![]() |
|
Log-Analyse und Auswertung: Links bei Google werden umgeleitet und Internet scheint allgemein langsamer/stockendWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 | |
| ![]() Links bei Google werden umgeleitet und Internet scheint allgemein langsamer/stockend Hey, ich hab ein ähnliches Problem wie es hier kürzlich erst besprochen wurde. Bei mir werden auch die Google-Links auf irgendwelche anderen Seiten umgeleitet. Oft kommen dann Seiten, welche automatisch .exe-Dateien runterladen wollen. Ich nutze Firefox. Hab schon probiert das ganze mit der Neuinstallation von Firefox in Griff zu bekommen, was aber nicht gelang. Ich hoffe, dass es eine Möglichkeit gibt, das ganze ohne ein komplettes Neuaufsetzen des PCs gibt zu lösen. Hier die Logfiles: Malwarebytes: Zitat:
OTL 1: OTL Logfile: Code:
ATTFilter OTL logfile created on: 11.11.2010 23:35:56 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Dokumente und Einstellungen\***\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 55.00% Memory free 5.00 Gb Paging File | 4.00 Gb Available in Paging File | 73.00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 698.64 Gb Total Space | 370.69 Gb Free Space | 53.06% Space Free | Partition Type: NTFS Computer Name: *** | User Name: *** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2010.11.11 23:10:53 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\***\Desktop\OTL.exe PRC - [2010.11.08 11:55:32 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe PRC - [2010.11.08 11:55:29 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe PRC - [2010.11.08 11:55:29 | 000,267,944 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe PRC - [2010.10.27 07:13:18 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe PRC - [2010.07.19 17:00:13 | 000,202,256 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe PRC - [2010.02.18 10:43:18 | 000,248,040 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe PRC - [2010.01.14 22:10:53 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe PRC - [2008.04.14 07:52:46 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe PRC - [2007.11.26 14:54:22 | 001,629,480 | ---- | M] (Nero AG) -- C:\Programme\Nero\Nero 7\InCD\NBHGui.exe PRC - [2007.11.26 14:54:12 | 001,554,728 | ---- | M] (Nero AG) -- C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe PRC - [2007.11.26 14:54:02 | 001,057,064 | ---- | M] (Nero AG) -- C:\Programme\Nero\Nero 7\InCD\InCD.exe PRC - [2007.09.11 00:45:04 | 000,124,832 | ---- | M] () -- C:\Programme\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe PRC - [2005.04.08 01:01:00 | 002,028,697 | R--- | M] (AVM) -- C:\Programme\avmwlanstick\WLanGUI.exe PRC - [2005.04.08 01:01:00 | 000,363,555 | R--- | M] (AVM Berlin) -- C:\Programme\avmwlanstick\WLanNetService.exe ========== Modules (SafeList) ========== MOD - [2010.11.11 23:10:53 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\***\Desktop\OTL.exe MOD - [2010.08.23 17:11:46 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll ========== Win32 Services (SafeList) ========== SRV - File not found [Disabled | Stopped] -- C:\WINDOWS\System32\hidserv.dll -- (HidServ) SRV - File not found [Auto | Stopped] -- C:\Programme\Bonjour\mDNSResponder.exe -- (Bonjour Service) SRV - File not found [On_Demand | Stopped] -- C:\WINDOWS\System32\appmgmts.dll -- (AppMgmt) SRV - [2010.11.08 11:55:32 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010.11.08 11:55:29 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2009.10.20 19:19:48 | 000,117,264 | ---- | M] (CACE Technologies, Inc.) [On_Demand | Stopped] -- C:\Programme\WinPcap\rpcapd.exe -- (rpcapd) Remote Packet Capture Protocol v.0 (experimental) SRV - [2008.12.18 19:25:10 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2007.11.26 14:54:12 | 001,554,728 | ---- | M] (Nero AG) [Auto | Running] -- C:\Programme\Nero\Nero 7\InCD\InCDsrv.exe -- (InCDsrv) SRV - [2007.09.11 00:45:04 | 000,124,832 | ---- | M] () [Auto | Running] -- C:\Programme\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0) SRV - [2007.06.27 18:04:00 | 000,279,848 | ---- | M] (Nero AG) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMIndexingService.exe -- (NMIndexingService) SRV - [2005.11.17 13:18:52 | 001,527,900 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance) SRV - [2005.04.08 01:01:00 | 000,363,555 | R--- | M] (AVM Berlin) [Auto | Running] -- C:\Programme\avmwlanstick\WLanNetService.exe -- (AVM WLAN Connection Service) SRV - [2005.04.03 23:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT) ========== Driver Services (SafeList) ========== DRV - [2010.11.08 11:55:32 | 000,126,856 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb) DRV - [2010.11.08 11:55:32 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt) DRV - [2010.10.24 14:35:11 | 000,139,128 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\PnkBstrK.sys -- (PnkBstrK) DRV - [2010.10.11 12:44:44 | 000,027,632 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\seehcri.sys -- (seehcri) DRV - [2010.05.04 11:55:40 | 010,552,320 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3) DRV - [2009.10.20 19:19:44 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\npf.sys -- (NPF) DRV - [2009.05.11 10:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv) DRV - [2009.04.06 08:13:52 | 000,025,512 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggsemc.sys -- (ggsemc) DRV - [2009.04.06 08:13:52 | 000,013,224 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ggflt.sys -- (ggflt) DRV - [2009.03.25 16:48:00 | 000,114,728 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdm.sys -- (s1018mdm) DRV - [2009.03.25 16:48:00 | 000,109,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) DRV - [2009.03.25 16:48:00 | 000,106,208 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) DRV - [2009.03.25 16:48:00 | 000,104,744 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018obex.sys -- (s1018obex) DRV - [2009.03.25 16:48:00 | 000,086,824 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM) DRV - [2009.03.25 16:48:00 | 000,026,024 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) DRV - [2009.03.25 16:48:00 | 000,015,016 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\s1018mdfl.sys -- (s1018mdfl) DRV - [2009.02.13 11:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio) DRV - [2009.01.21 17:27:28 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd) DRV - [2008.07.26 18:18:00 | 006,097,536 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv) DRV - [2008.04.17 09:33:26 | 004,707,328 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM) DRV - [2008.04.13 22:06:06 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus) DRV - [2008.01.03 15:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp) DRV - [2007.11.26 14:54:12 | 000,038,440 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDRm.sys -- (incdrm) DRV - [2007.11.26 14:54:12 | 000,036,776 | ---- | M] (Nero AG) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\InCDPass.sys -- (InCDPass) DRV - [2007.11.26 14:54:02 | 000,118,952 | ---- | M] (Nero AG) [File_System | Disabled | Running] -- C:\WINDOWS\system32\drivers\InCDfs.sys -- (InCDfs) DRV - [2005.04.08 01:01:00 | 000,452,864 | R--- | M] (AVM GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\fwlanusb.sys -- (FWLANUSB) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\tbDVD1.dll (Conduit Ltd.) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.11.10 15:14:21 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.11.10 15:13:42 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2010.11.07 19:09:27 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2010.07.19 17:01:27 | 000,000,000 | ---D | M] [2010.11.11 01:37:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Extensions [2010.11.11 01:37:20 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.11.11 23:27:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\0idfkq5h.default\extensions [2010.11.10 15:14:37 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla\Firefox\Profiles\0idfkq5h.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.11.10 15:13:42 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010.10.27 06:44:13 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml [2010.10.27 06:44:13 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml [2010.10.27 06:44:13 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml [2010.10.27 06:44:13 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml [2010.10.27 06:44:13 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.11.11 13:07:00 | 000,000,355 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found. O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\tbDVD1.dll (Conduit Ltd.) O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\tbDVD1.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\tbDVD1.dll (Conduit Ltd.) O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [AVMWlanClient] C:\Programme\avmwlanstick\WLanGUI.exe (AVM) O4 - HKLM..\Run: [InCD] C:\Programme\Nero\Nero 7\InCD\InCD.exe (Nero AG) O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation) O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe () O4 - HKLM..\Run: [SecurDisc] C:\Programme\Nero\Nero 7\InCD\NBHGui.exe (Nero AG) O4 - HKLM..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe File not found O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe () O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 91 00 00 00 [binary data] O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Computer, Inc.) O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1228559933859 (WUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2008.12.05 15:02:58 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O33 - MountPoints2\{26f5e1d9-ae9f-11de-b887-001060a934fa}\Shell\AutoRun\command - "" = J:\StartPortableApps.exe -- File not found O33 - MountPoints2\{643d1681-67dd-11df-b9f8-002215534943}\Shell - "" = AutoRun O33 - MountPoints2\{643d1681-67dd-11df-b9f8-002215534943}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{643d1681-67dd-11df-b9f8-002215534943}\Shell\AutoRun\command - "" = J:\LaunchU3.exe -- File not found O33 - MountPoints2\{dd46035a-c444-11dd-b6a1-002215534943}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{dd46035a-c444-11dd-b6a1-002215534943}\Shell\AutoRun\command - "" = J:\rane\kure.exe -- File not found O33 - MountPoints2\{dd46035a-c444-11dd-b6a1-002215534943}\Shell\explore\command - "" = J:\rane\\kure.exe -- File not found O33 - MountPoints2\{dd46035a-c444-11dd-b6a1-002215534943}\Shell\open\command - "" = J:\rane\\kure.exe -- File not found O33 - MountPoints2\{e43f917d-045e-11df-b92c-001060a934fa}\Shell\AutoRun - "" = Auto&Play O33 - MountPoints2\{e43f917d-045e-11df-b92c-001060a934fa}\Shell\AutoRun\command - "" = J:\muza\sguza.exe -- File not found O33 - MountPoints2\{e43f917d-045e-11df-b92c-001060a934fa}\Shell\explore\command - "" = J:\muza\\sguza.exe -- File not found O33 - MountPoints2\{e43f917d-045e-11df-b92c-001060a934fa}\Shell\open\command - "" = J:\muza\\sguza.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.11.11 23:13:37 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.11.11 23:13:35 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.11.11 23:13:35 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010.11.11 23:10:46 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\***\Desktop\OTL.exe [2010.11.11 23:10:36 | 006,153,648 | ---- | C] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\***\Desktop\mbam-setup.exe [2010.11.11 13:00:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\F-Secure [2010.11.11 12:30:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Malwarebytes [2010.11.11 12:30:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.11.10 15:13:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mozilla [2010.11.10 15:13:41 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox [2010.11.10 14:33:32 | 008,402,944 | ---- | C] (Mozilla) -- C:\Dokumente und Einstellungen\***\Desktop\Firefox Setup 3.6.12.exe [2010.11.10 01:17:51 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Desktop\Haftbefehl [2010.11.10 01:17:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Desktop\Fard [2010.11.09 12:24:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe [2010.11.08 23:04:32 | 000,000,000 | ---D | C] -- C:\Programme\Emsisoft HiJackFree [2010.11.08 23:02:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\Adobe [2010.11.08 15:22:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Adobe [2010.11.08 11:53:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Avira [2010.11.07 20:35:35 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen\***\IECompatCache [2010.11.07 19:32:40 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\PriceGong [2010.10.14 07:29:53 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll [2010.10.14 07:29:53 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2010.10.14 07:29:26 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2010.07.12 16:22:16 | 000,163,840 | ---- | C] ( ) -- C:\WINDOWS\System32\rsnpstd3.dll [2010.07.12 16:22:16 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS\System32\vsnpstd3.dll [2010.07.12 16:22:16 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\System32\csnpstd3.dll [2010.07.12 16:22:16 | 000,053,248 | ---- | C] ( ) -- C:\WINDOWS\csnpstd3.dll [2004.11.24 19:25:52 | 000,335,872 | ---- | C] ( ) -- C:\WINDOWS\System32\drvc.dll [33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.11.11 23:37:00 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010.11.11 23:36:34 | 001,070,144 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2010.11.11 23:36:34 | 000,458,822 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.11.11 23:36:34 | 000,441,124 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.11.11 23:36:34 | 000,084,326 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.11.11 23:36:34 | 000,071,060 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.11.11 23:33:09 | 000,199,590 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml [2010.11.11 23:32:56 | 000,000,268 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-1935655697-725345543-839522115-1004.job [2010.11.11 23:32:53 | 000,000,276 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-1935655697-725345543-839522115-1004.job [2010.11.11 23:32:51 | 000,001,084 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010.11.11 23:32:41 | 001,592,440 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [2010.11.11 23:32:28 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT [2010.11.11 23:32:26 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.11.11 23:31:33 | 022,544,384 | -H-- | M] () -- C:\Dokumente und Einstellungen\***\NTUSER.DAT [2010.11.11 23:31:21 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\***\ntuser.ini [2010.11.11 23:10:53 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\***\Desktop\OTL.exe [2010.11.11 23:10:44 | 006,153,648 | ---- | M] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\***\Desktop\mbam-setup.exe [2010.11.11 21:33:25 | 000,208,593 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Sime.amr.MP3 [2010.11.11 21:28:24 | 000,020,806 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Sime.amr [2010.11.11 20:57:50 | 000,132,576 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\vsr.jpg [2010.11.11 20:02:03 | 000,094,240 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2010.11.11 13:07:00 | 000,000,355 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts [2010.11.10 14:33:32 | 008,402,944 | ---- | M] (Mozilla) -- C:\Dokumente und Einstellungen\***\Desktop\Firefox Setup 3.6.12.exe [2010.11.10 14:30:36 | 000,086,265 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\bookmarks-2010-11-10.json [2010.11.10 14:06:01 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini [2010.11.09 12:24:33 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.11.08 23:56:12 | 000,023,552 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\instrumentals.doc [2010.11.08 22:49:54 | 000,000,053 | ---- | M] () -- C:\WINDOWS\wininit.ini [2010.11.08 11:55:32 | 000,126,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys [2010.11.08 11:55:32 | 000,060,936 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2010.10.28 13:18:23 | 000,856,147 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\molamix2.jpg [2010.10.27 14:17:46 | 009,945,810 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\Summer_Cem_feat_Farid Bang_FEIERABEND_Streetsingle.zip [2010.10.24 14:35:11 | 000,139,128 | ---- | M] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2010.10.24 14:07:32 | 000,215,128 | ---- | M] () -- C:\WINDOWS\System32\PnkBstrB.xtr [2010.10.23 09:57:18 | 000,057,856 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.10.22 13:08:26 | 000,064,917 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\69333_162028567148936_100000253811906_436744_1765587_n.jpg [2010.10.20 21:24:14 | 000,466,504 | ---- | M] () -- C:\Dokumente und Einstellungen\***\Desktop\DSC00012.JPG [2010.10.20 20:26:32 | 000,000,796 | ---- | M] () -- C:\WINDOWS\win.ini [2010.10.20 20:26:32 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini [2010.10.20 20:26:32 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2010.10.14 07:47:34 | 000,001,393 | ---- | M] () -- C:\WINDOWS\imsins.BAK [33 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.11.11 21:33:25 | 000,208,593 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Sime.amr.MP3 [2010.11.11 21:28:24 | 000,020,806 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Sime.amr [2010.11.11 20:57:48 | 000,132,576 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\vsr.jpg [2010.11.10 14:30:36 | 000,086,265 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\bookmarks-2010-11-10.json [2010.11.08 23:53:43 | 000,023,552 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\instrumentals.doc [2010.10.27 14:17:31 | 009,945,810 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\Summer_Cem_feat_Farid Bang_FEIERABEND_Streetsingle.zip [2010.10.26 19:20:13 | 000,856,147 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\molamix2.jpg [2010.10.22 13:08:25 | 000,064,917 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\69333_162028567148936_100000253811906_436744_1765587_n.jpg [2010.10.20 21:24:14 | 000,466,504 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Desktop\DSC00012.JPG [2010.09.30 23:39:06 | 000,000,132 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Adobe BMP Format CS5 Prefs [2010.08.17 19:08:30 | 000,500,992 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2010.07.12 16:22:18 | 000,015,498 | ---- | C] () -- C:\WINDOWS\snpstd3.ini [2010.06.28 16:12:00 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll [2010.06.28 14:48:13 | 000,000,046 | ---- | C] () -- C:\WINDOWS\Goya.INI [2010.05.15 19:47:17 | 000,138,056 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\PnkBstrK.sys [2010.04.03 14:51:04 | 000,139,128 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2010.04.02 16:17:34 | 000,179,091 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat [2010.01.10 15:29:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS\KIZ Neuruppin.ini [2009.10.20 19:19:30 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [2009.10.07 19:30:01 | 000,006,642 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini [2009.09.09 14:21:26 | 000,116,224 | ---- | C] () -- C:\WINDOWS\System32\pdfcmnnt.dll [2009.08.27 20:04:44 | 000,557,003 | ---- | C] () -- C:\WINDOWS\System32\libmplayer.dll [2009.08.27 20:04:32 | 000,811,835 | ---- | C] () -- C:\WINDOWS\System32\ff_x264.dll [2009.08.27 20:03:52 | 004,456,201 | ---- | C] () -- C:\WINDOWS\System32\libavcodec.dll [2009.08.25 19:07:36 | 000,328,334 | ---- | C] () -- C:\WINDOWS\System32\ff_kernelDeint.dll [2009.08.25 18:38:04 | 000,425,040 | ---- | C] () -- C:\WINDOWS\System32\TomsMoComp_ff.dll [2009.08.25 17:56:56 | 000,829,781 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2009.08.25 17:37:02 | 000,146,098 | ---- | C] () -- C:\WINDOWS\System32\libmpeg2_ff.dll [2009.06.02 18:15:44 | 000,113,152 | ---- | C] () -- C:\WINDOWS\System32\ff_unrar.dll [2009.06.02 18:15:18 | 000,146,944 | ---- | C] () -- C:\WINDOWS\System32\ff_tremor.dll [2009.06.02 18:15:04 | 000,183,296 | ---- | C] () -- C:\WINDOWS\System32\ff_samplerate.dll [2009.06.02 18:14:56 | 000,178,688 | ---- | C] () -- C:\WINDOWS\System32\ff_libmad.dll [2009.06.02 18:14:30 | 000,486,400 | ---- | C] () -- C:\WINDOWS\System32\ff_libfaad2.dll [2009.06.02 18:13:58 | 000,257,024 | ---- | C] () -- C:\WINDOWS\System32\ff_libdts.dll [2009.06.02 18:13:50 | 000,142,848 | ---- | C] () -- C:\WINDOWS\System32\ff_liba52.dll [2009.06.02 18:12:26 | 000,000,246 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\DatChecker.xml [2009.06.02 18:11:26 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\ff_wmv9.dll [2009.06.02 18:11:16 | 000,085,504 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll [2009.04.17 15:15:07 | 000,003,811 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log [2009.03.07 11:53:48 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini [2009.01.27 22:51:20 | 000,000,713 | ---- | C] () -- C:\WINDOWS\MIR.INI [2009.01.21 17:27:27 | 000,717,296 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2009.01.10 23:17:32 | 000,163,840 | ---- | C] () -- C:\WINDOWS\System32\ts.dll [2009.01.10 23:16:56 | 000,148,480 | ---- | C] () -- C:\WINDOWS\System32\mkx.dll [2009.01.10 23:16:50 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\avi.dll [2009.01.10 23:16:14 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\mp4.dll [2009.01.10 23:15:54 | 000,120,832 | ---- | C] () -- C:\WINDOWS\System32\ogm.dll [2009.01.10 23:15:44 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\mmfinfo.dll [2009.01.10 23:15:32 | 000,102,400 | ---- | C] () -- C:\WINDOWS\System32\avss.dll [2009.01.10 23:15:28 | 000,246,784 | ---- | C] () -- C:\WINDOWS\System32\dxr.dll [2009.01.10 23:15:12 | 000,097,280 | ---- | C] () -- C:\WINDOWS\System32\avs.dll [2009.01.10 23:14:08 | 000,079,360 | ---- | C] () -- C:\WINDOWS\System32\mkzlib.dll [2009.01.10 23:14:06 | 000,023,552 | ---- | C] () -- C:\WINDOWS\System32\mkunicode.dll [2008.12.29 12:39:40 | 000,061,986 | ---- | C] () -- C:\WINDOWS\uninstall_Wonderful Madeira.ini [2008.12.29 12:37:55 | 000,002,675 | ---- | C] () -- C:\WINDOWS\uninstall_canary_islands.ini [2008.12.17 17:17:34 | 000,239,247 | ---- | C] () -- C:\WINDOWS\System32\ff_theora.dll [2008.12.13 17:38:49 | 000,000,053 | ---- | C] () -- C:\WINDOWS\wininit.ini [2008.12.07 16:32:11 | 000,057,856 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2008.12.06 11:13:13 | 000,000,403 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2008.12.06 11:13:13 | 000,000,122 | ---- | C] () -- C:\WINDOWS\mdm.ini [2008.12.06 11:13:09 | 000,000,000 | ---- | C] () -- C:\WINDOWS\NSREX.INI [2008.12.05 16:48:19 | 000,000,000 | ---- | C] () -- C:\WINDOWS\lgfwup.ini [2008.12.05 16:03:39 | 000,002,540 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2008.12.05 16:03:38 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2008.12.05 15:55:07 | 001,070,144 | ---- | C] () -- C:\WINDOWS\System32\PerfStringBackup.INI [2008.12.05 15:55:06 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2008.12.05 15:54:43 | 000,000,062 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\desktop.ini [2008.12.05 15:35:04 | 000,094,240 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT [2008.12.05 15:27:00 | 000,000,137 | ---- | C] () -- C:\Dokumente und Einstellungen\***\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008.12.05 15:26:13 | 000,000,062 | -HS- | C] () -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\desktop.ini [2008.12.05 15:06:00 | 000,001,124 | ---- | C] () -- C:\WINDOWS\System32\OEMINFO.INI [2008.12.05 15:02:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\control.ini [2008.12.05 15:00:34 | 000,000,037 | ---- | C] () -- C:\WINDOWS\vbaddin.ini [2008.12.05 15:00:34 | 000,000,036 | ---- | C] () -- C:\WINDOWS\vb.ini [2008.12.05 14:59:47 | 000,027,055 | ---- | C] () -- C:\WINDOWS\System32\tslabels.ini [2008.12.05 14:59:46 | 000,003,999 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.ini [2008.12.03 23:11:50 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008.11.21 22:44:16 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll [2008.11.06 17:37:32 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll [2008.11.06 17:34:00 | 000,000,416 | ---- | C] () -- C:\WINDOWS\System32\dtu100.dll.manifest [2008.07.26 18:18:00 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll [2008.07.26 18:18:00 | 001,499,136 | ---- | C] () -- C:\WINDOWS\System32\nview.dll [2008.07.26 18:18:00 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll [2008.07.26 18:18:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll [2008.07.26 18:18:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll [2007.10.13 10:30:20 | 000,000,137 | ---- | C] () -- C:\WINDOWS\System32\Registration.ini [2007.07.10 18:10:12 | 000,000,547 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll.manifest [2004.10.28 15:38:10 | 000,315,728 | ---- | C] () -- C:\WINDOWS\System32\flt1chk3.dll [2004.10.03 17:50:54 | 000,129,024 | ---- | C] () -- C:\WINDOWS\System32\ff_mpeg2enc.dll [2004.08.04 13:00:00 | 001,015,477 | ---- | C] () -- C:\WINDOWS\System32\esentprf.ini [2004.08.04 13:00:00 | 000,733,696 | ---- | C] () -- C:\WINDOWS\System32\qedwipes.dll [2004.08.04 13:00:00 | 000,355,112 | ---- | C] () -- C:\WINDOWS\System32\msjetoledb40.dll [2004.08.04 13:00:00 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\sbe.dll [2004.08.04 13:00:00 | 000,253,440 | ---- | C] () -- C:\WINDOWS\System32\compatui.dll [2004.08.04 13:00:00 | 000,199,168 | ---- | C] () -- C:\WINDOWS\System32\ir32_32.dll [2004.08.04 13:00:00 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\encdec.dll [2004.08.04 13:00:00 | 000,094,282 | ---- | C] () -- C:\WINDOWS\System32\msencode.dll [2004.08.04 13:00:00 | 000,070,656 | ---- | C] () -- C:\WINDOWS\System32\amstream.dll [2004.08.04 13:00:00 | 000,053,478 | ---- | C] () -- C:\WINDOWS\System32\tcpmon.ini [2004.08.04 13:00:00 | 000,042,809 | ---- | C] () -- C:\WINDOWS\System32\key01.sys [2004.08.04 13:00:00 | 000,042,537 | ---- | C] () -- C:\WINDOWS\System32\keyboard.sys [2004.08.04 13:00:00 | 000,035,648 | ---- | C] () -- C:\WINDOWS\System32\ntio411.sys [2004.08.04 13:00:00 | 000,035,424 | ---- | C] () -- C:\WINDOWS\System32\ntio412.sys [2004.08.04 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio804.sys [2004.08.04 13:00:00 | 000,034,560 | ---- | C] () -- C:\WINDOWS\System32\ntio404.sys [2004.08.04 13:00:00 | 000,034,032 | ---- | C] () -- C:\WINDOWS\System32\ntio.sys [2004.08.04 13:00:00 | 000,029,370 | ---- | C] () -- C:\WINDOWS\System32\ntdos411.sys [2004.08.04 13:00:00 | 000,029,274 | ---- | C] () -- C:\WINDOWS\System32\ntdos412.sys [2004.08.04 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos804.sys [2004.08.04 13:00:00 | 000,029,146 | ---- | C] () -- C:\WINDOWS\System32\ntdos404.sys [2004.08.04 13:00:00 | 000,027,914 | ---- | C] () -- C:\WINDOWS\System32\ntdos.sys [2004.08.04 13:00:00 | 000,027,097 | ---- | C] () -- C:\WINDOWS\System32\country.sys [2004.08.04 13:00:00 | 000,017,241 | ---- | C] () -- C:\WINDOWS\System32\rsvp.ini [2004.08.04 13:00:00 | 000,015,360 | ---- | C] () -- C:\WINDOWS\System32\tsd32.dll [2004.08.04 13:00:00 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo.dll [2004.08.04 13:00:00 | 000,014,060 | ---- | C] () -- C:\WINDOWS\System32\pschdprf.ini [2004.08.04 13:00:00 | 000,013,312 | ---- | C] () -- C:\WINDOWS\System32\win87em.dll [2004.08.04 13:00:00 | 000,009,032 | ---- | C] () -- C:\WINDOWS\System32\ansi.sys [2004.08.04 13:00:00 | 000,006,287 | ---- | C] () -- C:\WINDOWS\System32\rasctrs.ini [2004.08.04 13:00:00 | 000,004,992 | ---- | C] () -- C:\WINDOWS\System32\himem.sys [2004.08.04 13:00:00 | 000,004,438 | ---- | C] () -- C:\WINDOWS\System32\perfci.ini [2004.08.04 13:00:00 | 000,004,233 | ---- | C] () -- C:\WINDOWS\System32\perfwci.ini [2004.08.04 13:00:00 | 000,001,783 | ---- | C] () -- C:\WINDOWS\System32\perffilt.ini [2004.08.04 13:00:00 | 000,001,405 | ---- | C] () -- C:\WINDOWS\msdfmap.ini [2004.08.04 13:00:00 | 000,000,796 | ---- | C] () -- C:\WINDOWS\win.ini [2004.08.04 13:00:00 | 000,000,369 | ---- | C] () -- C:\WINDOWS\System32\prodspec.ini [2004.08.04 13:00:00 | 000,000,227 | ---- | C] () -- C:\WINDOWS\system.ini [2003.03.14 22:44:52 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\mwvb.dll [2001.08.18 05:54:08 | 000,157,696 | ---- | C] () -- C:\WINDOWS\System32\paqsp.dll [2001.03.30 21:58:36 | 000,135,168 | ---- | C] () -- C:\WINDOWS\System32\drivers\Property.dll [1999.01.22 19:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL ========== LOP Check ========== [2009.12.25 22:03:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CaptainSim [2009.01.21 17:30:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite [2010.02.15 21:20:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\espionServerData [2010.11.11 13:00:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\F-Secure [2010.07.07 22:22:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ [2010.06.14 17:56:35 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\KONAMI [2009.10.07 19:33:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX [2010.08.17 23:51:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\regid.1986-12.com.adobe [2010.07.19 12:14:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP [2009.09.11 22:26:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Zylom [2010.05.22 21:34:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Atari [2009.01.21 17:30:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\DAEMON Tools [2009.01.21 17:30:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\DAEMON Tools Lite [2009.01.21 17:30:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\DAEMON Tools Pro [2010.07.19 00:05:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\DonationCoder [2010.07.20 13:08:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\FreeFLVConverter [2010.01.11 13:58:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\GetRightToGo [2010.02.14 22:28:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\gtk-2.0 [2010.11.11 12:57:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\ICQ [2010.07.17 00:30:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\inkscape [2009.10.17 23:22:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Leadertech [2009.01.29 22:37:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Mp3tag [2010.10.11 12:42:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\MyPhoneExplorer [2009.05.08 19:21:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\New Technology Studio [2010.07.19 00:46:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Orbit [2010.11.10 15:15:29 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\PriceGong [2009.09.11 20:49:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Steinberg [2010.09.12 15:35:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Thunderbird [2008.12.06 11:23:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Zoner [2009.09.11 22:26:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\***\Anwendungsdaten\Zylom ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 487 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:05EE1EEF @Alternate Data Stream - 119 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A1D5C6AA < End of report > [/QUOTE] OTL 2: OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 11.11.2010 23:35:56 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Dokumente und Einstellungen\Sebi\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3.00 Gb Total Physical Memory | 2.00 Gb Available Physical Memory | 55.00% Memory free 5.00 Gb Paging File | 4.00 Gb Available in Paging File | 73.00% Paging File free Paging file location(s): C:\pagefile.sys 2046 4092 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 698.64 Gb Total Space | 370.69 Gb Free Space | 53.06% Space Free | Partition Type: NTFS Computer Name: SW-RECHNER | User Name: Sebi | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: Off | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* htmlfile [edit] -- Reg Error: Key error. piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- C:\Programme\VideoLAN\VLC\vlc.exe --started-from-file --playlist-enqueue "%1" () Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- C:\Programme\VideoLAN\VLC\vlc.exe --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation) Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation) Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "FirstRunDisabled" = 1 "AntiVirusDisableNotify" = 0 "FirewallDisableNotify" = 0 "UpdatesDisableNotify" = 0 "AntiVirusOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall] ========== System Restore Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore] "DisableSR" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr] "Start" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService] "Start" = 2 ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop "65533:TCP" = 65533:TCP:*:Enabled:Services "52344:TCP" = 52344:TCP:*:Enabled:Services "1602:TCP" = 1602:TCP:*:Enabled:Services "1704:TCP" = 1704:TCP:*:Enabled:Services [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "EnableFirewall" = 1 "DoNotAllowExceptions" = 0 "DisableNotifications" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List] "1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007 "2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008 "3389:TCP" = 3389:TCP:*:Enabled:Remote Desktop "65533:TCP" = 65533:TCP:*:Enabled:Services "52344:TCP" = 52344:TCP:*:Enabled:Services "1602:TCP" = 1602:TCP:*:Enabled:Services "1704:TCP" = 1704:TCP:*:Enabled:Services ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "C:\Programme\ICQ7.2\ICQ.exe" = C:\Programme\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.) "C:\Programme\ICQ7.2\aolload.exe" = C:\Programme\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "C:\Programme\CyberLink\PowerDVD\PowerDVD.exe" = C:\Programme\CyberLink\PowerDVD\PowerDVD.exe:*:Enabled:CyberLink PowerDVD -- (CyberLink Corp.) "H:\CDS\Nero\Installation\SetupX.exe" = H:\CDS\Nero\Installation\SetupX.exe:*:Enabled:Nero ProductSetup -- File not found "C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6 -- File not found "C:\Programme\acarsd\acarsd.exe" = C:\Programme\acarsd\acarsd.exe:*:Enabled:acarsd -- File not found "C:\Programme\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe" = C:\Programme\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe:*:Enabled:Rockstar Games Social Club -- (Take-Two Interactive Software, Inc.) "C:\Programme\BlogTorrent\btdownloadgui.exe" = C:\Programme\BlogTorrent\btdownloadgui.exe:*:Enabled:btdownloadgui -- () "C:\Programme\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe" = C:\Programme\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV -- (Sony DADC Austria AG) "C:\Programme\Rockstar Games\Grand Theft Auto IV\GTAIV.exe" = C:\Programme\Rockstar Games\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV -- (Take-Two Interactive Software, Inc.) "C:\Programme\Microsoft Games for Windows - LIVE\Client\GFWLClient.exe" = C:\Programme\Microsoft Games for Windows - LIVE\Client\GFWLClient.exe:*:Enabled:GFWLClient -- (Microsoft® Corporation) "C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- File not found "C:\Programme\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe" = C:\Programme\Electronic Arts\Battlefield Bad Company 2\BFBC2Updater.exe:*:Enabled:Battlefield: Bad Company™ 2 -- (EA Digital Illusions CE AB) "C:\Programme\Bonjour\mDNSResponder.exe" = C:\Programme\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour -- File not found "C:\Dokumente und Einstellungen\Sebi\Desktop\pes2010.exe" = C:\Dokumente und Einstellungen\Sebi\Desktop\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- File not found "C:\Programme\KONAMI\Pro Evolution Soccer 2010\pes2010.exe" = C:\Programme\KONAMI\Pro Evolution Soccer 2010\pes2010.exe:*:Enabled:Pro Evolution Soccer 2010 -- File not found "C:\Programme\ICQ7.2\ICQ.exe" = C:\Programme\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.) "C:\Programme\ICQ7.2\aolload.exe" = C:\Programme\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC) "C:\WINDOWS\system32\dpnsvr.exe" = C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server -- (Microsoft Corporation) "C:\Programme\Sony Ericsson\Update Service\Update Service.exe" = C:\Programme\Sony Ericsson\Update Service\Update Service.exe:*:Enabled:Update Service -- () ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00010407-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Professional "{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator "{02250F8E-3EF9-41D3-9215-889DDA4A414B}_is1" = EIRESIM - Alicante Ultimate "{04AF207D-9A77-465A-8B76-991F6AB66245}" = Adobe Help Viewer CS3 "{08B32819-6EEF-4057-AEDA-5AB681A36A23}" = Adobe Bridge Start Meeting "{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club "{0A35B15C-9CCD-4C0C-BD5B-34ABF8C95813}_is1" = ICQ 7.2 Build #3129 Banner Remover 1.0 "{0BBBCFAA-49F3-4529-9FDB-803190E2C243}" = Haufe Formular-Manager "{1296225E-030B-4979-B515-323CE0FC7582}" = aerosoft's - Mallorca X for FS2004 "{12BE408B-65A7-4A5E-90BC-28965F7F08C9}" = Flight Simulator 2004 BGLComp SDK "{164360E5-0AAD-48AD-8A36-3F8A859FAB6F}" = PMDG747_400F "{1819F22A-8B42-4CF5-88C1-97B6F4A7849A}" = ActiveSky Version 6 and ActiveSky Graphics "{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}" = Adobe WinSoft Linguistics Plugin "{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate "{19590C2B-8710-4DEB-BEC9-75491179BE7D}" = aerosoft's - Scenery Germany - Bremen "{1EC65D1D-3911-4F7D-8B6A-63C69EDBFC6E}" = EditVoicepack "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Suite "{2041A2A9-3641-402B-96F7-369103E927EB}" = Fly-Honduras "{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool "{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}" = QuickTime "{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT "{259E2575-D7A6-436E-8AE3-1E4E14F69ABE}" = Mailsoft's - Kleinflugplätze 6 for FS2004 "{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 20 "{2758F387-D016-4725-9D03-AB039364DF3D}" = PMDG_747-400_Sound_Update "{283FFB23-8751-4B08-ACB8-5E0F8BCF7727}" = Pro Evolution Soccer 2010 "{29E5EA97-5F74-4A57-B8B2-D4F169117183}" = Adobe Stock Photos CS3 "{2DE59E42-7AA6-4528-A661-8A3D40B29D44}-FS2004" = aerosoft's - Kanarische Inseln - FS2004 "{2FE418CB-1B79-11D8-A9CB-0080AD30B67D}" = VFR-Airfields Vol.1 "{304DAE83-906F-4005-BA09-2870349ABD14}" = PMDG 747-400 FS9 Update V1R12 (Unifies to FSX) "{30BEB3F9-F159-4EA4-8DA4-324FC898192E}" = Abacus EZ-Scenery V1.03 "{30E7A736-5C95-11D8-A9CB-0080AD30B67D}" = VFR-Airfields Free "{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform "{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6 "{34BDC9DA-9320-491C-AA40-B0D98A0EBA9C}" = aerosoft's - Mega Airport Frankfurt - FS2004 "{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP "{3ABDFABB-FA48-4BCA-9ECC-3EFC1E5143D2}" = aerosoft's - German Airports 2 - Dortmund "{3AC8457C-0385-4BEA-A959-E095F05D6D67}" = Battlefield: Bad Company™ 2 "{3CDBA499-FB8B-4FFC-A374-F5AA59AB534D}" = aerosoft's - German Football Stadiums - FS2004 "{3EE09884-34CC-46EA-B316-5ECB0427E4C7}" = FS Recorder 1.33 for FS2004 "{3EE92B78-5CAF-421C-BBC6-67D466A1F849}_is1" = Version 1.4 "{3FA7A919-87DA-42B1-814B-86DE8DCA17C2}" = gmax "{411E0CC3-587A-468C-B461-95FAFD05E4DE}" = Adobe InDesign CS3 "{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth "{45B3A3BD-F90D-48FE-A147-D74878A51031}" = Nero 7 Essentials "{46464A5D-7D14-41E3-9C26-E3C186F37D84}" = aerosoft's - German Airports 2 - Cologne-Bonn - FS2004 "{498A4E3D-562E-4129-8722-6DCAB12384AE}" = Windows Communication Foundation Language Pack - DEU "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4E1AC70E-710A-4AFD-8B51-DD3C386FB7C2}" = aerosoft's - VFR Berlin 2006 "{51D199F4-5593-4BC9-B2A5-BB1CDE0C894A}" = aerosoft's - Mega Airport Paris CDG "{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent "{54793AA1-5001-42F4-ABB6-C364617C6078}" = Adobe Linguistics CS3 "{555C7DA8-8A43-4A5B-A5FB-137C07AA81D0}" = aerosoft's - Approaching Innsbruck 2004 "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV "{608B7A43-D176-4309-8999-D772F9A01CD4}" = aerosoft's - German Airports 2 - Muenster-Osnabrueck "{674D3526-6B4F-468A-9802-1130A39B1562}" = aerosoft's - German Airports 4 - FS2004 "{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD "{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update "{6ABE0BEE-D572-4FE8-B434-9E72A289431B}" = Adobe Fonts All "{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}" = No23 Recorder "{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}" = Adobe Asset Services CS3 "{705F27B3-5B35-4EC4-A258-BF16D83BE22B}" = aerosoft's - German Airports 2 - Leipzig - FS2004 "{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK "{7228FD8C-3B9E-4204-AE36-8A466107685B}" = Windows Workflow Foundation DE Language Pack "{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2 "{73B5D990-04EA-4751-B10F-5534770B91F2}" = Adobe Color EU Recommended Settings "{73C59104-74E1-453B-9813-1D05F5AF4CBE}" = iFly 747-400 Service Pack 3 "{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec "{7DB077F8-DD66-456D-ABC2-7C26C1447CC2}" = Aerosoft's - Alcatraz "{802771A9-A856-4A41-ACF7-1450E523C923}" = Adobe XMP Panels CS3 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8872BE4F-EB51-4789-9A65-B9EC45EDAB02}_is1" = Abflüge Online 5.0.0.0 "{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU "{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player "{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}" = Adobe Type Support "{8FB1B528-E260-451E-9B55-E9152F94B80B}" = Microsoft Games for Windows - LIVE Redistributable "{90176341-0A8B-4CCC-A78D-F862228A6B95}" = Adobe Anchor Service CS3 "{92DF2F1B-F63C-4D9A-B3E1-B2D11AE29790}" = Windows Presentation Foundation Language Pack (DEU) "{93E61AF4-29C4-11D9-A9CC-0080AD30B67D}" = Landscape Germany Mesh "{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting "{97679567-0095-464E-B5F2-E218A1CF3421}" = PMDG747_400 Queen of the Skies "{982A0173-ABDE-4C81-AF81-C325FB288273}" = Mailsoft's - Birrfeld X for FS2004 "{98736A65-3C79-49EC-B7E9-A3C77774B0E6}" = Google SketchUp 6 "{9A0906C7-D472-4C22-8D12-11D6AB2819E4}" = aerosoft's - German Airports 3 - Bremen "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9C9824D9-9000-4373-A6A5-D0E5D4831394}" = Adobe Bridge CS3 "{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI "{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}" = Adobe CMaps "{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2 "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A7B4ACF2-5A81-44F4-8253-9211A3B8AFA8}-FS2004" = aerosoft's - Wonderful Madeira - FS2004 "{A901BF63-29AD-49A3-B067-231925E98B62}_is1" = Version 1.0 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}" = PDF Settings "{AC76BA86-7AD7-1031-7B44-A91000000001}" = Adobe Reader 9.1 - Deutsch "{ACC75B04-81D2-4AF4-9312-C8CF39D23EA8}" = Mailsoft's - Switzerland Professional "{AE585DDE-7230-4B57-926B-428C94AA5850}" = Adobe Setup "{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger "{AF7362B6-BD39-4848-A991-3BA4319444AC}" = Landscape Germany Landclass "{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter "{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}" = Adobe Camera Raw 4.0 "{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}" = Google SketchUp 6 "{B671CBFD-4109-4D35-9252-3062D3CCB7B2}" = Adobe SING CS3 "{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player "{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer "{B98A34C0-A6A2-4087-B272-557C1C6D0A07}" = Microsoft Flight Simulator X Demo "{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}" = Adobe Default Language CS3 "{BACA4FE0-B0B9-44A9-BB62-E7377C03A96D}" = Mailsoft's - Kleinflugplätze Schweiz Teil 3 "{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation "{C02567F1-EC4F-4A58-8D1B-473A73B475D2}" = Microsoft Flight Simulator 2004 gmax SDK "{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2 "{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}" = Adobe ExtendScript Toolkit 2 "{C4CD208D-E3A2-488B-A4F4-FD8DE3DADD25}_is1" = BMW M3 Challenge "{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser "{C87E5016-201A-11D9-A9CC-0080AD30B67D}" = Landscape Germany Rivers "{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver "{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials "{CB131247-7869-47E1-9969-B29567C9B106}_is1" = FranceVFR - Bale Mulhouse FS2004 (LFSB) "{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 "{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1 "{D0DFF92A-492E-4C40-B862-A74A173C25C5}" = Adobe Version Cue CS3 Client "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call "{D234EAC0-7D49-492F-97EC-8FA09FD7C1C4}" = aerosoft's - German Airports 3 - Hamburg "{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}" = Adobe PDF Library Files "{D41CAD6D-DB4C-4D7C-BABA-D1A4B1599741}" = aerosoft's - German Airports 3-Berlin Tegel "{D4FB2856-E6EB-4864-A241-4587ED21A11B}" = aerosoft's - Brussels 2007 "{D86B6E8D-F224-4BB6-B959-C8EDC5300B5D}" = aerosoft's - Mega Airport Stockholm Arlanda "{DA46AA5F-4934-4DAC-94E4-7D84AD9A4090}" = Project Canarias 2006 "{DA5A460B-5389-4A21-AFDD-63BCA4541FA9}" = Aerosoft's - Helgoland "{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}" = Adobe Color Common Settings "{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}" = Adobe Color JA Extra Settings "{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime "{E69AE897-9E0B-485C-8552-7841F48D42D8}" = Adobe Update Manager CS3 "{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack "{EA7B3CC4-366D-4CF6-8350-FD7A7034116E}" = Adobe InDesign CS3 Icon Handler "{ECD03DA7-5952-406A-8156-5F0C93618D1F}" = SPEEDLINK Reflect2 Camera "{EE7D2735-9566-4E60-95AD-44282A7362BE}_is1" = Aerosoft - Gibraltar FS2004 "{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F2A7F421-1679-48D5-B918-96999014ED53}" = Microsoft .NET Framework 3.0 German Language Pack "{F2B5A2A7-2DF9-4361-8BD5-362714528B51}" = NHL® 09 "{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0 "{F54AC413-D2C6-4A24-B324-370C223C6250}" = Adobe Photoshop Elements 6.0 "{F87CADC4-D447-462A-80C5-A1B996B2F61F}" = aerosoft's - German Airports 3 - Paderborn-Lippstadt "{F97E3841-CA9D-4964-9D64-26066241D26F}" = Microsoft Games for Windows - LIVE "{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}" = Adobe Color NA Extra Settings "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "737 Pilot in Command - 400/500 Upgrade" = 737 Pilot in Command - 400/500 Upgrade "737-300 Pilot in Command" = 737-300 Pilot in Command "A753CAPTAIN" = '757-300 Captain' Expansion Model "A754CAPTAIN" = 757 Freighter Captain "Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Adobe Photoshop Elements 6" = Adobe Photoshop Elements 6.0 "Adobe_8fbf74eb27c84640370f87306e8981b" = Adobe InDesign CS3 "Aerodesigns Airbus A318" = Aerodesigns Airbus A318 "Afcad Files Koltsovo 2006 - USSS - Tolmachevo TEAM" = Afcad Files Koltsovo 2006 - USSS - Tolmachevo TEAM "Airbus Series Vol.1 Deluxe (FS2004)" = Airbus Series Vol.1 Deluxe (FS2004) "ALMATY9 V2.0" = ALMATY9 V2.0 "Antalya 2010" = Antalya 2010 "ATR_Beta" = Flight One ATR 72-500 "Audacity_is1" = Audacity 1.2.6 "Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus "AVMWLANCLI" = AVM FRITZ!WLAN "B752CAPTAIN" = 757-200 Captain (Base) "Ben Gurion Airport 2006" = Ben Gurion Airport 2006 "Berlin Hauptbahnhof V1" = Berlin Hauptbahnhof V1 "BlogTorrent" = BlogTorrent beta-0.91 "Boeing 737 Fuel Planner" = Boeing 737 Fuel Planner "C757CAPTAIN" = '757 Captain' ACE 1.4 "Carenado Cessna Skylane 182 RG II" = Carenado Cessna Skylane 182 RG II "CARENADO PA-34 200T SENECA II FS9" = CARENADO PA-34 200T SENECA II FS9 "CCleaner" = CCleaner (remove only) "Citation X for FS2004" = Citation X for FS2004 "CLS A340-500/600 FS9" = CLS A340-500/600 FS9 "Counter-Strike: Source" = Counter-Strike: Source "Cubasis VST 4 Education" = Steinberg Cubasis VST 4 Education "Dash 8Q-300 by fanda v1.004" = Dash 8Q-300 by fanda v1.004 "DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar "E757CAPTAIN" = Block E - 757 Soundsets "Elemental Software - FS Elemental Natural" = Elemental Software - FS Elemental Natural "Emsisoft HiJackFree_is1" = Emsisoft HiJackFree 4.5 "FastStone Capture" = FastStone Capture 5.3 "FinnMesh 2.0" = FinnMesh 2.0 "Firebird SQL Server D" = Firebird SQL Server - MAGIX Edition 2.0.0.1 (D) "Flight Simulator 9.0" = Microsoft Flight Simulator 2004 - Das Jahrhundert der Luftfahrt "FranceVFR - Strasbourg Entzheim LFST" = FranceVFR - Strasbourg Entzheim LFST "Fraps" = Fraps "FreeZ" = FreeZ "FS2004 / Carenado ARROW PA28RT201" = FS2004 / Carenado ARROW PA28RT201 "FS2004 CHLandmark" = FS2004 CHLandmark "FSDreamTeam Geneva FS9_is1" = FSDreamTeam Geneva FS9 1.1 "FSFDT FSCopilot" = FSFDT FSCopilot "FSFDT FSInn" = FSFDT FSInn "fssc_is1" = Flight Simulator Scenery Creator "GAP_MEGA_KERKYRA_2009" = GAP_MEGA_KERKYRA_2009 "German Police BMW 318i" = German Police BMW 318i "German Truck Simulator" = German Truck Simulator 1.00 "GMML Laayoune 2008 scenery for MFS2004" = GMML Laayoune 2008 scenery for MFS2004 "Graffiti Studio 2.0_is1" = Graffiti Studio 2.0 "GT4AES" = GT4AES "Hamburg-City Scenery " = Hamburg-City Scenery "IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs "ie8" = Windows Internet Explorer 8 "iFly Jets - The 737NG for FS2004" = iFly Jets - The 737NG for FS2004 "Inkscape" = Inkscape 0.47 "InstallShield_{B98A34C0-A6A2-4087-B272-557C1C6D0A07}" = Microsoft Flight Simulator X Demo "Ivalo 2.0" = Ivalo 2.0 "KIZ Neuruppin_is1" = KIZ Neuruppin "Koltsovo 2006 - USSS - Tolmachevo TEAM" = Koltsovo 2006 - USSS - Tolmachevo TEAM "LAME for Audacity_is1" = LAME v3.98.2 for Audacity "LFRD2004 St-Malo Dinard Pleurtuit" = LFRD2004 St-Malo Dinard Pleurtuit "MAGIX Online Druck Service D" = MAGIX Online Druck Service 2.3.2.0 (D) "MAGIX Video deluxe SE D" = MAGIX Video deluxe SE 6.5.4.2 (D) "Malta Intl. Airport V1.0" = Malta Intl. Airport V1.0 "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Maps2Bgl_is1" = Maps2Bgl 1.8b Beta FS9/FSX-Version "Media Player - Codec Pack" = Media Player Codec Pack 3.8.0 "Mega Scenery Zvartnots - Armenia 2008 for FS2004 1.00" = Mega Scenery Zvartnots - Armenia 2008 for FS2004 1.00 "Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1 "Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU "Microsoft .NET Framework 3.0 German Language Pack" = Microsoft .NET Framework 3.0 German Language Pack "Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1 "MJC8Q300" = Majestic MJC8Q300 Version 2.004 "Mobile Media Converter_is1" = MIKSOFT Mobile Media Converter "Monopoly Star Wars" = Monopoly Star Wars "Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12) "Mozilla Thunderbird (3.1.6)" = Mozilla Thunderbird (3.1.6) "Mp3tag" = Mp3tag v2.42 "MPE" = MyPhoneExplorer "MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP "Napulevola Photoreal Packs A+B+C" = Napulevola Photoreal Packs A+B+C "NEMETH DESIGNS - EC120B Colibri" = NEMETH DESIGNS - EC120B Colibri "Nemeth Designs Bell UH-1 Huey for Microsoft Flight Simulator X" = Nemeth Designs Bell UH-1 Huey for Microsoft Flight Simulator X "NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs "NVIDIA Drivers" = NVIDIA Drivers "PhotoFiltre" = PhotoFiltre "Project Canarias 2006" = "Project Hummer H2 Luxury Edition" = Project Hummer H2 Luxury Edition "Project Pushback" = Project Pushback "PS Panels 737NG Panel System_is1" = PS Panels 737NG Version 1.1 "PunkBusterSvc" = PunkBuster Services "RealPlayer 12.0" = RealPlayer "Rovaniemi 4.1" = Rovaniemi 4.1 "SUPER ©" = SUPER © Version 2010.bld.38 (May 2, 2010) "Teachmaster 4.2" = Teachmaster 4.2 (nur Entfernen) "Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2 "UK Ambulance - GER Rettungswagen" = UK Ambulance - GER Rettungswagen "UK2000 Stansted Xtreme" = Remove UK2000 Stansted Xtreme files "Unlocker" = Unlocker 1.8.9 "Update Service" = Sony Ericsson Update Service "Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions "Visual Flight London" = Visual Flight London "VLC media player" = VLC media player 0.9.8a "Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7 "WIC" = Windows Imaging Component "Wilco Fleet : A380" = Wilco Fleet : A380 "Wilco Fleet : CRJ 2004" = Wilco Fleet : CRJ 2004 "Windows Media Format Runtime" = Windows Media Format 11 runtime "Windows Media Player" = Windows Media Player 11 "Windows XP Service Pack" = Windows XP Service Pack 3 "WinGimp-2.0_is1" = GIMP 2.6.7 "WinLiveSuite_Wave3" = Windows Live Essentials "WinPcapInst" = WinPcap 4.1.1 "WinRAR archiver" = WinRAR "WMFDist11" = Windows Media Format 11 runtime "wmp11" = Windows Media Player 11 "Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0 "XP Codec Pack" = XP Codec Pack "XpsEPSC" = XML Paper Specification Shared Components Pack 1.0 "XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0 "Zoner Photo Studio 9_is1" = Zoner Photo Studio 9 ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Aerosoft Mega Airport Munich" = Aerosoft Mega Airport Munich "Airline Pack E-170 FS9/FSX (version 1.1)" = Airline Pack E-170 FS9/FSX (version 1.1) "Airline Pack E-190 FS9/FSX (version 1.1)" = Airline Pack E-190 FS9/FSX (version 1.1) "E-Jets Series (FS2004)" = E-Jets Series (FS2004) "Erfurt 2008" = Erfurt 2008 "Faraday's Electromagnetic Lab" = Faraday's Electromagnetic Lab "FeelThere ERJ v.2" = FeelThere ERJ v.2 "FlyBalaton LHSM scenery v0.99 Beta" = FlyBalaton LHSM scenery v0.99 Beta "Fokker 70-100" = Fokker 70-100 "LFLB - Chambéry Aix les Bains" = LFLB - Chambéry Aix les Bains "Quest Kodiak 2.4b" = Quest Kodiak 2.4b "STANLY Track EDDS" = STANLY Track EDDS ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 07.10.2010 17:21:19 | Computer Name = SW-RECHNER | Source = Microsoft Flight Simulator 9.0 | ID = 1000 Description = Error - 11.10.2010 08:18:32 | Computer Name = SW-RECHNER | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung myphoneexplorer.exe, Version 1.8.0.0, fehlgeschlagenes Modul msvbvm60.dll, Version 6.0.98.2, Fehleradresse 0x0005d2a4. Error - 11.10.2010 08:26:17 | Computer Name = SW-RECHNER | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung myphoneexplorer.exe, Version 1.8.0.0, fehlgeschlagenes Modul kernel32.dll, Version 5.1.2600.5781, Fehleradresse 0x00012afb. Error - 11.10.2010 08:30:40 | Computer Name = SW-RECHNER | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung myphoneexplorer.exe, Version 1.8.0.0, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x0018e45d. Error - 22.10.2010 10:07:59 | Computer Name = SW-RECHNER | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung photoshop.exe, Version 12.0.0.0, fehlgeschlagenes Modul nvoglnt.dll, Version 6.14.11.7779, Fehleradresse 0x001216dd. Error - 26.10.2010 14:22:00 | Computer Name = SW-RECHNER | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung photoshop.exe, Version 12.0.0.0, fehlgeschlagenes Modul nvoglnt.dll, Version 6.14.11.7779, Fehleradresse 0x001216dd. Error - 28.10.2010 18:11:44 | Computer Name = SW-RECHNER | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung GTAIV.exe, Version 1.0.4.0, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. Error - 10.11.2010 09:35:06 | Computer Name = SW-RECHNER | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung au_.exe, Version 1.0.0.0, fehlgeschlagenes Modul unknown, Version 0.0.0.0, Fehleradresse 0x00a21067. Error - 11.11.2010 16:16:42 | Computer Name = SW-RECHNER | Source = Application Error | ID = 1000 Description = Fehlgeschlagene Anwendung photoshop.exe, Version 12.0.0.0, fehlgeschlagenes Modul nvoglnt.dll, Version 6.14.11.7779, Fehleradresse 0x001216dd. Error - 11.11.2010 18:17:30 | Computer Name = SW-RECHNER | Source = Application Hang | ID = 1002 Description = Stillstehende Anwendung mbam.exe, Version 1.46.0.0, Stillstandmodul hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000. [ System Events ] Error - 11.11.2010 07:57:54 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {0C0A3666-30C9-11D0-8F20-00805F2CD064} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 07:58:05 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {E367E1A1-E917-11D0-AF5F-00A02448799A} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 07:58:05 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {0C0A3666-30C9-11D0-8F20-00805F2CD064} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 07:58:11 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {E367E1A1-E917-11D0-AF5F-00A02448799A} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 07:58:11 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {0C0A3666-30C9-11D0-8F20-00805F2CD064} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 16:28:49 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {E367E1A1-E917-11D0-AF5F-00A02448799A} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 16:28:49 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {0C0A3666-30C9-11D0-8F20-00805F2CD064} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 16:32:47 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {E367E1A1-E917-11D0-AF5F-00A02448799A} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 16:32:47 | Computer Name = SW-RECHNER | Source = DCOM | ID = 10001 Description = Ein DCOM-Server konnte nicht gestartet werden: {0C0A3666-30C9-11D0-8F20-00805F2CD064} als /. Fehler: "%2" aufgetreten beim Starten dieses Befehls: C:\WINDOWS\system32\MDM.EXE -Embedding Error - 11.11.2010 18:32:33 | Computer Name = SW-RECHNER | Source = Service Control Manager | ID = 7000 Description = Der Dienst "##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##" wurde aufgrund folgenden Fehlers nicht gestartet: %%2 < End of report > |
Themen zu Links bei Google werden umgeleitet und Internet scheint allgemein langsamer/stockend |
0x00000001, alternate, antivir, audacity, avgntflt.sys, avira, bho, bonjour, conduit, druck, education, einstellungen, emsisoft, entfernen, error, flash player, format, google, grand theft auto, helper, home, homepage, indesign, internet, location, locker, mozilla, mozilla thunderbird, oldtimer, plug-in, problem, realtek, registry, rundll, saver, searchplugins, shell32.dll, sketchup, software, sptd.sys, starten, stick, super, system restore, teamspeak, udp, usb, vlc media player, windows internet |