C22D-E6A8-407B-BA8B-40298848ED94}
OpenOffice.org 3.2-->MsiExec.exe /I{8D1E61D1-1395-4E97-997F-D002DB3A5074}
Opera 10.61-->MsiExec.exe /X{70858C67-8761-4444-895A-0A8B2E9E144E}
Outpost Firewall Pro 2009-->"C:\Programme\Agnitum\Outpost Firewall Pro\unins000.exe"
Packard Bell Data Secure-->C:\Programme\Packard Bell Data Secure\Uninstall.exe
Palm Reader-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{ED8BB1CA-535A-408D-85C9-ED1986D2B85E}\setup.exe" 
PC Inspector File Recovery-->RunDll32 
 
C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}\Setup.exe" 
 
-l0x7 
PE Builder v3.1.3-->c:\programme\pebuilder313\unins000.exe
Pegasus Mail-->C:\pmail\DeSetup.exe C:\pmail
PhotoNow! 1.0-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{D36DD326-7280-11D8-97C8-000129760CBE}\setup.exe" 
 
-uninstall
Plone (version 3.2.2) (build 26444)-->"C:\Plone\unins000.exe"
PowerCinema 4.0-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\setup.exe" 
 
-uninstall
PowerDirector-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{CB099890-1D5F-11D5-9EA9-0050BAE317E1}\setup.exe" 
 
-uninstall
PowerDVD-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}\setup.exe" 
 
-uninstall
PowerProducer-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{B7A0CE06-068E-11D6-97FD-0050BACBF861}\setup.exe" 
 
-uninstall
PSPad editor-->"C:\Software\PSPad editor\Uninst\unins000.exe"
QuickTime-->MsiExec.exe /I{EB900AF8-CC61-4E15-871B-98D1EA3E8025}
RedMon - Redirection Port Monitor-->C:\WINDOWS\system32\unredmon.exe
Revo Uninstaller 1.89-->C:\Programme\Revo Uninstaller\uninst.exe
Seagate*DiscWizard-->MsiExec.exe /X{81A60A13-224D-4637-8203-3EAC03B121A4}
SeaTools for Windows-->MsiExec.exe /I{98613C99-1399-416C-A07C-1EE1C585D872}
Security Task Manager 1.7h-->C:\Programme\Security Task Manager\Uninstal.exe "C:\Dokumente und 
 
Einstellungen\All Users\Startmenü\Programme\Security Task Manager"
Shockwave-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE 
 
C:\WINDOWS\system32\Macromed\SHOCKW~1\INSTALL.LOG
Sicherheitsupdate für Step by Step Interactive Training 
 
(KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
Sicherheitsupdate für Step by Step Interactive Training 
 
(KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB928090)-->"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB929969)-->"C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB931768)-->"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB933566)-->"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB937143)-->"C:\WINDOWS\ie7updates\KB937143-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB939653)-->"C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 7 
 
(KB969897)-->"C:\WINDOWS\ie7updates\KB969897-IE7\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB2183461)-->"C:\WINDOWS\ie8updates\KB2183461-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB969897)-->"C:\WINDOWS\ie8updates\KB969897-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB971961)-->"C:\WINDOWS\ie8updates\KB971961-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB972260)-->"C:\WINDOWS\ie8updates\KB972260-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB974455)-->"C:\WINDOWS\ie8updates\KB974455-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB976325)-->"C:\WINDOWS\ie8updates\KB976325-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB978207)-->"C:\WINDOWS\ie8updates\KB978207-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB981332)-->"C:\WINDOWS\ie8updates\KB981332-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Internet Explorer 8 
 
(KB982381)-->"C:\WINDOWS\ie8updates\KB982381-IE8\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 
 
(KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 
 
(KB954155)-->"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 
 
(KB968816)-->"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 
 
(KB973540)-->"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 
 
(KB978695)-->"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 10 
 
(KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 10 
 
(KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP10$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 11 
 
(KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows Media Player 11 
 
(KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB2079403)-->"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB2115168)-->"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB2160329)-->"C:\WINDOWS\$NtUninstallKB2160329$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB2229593)-->"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB2286198)-->"C:\WINDOWS\$NtUninstallKB2286198$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP 
 
(KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956744)-->"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB956844)-->"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB958869)-->"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB960859)-->"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB961371)-->"C:\WINDOWS\$NtUninstallKB961371$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB961501)-->"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB968537)-->"C:\WINDOWS\$NtUninstallKB968537$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB969059)-->"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB969898)-->"C:\WINDOWS\$NtUninstallKB969898$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB969947)-->"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB970238)-->"C:\WINDOWS\$NtUninstallKB970238$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB970430)-->"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971468)-->"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971486)-->"C:\WINDOWS\$NtUninstallKB971486$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971557)-->"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971633)-->"C:\WINDOWS\$NtUninstallKB971633$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB971657)-->"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB972270)-->"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973354)-->"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973507)-->"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973525)-->"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973869)-->"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB973904)-->"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB974112)-->"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB974318)-->"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB974392)-->"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB974571)-->"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975025)-->"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975467)-->"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975560)-->"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975561)-->"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975562)-->"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB975713)-->"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP 
 
(KB977165-v2)-->"C:\WINDOWS\$NtUninstallKB977165-v2$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB977816)-->"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB977914)-->"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978037)-->"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978251)-->"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978262)-->"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978338)-->"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978542)-->"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978601)-->"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB978706)-->"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB979309)-->"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB979482)-->"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB979559)-->"C:\WINDOWS\$NtUninstallKB979559$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB979683)-->"C:\WINDOWS\$NtUninstallKB979683$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB980195)-->"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB980218)-->"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB980232)-->"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB980436)-->"C:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB981852)-->"C:\WINDOWS\$NtUninstallKB981852$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB981997)-->"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB982214)-->"C:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB982665)-->"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"
SiSoftware Sandra Lite 2009.SP2-->"C:\Software\SiSoftware Sandra Lite 2009.SP2\unins000.exe"
SmartFTP-->MsiExec.exe /I{11C762F9-95EA-486A-A8E7-683A50C231C1}
SmartSound For Multimedia-->C:\WINDOWS\uninst.exe -f"C:\Programme\Dazzle\SmartSound For 
 
Multimedia\DeIsL1.isu" -c"C:\Programme\Dazzle\SmartSound For Multimedia\_ISREG32.DLL"
Spelling Dictionaries Support For Adobe Reader 8-->MsiExec.exe /I{AC76BA86-7AD7-5464-3428-800000000003}
SPG-Verein-->C:\WINDOWS\unin0407.exe -fc:\naspa_daten\v2000-w\DeIsL2.isu
SPRx32 CT-API und PC/SC Treiber Installation-->RunDll32 
 
C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield 
 
Installation Information\{3B6A3576-1844-4C99-AB0E-FD06D75DC1F0}\SETUP.EXE" -l0x7 
Spybot - Search & Destroy 1.5.2.20-->"C:\WINDOWS\unins000.exe"
Spybot - Search & Destroy-->"C:\Software\SpyBot_search_and_destroy\unins001.exe"
SUPER © Version 2010.bld.38 (May 2, 2010)-->C:\SOFTWA~1\SUPER\Setup.exe /remove /q0
SuperHTML 6.0 Internet Professionell Edition-->MsiExec.exe /X{C149FA39-3C50-4F5C-B633-7D7C3B01F15E}
The GIMP 2.2.9-->"C:\Software\gimp2.0\unins000.exe"
TopStyle Lite (Version 3.0)-->C:\WINDOWS\unlite3.exe "C:\Programme\TopStyle3"
TreeSize Professional 2.43-->C:\WINDOWS\unin0407.exe -fC:\Programme\TreeSize_Pro_2.43\DeIsL1.isu 
 
-cC:\Programme\TreeSize_Pro_2.43\_ISREG32.DLL
TV-Browser 2.1-->C:\Software\TV-Browser\Uninstall.exe
Ulead COOL 3D-->C:\WINDOWS\uninst.exe -f"c:\software\ulead photoimpact\DeIsL1.isu" -c"c:\software\ulead 
 
photoimpact\_ISREG32.DLL"
Ulead GIF Animator 1.5 Full Version-->C:\WINDOWS\ULEAD.DAT\Uninst.exe /f:GA15F.INF
Ulead PhotoImpact 3.02-->C:\WINDOWS\ULEAD.DAT\uninst.exe /f:PI32G.INF
Ulead PhotoImpact GIF/JPEG SmartSaver 1.2 Full Version-->C:\WINDOWS\ULEAD.DAT\Setup.exe /f:USS12f.INF
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)-->C:\WINDOWS\system32\msiexec.exe /package 
 
{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ 
 
REBOOTPROMPT=""
Update für Windows Internet Explorer 8 
 
(KB971930)-->"C:\WINDOWS\ie8updates\KB971930-IE8\spuninst\spuninst.exe"
Update für Windows Internet Explorer 8 
 
(KB976662)-->"C:\WINDOWS\ie8updates\KB976662-IE8\spuninst\spuninst.exe"
Update für Windows Internet Explorer 8 
 
(KB976749)-->"C:\WINDOWS\ie8updates\KB976749-IE8\spuninst\spuninst.exe"
Update für Windows Internet Explorer 8 
 
(KB980182)-->"C:\WINDOWS\ie8updates\KB980182-IE8\spuninst\spuninst.exe"
Update für Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
Update für Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
Update für Windows XP (KB955759)-->"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"
Update für Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
Update für Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
Update für Windows XP (KB968389)-->"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"
Update für Windows XP (KB971737)-->"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"
Update für Windows XP (KB973687)-->"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"
Update für Windows XP (KB973815)-->"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"
Varo Vision VaroDVD-->RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup 
 
"C:\Programme\InstallShield Installation Information\{A5647000-AC49-11D4-8A28-00A02490CB9D}\setup.exe" 
 
-uninst 
VEREIN 2000-->C:\WINDOWS\unin0407.exe -fc:\naspa_daten\v2000-w\DeIsL1.isu 
 
-cc:\naspa_daten\v2000-w\_ISREG32.DLL
Visual C++ 2008 x86 Runtime - (v9.0.30729)-->MsiExec.exe /X{F333A33D-125C-32A2-8DCE-5C5D14231E27}
Visual C++ 2008 x86 Runtime - v9.0.30729.01-->C:\WINDOWS\system32\msiexec.exe /x 
 
{F333A33D-125C-32A2-8DCE-5C5D14231E27} /qb+ REBOOTPROMPT=""
VLC media player 1.1.2-->C:\Software_Multimedia\VLC\uninstall.exe
Wichtiges Update für Windows Media Player 11 
 
(KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
Winamp-->"C:\Software_Multimedia\Winamp\UninstWA.exe"
Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Internet Explorer 8-->"C:\WINDOWS\ie8\spuninst\spuninst.exe"
Windows Live OneCare safety scanner-->RunDll32.exe "C:\Programme\Windows Live Safety 
 
Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Media Format 11 runtime-->"C:\Programme\Windows Media Player\wmsetsdk.exe" /UninstallAll
Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Media Player 11-->"C:\Programme\Windows Media Player\Setup_wm.exe" /Uninstall
Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
Windows Presentation Foundation-->MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
WinPatrol 2007 Restore/Remove First-->C:\PROGRA~1\WINPAT~1\WinPatrolEx.exe -remove
WinPatrol 2007 Step 2-->MsiExec.exe /X{736CE9DD-F589-485B-ACFF-78C235A57066}
WinPatrol-->C:\PROGRA~1\BILLPS~1\WINPAT~1\Setup.exe /remove /q0
WinPatrol-->MsiExec.exe /X{8E0D233D-8B06-47A1-BA22-3A767CCD69E3}
X10 Hardware(TM)-->C:\WINDOWS\UNWISE.EXE C:\PROGRA~1\X10HAR~1\Install.log
XAMPP 1.5.3a-->"C:\apachefriends\xampp\xampp\uninstall.exe"
XML Paper Specification Shared Components Language Pack 
 
1.0-->"C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
XnView 1.97.4-->"C:\Software\XnView\unins000.exe"
xp-AntiSpy 3.96-4-->C:\Software\xp-AntiSpy\Uninstall.exe
 
======Hosts File======
 
127.0.0.1    quatschi_dummy.com
127.0.0.1    www.007guard.com
127.0.0.1    007guard.com
127.0.0.1    008i.com
127.0.0.1    www.008k.com
127.0.0.1    008k.com
127.0.0.1    www.00hq.com
127.0.0.1    00hq.com
127.0.0.1    010402.com
127.0.0.1    www.032439.com
 
======Security center information======
 
AV: Lavasoft Ad-Watch Live! Virenschutz (disabled)
AV: Norman Security Suite (disabled)
FW: Outpost Firewall Pro
 
======System event log======
 
Computer Name: <computername>
Event Code: 7
Message: Fehlerhafter Block bei Gerät \Device\Harddisk0\D.
 
Record Number: 105763
Source Name: Disk
Time Written: 20100805152452.000000+120
Event Type: Fehler
User: 
 
Computer Name: <computername>
Event Code: 7
Message: Fehlerhafter Block bei Gerät \Device\Harddisk0\D.
 
Record Number: 105762
Source Name: Disk
Time Written: 20100805151139.000000+120
Event Type: Fehler
User: 
 
Computer Name: <computername>
Event Code: 7
Message: Fehlerhafter Block bei Gerät \Device\Harddisk0\D.
 
Record Number: 105761
Source Name: Disk
Time Written: 20100805151132.000000+120
Event Type: Fehler
User: 
 
Computer Name: <computername>
Event Code: 7
Message: Fehlerhafter Block bei Gerät \Device\Harddisk0\D.
 
Record Number: 105760
Source Name: Disk
Time Written: 20100805151126.000000+120
Event Type: Fehler
User: 
 
Computer Name: <computername>
Event Code: 7
Message: Fehlerhafter Block bei Gerät \Device\Harddisk0\D.
 
Record Number: 105759
Source Name: Disk
Time Written: 20100805151120.000000+120
Event Type: Fehler
User: 
 
=====Application event log=====
 
Computer Name: <computername>
Event Code: 255
Message: Zope_-722186511 (Zope instance at C:\Plone\parts\instance): created process
 
Record Number: 12528
Source Name: Zope
Time Written: 20100815142329.000000+120
Event Type: Informationen
User: 
 
Computer Name: <computername>
Event Code: 255
Message: Zope_-722186511 (Zope instance at C:\Plone\parts\instance): sleep 40 to avoid rapid restarts
 
Record Number: 12527
Source Name: Zope
Time Written: 20100815142249.000000+120
Event Type: Warnung
User: 
 
Computer Name: <computername>
Event Code: 255
Message: Zope_-722186511 (Zope instance at C:\Plone\parts\instance): process terminated with exit code 
 
1.
Traceback (most recent call last):
File "C:\Plone\parts\instance\bin\servicewrapper.py", line 103, in ?
run.run()
File "c:\plone\zope2\lib\python\Zope2\Startup\run.py", line 19, in run
opts = _setconfig()
File "c:\plone\zope2\lib\python\Zope2\Startup\run.py", line 48, in _setconfig
opts.realize(doc="Sorry, no option docs yet.")
File "c:\plone\zope2\lib\python\zdaemon\zdoptions.py", line 273, in realize
self.load_schema()
File "c:\plone\zope2\lib\python\zdaemon\zdoptions.py", line 321, in load_schema
self.schema = ZConfig.loadSchema(self.schemafile)
File "c:\plone\zope2\lib\python\ZConfig\loader.py", line 31, in loadSchema
return SchemaLoader().loadURL(url)
File "c:\plone\zope2\lib\python\ZConfig\loader.py", line 65, in loadURL
return self.loadResource(r)
File "c:\plone\zope2\lib\python\ZConfig\loader.py", line 159, in loadResource
schema = ZConfig.schema.parseResource(resource, self)
File "c:\plone\zope2\lib\python\ZConfig\schema.py", line 27, in parseResource
xml.sax.parse(resource.file, parser)
File "C:\Plone\python\lib\site-packages\_xmlplus\sax\__init__.py", line 31, in parse
parser.parse(filename_or_stream)
File "C:\Plone\python\lib\site-packages\_xmlplus\sax\expatreader.py", line 109, in parse
xmlreader.IncrementalParser.parse(self, source)
File "C:\Plone\python\lib\site-packages\_xmlplus\sax\xmlreader.py", line 123, in parse
self.feed(buffer)
File "C:\Plone\python\lib\site-packages\_xmlplus\sax\expatreader.py", line 216, in feed
self._parser.Parse(data, isFinal)
File "C:\Plone\python\lib\site-packages\_xmlplus\sax\expatreader.py", line 312, in start_element
self._cont_handler.startElement(name, AttributesImpl(attrs))
File "c:\plone\zope2\lib\python\ZConfig\schema.py", line 103, in startElement
getattr(self, "start_" + name)(attrs)
File "c:\plone\zope2\lib\python\ZConfig\schema.py", line 306, in start_import
src = self._loader.schemaComponentSource(pkg, file)
File "c:\plone\zope2\lib\python\ZConfig\loader.py", line 176, in schemaComponentSource
__import__(package)
File "c:\plone\zope2\lib\python\ZServer\__init__.py", line 41, in ?
from HTTPServer import zhttp_server, zhttp_handler
File "c:\plone\zope2\lib\python\ZServer\HTTPServer.py", line 45, in ?
from HTTPResponse import make_response
File "c:\plone\zope2\lib\python\ZServer\HTTPResponse.py", line 26, in ?
from PubCore.ZEvent import Wakeup
File "c:\plone\zope2\lib\python\ZServer\PubCore\ZEvent.py", line 24, in ?
the_trigger=simple_trigger()
File "c:\plone\zope2\lib\python\ZServer\medusa\thread\select_trigger.py", line 135, in __init__
w.connect(connect_address)
File "<string>", line 1, in connect
socket.error: (10022, 'Invalid argument')
 
 
Record Number: 12526
Source Name: Zope
Time Written: 20100815142249.000000+120
Event Type: Warnung
User: 
 
Computer Name: <computername>
Event Code: 255
Message: Zope_-722186511 (Zope instance at C:\Plone\parts\instance): created process
 
Record Number: 12525
Source Name: Zope
Time Written: 20100815142231.000000+120
Event Type: Informationen
User: 
 
Computer Name: <computername>
Event Code: 255
Message: Zope_-722186511 (Zope instance at C:\Plone\parts\instance): sleep 20 to avoid rapid restarts
 
Record Number: 12524
Source Name: Zope
Time Written: 20100815142211.000000+120
Event Type: Warnung
User: 
 
=====Security event log=====
 
Computer Name: <computername>
Event Code: 514
Message: Ein Authentifizierungspaket wurde durch die lokale Sicherheitsinstanz geladen.
Dieses Authentifizierungspaket wird verwendet, um Anmeldeversuche zu authentifizieren.
 
 
Name des Authentifizierungspakets:    C:\WINDOWS\system32\kerberos.dll : Kerberos
 
Record Number: 66019
Source Name: Security
Time Written: 20100805142329.000000+120
Event Type: Überwachung erfolgreich
User: NT-AUTORITÄT\SYSTEM
 
Computer Name: <computername>
Event Code: 514
Message: Ein Authentifizierungspaket wurde durch die lokale Sicherheitsinstanz geladen.
Dieses Authentifizierungspaket wird verwendet, um Anmeldeversuche zu authentifizieren.
 
 
Name des Authentifizierungspakets:    C:\WINDOWS\system32\LSASRV.dll : Negotiate
 
Record Number: 66018
Source Name: Security
Time Written: 20100805142329.000000+120
Event Type: Überwachung erfolgreich
User: NT-AUTORITÄT\SYSTEM
 
Computer Name: <computername>
Event Code: 513
Message: Windows wird heruntergefahren.
Alle Anmeldesitzungen werden durch den Vorgang des Herunterfahrens beendet.
 
Record Number: 66017
Source Name: Security
Time Written: 20100805142002.000000+120
Event Type: Überwachung erfolgreich
User: NT-AUTORITÄT\SYSTEM
 
Computer Name: <computername>
Event Code: 551
Message: Benutzerinitiierte Abmeldung:
 
    Benutzername:    ***
 
    Domäne:        <computername>
 
    Anmeldekennung:        (0x0,0x5b733)
 
 
Record Number: 66016
Source Name: Security
Time Written: 20100805141833.000000+120
Event Type: Überwachung erfolgreich
User: <computername>\***
 
Computer Name: <computername>
Event Code: 576
Message: Besondere Rechte bei neuer Anmeldung:
 
    Benutzername:    LOKALER DIENST
 
    Domäne:        NT-AUTORITÄT
 
    Anmeldekennung:        (0x0,0x3E5)
 
    Berechtigungen:        SeAuditPrivilege
            SeAssignPrimaryTokenPrivilege
            SeChangeNotifyPrivilege
 
Record Number: 66015
Source Name: Security
Time Written: 20100805125051.000000+120
Event Type: Überwachung erfolgreich
User: NT-AUTORITÄT\LOKALER DIENST
 
======Environment variables======
 
"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"LANG"=de
"NpmLib"=C:\Norman_VirusControl\Npm\Bin
"NUMBER_OF_PROCESSORS"=1
"OS"=Windows_NT
"Path"=C:\Software\python25\;C:\Programme\Corel\Corel SVG 
 
Viewer\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Software\gimp2.0\GTK2.0\bin;"C:\P
 
rogramme\Symantec\Norton Ghost 
 
2003\";%NpmLib%;C:\Programme\Emsisoft\;C:\software_multimedia\quicktime\QTSystem\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.py;.pyw
"PROCESSOR_ARCHITECTURE"=x86
"PROCESSOR_IDENTIFIER"=x86 Family 6 Model 6 Stepping 2, AuthenticAMD
"PROCESSOR_LEVEL"=6
"PROCESSOR_REVISION"=0602
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"windir"=%SystemRoot%
"SAN_DIR"=C:\Software\SiSoftware Sandra Lite 2009.SP2
"CLASSPATH"=.;C:\Programme\Java\jre6\lib\ext\QTJava.zip
"QTJAVA"=C:\Programme\Java\jre6\lib\ext\QTJava.zip
 
-----------------EOF-----------------