Logs auswerten / pmropn.exe

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4544

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

04.09.2010 19:59:54
mbam-log-2010-09-04 (19-59-54).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 160490
Laufzeit: 19 Minute(n), 8 Sekunde(n)

Infizierte Speicherprozesse: 1
Infizierte Speichermodule: 4
Infizierte Registrierungsschlüssel: 2
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 3
Infizierte Dateien: 18

Infizierte Speicherprozesse:
c:\programme\premieropinion\pmropn.exe (Trojan.Agent) -> No action taken.

Infizierte Speichermodule:
c:\programme\premieropinion\MSVCP71.DLL (Trojan.Agent) -> No action taken.
c:\programme\premieropinion\MSVCR71.DLL (Trojan.Agent) -> No action taken.
c:\programme\premieropinion\pmls.dll (Trojan.Agent) -> No action taken.
C:\Programme\PremierOpinion\components\pmxg.dll (Trojan.Agent) -> No action taken.

Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{eeb86aef-4a5d-4b75-9d74-f16d438fc286} (Adware.PremierOpinion) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\premieropinion (Trojan.Agent) -> No action taken.

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
C:\Programme\premieropinion (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\components (Trojan.Agent) -> No action taken.
C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PremierOpinion (Adware.PremierOpinion) -> No action taken.

Infizierte Dateien:
C:\Programme\PremierOpinion\pmservice.exe (Adware.RelevantKnowledge) -> No action taken.
C:\System Volume Information\_restore{1D902CAA-77E8-44A2-988E-FC2D1B8607E2}\RP23\A0008252.exe (Adware.PremierOpinion) -> No action taken.
C:\Programme\premieropinion\install.rdf (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\MSVCP71.DLL (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\MSVCR71.DLL (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\pmls.dll (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\pmls64.dll (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\pmoci.bin (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\pmph.dll (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\pmropn.exe (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\pmropn64.exe (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\pmxf.dll (Trojan.Agent) -> No action taken.
C:\Programme\premieropinion\components\pmxg.dll (Trojan.Agent) -> No action taken.
C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PremierOpinion\About PremierOpinion.lnk (Adware.PremierOpinion) -> No action taken.
C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PremierOpinion\Privacy Policy and User License Agreement.lnk (Adware.PremierOpinion) -> No action taken.
C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PremierOpinion\Support.lnk (Adware.PremierOpinion) -> No action taken.
C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PremierOpinion\Uninstall Instructions.lnk (Adware.PremierOpinion) -> No action taken.
C:\END (Trojan.FakeAlert) -> No action taken.
         

OTL logfile created on: 04.09.2010 20:05:30 - Run 1
OTL by OldTimer - Version 3.2.11.0     Folder = C:\Dokumente und Einstellungen\***\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1.022,00 Mb Total Physical Memory | 532,00 Mb Available Physical Memory | 52,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 19,53 Gb Total Space | 9,47 Gb Free Space | 48,47% Space Free | Partition Type: NTFS
Drive D: | 278,55 Gb Total Space | 193,26 Gb Free Space | 69,38% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: ***
Current User Name: ***
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - C:\Dokumente und Einstellungen\****\Desktop\OTL.exe (OldTimer Tools)
PRC - D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Programme\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation)
PRC - D:\Programme\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - D:\Programme\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
PRC - C:\Programme\Logitech\GamePanel Software\LGDevAgt.exe (Logitech Inc.)
PRC - C:\Programme\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
PRC - C:\WINXP\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\VIAudioi\HDADeck\HDeck.exe (VIA Technologies, Inc.)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Dokumente und Einstellungen\***\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINXP\system32\msscript.ocx (Microsoft Corporation)
MOD - C:\WINXP\system32\framedyn.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (CSIScanner) -- C:\Programme\Prevx\prevx.exe (Prevx)
SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (Hamachi2Svc) -- D:\Programme\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (McComponentHostService) -- C:\Programme\McAfee Security Scan\2.0.181\McCHSvc.exe (McAfee, Inc.)
SRV - (Microsoft Office Groove Audit Service) -- D:\Programme\Microsoft Office\Office12\GrooveAuditService.exe (Microsoft Corporation)
SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (GarenaPEngine) -- C:\DOKUME~1\***\LOKALE~1\Temp\FJW3D6.tmp File not found
DRV - (pxrts) -- C:\WINXP\system32\drivers\pxrts.sys (Prevx)
DRV - (pxscan) -- C:\WINXP\System32\drivers\pxscan.sys (Prevx)
DRV - (pxkbf) -- C:\WINXP\system32\drivers\pxkbf.sys (Prevx)
DRV - (sptd) -- C:\WINXP\System32\Drivers\sptd.sys ()
DRV - (ati2mtag) -- C:\WINXP\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (hamachi) -- C:\WINXP\system32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (LGVirHid) -- C:\WINXP\system32\drivers\LGVirHid.sys (Logitech Inc.)
DRV - (LGBusEnum) -- C:\WINXP\system32\drivers\LGBusEnum.sys (Logitech Inc.)
DRV - (HDAudBus) -- C:\WINXP\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (sscdmdm) -- C:\WINXP\system32\drivers\sscdmdm.sys (MCCI Corporation)
DRV - (sscdmdfl) -- C:\WINXP\system32\drivers\sscdmdfl.sys (MCCI Corporation)
DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) -- C:\WINXP\system32\drivers\sscdbus.sys (MCCI Corporation)
DRV - (ATITool) -- C:\WINXP\system32\drivers\ATITool.sys ()
DRV - (nv) -- C:\WINXP\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (HdAudAddService) -- C:\WINXP\system32\drivers\viahduaa.sys (VIA Technologies, Inc.)
DRV - (StarOpen) -- C:\WINXP\System32\drivers\StarOpen.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = DC 78 12 B7 EE 20 CB 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "www.google.at"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.87
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{6E19037A-12E3-4295-8915-ED48BC341614}: C:\Programme\PremierOpinion
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: D:\Programme\Mozilla Firefox\components [2010.08.01 11:46:36 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2010.09.03 19:35:15 | 000,000,000 | ---D | M]
 
[2010.07.11 13:49:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Extensions
[2010.09.04 00:39:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\cr1spmn8.default\extensions
[2010.08.24 22:15:28 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\cr1spmn8.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.08.03 01:02:21 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\cr1spmn8.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
 
O1 HOSTS File: ([2008.04.14 11:00:00 | 000,000,820 | ---- | M]) - C:\WINXP\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (SafeOnline BHO) - {69D72956-317C-44bd-B369-8E44D4EF9801} - C:\WINXP\system32\PxSecure.dll (Prevx)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [HDAudDeck] C:\Programme\VIAudioi\HDADeck\HDeck.exe (VIA Technologies, Inc.)
O4 - HKLM..\Run: [KernelFaultCheck]  File not found
O4 - HKLM..\Run: [Launch LGDCore] C:\Programme\Logitech\GamePanel Software\G-series Software\LGDCore.exe (Logitech Inc.)
O4 - HKLM..\Run: [Launch LgDeviceAgent] C:\Programme\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.)
O4 - HKLM..\Run: [MSConfig] C:\WINXP\PCHealth\HelpCtr\Binaries\MSConfig.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINXP\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Lite] D:\Programme\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutorunSetting = 1
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - D:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab (Java Plug-in 1.6.0_15)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINXP\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINXP\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINXP\Web\Wallpaper\Grüne Idylle.bmp
O24 - Desktop BackupWallPaper: C:\WINXP\Web\Wallpaper\Grüne Idylle.bmp
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - D:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.07.11 13:38:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.09.04 20:00:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Desktop\Neuer Ordner
[2010.09.04 19:51:08 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\***\Desktop\OTL.exe
[2010.09.04 19:28:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Malwarebytes
[2010.09.04 19:28:41 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINXP\System32\drivers\mbamswissarmy.sys
[2010.09.04 19:28:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.09.04 19:28:39 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINXP\System32\drivers\mbam.sys
[2010.09.04 19:27:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Desktop\MFTools
[2010.09.04 19:23:43 | 000,812,344 | ---- | C] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\***\Desktop\HJTInstall.exe
[2010.09.04 19:20:39 | 006,153,352 | ---- | C] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\***\Desktop\mbam-setup-1.46.exe
[2010.09.04 19:18:46 | 000,068,120 | ---- | C] (Prevx) -- C:\WINXP\System32\PxSecure.dll
[2010.09.04 19:18:45 | 000,069,736 | ---- | C] (Prevx) -- C:\WINXP\System32\drivers\pxrts.sys
[2010.09.04 19:18:45 | 000,030,320 | ---- | C] (Prevx) -- C:\WINXP\System32\drivers\pxscan.sys
[2010.09.04 19:18:44 | 000,024,400 | ---- | C] (Prevx) -- C:\WINXP\System32\drivers\pxkbf.sys
[2010.09.04 19:18:43 | 000,000,000 | ---D | C] -- C:\Programme\Prevx
[2010.09.04 19:18:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PrevxCSI
[2010.09.04 19:18:28 | 000,937,416 | ---- | C] (Prevx) -- C:\Dokumente und Einstellungen\***\Desktop\prevxcsifree.exe
[2010.09.04 11:55:19 | 000,000,000 | ---D | C] -- C:\WINXP\Sun
[2010.09.04 00:38:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Eigene Dateien\StarCraft II
[2010.09.04 00:38:37 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Blizzard Entertainment
[2010.09.04 00:38:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard Entertainment
[2010.09.04 00:33:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\DAEMON Tools Lite
[2010.09.04 00:33:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2010.09.03 19:35:15 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\deploytk.dll
[2010.09.03 19:35:15 | 000,149,280 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javaws.exe
[2010.09.03 19:35:15 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javaw.exe
[2010.09.03 19:35:15 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\java.exe
[2010.09.03 19:35:15 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javacpl.cpl
[2010.09.03 19:35:06 | 000,000,000 | ---D | C] -- C:\Programme\Java
[2010.09.03 19:34:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Sun
[2010.09.03 00:40:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\nswb
[2010.09.03 00:40:29 | 000,000,000 | ---D | C] -- C:\Programme\CEDP Stealer 6.0 for Messenger
[2010.08.25 18:39:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Eigene Dateien\gothic3
[2010.08.25 18:28:17 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAudio2_6.dll
[2010.08.25 18:28:17 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine3_6.dll
[2010.08.25 18:28:17 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAPOFX1_4.dll
[2010.08.25 18:28:17 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\X3DAudio1_7.dll
[2010.08.25 18:28:16 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dcsx_42.dll
[2010.08.25 18:28:16 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_42.dll
[2010.08.25 18:28:16 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAudio2_5.dll
[2010.08.25 18:28:16 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine3_5.dll
[2010.08.25 18:28:15 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DX9_42.dll
[2010.08.25 18:28:15 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_41.dll
[2010.08.25 18:28:15 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_42.dll
[2010.08.25 18:28:15 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_41.dll
[2010.08.25 18:28:15 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx11_42.dll
[2010.08.25 18:28:14 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DX9_41.dll
[2010.08.25 18:28:14 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAudio2_4.dll
[2010.08.25 18:28:14 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine3_4.dll
[2010.08.25 18:28:14 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAPOFX1_3.dll
[2010.08.25 18:28:14 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\X3DAudio1_6.dll
[2010.08.25 18:28:13 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DX9_40.dll
[2010.08.25 18:28:13 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_40.dll
[2010.08.25 18:28:13 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAudio2_3.dll
[2010.08.25 18:28:13 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_40.dll
[2010.08.25 18:28:13 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine3_3.dll
[2010.08.25 18:28:13 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAPOFX1_2.dll
[2010.08.25 18:28:12 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_39.dll
[2010.08.25 18:28:12 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAudio2_2.dll
[2010.08.25 18:28:12 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_39.dll
[2010.08.25 18:28:12 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine3_2.dll
[2010.08.25 18:28:12 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAPOFX1_1.dll
[2010.08.25 18:28:12 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\X3DAudio1_5.dll
[2010.08.25 18:28:11 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DX9_39.dll
[2010.08.25 18:28:11 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAudio2_1.dll
[2010.08.25 18:28:11 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine3_1.dll
[2010.08.25 18:28:11 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAPOFX1_0.dll
[2010.08.25 18:28:11 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\X3DAudio1_4.dll
[2010.08.25 18:28:10 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DX9_38.dll
[2010.08.25 18:28:10 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_38.dll
[2010.08.25 18:28:10 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\XAudio2_0.dll
[2010.08.25 18:28:10 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_38.dll
[2010.08.25 18:28:10 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine3_0.dll
[2010.08.25 18:28:09 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DX9_37.dll
[2010.08.25 18:28:09 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_37.dll
[2010.08.25 18:28:09 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_37.dll
[2010.08.25 18:28:09 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_10.dll
[2010.08.25 18:28:09 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\X3DAudio1_3.dll
[2010.08.25 18:28:08 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_36.dll
[2010.08.25 18:28:08 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_36.dll
[2010.08.25 18:28:08 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_35.dll
[2010.08.25 18:28:08 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_36.dll
[2010.08.25 18:28:08 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_35.dll
[2010.08.25 18:28:08 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_9.dll
[2010.08.25 18:28:07 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_35.dll
[2010.08.25 18:28:07 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_8.dll
[2010.08.25 18:28:07 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\X3DAudio1_2.dll
[2010.08.25 18:28:05 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_7.dll
[2010.08.25 18:28:05 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xinput1_3.dll
[2010.08.25 18:28:04 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_33.dll
[2010.08.25 18:28:04 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_33.dll
[2010.08.25 18:28:03 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_33.dll
[2010.08.25 18:28:03 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_32.dll
[2010.08.25 18:28:03 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_6.dll
[2010.08.25 18:28:03 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_5.dll
[2010.08.25 18:28:03 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_4.dll
[2010.08.25 18:28:03 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\x3daudio1_1.dll
[2010.08.25 18:28:02 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_31.dll
[2010.08.25 18:28:02 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_3.dll
[2010.08.25 18:28:02 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_2.dll
[2010.08.25 18:28:02 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_1.dll
[2010.08.25 18:28:02 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xinput1_2.dll
[2010.08.25 18:28:02 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xinput1_1.dll
[2010.08.25 18:27:58 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_30.dll
[2010.08.25 18:27:57 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_29.dll
[2010.08.25 18:27:57 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_28.dll
[2010.08.25 18:27:57 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xactengine2_0.dll
[2010.08.25 18:27:57 | 000,061,136 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xinput9_1_0.dll
[2010.08.25 18:27:57 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\x3daudio1_0.dll
[2010.08.25 18:27:56 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_25.dll
[2010.08.25 18:27:56 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_27.dll
[2010.08.25 18:27:56 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_26.dll
[2010.08.25 18:27:55 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_24.dll
[2010.08.25 18:27:49 | 000,000,000 | ---D | C] -- C:\WINXP\Logs
[2010.08.24 17:29:38 | 000,014,048 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\spmsg2.dll
[2010.08.24 17:27:59 | 000,000,000 | ---D | C] -- C:\WINXP\System32\XPSViewer
[2010.08.24 17:27:55 | 000,000,000 | ---D | C] -- C:\WINXP\System32\en-US
[2010.08.24 17:27:51 | 000,000,000 | ---D | C] -- C:\Programme\Reference Assemblies
[2010.08.24 17:27:19 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\xpssvcs.dll
[2010.08.24 17:27:19 | 001,676,288 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\xpssvcs.dll
[2010.08.24 17:27:19 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\printfilterpipelinesvc.exe
[2010.08.24 17:27:19 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\xpsshhdr.dll
[2010.08.24 17:27:19 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\prntvpt.dll
[2010.08.24 17:27:19 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\filterpipelineprintproc.dll
[2010.08.24 15:52:11 | 000,000,000 | ---D | C] -- C:\WINXP\pss
[2010.08.23 12:16:51 | 000,107,888 | ---- | C] (Sony DADC Austria AG.) -- C:\WINXP\System32\CmdLineExt.dll
[2010.08.23 12:16:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Eigene Dateien\My Games
[2010.08.22 23:17:03 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DCompiler_34.dll
[2010.08.22 23:17:03 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx10_34.dll
[2010.08.22 23:17:00 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_34.dll
[2010.08.22 19:46:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\ATI
[2010.08.22 19:46:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\ATI
[2010.08.22 19:46:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ATI
[2010.08.22 19:42:32 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies
[2010.08.22 19:42:06 | 000,000,000 | ---D | C] -- C:\ATI
[2010.08.22 19:37:17 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010.08.21 20:58:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\LogMeIn Hamachi
[2010.08.21 20:58:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\LogMeIn Hamachi
[2010.08.17 12:05:32 | 000,000,000 | R-SD | C] -- C:\WINXP\assembly
[2010.08.17 12:05:07 | 000,000,000 | ---D | C] -- C:\WINXP\Microsoft.NET
[2010.08.17 12:00:40 | 005,470,720 | ---- | C] (Jeffrey Harris) -- C:\Dokumente und Einstellungen\***\Desktop\SharePod.exe
[2010.08.16 15:44:04 | 000,000,000 | ---D | C] -- C:\WINXP\Minidump
[2010.08.14 20:48:11 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Eigene Dateien\Meine empfangenen Dateien
[2010.08.07 12:27:42 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Eigene Dateien\Pharmazie
 
========== Files - Modified Within 30 Days ==========
 
[2010.09.04 20:02:27 | 000,002,048 | --S- | M] () -- C:\WINXP\bootstat.dat
[2010.09.04 20:01:40 | 003,145,728 | -H-- | M] () -- C:\Dokumente und Einstellungen\***\NTUSER.DAT
[2010.09.04 20:01:40 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\***\ntuser.ini
[2010.09.04 20:01:35 | 005,855,528 | -H-- | M] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010.09.04 19:51:09 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\***\Desktop\OTL.exe
[2010.09.04 19:34:50 | 000,000,582 | ---- | M] () -- C:\WINXP\win.ini
[2010.09.04 19:34:50 | 000,000,227 | ---- | M] () -- C:\WINXP\system.ini
[2010.09.04 19:34:50 | 000,000,207 | -HS- | M] () -- C:\boot.ini
[2010.09.04 19:28:12 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\defogger.exe
[2010.09.04 19:28:04 | 000,284,915 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Gmer.zip
[2010.09.04 19:27:53 | 000,388,197 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Load.exe
[2010.09.04 19:23:50 | 000,000,780 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\HijackThis.lnk
[2010.09.04 19:23:43 | 000,812,344 | ---- | M] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\***\Desktop\HJTInstall.exe
[2010.09.04 19:20:43 | 006,153,352 | ---- | M] (Malwarebytes Corporation                                    ) -- C:\Dokumente und Einstellungen\***\Desktop\mbam-setup-1.46.exe
[2010.09.04 19:18:46 | 000,068,120 | ---- | M] (Prevx) -- C:\WINXP\System32\PxSecure.dll
[2010.09.04 19:18:45 | 000,069,736 | ---- | M] (Prevx) -- C:\WINXP\System32\drivers\pxrts.sys
[2010.09.04 19:18:45 | 000,030,320 | ---- | M] (Prevx) -- C:\WINXP\System32\drivers\pxscan.sys
[2010.09.04 19:18:44 | 000,024,400 | ---- | M] (Prevx) -- C:\WINXP\System32\drivers\pxkbf.sys
[2010.09.04 19:18:34 | 000,000,049 | ---- | M] () -- C:\WINXP\wininit.ini
[2010.09.04 19:18:29 | 000,937,416 | ---- | M] (Prevx) -- C:\Dokumente und Einstellungen\***\Desktop\prevxcsifree.exe
[2010.09.04 18:04:17 | 000,027,136 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.09.04 17:44:15 | 000,005,828 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\325267-9tv2d4bx.dlc
[2010.09.04 03:46:11 | 000,000,664 | ---- | M] () -- C:\WINXP\System32\d3d9caps.dat
[2010.09.04 01:04:55 | 000,000,632 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\StarCraft II.lnk
[2010.09.04 00:35:37 | 000,002,206 | ---- | M] () -- C:\WINXP\System32\wpa.dbl
[2010.09.04 00:33:56 | 000,691,696 | ---- | M] () -- C:\WINXP\System32\drivers\sptd.sys
[2010.09.03 19:35:08 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\deploytk.dll
[2010.09.03 19:35:08 | 000,149,280 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javaws.exe
[2010.09.03 19:35:08 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javaw.exe
[2010.09.03 19:35:08 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\java.exe
[2010.09.03 19:35:08 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINXP\System32\javacpl.cpl
[2010.09.02 12:36:28 | 003,110,256 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Jared_Ringe_Helm.jpg
[2010.09.01 13:38:01 | 000,311,756 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\g3_geldern_silden.jpg
[2010.09.01 13:35:16 | 000,302,004 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\geldern.jpg
[2010.08.31 12:55:46 | 000,371,652 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\NPCs_in_Myrtana.jpg
[2010.08.29 23:38:58 | 000,269,445 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\My_Screenshot_63.jpg
[2010.08.25 18:17:17 | 000,000,642 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Gothic3.lnk
[2010.08.25 18:04:33 | 000,266,208 | ---- | M] () -- C:\WINXP\System32\FNTCACHE.DAT
[2010.08.24 22:15:34 | 000,066,984 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
[2010.08.24 17:28:25 | 001,045,950 | ---- | M] () -- C:\WINXP\System32\PerfStringBackup.INI
[2010.08.24 17:28:25 | 000,452,310 | ---- | M] () -- C:\WINXP\System32\perfh007.dat
[2010.08.24 17:28:25 | 000,435,396 | ---- | M] () -- C:\WINXP\System32\perfh009.dat
[2010.08.24 17:28:25 | 000,081,118 | ---- | M] () -- C:\WINXP\System32\perfc007.dat
[2010.08.24 17:28:25 | 000,068,292 | ---- | M] () -- C:\WINXP\System32\perfc009.dat
[2010.08.23 12:48:29 | 000,107,888 | ---- | M] (Sony DADC Austria AG.) -- C:\WINXP\System32\CmdLineExt.dll
[2010.08.22 23:17:04 | 000,001,656 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Hellgate London spielen .lnk
[2010.08.22 20:13:34 | 000,000,564 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Core Temp.lnk
[2010.08.22 19:53:42 | 000,043,520 | ---- | M] () -- C:\WINXP\System32\CmdLineExt03.dll
[2010.08.22 19:49:54 | 000,000,568 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\ATITool.lnk
[2010.08.22 19:45:10 | 000,000,000 | ---- | M] () -- C:\WINXP\ativpsrm.bin
[2010.08.21 20:57:56 | 000,000,545 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\LogMeIn Hamachi.lnk
[2010.08.21 20:37:09 | 000,000,687 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Play UT2004.lnk
[2010.08.21 00:04:09 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LauncherAccess.dt
[2010.08.20 16:50:30 | 000,061,446 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\arnold-schwarzenegger-essen.jpg
[2010.08.16 21:38:49 | 000,088,566 | ---- | M] () -- C:\WINXP\System32\nvapps.xml
[2010.08.15 16:20:23 | 000,055,608 | -H-- | M] () -- C:\WINXP\System32\mlfcache.dat
[2010.08.10 12:21:52 | 000,619,111 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Eigene Dateien\Die_Aufnahme_des_Polytraumas_-_Fachbereichsarbeit_-_SAB_Intensivpflege_2005_-_Leitner_Anita - Innsbruck.pdf
[2010.08.06 17:02:47 | 000,013,824 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Eigene Dateien\Bewerbung Club Catering ***.doc
 
========== Files Created - No Company Name ==========
 
[2010.09.04 19:28:12 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\defogger.exe
[2010.09.04 19:28:04 | 000,284,915 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Gmer.zip
[2010.09.04 19:27:52 | 000,388,197 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Load.exe
[2010.09.04 19:23:50 | 000,000,780 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\HijackThis.lnk
[2010.09.04 19:18:34 | 000,000,049 | ---- | C] () -- C:\WINXP\wininit.ini
[2010.09.04 17:44:14 | 000,005,828 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\325267-9tv2d4bx.dlc
[2010.09.04 03:46:11 | 000,000,664 | ---- | C] () -- C:\WINXP\System32\d3d9caps.dat
[2010.09.04 00:38:37 | 000,000,632 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\StarCraft II.lnk
[2010.09.04 00:33:55 | 000,691,696 | ---- | C] () -- C:\WINXP\System32\drivers\sptd.sys
[2010.09.02 12:36:28 | 003,110,256 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Jared_Ringe_Helm.jpg
[2010.09.01 13:38:01 | 000,311,756 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\g3_geldern_silden.jpg
[2010.09.01 13:35:12 | 000,302,004 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\geldern.jpg
[2010.08.31 12:55:42 | 000,371,652 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\NPCs_in_Myrtana.jpg
[2010.08.29 23:38:51 | 000,269,445 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\My_Screenshot_63.jpg
[2010.08.25 18:17:17 | 000,000,642 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Gothic3.lnk
[2010.08.24 17:28:20 | 000,155,856 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2010.08.22 23:17:04 | 000,001,656 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Hellgate London spielen .lnk
[2010.08.22 20:13:34 | 000,000,564 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Core Temp.lnk
[2010.08.22 19:49:54 | 000,000,568 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\ATITool.lnk
[2010.08.22 19:45:10 | 000,000,000 | ---- | C] () -- C:\WINXP\ativpsrm.bin
[2010.08.22 19:43:05 | 000,593,920 | ---- | C] () -- C:\WINXP\System32\ati2sgag.exe
[2010.08.21 20:57:56 | 000,000,545 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\LogMeIn Hamachi.lnk
[2010.08.21 20:42:26 | 000,043,520 | ---- | C] () -- C:\WINXP\System32\CmdLineExt03.dll
[2010.08.21 20:37:09 | 000,000,687 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Play UT2004.lnk
[2010.08.20 16:50:29 | 000,061,446 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\arnold-schwarzenegger-essen.jpg
[2010.08.15 16:20:23 | 000,055,608 | -H-- | C] () -- C:\WINXP\System32\mlfcache.dat
[2010.08.10 12:21:52 | 000,619,111 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Eigene Dateien\Die_Aufnahme_des_Polytraumas_-_Fachbereichsarbeit_-_SAB_Intensivpflege_2005_-_Leitner_Anita - Innsbruck.pdf
[2010.08.06 17:02:47 | 000,013,824 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Eigene Dateien\Bewerbung Club Catering ***.doc
[2010.07.13 20:36:44 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LauncherAccess.dt
[2010.07.13 20:21:17 | 000,005,632 | ---- | C] () -- C:\WINXP\System32\drivers\StarOpen.sys
[2010.07.11 16:58:36 | 000,027,136 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.11.10 15:08:50 | 000,024,064 | ---- | C] () -- C:\WINXP\System32\drivers\ATITool.sys
[2006.10.22 12:22:00 | 001,662,976 | ---- | C] () -- C:\WINXP\System32\nvwdmcpl.dll
[2006.10.22 12:22:00 | 001,470,464 | ---- | C] () -- C:\WINXP\System32\nview.dll
[2006.10.22 12:22:00 | 001,019,904 | ---- | C] () -- C:\WINXP\System32\nvwimg.dll
[2006.10.22 12:22:00 | 000,581,632 | ---- | C] () -- C:\WINXP\System32\nvhwvid.dll
[2006.10.22 12:22:00 | 000,466,944 | ---- | C] () -- C:\WINXP\System32\nvshell.dll
[2006.10.22 12:22:00 | 000,286,720 | ---- | C] () -- C:\WINXP\System32\nvnt4cpl.dll
[2006.10.22 12:22:00 | 000,212,992 | ---- | C] () -- C:\WINXP\System32\nvapi.dll
< End of report >
         

OTL Extras logfile created on: 04.09.2010 20:05:30 - Run 1
OTL by OldTimer - Version 3.2.11.0     Folder = C:\Dokumente und Einstellungen\***\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1.022,00 Mb Total Physical Memory | 532,00 Mb Available Physical Memory | 52,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 81,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 19,53 Gb Total Space | 9,47 Gb Free Space | 48,47% Space Free | Partition Type: NTFS
Drive D: | 278,55 Gb Total Space | 193,26 Gb Free Space | 69,38% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: ***
Current User Name: ***
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- C:\Programme\Google\Chrome\Application\chrome.exe (Google Inc.)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "D:\Programme\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "D:\Programme\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Programme\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Programme\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- D:\PROGRA~1\MICROS~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\Windows Live\Messenger\wlcsdk.exe" = C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\Windows Live\Messenger\wlcsdk.exe" = C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"D:\Programme\iTunes\iTunes.exe" = D:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"D:\Programme\Microsoft Office\Office12\OUTLOOK.EXE" = D:\Programme\Microsoft Office\Office12\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook -- (Microsoft Corporation)
"D:\Programme\Microsoft Office\Office12\GROOVE.EXE" = D:\Programme\Microsoft Office\Office12\GROOVE.EXE:*:Enabled:Microsoft Office Groove -- (Microsoft Corporation)
"D:\Programme\Microsoft Office\Office12\ONENOTE.EXE" = D:\Programme\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"D:\Programme\Flagship Studios\Hellgate London\Launcher.exe" = D:\Programme\Flagship Studios\Hellgate London\Launcher.exe:*:Enabled:Hellgate: London -- (Flagship Studios)
"c:\programme\premieropinion\pmropn.exe" = c:\programme\premieropinion\pmropn.exe:*:Enabled:pmropn.exe -- File not found
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03ADC8AB-C130-0C3D-1FF9-2C385DF25689}" = CCC Help Czech
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{07021185-008D-ABF9-7716-475AC035F8B3}" = CCC Help Spanish
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp version 0.99.7
"{0CB9668D-F979-4F31-B8B8-67FE90F929F8}" = Bonjour
"{0F8D0406-7755-AC37-6529-73AD649DBE32}" = Catalyst Control Center Graphics Previews Common
"{109945A8-D8D5-48B8-B4A5-195D3F99B56D}" = Logitech GamePanel Software 3.04.143
"{13F59927-CFBE-44D1-8417-7203AD4F1795}" = Gothic 3
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform
"{22072CC8-7230-96F8-52F4-05EAF3F906B6}" = CCC Help Polish
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2368ADBD-6FDF-4B9F-FE41-E20B4D78E79E}" = CCC Help Chinese Standard
"{25EF0DC4-B072-2E04-4581-A13C91423CE6}" = CCC Help Portuguese
"{26A24AE4-039D-4CA4-87B4-2F83216015FF}" = Java(TM) 6 Update 15
"{26F7855C-443B-00A6-F7B8-A97A5403F617}" = CCC Help Danish
"{2CB4A925-48A7-DA65-DCEE-D4DE224B7D84}" = CCC Help English
"{306D75B9-7FFF-FF65-0C76-57F2FE4FE1D6}" = Catalyst Control Center Core Implementation
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{32B12FE4-5A51-751A-1FB6-A14E97EBDD5C}" = CCC Help German
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{351512E5-01BD-E878-6F57-AA3E517D9ECE}" = Skins
"{354A387E-0374-21A3-6832-335674A6D7D1}" = CCC Help French
"{3C00BEE9-26D0-D9E0-A2D1-62F70D412A12}" = CCC Help Turkish
"{3D9892BB-A751-4E48-ADC8-E4289956CE1D}" = QuickTime
"{4346F7AA-3D56-0941-424C-4454E04D37F6}" = CCC Help Italian
"{4CAE2F2C-75CD-A0DE-7520-449BCBBCC833}" = CCC Help Korean
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{57F7F0A5-8F22-8E63-E819-803B5C9CA3A5}" = CCC Help Dutch
"{5EA437D2-7A57-B60E-E8F2-76BFAC0895A5}" = CCC Help Chinese Traditional
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{61AF4E75-050E-0304-3417-8BC16417FEB1}" = CCC Help Greek
"{632005DA-C291-5275-284C-5EE96B05C714}" = Catalyst Control Center HydraVision Full
"{6C72BE0C-3E25-CACD-0070-2FD9C02ABA14}" = ccc-core-preinstall
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7AB3A249-FB81-416B-917A-A2A10E74C503}" = iTunes
"{85991ED2-010C-4930-96FA-52F43C2CE98A}" = Apple Mobile Device Support
"{8795CBED-55E2-4693-9F14-84EC446935BE}" = SpeechRedist
"{880BB617-914E-17E8-D877-A96BAC5794D2}" = Catalyst Control Center Graphics Full New
"{8897CF22-DB6C-8248-895C-12BFA2677F51}" = CCC Help Hungarian
"{8A74DEFD-A224-49CC-AB80-4E88BC730125}" = LogMeIn Hamachi
"{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (German) 12
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9600B88C-BE14-4BEA-A529-F5F312900BA3}" = Samsung PC Studio 3
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A2B4455D-1046-4732-BFBC-0821BEFC07BC}" = Hellgate: London
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.3 - Deutsch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{AF710FDE-2815-8C8D-5281-8004C2654AA6}" = CCC Help Russian
"{AFF2D965-C6F2-A210-FBF7-532612AA1D23}" = CCC Help Swedish
"{B21336EE-4AEF-9940-4AC7-EDB89854B8D3}" = CCC Help Thai
"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support
"{BBA69346-61A1-BD34-E75A-4D81232DB1FE}" = Catalyst Control Center Localization All
"{BFD5ED08-F066-92D5-BE67-3B9AE5DCFF0C}" = CCC Help Japanese
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C4609F15-FB3C-D97E-BAA1-4F10815039C2}" = Catalyst Control Center Graphics Full Existing
"{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio 3
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D01FAC3D-86B4-3A19-9D10-9156A0EB3EBE}" = CCC Help Finnish
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D73722C8-3F65-C75B-A631-5D36894DAB92}" = ccc-core-static
"{DDAD33B6-8C00-428D-087B-A7088355B9BE}" = Catalyst Control Center Graphics Light
"{E333F074-FC7F-596D-3D61-44F0EC28E8C0}" = ccc-utility
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{FA38F9E4-BED7-E021-B660-8FDFF7EC6E1A}" = CCC Help Norwegian
"6194C28A8F62DD817EA1B918E6E46E806A21B452" = Windows-Treiberpaket - MobileTop (sshpmdm) Modem  (02/23/2007 2.5.0.0)
"65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Windows-Treiberpaket - MobileTop (sshpusb) USB  (02/23/2007 2.5.0.0)
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"Alt.Binz" = Alt.Binz 0.25.0
"ATI Display Driver" = ATI Display Driver
"ATITool" = ATITool Overclocking Utility
"CEDP Stealer 6.0 for Messenger" = CEDP Stealer 6.0 for Messenger
"DivX Setup.divx.com" = DivX-Setup
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Garena" = Garena 2010
"Google Chrome" = Google Chrome
"HijackThis" = HijackThis 2.0.2
"InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Platform Device Manager
"JDownloader" = JDownloader
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"McAfee Security Scan" = McAfee Security Scan Plus
"Messenger Plus! Live" = Messenger Plus! Live
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"MSNINST" = MSN
"NVIDIA Drivers" = NVIDIA Drivers
"PCSI" = Prevx
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"StarCraft II" = StarCraft II
"UT2004" = Unreal Tournament 2004
"VLC media player" = VLC media player 1.1.0
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"xp-AntiSpy" = xp-AntiSpy 3.97-9
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Warcraft III" = Warcraft III: All Products
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 03.09.2010 11:26:33 | Computer Name = *** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 03.09.2010 11:26:33 | Computer Name = *** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 492687
 
Error - 03.09.2010 11:26:33 | Computer Name = *** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 492687
 
Error - 03.09.2010 11:26:36 | Computer Name = *** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 03.09.2010 11:26:36 | Computer Name = *** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 495468
 
Error - 03.09.2010 11:26:36 | Computer Name = *** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 495468
 
Error - 03.09.2010 21:45:44 | Computer Name = *** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
 
Error - 03.09.2010 21:45:44 | Computer Name = H*** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 16375
 
Error - 03.09.2010 21:45:44 | Computer Name = *** | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 16375
 
Error - 04.09.2010 05:48:19 | Computer Name = *** | Source = Windows Live Messenger | ID = 1000
Description = 
 
[ System Events ]
Error - 01.09.2010 06:04:04 | Computer Name = *** | Source = W32Time | ID = 39452701
Description = Der Zeitanbieter "NtpClient" wurde für die Zeiterfassung von mehreren
 Zeitquellen  konfiguriert. Es ist jedoch Keine der Quellen verfügbar. Innerhalb  der
 nächsten 14 Minuten wird kein Versuch unternommen, eine Verbindung  mit der Quelle
 herzustellen.  Der NtpClient verfügt über keine Quelle mit genauer Zeit.
 
Error - 01.09.2010 10:28:30 | Computer Name = *** | Source = DCOM | ID = 10010
Description = Der Server "{DC0C2640-1415-4644-875C-6F4D769839BA}" konnte innerhalb
 des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 
Error - 01.09.2010 16:43:19 | Computer Name = *** | Source = W32Time | ID = 39452689
Description = Zeitabieter "NtpClient": Beim DNS-Lookup für den manuell konfigurierten
 Peer  "time.windows.com,0x1" ist ein Fehler aufgetreten. Der DNS-Lookup wird in 15
 Minuten  wiederholt.  Fehler: Der Host war bei einem Socketvorgang nicht erreichbar.
 (0x80072751)
 
Error - 01.09.2010 16:43:19 | Computer Name = *** | Source = W32Time | ID = 39452701
Description = Der Zeitanbieter "NtpClient" wurde für die Zeiterfassung von mehreren
 Zeitquellen  konfiguriert. Es ist jedoch Keine der Quellen verfügbar. Innerhalb  der
 nächsten 14 Minuten wird kein Versuch unternommen, eine Verbindung  mit der Quelle
 herzustellen.  Der NtpClient verfügt über keine Quelle mit genauer Zeit.
 
Error - 04.09.2010 13:29:40 | Computer Name = ***| Source = Service Control Manager | ID = 7034
Description = Dienst "Ati HotKey Poller" wurde unerwartet beendet. Dies ist bereits
 1 Mal passiert.
 
Error - 04.09.2010 13:29:41 | Computer Name = ***| Source = Service Control Manager | ID = 7031
Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist
 bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden
 durchgeführt: Starten Sie den Dienst neu..
 
Error - 04.09.2010 13:29:41 | Computer Name = ***| Source = Service Control Manager | ID = 7034
Description = Dienst "Dienst "Bonjour"" wurde unerwartet beendet. Dies ist bereits
 1 Mal passiert.
 
Error - 04.09.2010 13:29:41 | Computer Name = ***| Source = Service Control Manager | ID = 7034
Description = Dienst "Java Quick Starter" wurde unerwartet beendet. Dies ist bereits
 1 Mal passiert.
 
Error - 04.09.2010 13:29:41 | Computer Name = ***| Source = Service Control Manager | ID = 7034
Description = Dienst "LogMeIn Hamachi 2.0 Tunneling Engine" wurde unerwartet beendet.
 Dies ist bereits 1 Mal passiert.
 
Error - 04.09.2010 14:02:32 | Computer Name = ***| Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "" auf Volume "HarddiskVolume1" ist im 
Wiederherstellungsfilter der unerwartete Fehler "0xC0000001" aufgetreten. Die Volumeüberwachung
 wurde angehalten.
 
 
< End of report >
         

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:12:19, on 04.09.2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINXP\System32\smss.exe
C:\WINXP\system32\winlogon.exe
C:\WINXP\system32\services.exe
C:\WINXP\system32\lsass.exe
C:\WINXP\system32\Ati2evxx.exe
C:\WINXP\system32\svchost.exe
C:\WINXP\System32\svchost.exe
C:\WINXP\system32\Ati2evxx.exe
C:\WINXP\system32\spoolsv.exe
C:\WINXP\Explorer.EXE
C:\Programme\VIAudioi\HDADeck\HDeck.exe
C:\Programme\Logitech\GamePanel Software\LgDevAgt.exe
C:\Programme\Logitech\GamePanel Software\G-series Software\LGDCore.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\WINXP\system32\ctfmon.exe
C:\Programme\Windows Live\Messenger\msnmsgr.exe
D:\Programme\DAEMON Tools Lite\DTLite.exe
C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Programme\Bonjour\mDNSResponder.exe
D:\Programme\LogMeIn Hamachi\hamachi-2.exe
C:\Programme\Google\Update\GoogleUpdate.exe
C:\Programme\Java\jre6\bin\jqs.exe
C:\Programme\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINXP\system32\wscntfy.exe
C:\WINXP\system32\wbem\wmiapsrv.exe
C:\WINXP\System32\svchost.exe
C:\Programme\Windows Live\Contacts\wlcomm.exe
D:\Programme\Mozilla Firefox\firefox.exe
D:\Programme\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: SafeOnline BHO - {69D72956-317C-44bd-B369-8E44D4EF9801} - C:\WINXP\system32\PxSecure.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - D:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Programme\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINXP\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [HDAudDeck] C:\Programme\VIAudioi\HDADeck\HDeck.exe 1
O4 - HKLM\..\Run: [Launch LgDeviceAgent] "C:\Programme\Logitech\GamePanel Software\LgDevAgt.exe"
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Programme\Logitech\GamePanel Software\G-series Software\LGDCore.exe" /SHOWHIDE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [StartCCC] "C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [MSConfig] C:\WINXP\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINXP\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Programme\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [DAEMON Tools Lite] "D:\Programme\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINXP\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://D:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINXP\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O13 - Gopher Prefix: 
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - D:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINXP\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINXP\system32\ati2sgag.exe
O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Programme\Bonjour\mDNSResponder.exe
O23 - Service: CSIScanner - Prevx - C:\Programme\Prevx\prevx.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Programme\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - D:\Programme\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Programme\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Programme\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINXP\system32\nvsvc32.exe

--
End of file - 7436 bytes