Exploit.PDF-JS.Gen,Trojan.Win32.GenericBT&Win32.BackdoorPoison entdeckt und entfernt - Logfile

OTL logfile created on: 19.09.2010 02:13:14 - Run 1
OTL by OldTimer - Version 3.2.12.1     Folder = D:\Dokumente und Einstellungen\Stan\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 47,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 97,65 Gb Total Space | 26,14 Gb Free Space | 26,77% Space Free | Partition Type: NTFS
Drive D: | 48,83 Gb Total Space | 14,82 Gb Free Space | 30,36% Space Free | Partition Type: NTFS
Drive E: | 135,22 Gb Total Space | 19,76 Gb Free Space | 14,62% Space Free | Partition Type: NTFS
Drive F: | 97,65 Gb Total Space | 46,36 Gb Free Space | 47,47% Space Free | Partition Type: NTFS
Drive G: | 86,39 Gb Total Space | 68,75 Gb Free Space | 79,58% Space Free | Partition Type: NTFS
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive K: | 2,68 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: STANE
Current User Name: Stan
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - D:\Dokumente und Einstellungen\Stan\Desktop\OTL.exe (OldTimer Tools)
PRC - D:\Programme\Lavasoft\Ad-Aware\AAWTray.exe (Lavasoft)
PRC - D:\Programme\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
PRC - D:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
PRC - D:\Programme\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
PRC - D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - D:\Programme\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Programme\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Programme\AVG\AVG9\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Programme\AVG\AVG9\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Programme\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Programme\AVG\AVG9\avgchsvx.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Programme\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - D:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
PRC - D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - D:\Programme\Skype\Toolbars\Shared\SkypeNames2.exe (Skype Technologies S.A.)
PRC - D:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
PRC - D:\Programme\PostgreSQL\8.4\bin\pg_ctl.exe (PostgreSQL Global Development Group)
PRC - D:\Programme\PostgreSQL\8.4\bin\postgres.exe (PostgreSQL Global Development Group)
PRC - D:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
PRC - D:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - D:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
PRC - D:\Programme\Gemeinsame Dateien\Logishrd\KHAL2\KHALMNPR.exe (Logitech, Inc.)
PRC - D:\Programme\RocketDock\RocketDock.exe ()
PRC - D:\WINDOWS\CTHELPER.EXE (Creative Technology Ltd)
PRC - D:\Programme\Creative\Shared Files\Module Loader\DLLML.exe (Creative Technology Ltd.)
PRC - D:\Programme\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
PRC - D:\Programme\Creative\SBAudigy4\DVDAudio\CTDVDDET.exe (Creative Technology Ltd)
PRC - D:\WINDOWS\system32\brsvc01a.exe (brother Industries Ltd)
PRC - D:\WINDOWS\system32\brss01a.exe (brother Industries Ltd)
 
 
========== Modules (SafeList) ==========
 
MOD - D:\Dokumente und Einstellungen\Stan\Desktop\OTL.exe (OldTimer Tools)
MOD - D:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll (Microsoft Corporation)
MOD - D:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll (Microsoft Corporation)
MOD - D:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
MOD - D:\Programme\Logitech\SetPoint\lgscroll.dll (Logitech, Inc.)
MOD - D:\Programme\Logitech\SetPoint\GameHook.dll (Logitech, Inc.)
MOD - D:\Programme\RocketDock\RocketDock.dll ()
MOD - D:\WINDOWS\system32\nview.dll ()
MOD - D:\WINDOWS\system32\nvwrsde.dll (NVIDIA Corporation)
MOD - D:\WINDOWS\system32\nvwddi.dll (NVIDIA Corporation)
MOD - D:\WINDOWS\system32\CTAGENT.DLL (Creative Technology Ltd)
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (AppMgmt) -- D:\WINDOWS\System32\appmgmts.dll File not found
SRV - (Lavasoft Ad-Aware Service) -- D:\Programme\Lavasoft\Ad-Aware\AAWService.exe (Lavasoft)
SRV - (avg9emc) -- D:\Programme\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg9wd) -- D:\Programme\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (postgresql-8.4) -- D:\Programme\PostgreSQL\8.4\bin\pg_ctl.exe (PostgreSQL Global Development Group)
SRV - (Apple Mobile Device) -- D:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (odserv) -- D:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (LBTServ) -- D:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTServ.exe (Logitech, Inc.)
SRV - (ose) -- D:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (Brother XP spl Service) -- D:\WINDOWS\system32\brsvc01a.exe (brother Industries Ltd)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (Lbd) -- D:\WINDOWS\system32\DRIVERS\Lbd.sys (Lavasoft AB)
DRV - (Lavasoft Kernexplorer) -- D:\Programme\Lavasoft\Ad-Aware\kernexplorer.sys ()
DRV - (AvgTdiX) -- D:\WINDOWS\System32\Drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgLdx86) -- D:\WINDOWS\System32\Drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AvgMfx86) -- D:\WINDOWS\System32\Drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (SASKUTIL) -- D:\Programme\SUPERAntiSpyware\SASKUTIL.SYS (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (SASDIFSV) -- D:\Programme\SUPERAntiSpyware\sasdifsv.sys (SUPERAdBlocker.com and SUPERAntiSpyware.com)
DRV - (gdrv) -- D:\WINDOWS\gdrv.sys (Windows (R) 2000 DDK provider)
DRV - (pavboot) -- D:\WINDOWS\system32\drivers\pavboot.sys (Panda Security, S.L.)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- D:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (LUsbFilt) -- D:\WINDOWS\system32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouFilt) -- D:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- D:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (JRAID) -- D:\WINDOWS\system32\DRIVERS\jraid.sys (JMicron Technology Corp.)
DRV - (yukonwxp) -- D:\WINDOWS\system32\drivers\yk51x86.sys (Marvell)
DRV - (nv) -- D:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (JGOGO) -- D:\WINDOWS\system32\DRIVERS\JGOGO.sys (JMicron )
DRV - (ctaud2k) Creative Audio Driver (WDM) -- D:\WINDOWS\system32\drivers\ctaud2k.sys (Creative Technology Ltd)
DRV - (ctprxy2k) -- D:\WINDOWS\system32\drivers\ctprxy2k.sys (Creative Technology Ltd)
DRV - (ha10kx2k) -- D:\WINDOWS\system32\drivers\ha10kx2k.sys (Creative Technology Ltd)
DRV - (hap17v2k) -- D:\WINDOWS\system32\drivers\haP17v2k.sys (Creative Technology Ltd)
DRV - (hap16v2k) -- D:\WINDOWS\system32\drivers\haP16v2k.sys (Creative Technology Ltd)
DRV - (ossrv) -- D:\WINDOWS\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV - (ctsfm2k) -- D:\WINDOWS\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV - (emupia) -- D:\WINDOWS\system32\drivers\emupia2k.sys (Creative Technology Ltd)
DRV - (ctac32k) -- D:\WINDOWS\system32\drivers\ctac32k.sys (Creative Technology Ltd)
DRV - (ctdvda2k) -- D:\WINDOWS\system32\drivers\ctdvda2k.sys (Creative Technology Ltd)
DRV - (BrScnUsb) -- D:\WINDOWS\system32\drivers\BrScnUsb.sys (Brother Industries Ltd.)
DRV - (LUsbKbd) -- D:\WINDOWS\system32\drivers\LUsbKbd.sys (Logitech, Inc.)
DRV - (LHidUsbK) -- D:\WINDOWS\system32\drivers\LHidUsbK.sys (Logitech, Inc.)
DRV - (LMouKE) -- D:\WINDOWS\system32\drivers\LMouKE.Sys (Logitech, Inc.)
DRV - (LHidKe) -- D:\WINDOWS\system32\drivers\LHidKE.Sys (Logitech, Inc.)
DRV - (GVCplDrv) -- D:\WINDOWS\System32\drivers\GVCplDrv.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\..\URLSearchHook:  - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - D:\Programme\DVDVideoSoftTB\tbDVD1.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de"
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.845
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.1
FF - prefs.js..extensions.enabledItems: {2225ae98-b3e0-4ecf-9fa6-b234692431ac}:2.0.5.2
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8
FF - prefs.js..extensions.enabledItems: {ca8b7b3d-b6e6-438f-b935-601b3de48d66}:1.1.6
FF - prefs.js..extensions.enabledItems: max@subfighter.com:1.0.3
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: lazarus@interclue.com:2.0.5
FF - prefs.js..extensions.enabledItems: {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0
FF - prefs.js..extensions.enabledItems: nosquint@urandom.ca:2.0.3
FF - prefs.js..extensions.enabledItems: SkipScreen@SkipScreen:0.5.7amo
FF - prefs.js..extensions.enabledItems: {5F590AA2-1221-4113-A6F4-A4BB62414FAC}:0.45.6.20100202.1
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4
FF - prefs.js..extensions.enabledItems: smartwebprinting@hp.com:4.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:2.7.0.14
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:4.2.0.5198
FF - prefs.js..extensions.enabledItems: smarterwiki@wikiatic.com:4.1.7
FF - prefs.js..extensions.enabledItems: {d47a9f51-8281-43fa-f450-f28ef8735e9a}:2.0.3
FF - prefs.js..extensions.enabledItems: {e001c731-5e37-4538-a5cb-8168736a2360}:0.9.9.38
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.7&q="
 
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: D:\Programme\AVG\AVG9\Firefox [2010.07.21 18:05:20 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: D:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2010.03.27 16:08:07 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: D:\Programme\Mozilla Firefox\components [2010.07.30 18:57:46 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2010.07.25 21:28:17 | 000,000,000 | ---D | M]
 
[2009.09.28 21:18:38 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Extensions
[2010.09.18 02:43:45 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions
[2009.10.15 05:22:57 | 000,000,000 | ---D | M] (Browser plug-in for documents) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{2225ae98-b3e0-4ecf-9fa6-b234692431ac}
[2010.02.03 00:02:54 | 000,000,000 | ---D | M] (SmoothWheel (mozdev.org)) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{5F590AA2-1221-4113-A6F4-A4BB62414FAC}
[2010.08.16 11:58:06 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.06.25 05:21:55 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.05.26 01:18:07 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.07.28 17:38:21 | 000,000,000 | ---D | M] (DownloadHelper) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2010.03.08 14:29:23 | 000,000,000 | ---D | M] (Firefox Throttle) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{ca8b7b3d-b6e6-438f-b935-601b3de48d66}
[2010.07.13 16:35:45 | 000,000,000 | ---D | M] (Adblock Plus) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.09.14 16:48:39 | 000,000,000 | ---D | M] (Pixlr Grabber) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{d47a9f51-8281-43fa-f450-f28ef8735e9a}
[2010.07.14 18:04:14 | 000,000,000 | ---D | M] (Download Statusbar) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010.06.17 14:49:00 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2010.09.18 02:43:32 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
[2010.07.19 03:37:19 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
[2009.09.29 05:09:58 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\Ie8@fox.modifier
[2009.09.29 05:09:49 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\Ie8@fox.theme
[2010.01.04 17:33:16 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\lazarus@interclue.com
[2009.12.15 01:29:25 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\max@subfighter.com
[2009.11.14 06:40:47 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\nosquint@urandom.ca
[2010.08.16 11:58:10 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\SkipScreen@SkipScreen
[2010.09.14 16:48:41 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\smarterwiki@wikiatic.com
[2010.09.18 02:43:32 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\extensions\staged-xpis
[2010.09.20 17:53:59 | 000,000,950 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-1.xml
[2010.06.28 16:25:15 | 000,000,950 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-10.xml
[2010.07.21 22:10:09 | 000,000,950 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-11.xml
[2010.07.25 21:28:51 | 000,000,950 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-12.xml
[2009.11.09 08:13:01 | 000,000,961 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-2.xml
[2009.12.18 02:13:31 | 000,000,961 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-3.xml
[2010.01.07 01:48:33 | 000,000,961 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-4.xml
[2010.02.19 08:45:31 | 000,000,961 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-5.xml
[2010.03.12 15:55:29 | 000,000,950 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-6.xml
[2010.03.23 14:44:01 | 000,000,950 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-7.xml
[2010.04.07 01:29:55 | 000,000,950 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-8.xml
[2010.06.25 00:59:09 | 000,000,950 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin-9.xml
[2010.08.01 16:24:42 | 000,000,168 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin.gif
[2010.08.01 16:24:42 | 000,000,618 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin.src
[2009.10.28 21:55:19 | 000,000,955 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla\Firefox\Profiles\rmp7vctu.default\searchplugins\icqplugin.xml
[2010.09.18 02:43:45 | 000,000,000 | ---D | M] -- D:\Programme\Mozilla Firefox\extensions
[2009.09.28 22:38:26 | 000,000,000 | ---D | M] (No name found) -- D:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.07.03 06:12:30 | 000,000,000 | ---D | M] (Skype extension for Firefox) -- D:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.04.16 13:52:06 | 000,000,000 | ---D | M] (Java Console) -- D:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.04.12 17:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- D:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.06.28 16:24:52 | 000,001,392 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.06.28 16:24:52 | 000,002,344 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.06.28 16:24:52 | 000,006,805 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.06.28 16:24:52 | 000,001,178 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.06.28 16:24:52 | 000,001,105 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2008.04.14 14:00:00 | 000,000,820 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O2 - BHO: (HP Print Enhancer) - {0347C33E-8762-4905-BF09-768834316C61} - D:\Programme\HP\Digital Imaging\smart web printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\Programme\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - D:\Programme\DVDVideoSoftTB\tbDVD1.dll (Conduit Ltd.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Programme\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - D:\Programme\DVDVideoSoftTB\tbDVD1.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (no name) - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - D:\Programme\DVDVideoSoftTB\tbDVD1.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Adobe ARM] D:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AudioDrvEmulator] D:\Programme\Creative\Shared Files\Module Loader\DLLML.exe (Creative Technology Ltd.)
O4 - HKLM..\Run: [AVG9_TRAY] D:\Programme\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [CTDVDDET] D:\Programme\Creative\SBAudigy4\DVDAudio\CTDVDDET.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [CTHelper] D:\WINDOWS\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKLM..\Run: [CTSysVol] D:\Programme\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [GBB36X Configure] D:\WINDOWS\System32\JMRaidTool.exe (Gigabyte Technology Corp.)
O4 - HKLM..\Run: [Kernel and Hardware Abstraction Layer] D:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [KernelFaultCheck]  File not found
O4 - HKLM..\Run: [Logitech Hardware Abstraction Layer] D:\WINDOWS\KHALMNPR.Exe (Logitech, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] D:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [UpdReg] D:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKCU..\Run: [ICQ] D:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [RocketDock] D:\Programme\RocketDock\RocketDock.exe ()
O4 - HKCU..\Run: [SUPERAntiSpyware] D:\Programme\SUPERAntiSpyware\SUPERAntiSpyware.exe (SUPERAntiSpyware.com)
O4 - Startup: D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Logitech SetPoint.lnk = D:\Programme\Logitech\SetPoint\SetPoint.exe (Logitech, Inc.)
O4 - Startup: D:\Dokumente und Einstellungen\Stan\Startmenü\Programme\Autostart\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = D:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube Download - D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - D:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - D:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - D:\Programme\PokerStars\PokerStarsUpdate.exe (PokerStars)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Programme\PartyGaming\PartyPoker\RunApp.exe ()
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - D:\Programme\PartyGaming\PartyPoker\RunApp.exe ()
O9 - Extra Button: HP Smart Web Printing ein- oder ausblenden - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Programme\HP\Digital Imaging\smart web printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - D:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 80.69.100.214 80.69.100.206
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\Programme\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - D:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - D:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - D:\Programme\SUPERAntiSpyware\SASWINLO.DLL - D:\Programme\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O20 - Winlogon\Notify\avgrsstarter: DllName - avgrsstx.dll - D:\WINDOWS\System32\avgrsstx.dll (AVG Technologies CZ, s.r.o.)
O20 - Winlogon\Notify\LBTWlgn: DllName - d:\programme\gemeinsame dateien\logitech\bluetooth\LBTWlgn.dll - d:\Programme\Gemeinsame Dateien\Logitech\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: D:\Dokumente und Einstellungen\Stan\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Dokumente und Einstellungen\Stan\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - D:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.09.28 20:14:53 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009.02.21 01:07:58 | 000,000,000 | ---D | M] - F:\auto -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O34 - HKLM BootExecute: (lsdelete) - D:\WINDOWS\System32\lsdelete.exe ()
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.09.19 02:11:52 | 000,575,488 | ---- | C] (OldTimer Tools) -- D:\Dokumente und Einstellungen\Stan\Desktop\OTL.exe
[2010.09.18 02:49:26 | 000,028,552 | ---- | C] (Panda Security, S.L.) -- D:\WINDOWS\System32\drivers\pavboot.sys
[2010.09.18 02:49:03 | 000,000,000 | ---D | C] -- D:\Programme\Panda Security
[2010.09.18 02:43:46 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\QuickScan
[2010.09.17 03:44:40 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Desktop\ANVIPROGS
[2010.09.17 03:44:00 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Malwarebytes
[2010.09.17 03:43:34 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.09.17 03:43:33 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- D:\WINDOWS\System32\drivers\mbam.sys
[2010.09.17 03:43:33 | 000,000,000 | ---D | C] -- D:\Programme\Malwarebytes' Anti-Malware
[2010.09.17 03:43:33 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.09.17 03:19:30 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\SUPERAntiSpyware.com
[2010.09.17 03:19:30 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SUPERAntiSpyware.com
[2010.09.17 03:19:19 | 000,000,000 | ---D | C] -- D:\Programme\SUPERAntiSpyware
[2010.09.15 18:49:54 | 000,095,024 | ---- | C] (Sunbelt Software) -- D:\WINDOWS\System32\drivers\SBREDrv.sys
[2010.09.15 18:47:49 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Lokale Einstellungen\Anwendungsdaten\Sunbelt Software
[2010.09.15 18:47:08 | 000,000,000 | -H-D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{ECC164E0-3133-4C70-A831-F08DB2940F70}
[2010.09.13 12:57:16 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\ChessBase
[2010.09.13 12:57:12 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Eigene Dateien\ChessBase
[2010.09.13 12:56:29 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Lokale Einstellungen\Anwendungsdaten\ChessBase
[2010.09.11 14:02:58 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Desktop\PARDY HEUTE
[2010.09.11 13:03:08 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Desktop\David_Guetta_-_F_ck_Me_Im_Famous-SAT-09-11-2010-TALiON
[2010.09.06 13:37:22 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\Mozilla-Cache
[2005.06.18 08:04:56 | 000,033,792 | R--- | C] ( ) -- D:\WINDOWS\System32\a3d.dll
[2004.11.24 20:25:52 | 000,335,872 | ---- | C] ( ) -- D:\WINDOWS\System32\drvc.dll
[3 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
[3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2010.09.19 02:11:53 | 000,575,488 | ---- | M] (OldTimer Tools) -- D:\Dokumente und Einstellungen\Stan\Desktop\OTL.exe
[2010.09.19 02:10:31 | 000,000,470 | ---- | M] () -- D:\WINDOWS\tasks\Ad-Aware Update (Weekly).job
[2010.09.19 02:08:30 | 004,958,588 | ---- | M] () -- D:\WINDOWS\{00000005-00000000-00000001-00001102-00000008-10211102}.CDF
[2010.09.19 02:08:28 | 000,050,257 | ---- | M] () -- D:\WINDOWS\System32\nvapps.xml
[2010.09.19 02:08:26 | 000,000,006 | -H-- | M] () -- D:\WINDOWS\tasks\SA.DAT
[2010.09.19 02:08:24 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2010.09.19 02:07:27 | 000,011,564 | ---- | M] () -- D:\WINDOWS\System32\DVCState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.09.19 02:07:27 | 000,001,080 | ---- | M] () -- D:\WINDOWS\System32\settingsbkup.sfm
[2010.09.19 02:07:27 | 000,001,080 | ---- | M] () -- D:\WINDOWS\System32\settings.sfm
[2010.09.19 02:07:26 | 000,030,600 | ---- | M] () -- D:\WINDOWS\System32\BMXStateBkp-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.09.19 02:07:26 | 000,030,600 | ---- | M] () -- D:\WINDOWS\System32\BMXState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.09.19 02:07:26 | 000,029,604 | ---- | M] () -- D:\WINDOWS\System32\BMXCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.09.19 02:07:26 | 000,029,604 | ---- | M] () -- D:\WINDOWS\System32\BMXBkpCtrlState-{00000005-00000000-00000001-00001102-00000008-10211102}.rfx
[2010.09.19 02:07:08 | 007,340,032 | -H-- | M] () -- D:\Dokumente und Einstellungen\Stan\NTUSER.DAT
[2010.09.19 02:07:08 | 000,000,190 | -HS- | M] () -- D:\Dokumente und Einstellungen\Stan\ntuser.ini
[2010.09.19 02:06:57 | 004,958,588 | ---- | M] () -- D:\WINDOWS\{00000005-00000000-00000001-00001102-00000008-10211102}.BAK
[2010.09.18 17:35:41 | 000,000,676 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.09.18 17:07:26 | 064,887,310 | ---- | M] () -- D:\WINDOWS\System32\drivers\Avg\incavi.avm
[2010.09.18 04:59:08 | 000,163,840 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.09.17 02:43:38 | 000,013,672 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2010.09.15 19:04:09 | 000,001,374 | ---- | M] () -- D:\WINDOWS\imsins.BAK
[2010.09.15 18:49:53 | 000,095,024 | ---- | M] (Sunbelt Software) -- D:\WINDOWS\System32\drivers\SBREDrv.sys
[2010.09.15 18:47:06 | 000,000,847 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Ad-Aware.lnk
[2010.09.15 15:14:56 | 000,006,172 | ---- | M] () -- D:\WINDOWS\System32\d3d9caps.dat
[2010.09.14 14:23:13 | 000,171,488 | ---- | M] () -- D:\WINDOWS\System32\FNTCACHE.DAT
[2010.09.14 00:11:14 | 000,000,542 | ---- | M] () -- D:\WINDOWS\win.ini
[2010.09.13 12:57:14 | 000,035,800 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
[2010.09.11 14:10:15 | 069,172,331 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Desktop\www.djleomix.tkbringitbackvol2mixedbydjl.e.o.mp3
[2010.09.11 14:10:01 | 067,313,162 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Desktop\jerkinmusic.mp3
[2010.09.09 15:17:56 | 000,008,548 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\.recently-used.xbel
[2010.08.27 03:28:27 | 000,000,906 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Desktop\DVDVideoSoft Free Studio.lnk
[2010.08.22 19:55:43 | 002,886,243 | ---- | M] () -- D:\Dokumente und Einstellungen\Stan\Desktop\Schmetterling_Bastelanleitung.pdf
[3 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
[3 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2010.09.18 17:35:41 | 000,000,676 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.09.15 18:47:06 | 000,000,847 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Ad-Aware.lnk
[2010.09.11 14:08:15 | 069,172,331 | ---- | C] () -- D:\Dokumente und Einstellungen\Stan\Desktop\www.djleomix.tkbringitbackvol2mixedbydjl.e.o.mp3
[2010.09.11 14:08:04 | 067,313,162 | ---- | C] () -- D:\Dokumente und Einstellungen\Stan\Desktop\jerkinmusic.mp3
[2010.09.09 15:17:56 | 000,008,548 | ---- | C] () -- D:\Dokumente und Einstellungen\Stan\.recently-used.xbel
[2010.08.22 19:55:43 | 002,886,243 | ---- | C] () -- D:\Dokumente und Einstellungen\Stan\Desktop\Schmetterling_Bastelanleitung.pdf
[2010.04.02 12:42:28 | 000,000,760 | ---- | C] () -- D:\Dokumente und Einstellungen\Stan\Anwendungsdaten\setup_ldm.iss
[2010.03.27 16:00:00 | 000,001,191 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log
[2010.02.23 19:59:21 | 000,004,865 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\bltofzsb.qlf
[2010.01.20 02:59:34 | 000,004,937 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ojvzdisj.xda
[2010.01.05 19:25:31 | 000,001,025 | ---- | C] () -- D:\WINDOWS\System32\sysprs7.dll
[2010.01.05 19:25:31 | 000,000,205 | ---- | C] () -- D:\WINDOWS\System32\lsprst7.dll
[2009.10.23 07:26:33 | 000,000,038 | ---- | C] () -- D:\WINDOWS\AviSplitter.INI
[2009.09.30 06:59:32 | 000,000,000 | ---- | C] () -- D:\WINDOWS\HMHud.INI
[2009.09.29 06:27:06 | 000,000,468 | ---- | C] () -- D:\WINDOWS\BRWMARK.INI
[2009.09.29 06:27:06 | 000,000,027 | ---- | C] () -- D:\WINDOWS\BRPP2KA.INI
[2009.09.29 06:27:05 | 000,000,030 | ---- | C] () -- D:\WINDOWS\System32\brss01a.ini
[2009.09.28 21:29:20 | 000,163,840 | ---- | C] () -- D:\Dokumente und Einstellungen\Stan\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.09.28 21:12:02 | 000,046,593 | R--- | C] () -- D:\WINDOWS\System32\e10kxwdm.ini
[2009.09.28 21:12:02 | 000,000,193 | R--- | C] () -- D:\WINDOWS\System32\ctzapxx.ini
[2009.09.28 20:38:53 | 000,023,040 | R--- | C] () -- D:\WINDOWS\System32\drivers\GVCplDrv.sys
[2008.12.19 16:15:58 | 004,338,246 | ---- | C] () -- D:\WINDOWS\System32\libavcodec.dll
[2008.12.17 18:41:18 | 000,884,237 | ---- | C] () -- D:\WINDOWS\System32\ff_x264.dll
[2008.12.17 18:22:58 | 000,093,184 | ---- | C] () -- D:\WINDOWS\System32\ff_wmv9.dll
[2008.12.17 18:22:48 | 000,057,344 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll
[2008.12.17 18:17:34 | 000,239,247 | ---- | C] () -- D:\WINDOWS\System32\ff_theora.dll
[2008.12.17 17:59:54 | 000,560,802 | ---- | C] () -- D:\WINDOWS\System32\libmplayer.dll
[2008.12.11 12:27:02 | 000,000,547 | ---- | C] () -- D:\WINDOWS\System32\ff_vfw.dll.manifest
[2006.03.09 09:29:00 | 001,662,976 | ---- | C] () -- D:\WINDOWS\System32\nvwdmcpl.dll
[2006.03.09 09:29:00 | 001,466,368 | ---- | C] () -- D:\WINDOWS\System32\nview.dll
[2006.03.09 09:29:00 | 001,019,904 | ---- | C] () -- D:\WINDOWS\System32\nvwimg.dll
[2006.03.09 09:29:00 | 000,573,440 | ---- | C] () -- D:\WINDOWS\System32\nvhwvid.dll
[2006.03.09 09:29:00 | 000,466,944 | ---- | C] () -- D:\WINDOWS\System32\nvshell.dll
[2006.03.09 09:29:00 | 000,286,720 | ---- | C] () -- D:\WINDOWS\System32\nvnt4cpl.dll
[2006.03.09 09:29:00 | 000,098,304 | ---- | C] () -- D:\WINDOWS\System32\nvapi.dll
[2005.07.11 06:44:12 | 000,038,400 | ---- | C] () -- D:\WINDOWS\System32\CTBURST.DLL
[2005.06.07 15:10:50 | 000,070,656 | ---- | C] () -- D:\WINDOWS\System32\CTMMACTL.DLL
[2004.10.03 18:50:54 | 000,129,024 | ---- | C] () -- D:\WINDOWS\System32\ff_mpeg2enc.dll
[2003.08.07 15:01:50 | 000,237,568 | ---- | C] () -- D:\WINDOWS\System32\lame_enc.dll
[2003.03.21 11:56:12 | 000,000,194 | ---- | C] () -- D:\WINDOWS\System32\KILL.INI
< End of report >
         

OTL Extras logfile created on: 19.09.2010 02:13:14 - Run 1
OTL by OldTimer - Version 3.2.12.1     Folder = D:\Dokumente und Einstellungen\Stan\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 47,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): D:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 97,65 Gb Total Space | 26,14 Gb Free Space | 26,77% Space Free | Partition Type: NTFS
Drive D: | 48,83 Gb Total Space | 14,82 Gb Free Space | 30,36% Space Free | Partition Type: NTFS
Drive E: | 135,22 Gb Total Space | 19,76 Gb Free Space | 14,62% Space Free | Partition Type: NTFS
Drive F: | 97,65 Gb Total Space | 46,36 Gb Free Space | 47,47% Space Free | Partition Type: NTFS
Drive G: | 86,39 Gb Total Space | 68,75 Gb Free Space | 79,58% Space Free | Partition Type: NTFS
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Drive K: | 2,68 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
 
Computer Name: STANE
Current User Name: Stan
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "D:\Programme\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "D:\Programme\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- D:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Directory [Winamp.Bookmark] -- "D:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "D:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "D:\Programme\Winamp\winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Programme\HP\Digital Imaging\bin\hposid01.exe" = D:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = D:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- ()
"D:\Programme\HP\Digital Imaging\bin\hpoews01.exe" = D:\Programme\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = D:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"D:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe" = D:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\Digital Imaging\bin\hpqusgm.exe" = D:\Programme\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\Digital Imaging\bin\hpqusgh.exe" = D:\Programme\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\HP Software Update\HPWUCli.exe" = D:\Programme\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)
"D:\Programme\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = D:\Programme\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Programme\AVG\AVG8\avgemc.exe" = D:\Programme\AVG\AVG8\avgemc.exe:*:Enabled:avgemc.exe -- File not found
"D:\Programme\AVG\AVG8\avgupd.exe" = D:\Programme\AVG\AVG8\avgupd.exe:*:Enabled:avgupd.exe -- File not found
"D:\Programme\AVG\AVG8\avgnsx.exe" = D:\Programme\AVG\AVG8\avgnsx.exe:*:Enabled:avgnsx.exe -- File not found
"D:\Programme\ICQ6.5\ICQ.exe" = D:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"D:\Programme\Microsoft Office\Office12\ONENOTE.EXE" = D:\Programme\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"D:\Programme\iTunes\iTunes.exe" = D:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"D:\Programme\AVG\AVG9\avgemc.exe" = D:\Programme\AVG\AVG9\avgemc.exe:*:Enabled:avgemc.exe -- (AVG Technologies CZ, s.r.o.)
"D:\Programme\AVG\AVG9\avgupd.exe" = D:\Programme\AVG\AVG9\avgupd.exe:*:Enabled:avgupd.exe -- (AVG Technologies CZ, s.r.o.)
"D:\Programme\AVG\AVG9\avgnsx.exe" = D:\Programme\AVG\AVG9\avgnsx.exe:*:Enabled:avgnsx.exe -- (AVG Technologies CZ, s.r.o.)
"D:\Programme\SPSSInc\PASWStatistics18\paswstat.exe" = D:\Programme\SPSSInc\PASWStatistics18\paswstat.exe:*:Disabled:Statistics18:exe -- (SPSS Inc.)
"D:\Programme\SPSSInc\PASWStatistics18\paswstat.com" = D:\Programme\SPSSInc\PASWStatistics18\paswstat.com:*:Disabled:Statistics18:com -- (SPSS Inc.)
"D:\Programme\SPSSInc\PASWStatistics18\WinWrapIDE.exe" = D:\Programme\SPSSInc\PASWStatistics18\WinWrapIDE.exe:*:Disabled:SPSS Basic Script Editor -- (SPSS Inc.)
"D:\Programme\HP\Digital Imaging\bin\hposid01.exe" = D:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = D:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- ()
"D:\Programme\HP\Digital Imaging\bin\hpoews01.exe" = D:\Programme\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = D:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"D:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe" = D:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\Digital Imaging\bin\hpqusgm.exe" = D:\Programme\HP\Digital Imaging\bin\hpqusgm.exe:*:Enabled:hpqusgm.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\Digital Imaging\bin\hpqusgh.exe" = D:\Programme\HP\Digital Imaging\bin\hpqusgh.exe:*:Enabled:hpqusgh.exe -- (Hewlett-Packard Co.)
"D:\Programme\HP\HP Software Update\HPWUCli.exe" = D:\Programme\HP\HP Software Update\HPWUCli.exe:*:Enabled:hpwucli.exe -- (Hewlett-Packard)
"D:\Programme\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe" = D:\Programme\HP\Digital Imaging\smart web printing\SmartWebPrintExe.exe:*:Enabled:smartwebprintexe.exe -- (Hewlett-Packard Co.)
"D:\Programme\TeamViewer\Version5\TeamViewer.exe" = D:\Programme\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00405945-70C1-4B1D-9A3C-45A2883366AF}" = PS_AIO_05_C4600_Software_Min
"{07287123-B8AC-41CE-8346-3D777245C35B}" = Bonjour
"{07FB17D8-7DB6-4F06-80C4-8BE1719CB6A1}" = hpWLPGInstaller
"{0C826C5B-B131-423A-A229-C71B3CACCD6A}" = CDDRV_Installer
"{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan
"{175F0111-2968-4935-8F70-33108C6A4DE3}" = MarketResearch
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{21A2F5EE-1DC5-488A-BE7E-E526F8C61488}" = DeviceDiscovery
"{26A24AE4-039D-4CA4-87B4-2F83216016FF}" = Java(TM) 6 Update 20
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{3101CB58-3482-4D21-AF1A-7057FC935355}" = KhalInstallWrapper
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = Gigabyte Raid Configurer
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg
"{44C81D1A-0520-49BB-B510-98B8DD414EA1}" = HP Photosmart C4600 All-In-One Driver Software 13.0 Rel .5
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A70EF07-7F88-4434-BB61-D1DE8AE93DD4}" = SolutionCenter
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{63FF21C9-A810-464F-B60A-3111747B1A6D}" = GPBaseService2
"{68A10D12-0D0F-4212-BDE6-D87FAD32A8FA}" = SmartWebPrinting
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{6B2FFB21-AC88-45C3-9A7D-4BB3E744EC91}" = HPSSupply
"{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{7CDD7C4C-5224-40E4-951F-51C12FEAB8AB}" = C4600
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders  (German) 12
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00B2-0407-0000-0000000FF1CE}" = Microsoft – Speichern als PDF oder XPS – Add-In für 2007 Microsoft Office-Programme
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A8AD6CB8-DE96-43FA-9B73-5FB873DD1CAE}" = Sound Blaster Audigy 4
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AADEA55D-C834-4BCB-98A3-4B8D1C18F4EE}" = Apple Mobile Device Support
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.2 - Deutsch
"{AE8705FB-E13C-40A9-8A2D-68D6733FBFC2}" = Status
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B023185F-F1EF-4F97-B0BD-AE6D802226D1}" = NVIDIA WDM Drivers
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B607C354-CD79-4D22-86D1-92DC94153F42}" = Apple Application Support
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C25215FC-5900-48B0-B93C-8D3379027312}" = PASW Statistics 18
"{C43326F5-F135-4551-8270-7F7ABA0462E1}" = HPProductAssistant
"{C75CDBA2-3C86-481e-BD10-BDDA758F9DFF}" = hpPrintProjects
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240B8}" = WinZip 12.1
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D1A74FBB-CA8D-4CCA-9B89-BAAA436DB178}" = iTunes
"{D4C9692E-4EFA-4DA0-8B7F-9439466D9E31}" = Full Tilt Poker
"{DC0A5F99-FD66-433F-9D3A-05DCBA64BE42}" = TrayApp
"{DED53B0B-B67C-4244-AE6A-D6FD3C28D1EF}" = Ad-Aware
"{F000DE4C-B6CB-4181-BAFF-EC5DA2A9C156}" = RuntimeLibsVC90
"{F29B21BD-CAA6-445F-8EF7-A7E2B9D8B14E}" = Logitech SetPoint
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"7-Zip" = 7-Zip 4.65
"ActiveScan 2.0" = Panda ActiveScan 2.0
"Ad-Aware" = Ad-Aware
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Audacity_is1" = Audacity 1.2.6
"AVG9Uninstall" = AVG Free 9.0
"bet365poker" = Poker at bet365
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"Free CD Ripper_is1" = Free CD Ripper 3.1
"Free Studio_is1" = Free Studio version 4.8
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP Imaging Device Functions" = HP Imaging Device Functions 13.0
"HP Print Projects" = HP Print Projects 1.0
"HP Smart Web Printing" = HP Smart Web Printing 4.5
"HP Solution Center & Imaging Support Tools" = HP Solution Center 13.0
"HPExtendedCapabilities" = HP Customer Participation Program 13.0
"ie8" = Windows Internet Explorer 8
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mansion Poker" = MansionPoker
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA Drivers" = NVIDIA Drivers
"Pacific Poker" = Pacific Poker
"PartyPoker" = PartyPoker
"Personal Backup_is1" = Personal Backup 4.5
"PokerStars" = PokerStars
"PokerTracker3" = PokerTracker 3 (remove only)
"PostgreSQL 8.4" = PostgreSQL 8.4
"RocketDock_is1" = RocketDock 1.3.5
"Shop for HP Supplies" = Shop for HP Supplies
"TeamViewer 5" = TeamViewer 5
"Titan Poker" = Titan Poker
"Uninstall_is1" = Uninstall 1.0.0.1
"VLC media player" = VLC media player 1.0.5
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"WinAce Archiver" = WinAce Archiver
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinGimp-2.0_is1" = GIMP 2.6.7
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XP Codec Pack" = XP Codec Pack
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 16.09.2010 20:24:08 | Computer Name = STANE | Source = nview_info | ID = 11141121
Description = 
 
Error - 16.09.2010 20:24:27 | Computer Name = STANE | Source = nview_info | ID = 11141121
Description = 
 
Error - 16.09.2010 20:24:27 | Computer Name = STANE | Source = nview_info | ID = 11141121
Description = 
 
Error - 16.09.2010 20:26:27 | Computer Name = STANE | Source = nview_info | ID = 11141121
Description = 
 
Error - 16.09.2010 20:26:27 | Computer Name = STANE | Source = nview_info | ID = 11141121
Description = 
 
Error - 16.09.2010 20:26:27 | Computer Name = STANE | Source = nview_info | ID = 11141121
Description = 
 
Error - 16.09.2010 20:26:32 | Computer Name = STANE | Source = nview_info | ID = 11141121
Description = 
 
Error - 16.09.2010 20:42:08 | Computer Name = STANE | Source = nview_info | ID = 11141121
Description = 
 
Error - 17.09.2010 20:44:30 | Computer Name = STANE | Source = crypt32 | ID = 131083
Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
 ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich 
nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel
 in der signierten Datei.  .
 
Error - 17.09.2010 20:44:30 | Computer Name = STANE | Source = crypt32 | ID = 131083
Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
 ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich 
nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel
 in der signierten Datei.  .
 
[ System Events ]
Error - 04.09.2010 13:34:14 | Computer Name = STANE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 95.222.142.75 für die Netzwerkkarte mit der Netzwerkadresse
 0016E65EBE3A wurde durch  den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat 
eine DHCPNACK-Meldung gesendet).
 
Error - 04.09.2010 13:34:59 | Computer Name = STANE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 192.168.100.10 für die Netzwerkkarte mit der Netzwerkadresse
 0016E65EBE3A wurde durch  den DHCP-Server 80.69.97.212 abgelehnt (der DHCP-Server
 hat eine DHCPNACK-Meldung gesendet).
 
Error - 04.09.2010 15:08:40 | Computer Name = STANE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 95.222.142.75 für die Netzwerkkarte mit der Netzwerkadresse
 0016E65EBE3A wurde durch  den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat 
eine DHCPNACK-Meldung gesendet).
 
Error - 04.09.2010 15:19:17 | Computer Name = STANE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 192.168.100.10 für die Netzwerkkarte mit der Netzwerkadresse
 0016E65EBE3A wurde durch  den DHCP-Server 80.69.97.212 abgelehnt (der DHCP-Server
 hat eine DHCPNACK-Meldung gesendet).
 
Error - 09.09.2010 19:25:03 | Computer Name = STANE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 95.222.136.195 für die Netzwerkkarte mit der Netzwerkadresse
 0016E65EBE3A wurde durch  den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat 
eine DHCPNACK-Meldung gesendet).
 
Error - 09.09.2010 19:29:35 | Computer Name = STANE | Source = Dhcp | ID = 1000
Description = Die Lease dieses Computers zu der IP-Adresse 192.168.100.10 über die
   Netzwerkkarte mit der Netzwerkadresse 0016E65EBE3A ist verloren gegangen.
 
Error - 09.09.2010 20:17:37 | Computer Name = STANE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 95.222.136.195 für die Netzwerkkarte mit der Netzwerkadresse
 0016E65EBE3A wurde durch  den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat 
eine DHCPNACK-Meldung gesendet).
 
Error - 09.09.2010 20:29:37 | Computer Name = STANE | Source = Dhcp | ID = 1000
Description = Die Lease dieses Computers zu der IP-Adresse 192.168.100.10 über die
   Netzwerkkarte mit der Netzwerkadresse 0016E65EBE3A ist verloren gegangen.
 
Error - 16.09.2010 12:50:54 | Computer Name = STANE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 95.222.142.126 für die Netzwerkkarte mit der Netzwerkadresse
 0016E65EBE3A wurde durch  den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat 
eine DHCPNACK-Meldung gesendet).
 
Error - 16.09.2010 12:51:40 | Computer Name = STANE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 192.168.100.10 für die Netzwerkkarte mit der Netzwerkadresse
 0016E65EBE3A wurde durch  den DHCP-Server 80.69.97.212 abgelehnt (der DHCP-Server
 hat eine DHCPNACK-Meldung gesendet).
 
 
< End of report >