| |
| |||||||
Log-Analyse und Auswertung: 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dllWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
14.11.2010, 21:47
| #1 | |
 |  2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Hallo liebe Community, ich habe heute von meinem Antivir 2 Funde bekommen, und zwar die oben genannten. Ich habe darauf hin beide gelöscht und vorher in Quarantäne kopieren lassen, ohne Erfolg. Dann habe ich einen Hijackthis-Scan durchführen lassen und mir auf h**p://hijackthis.com die Auswertung anzeigen lassen, außer ein paar neutralen Punkten wurde mir nichts angezeigt. Auf den Ordner C:/System Volumen Information kann ich nicht zugreifen, obwohl ich Adminrechte habe und der Ordner freigegeben ist. Daher kann ich auch nichtmehr den genauen Pfad und die genaue Bezeichnung posten  Ich benutze einen Windows XP Service Pack 3 mit immer aktueller Flash, Adobe und Java. Bitte schreibt mir, wenn es noch Fragen oder Verständnisprobleme gibt. Viele liebe Grüße Tiko Hier die Logfile von Hijackthis: Zitat:
|
|
15.11.2010, 10:53
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   |  2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Wieso postest du die Logs unvollständig?
__________________Malwarebytes schon ausgeführt?
__________________ |
|
15.11.2010, 18:00
| #3 | |
| | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Hallo Arne,
__________________danke für das Antworten auf meinen Post. Ich habe 2 Datein weggelassen von denen ich weiß, dass die ungefährlich sind. Aber sie sollten nicht unbedingt im Internet stehen als Datein, die sich auf meinem Computer befinden  Hier der angeforderte Malwarebytes-Quick-Scan. Zitat:
Viele Grüße Tiko |
|
15.11.2010, 21:48
| #4 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dllZitat:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
15.11.2010, 22:31
| #5 |
| | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Es ist ein Programm, was jetzt aber einen Eingriff in die Privatsphäre darstellen würde, wenn ich dieses nennen würde. Bitte kümmer dich deswegen nicht weiter um das Programm, sondern wende dich bitte meinem Problem zu. Viele Grüße Tiko |
|
15.11.2010, 22:34
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Lade dir Lop S&D herunter. Führe Lop S&D.exe per Doppelklick aus. VISTA-User: Rechtsklick => Ausführen als Admin!! Wähle die Sprache deiner Wahl und anschließend die Option 1. Warte bis der Scanbericht erstellt wird und poste ihn hier (Du findest ihn unter C:\lopR.txt, sollte der Bericht nicht erscheinen).
__________________ --> 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll |
|
16.11.2010, 15:28
| #7 | |
| | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Okay danke, hier der angeforderte Scan: Zitat:
Viele Grüße Tiko |
|
16.11.2010, 15:50
| #8 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dllZitat:
Wenn ja, bitte das Log dazu posten.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
16.11.2010, 21:14
| #9 | |
| | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Ich habe jetzt zum zweiten Mal einen Vollscan durchführen lassen, dabei alle Programme ink. Antivir geschlossen gehabt, und wieder keinen Fund. Hier die Logfile: Zitat:
Viele Grüße Tiko |
|
16.11.2010, 22:34
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Systemscan mit OTL Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
__________________ Logfiles bitte immer in CODE-Tags posten |
|
17.11.2010, 13:17
| #11 |
| | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Sobald ich eine Antwort mit beiden Logfiles posten will, bekomme ich eine Fehlermeldung, dass ich zu viele Grafiken verwendet hätte. Dann versuch ich sie einzeln zu posten. Okay einzeln geht auch nicht wie bissher als Zitat -.- Ich probiers weiter... |
|
17.11.2010, 13:18
| #12 |
| | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Gut, hier die beiden Logiles: Extras: OTL Logfile: Code:
ATTFilter OTL Extras logfile created on: 17.11.2010 12:45:19 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Dokumente und Einstellungen\Timo K\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 59,00% Memory free
3,00 Gb Paging File | 2,00 Gb Available in Paging File | 76,00% Paging File free
Paging file location(s): X:\pagefile.sys 1024 1024 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 97,65 Gb Total Space | 5,17 Gb Free Space | 5,29% Space Free | Partition Type: NTFS
Drive D: | 117,19 Gb Total Space | 11,36 Gb Free Space | 9,69% Space Free | Partition Type: NTFS
Drive F: | 699,79 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive G: | 3,72 Gb Total Space | 3,69 Gb Free Space | 99,16% Space Free | Partition Type: FAT32
Drive X: | 18,03 Gb Total Space | 16,71 Gb Free Space | 92,66% Space Free | Partition Type: FAT32
Computer Name: TIMO | User Name: Timo K | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"3724:TCP" = 3724:TCP:*:Disabled:Blizzard Downloader: 3724
"6112:TCP" = 6112:TCP:*:Disabled:WC3
"54925:UDP" = 54925:UDP:*:Disabled:Brother Network Scanner
"4481:TCP" = 4481:TCP:LocalSubNet:Enabled:BlackBerry Desktop Software music sync service data transfer
"4481:UDP" = 4481:UDP:LocalSubNet:Enabled:BlackBerry Desktop Software music sync service discovery
"4482:TCP" = 4482:TCP:LocalSubNet:Enabled:BlackBerry Desktop Software music sync service data transfer
"4482:UDP" = 4482:UDP:LocalSubNet:Enabled:BlackBerry Desktop Software music sync service discovery
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger -- (Logitech Inc.)
"C:\Programme\ICQ7.2\ICQ.exe" = C:\Programme\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Programme\ICQ7.2\aolload.exe" = C:\Programme\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\VMware\VMware Player\vmware-authd.exe" = C:\Programme\VMware\VMware Player\vmware-authd.exe:*:Enabled:VMware Authd -- (VMware, Inc.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\World of Warcraft\Repair.exe" = C:\Programme\World of Warcraft\Repair.exe:*:Disabled:Blizzard Repair Utility -- (Blizzard Entertainment, Inc.)
"C:\Programme\GSC Game World\Cossacks II\Data\ENGINE.EXE" = C:\Programme\GSC Game World\Cossacks II\Data\ENGINE.EXE:*:Disabled:Cossacks 2: Napoleonic Wars -- File not found
"C:\Programme\ICQLite\ICQLite.exe" = C:\Programme\ICQLite\ICQLite.exe:*:Disabled:ICQ Lite -- File not found
"C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Disabled:ICQ6 -- File not found
"C:\Programme\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe" = C:\Programme\LucasArts\Star Wars Jedi Knight Jedi Academy\GameData\jamp.exe:*:Disabled:Jedi Academy MultiPlayer -- File not found
"C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe" = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger -- (Logitech Inc.)
"C:\Programme\Metin2_Germany\metin2.bin" = C:\Programme\Metin2_Germany\metin2.bin:*:Disabled:metin2 -- ()
"X:\Downloads\utorrent.exe" = X:\Downloads\utorrent.exe:*:Disabled:µTorrent -- File not found
"G:\Games\Battlefield 2\Bf2_w32ded.exe" = G:\Games\Battlefield 2\Bf2_w32ded.exe:*:Disabled:Bf2_w32ded -- File not found
"C:\Programme\Wolfenstein - Enemy Territory\ET.exe" = C:\Programme\Wolfenstein - Enemy Territory\ET.exe:*:Disabled:ET -- File not found
"H:\Games\Star Wars Battlefront II\GameData\battlefrontII.exe" = H:\Games\Star Wars Battlefront II\GameData\battlefrontII.exe:*:Disabled:battlefrontII -- File not found
"C:\Programme\EA Games\Battlefield 2\BF2.exe" = C:\Programme\EA Games\Battlefield 2\BF2.exe:*:Disabled:Battlefield 2 -- File not found
"H:\Games\Battlefield 2\BF2.exe" = H:\Games\Battlefield 2\BF2.exe:*:Disabled:BF2 -- File not found
"G:\Games\Battlefield 2\BF2.exe" = G:\Games\Battlefield 2\BF2.exe:*:Disabled:BF2 -- File not found
"C:\Programme\WOW Offi\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-deDE-downloader.exe" = C:\Programme\WOW Offi\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-deDE-downloader.exe:*:Disabled:Blizzard Downloader -- File not found
"C:\Programme\WOW Offi\World of Warcraft\WoW-3.1.1.9835-to-3.1.2.9901-deDE-downloader.exe" = C:\Programme\WOW Offi\World of Warcraft\WoW-3.1.1.9835-to-3.1.2.9901-deDE-downloader.exe:*:Disabled:Blizzard Downloader -- File not found
"C:\Programme\WOW Offi\World of Warcraft\WoW-2.4.3-to-3.0.2-deDE-Win-Final-downloader.exe" = C:\Programme\WOW Offi\World of Warcraft\WoW-2.4.3-to-3.0.2-deDE-Win-Final-downloader.exe:*:Disabled:Blizzard Downloader -- File not found
"C:\Programme\WOW Offi\World of Warcraft\BackgroundDownloader.exe" = C:\Programme\WOW Offi\World of Warcraft\BackgroundDownloader.exe:*:Disabled:Blizzard Downloader -- File not found
"C:\Programme\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-deDE-downloader.exe" = C:\Programme\World of Warcraft\WoW-3.2.2.10482-to-3.2.2.10505-deDE-downloader.exe:*:Disabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Programme\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-deDE-downloader.exe" = C:\Programme\World of Warcraft\WoW-3.2.0.10314-to-3.2.2.10482-deDE-downloader.exe:*:Disabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Programme\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-deDE-downloader.exe" = C:\Programme\World of Warcraft\WoW-3.2.0.10192-to-3.2.0.10314-deDE-downloader.exe:*:Disabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Programme\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-deDE-downloader.exe" = C:\Programme\World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-deDE-downloader.exe:*:Disabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Programme\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-deDE-downloader.exe" = C:\Programme\World of Warcraft\WoW-3.0.9.9551-to-3.1.0.9767-deDE-downloader.exe:*:Disabled:Blizzard Downloader -- (Blizzard Entertainment)
"C:\Programme\World of Warcraft\WoW-1.12.x-to-2.0.1-deDE-patch-downloader.exe" = C:\Programme\World of Warcraft\WoW-1.12.x-to-2.0.1-deDE-patch-downloader.exe:*:Disabled:Blizzard Downloader -- File not found
"C:\Programme\World of Warcraft\BackgroundDownloader.exe" = C:\Programme\World of Warcraft\BackgroundDownloader.exe:*:Disabled:Blizzard Downloader -- (Blizzard Entertainment)
"H:\Games\World of Warcraft\Launcher.exe" = H:\Games\World of Warcraft\Launcher.exe:*:Disabled:Blizzard Launcher -- File not found
"C:\Programme\WOW Offi\World of Warcraft\Launcher.exe" = C:\Programme\WOW Offi\World of Warcraft\Launcher.exe:*:Disabled:Blizzard Launcher -- File not found
"C:\Programme\World of Warcraft\Launcher.exe" = C:\Programme\World of Warcraft\Launcher.exe:*:Disabled:Blizzard Launcher -- (Blizzard Entertainment)
"C:\Programme\EA Games\Nightfire\Bond.exe" = C:\Programme\EA Games\Nightfire\Bond.exe:*:Disabled:Bond -- ()
"C:\Programme\Brother\Brmfl07b\FAXRX.exe" = C:\Programme\Brother\Brmfl07b\FAXRX.exe:*:Disabled:FAXRX.EXE -- (Brother Industries Ltd.)
"H:\Games\Cs 1.6\Kopie von Counter-Strike 1.6\hl.exe" = H:\Games\Cs 1.6\Kopie von Counter-Strike 1.6\hl.exe:*:Disabled:Half-Life Launcher -- File not found
"H:\Games\Cs 1.6\Counter-Strike 1.6\hl.exe" = H:\Games\Cs 1.6\Counter-Strike 1.6\hl.exe:*:Disabled:Half-Life Launcher -- File not found
"G:\Cs 1.6\Counter-Strike 1.6\hl.exe" = G:\Cs 1.6\Counter-Strike 1.6\hl.exe:*:Disabled:Half-Life Launcher -- File not found
"C:\Programme\Counter-Strike 1.6\hl.exe" = C:\Programme\Counter-Strike 1.6\hl.exe:*:Disabled:Half-Life Launcher -- (Valve)
"C:\Programme\Hamachi\hamachi.exe" = C:\Programme\Hamachi\hamachi.exe:*:Disabled:Hamachi -- (LogMeIn Inc.)
"H:\Games\Counterstrike Source\hl2.exe" = H:\Games\Counterstrike Source\hl2.exe:*:Disabled:hl2 -- File not found
"C:\Programme\Counter-Strike 1.6\hlds.exe" = C:\Programme\Counter-Strike 1.6\hlds.exe:*:Disabled:HLDS Launcher -- (Valve)
"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Disabled:ICQ6 -- File not found
"H:\Games\Call of Duty 4 - Modern Warfare\Call of Duty 4 - Modern Warfare\iw3mp.exe" = H:\Games\Call of Duty 4 - Modern Warfare\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Disabled:iw3mp -- File not found
"C:\Dokumente und Einstellungen\Timo K\Desktop\Call of Duty 4 - Modern Warfare\iw3mp.exe" = C:\Dokumente und Einstellungen\Timo K\Desktop\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Disabled:iw3mp -- File not found
"C:\Programme\EA Games\Need for Speed Most Wanted\nfsMW.exe" = C:\Programme\EA Games\Need for Speed Most Wanted\nfsMW.exe:*:Disabled:nfsMW -- ()
"C:\Programme\Sony Ericsson\Update Service\Update Service.exe" = C:\Programme\Sony Ericsson\Update Service\Update Service.exe:*:Disabled:Update Service -- ()
"C:\Programme\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" = C:\Programme\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:*:Disabled:Veoh Web Player -- File not found
"C:\Programme\Warcraft III\Warcraft III.exe" = C:\Programme\Warcraft III\Warcraft III.exe:*:Disabled:Warcraft III -- ()
"C:\Programme\ICQ7.2\ICQ.exe" = C:\Programme\ICQ7.2\ICQ.exe:*:Enabled:ICQ7.2 -- (ICQ, LLC.)
"C:\Programme\ICQ7.2\aolload.exe" = C:\Programme\ICQ7.2\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe" = C:\Programme\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe:*:Enabled:BlackBerry Desktop Software -- (Research In Motion)
"C:\Programme\TeamViewer\Version5\TeamViewer.exe" = C:\Programme\TeamViewer\Version5\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application -- (TeamViewer GmbH)
"C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe" = C:\Programme\TeamViewer\Version5\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service -- (TeamViewer GmbH)
"C:\Programme\VMware\VMware Player\vmware-authd.exe" = C:\Programme\VMware\VMware Player\vmware-authd.exe:*:Enabled:VMware Authd -- (VMware, Inc.)
"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Inc.)
"C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011\RpcAgentSrv.exe" = C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011\RpcAgentSrv.exe:*:Enabled:SiSoftware Deployment Agent Service -- (SiSoftware)
"C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011\WNt500x86\RpcSandraSrv.exe" = C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service -- (SiSoftware)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0125D081-30D0-4A97-82A8-C28D444B6256}" = Microsoft SQL Server Compact 3.5 SP2 DEU
"{044F9133-B8D7-4d11-BF39-803FA20F5C8B}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{05B5DCEC-BD8A-BC78-D0A5-C90484ED378D}" = Catalyst Control Center Graphics Light
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0E592C31-09EF-3CA1-A7DE-05D13DFCF791}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - deu
"{154F197B-F413-7D58-AF50-9CD295A7F443}" = CCC Help English
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1A655D51-1423-48A3-B748-8F5A0BE294C8}" = Microsoft Visual J# .NET Redistributable Package 1.1
"{1D328E11-3B0C-388C-835D-C9C20E8C7734}" = Microsoft Help Viewer 1.0 Language Pack - DEU
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216020F0}" = Java(TM) 6 Update 20
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{2B0DBB93-DF0A-5625-7035-471D82BFA975}" = Skins
"{2BC2781A-F7F6-452E-95EB-018A522F1B2C}" = PaperPort Image Printer
"{2CCBABCB-6427-4A55-B091-49864623C43F}" = Google Toolbar for Firefox
"{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}" = Logitech SetPoint
"{30355ED7-DE49-4C8D-BE23-2161D36E8A9A}" = Microsoft SQL Server 2008 Setup Support Files (English)
"{3248F0A8-6813-11D6-A77B-00B0D0160020}" = Java(TM) 6 Update 2
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{3248F0A8-6813-11D6-A77B-00B0D0160050}" = Java(TM) 6 Update 5
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32AD1A7A-25F1-44B9-A396-EA8A4A6605B0}" = Search Settings 1.1
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{350FB27C-CF62-4EF3-AF9D-70FF313FE221}" = iTunes
"{3ACA50F4-79BD-3F79-8C61-02F7145BF17B}" = Catalyst Control Center Core Implementation
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{46548E80-0407-0000-7E8A-45000F855001}" = Adobe GoLive CS2
"{46E1B1F2-A279-4356-9B17-029F9CC72EAE}" = Brother MFL-Pro Suite
"{477415F5-93DA-46AA-85C5-640047825995}" = Microsoft SQL Server 2008 Database Engine Shared
"{47C39E4A-28F2-33B1-B9B7-97F24E52D917}" = Microsoft Help Viewer 1.0
"{49FC50FC-F965-40D9-89B4-CBFF80941031}" = Windows Movie Maker 2.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AA82FFE-7274-4C0E-9904-94E945153DDA}_is1" = SimonTools DataSecurity 2009
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008-Browser
"{4B050456-DA2E-5602-DA35-7F5F8E504191}" = Catalyst Control Center Graphics Full Existing
"{4B21AAD6-6AB1-465A-A4AE-5CC1B7A0FCC9}" = Informaticus
"{58D68DF0-4E8B-4E9E-B425-670F9E37C1A8}" = TES Construction Set
"{5A08C9D1-37AD-4A8D-90D3-33F92C578AA5}" = Microsoft SQL Server System CLR Types
"{5BD39911-A12F-4562-98BA-A6E03E3370B1}" = Microsoft SQL Server 2008 Database Engine Services
"{5FE0C13A-63F1-4394-88A8-2D8722A75FE0}_is1" = Convert VOB to AVI 1.7
"{606BC780-101C-41DB-808D-4539BFA0774A}" = MobileMe Control Panel
"{616C6F39-4CE1-3434-A665-2F6A04C09A7F}" = Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools
"{63E921D9-799A-44F9-A742-DE3DC968AFEF}" = Microsoft .NET Framework SDK (German) 1.1
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{68A35043-C55A-4237-88C9-37EE1C63ED71}" = Microsoft Visual J# 2.0 Redistributable Package
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{72EFBFE4-C74F-4187-AEFD-73EA3BE968D6}" = ICQ7.2
"{738B0934-6676-44F6-AB52-32F4E60DCA7F}" = Microsoft SQL Server Compact 3.5 SP1 Design Tools (Deutsch)
"{757AD3D4-036B-42FA-B0A4-96BD6F4605A0}" = Ulead VideoStudio 7 SE VCD
"{786C5747-0C40-4930-9AFE-113BCE553101}" = Adobe Stock Photos 1.0
"{7A8FF745-BBC5-482B-88E4-18D3178249A9}" = ScanSoft PaperPort 11
"{7E20EFE6-E604-48C6-8B39-BA4742F2CDB4}" = Zune Desktop Theme
"{7ED5371F-F4EA-48F9-B8F7-C8777AD9DF69}" = Borland Turbo Delphi
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83F3EED2-DDE2-4434-8FBE-9D2A1E7C2BC9}" = Multi-Card Reader & Flash Disk
"{86D6A20D-3910-4441-A3E5-EB6977251C86}" = Samsung USB Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8EAC192B-1E5B-4276-A2D8-59A303ECD2DE}" = Visual J# .NET Redistributable 1.1- German Language Pack
"{8EDBA74D-0686-4C99-BFDD-F894678E5101}" = Adobe Common File Installer
"{8F714418-F3C3-3BF0-B548-E4BDA7AD41DE}" = Microsoft Visual Basic 2008 Express Edition with SP1 - DEU
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (German) 12
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{94AB7EE4-8335-C799-BECF-9CB63AD73861}" = Catalyst Control Center Graphics Full New
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C08DF6F-0FC2-09DC-3A82-ECF7934522C7}" = ccc-core-static
"{A106D33E-6B43-42C0-9BFC-D03303261FA7}" = Microsoft SQL Server 2008 R2 Management Objects
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A4D7B764-4140-11D4-88EB-0050DA3579C0}" = Nero - Burning Rom
"{A53A11EA-0095-493F-86FA-A15E8A86A405}" = VMware Player
"{A6903FF6-895A-4EA6-BDCC-BE1DD911103A}" = PC Camer@
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.0 - Deutsch
"{AD88355B-A4E0-4DA1-BAC3-EA4FEA930691}" = Ipswitch WS_FTP 12
"{AEC0CEBC-0FC7-4716-8222-1C4A742719B1}" = Samsung Master
"{B5153233-9AEE-4CD4-9D2C-4FAAC870DBE2}" = Microsoft SQL Server 2008 Database Engine Services
"{B74D4E10-6884-0000-0000-000000000101}" = Adobe Bridge 1.0
"{B7E38540-E355-3503-AFD7-635B2F2F76E1}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C3113E55-7BCB-4de3-8EBF-60E6CE6B2296}_is1" = SiSoftware Sandra Lite 2011
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C91C4EF4-63E1-41EE-AE6A-5152628FDC21}" = Microsoft SQL Server 2008 Native Client
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}" = Apple Mobile Device Support
"{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}" = Microsoft Visual Basic 2010 Express - DEU
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CFCB8616-A5D1-4281-80E8-389F685BFAE2}" = Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU
"{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}" = Microsoft .NET Framework 4 Multi-Targeting Pack
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D102611A-6466-4101-A51D-51069303AC65}" = tools-linux
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D25F26E6-7F37-4580-9E83-2BDD9BE9E0CE}" = BlackBerry Desktop Software 6.0
"{D57C2ACB-4246-A901-8D8D-8DA9E311F086}" = ccc-core-preinstall
"{DA76C4B0-3B47-592D-E167-F0000BE5B2EC}" = ccc-utility
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DC700081-9FD8-4445-A578-C52209A90522}" = AQtime 7 Standard for Embarcadero RAD Studio XE
"{DEEB5FE3-40F5-3C5B-8F85-5306EF3C08F4}" = Microsoft Visual C++ 2010 Express - DEU
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{DFAE9340-E8BB-4433-9A08-C8334DAFE1B9}" = Star Wars Republic Commando
"{E0F252A6-DE85-4E93-A93B-DFC3537B3965}" = WG111v2 Configuration Utility
"{E14336FF-AE98-FA53-5E14-7E61E0AE60CC}" = Catalyst Control Center Graphics Previews Common
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9-Reihe
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{E966F0CC-76B3-11D3-945B-00C04FB1760A}" = BDE_ENT
"{E9787678-119F-4D52-B551-6739B2B22101}" = Adobe Help Center 1.0
"{EFCDD6E3-3869-4AB9-8073-CED0EC7C2E75}" = Embarcadero RAD Studio XE
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F1DC7648-8623-442F-92B7-E118DF61872E}" = Microsoft SQL Server 2008 RsFx Driver
"{F3494AB6-6900-41C6-AF57-823626827ED8}" = Microsoft SQL Server 2008 Database Engine Shared
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F7E1CA14-B39D-452A-960B-39423DDDD933}" = DriveImage XML
"{FB4CC424-4814-4C8F-A89F-A8AAC5CB8926}" = ODF Add-in für Microsoft PowerPoint
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"6194C28A8F62DD817EA1B918E6E46E806A21B452" = Windows-Treiberpaket - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)
"65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Windows-Treiberpaket - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)
"AC3Filter_is1" = AC3Filter 1.63b
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe GoLive CS2 Deutsch" = Adobe GoLive CS2 Deutsch
"Adobe Shockwave Player" = Adobe Shockwave Player
"Adobe SVG Viewer" = Adobe SVG Viewer 3.0
"Age of Empires Gold 1.0" = Microsoft Age of Empires Gold
"All ATI Software" = ATI - Software Uninstall Utility
"Astroburn Lite" = Astroburn Lite
"ASUS Probe V2.21.03" = ASUS Probe V2.21.03
"ATI Display Driver" = ATI Display Driver
"Avidemux 2.5" = Avidemux 2.5
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"AVS4YOU Video Converter 6_is1" = AVS Video Converter 6
"Batch File Compiler PE v4.73 Trial" = Batch File Compiler PE v4.73 Trial
"BlackBerry_Desktop" = BlackBerry Desktop Software 6.0
"CamStudio" = CamStudio
"CCleaner" = CCleaner
"C-Media PCI Audio Driver" = Aureon 5.1 PCI
"Counter-Strike 1.6_is1" = Counter-Strike 1.6
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.55
"Dev-C++" = Dev-C++ 5 beta 9 release (4.9.9.2)
"DigitalSimulatorV5.57" = DigitalSimulatorV5.57 (remove only)
"DScaler 4.1.15_is1" = DScaler 4.1.15
"DTV_1.0" = DTV 1.3
"Embarcadero RAD Studio XE" = Embarcadero RAD Studio XE
"EVEREST Home Edition_is1" = EVEREST Home Edition v2.20
"FileZilla Client" = FileZilla Client 3.3.4.1
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"Free FLV Converter_is1" = Free FLV Converter V 3.1
"Free Studio_is1" = Free Studio version 4.8
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.2
"FreePascal_is1" = Free Pascal 2.2.4
"Google Updater" = Google Updater
"Hamachi" = Hamachi 1.0.3.0
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"HP-Color LaserJet 2600n" = Color LaserJet 2600n
"ie7" = Windows Internet Explorer 7
"ie8" = Windows Internet Explorer 8
"InstallShield_{A6903FF6-895A-4EA6-BDCC-BE1DD911103A}" = PC Camer@
"InstallShield_{DC700081-9FD8-4445-A578-C52209A90522}" = AutomatedQA AQtime 7 Standard for Embarcadero RAD Studio
"IRS v2.0" = IRS v2.0
"James Bond 007: Nightfire" = James Bond 007: Nightfire
"JDiskReport 1.3.2" = JGoodies JDiskReport 1.3.2
"Lazarus_is1" = Lazarus 0.9.28.2
"Leos BlackJack" = Leos BlackJack
"LifeView 713X Driver" = LifeView 713X WDM Driver
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Media Studio for Blackberry® demo" = Media Studio for Blackberry® demo 2.5
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Microsoft Help Viewer 1.0" = Microsoft Help Viewer 1.0
"Microsoft Help Viewer 1.0 Language Pack - DEU" = Microsoft Help Viewer 1.0 Language Pack - DEU
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Microsoft Visual Basic 2008 Express Edition with SP1 - DEU" = Microsoft Visual Basic 2008 Express Edition mit SP1 - DEU
"Microsoft Visual Basic 2010 Express - DEU" = Microsoft Visual Basic 2010 Express - DEU
"Microsoft Visual C++ 2010 Express - DEU" = Microsoft Visual C++ 2010 Express - DEU
"Microsoft Visual J# 2.0 Redistributable Package" = Microsoft Visual J# 2.0 Redistributable Package
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"Mozilla Thunderbird (3.1.6)" = Mozilla Thunderbird (3.1.6)
"Network Stumbler" = Network Stumbler 0.4.0 (remove only)
"Petri Heil 2" = Petri Heil 2
"phase5" = phase5
"phonostarRadioPlayer_is1" = phonostar-Player Version 2.01.0
"Picasa 3" = Picasa 3
"Prism" = Prism Video Converter
"RealPlayer 12.0" = RealPlayer
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"Schwimmen2003" = Schwimmen2003
"Secunia PSI" = Secunia PSI
"Super Poker 3D" = Super Poker 3D
"Switch" = Switch Sound File Converter
"Teachmaster 3.9" = Teachmaster 3.9 (nur Entfernen)
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TeamViewer 5" = TeamViewer 5
"Uninstall_is1" = Uninstall 1.0.0.1
"Update Service" = Update Service
"VLC media player" = VLC media player 1.1.4
"VMware_Player" = VMware Player
"Windows Media Encoder 9" = Windows Media Encoder 9-Reihe
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"WinPcapInst" = WinPcap 4.1.1
"WinRAR archiver" = WinRAR
"winscp3_is1" = WinSCP 4.2.5
"WinX Free AVI to iPhone Converter_is1" = WinX Free AVI to iPhone Converter 3.0.4
"World of Warcraft" = World of Warcraft
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Move Networks Player - IE" = Move Networks Media Player for Internet Explorer
"Warcraft III" = Warcraft III
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 13.11.2010 09:14:11 | Computer Name = TIMO | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
Error - 13.11.2010 09:20:54 | Computer Name = TIMO | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
Error - 13.11.2010 15:24:58 | Computer Name = TIMO | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
Error - 13.11.2010 16:02:34 | Computer Name = TIMO | Source = Bonjour Service | ID = 100
Description = 248: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
vom Remotehost geschlossen.)
Error - 14.11.2010 05:54:33 | Computer Name = TIMO | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
Error - 14.11.2010 07:29:12 | Computer Name = TIMO | Source = Bonjour Service | ID = 100
Description = 244: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde
vom Remotehost geschlossen.)
Error - 15.11.2010 10:19:23 | Computer Name = TIMO | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
Error - 16.11.2010 10:16:18 | Computer Name = TIMO | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
Error - 16.11.2010 12:09:51 | Computer Name = TIMO | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
Error - 17.11.2010 07:40:31 | Computer Name = TIMO | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
[ System Events ]
Error - 14.11.2010 16:17:06 | Computer Name = TIMO | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "UsrPrefs.ini" auf Volume "HarddiskVolume1"
ist im Wiederherstellungsfilter der unerwartete Fehler "0xC000009A" aufgetreten.
Die Volumeüberwachung wurde angehalten.
Error - 15.11.2010 10:20:31 | Computer Name = TIMO | Source = Service Control Manager | ID = 7000
Description = Der Dienst "OMSCAN" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error - 15.11.2010 11:45:10 | Computer Name = TIMO | Source = Wechselmediendienst | ID = 262255
Description = Der Wechselmediendienst konnte die Medien in Laufwerk Laufwerk 0 der
Bibliothek Multiple Card Reader USB Device nicht laden.
Error - 15.11.2010 11:45:14 | Computer Name = TIMO | Source = Wechselmediendienst | ID = 262255
Description = Der Wechselmediendienst konnte die Medien in Laufwerk Laufwerk 0 der
Bibliothek Multiple Card Reader USB Device nicht laden.
Error - 15.11.2010 11:47:07 | Computer Name = TIMO | Source = Wechselmediendienst | ID = 262255
Description = Der Wechselmediendienst konnte die Medien in Laufwerk Laufwerk 0 der
Bibliothek Multiple Card Reader USB Device nicht laden.
Error - 15.11.2010 11:47:10 | Computer Name = TIMO | Source = Wechselmediendienst | ID = 262255
Description = Der Wechselmediendienst konnte die Medien in Laufwerk Laufwerk 0 der
Bibliothek Multiple Card Reader USB Device nicht laden.
Error - 16.11.2010 10:17:31 | Computer Name = TIMO | Source = Service Control Manager | ID = 7000
Description = Der Dienst "OMSCAN" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error - 16.11.2010 10:17:37 | Computer Name = TIMO | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
uagp35
Error - 16.11.2010 12:11:01 | Computer Name = TIMO | Source = Service Control Manager | ID = 7000
Description = Der Dienst "OMSCAN" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
Error - 17.11.2010 07:41:41 | Computer Name = TIMO | Source = Service Control Manager | ID = 7000
Description = Der Dienst "OMSCAN" wurde aufgrund folgenden Fehlers nicht gestartet:
%%2
< End of report >
OTL: OTL Logfile: Code:
ATTFilter OTL logfile created on: 17.11.2010 12:45:19 - Run 1 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Dokumente und Einstellungen\Timo K\Desktop Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation Internet Explorer (Version = 8.0.6001.18702) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 59,00% Memory free 3,00 Gb Paging File | 2,00 Gb Available in Paging File | 76,00% Paging File free Paging file location(s): X:\pagefile.sys 1024 1024 [binary data] %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme Drive C: | 97,65 Gb Total Space | 5,17 Gb Free Space | 5,29% Space Free | Partition Type: NTFS Drive D: | 117,19 Gb Total Space | 11,36 Gb Free Space | 9,69% Space Free | Partition Type: NTFS Drive F: | 699,79 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS Drive G: | 3,72 Gb Total Space | 3,69 Gb Free Space | 99,16% Space Free | Partition Type: FAT32 Drive X: | 18,03 Gb Total Space | 16,71 Gb Free Space | 92,66% Space Free | Partition Type: FAT32 Computer Name: TIMO | User Name: Timo K | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Dokumente und Einstellungen\Timo K\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) PRC - C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) PRC - C:\WINDOWS\system32\vmnat.exe (VMware, Inc.) PRC - C:\WINDOWS\system32\vmnetdhcp.exe (VMware, Inc.) PRC - C:\Programme\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) PRC - C:\Programme\VMware\VMware Player\hqtray.exe (VMware, Inc.) PRC - C:\Programme\Common Files\VMware\USB\vmware-usbarbitrator.exe (VMware, Inc.) PRC - C:\Programme\Secunia\PSI\psi.exe (Secunia) PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) PRC - C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.) PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH) PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation) PRC - C:\Programme\Brother\Brmfcmon\BrMfimon.exe (Brother Industries, Ltd.) PRC - C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.) PRC - C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.) PRC - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) PRC - C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.) PRC - C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.) PRC - C:\Programme\phonostar\ps_radio.exe (phonostar) PRC - C:\Programme\phonostar\ps_olect.exe (phonostar) PRC - C:\Programme\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe () PRC - C:\WINDOWS\system32\PAStiSvc.exe () PRC - C:\WINDOWS\Dit.exe (ICSI Technology Ltd.) PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation) ========== Modules (SafeList) ========== MOD - C:\Dokumente und Einstellungen\Timo K\Desktop\OTL.exe (OldTimer Tools) MOD - C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV - (HidServ) -- C:\WINDOWS\System32\hidserv.dll File not found SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH) SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH) SRV - (Apple Mobile Device) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.) SRV - (VMware NAT Service) -- C:\WINDOWS\system32\vmnat.exe (VMware, Inc.) SRV - (VMnetDHCP) -- C:\WINDOWS\system32\vmnetdhcp.exe (VMware, Inc.) SRV - (VMAuthdService) -- C:\Programme\VMware\VMware Player\vmware-authd.exe (VMware, Inc.) SRV - (VMUSBArbService) -- C:\Programme\Common Files\VMware\USB\vmware-usbarbitrator.exe (VMware, Inc.) SRV - (ufad-ws60) -- C:\Programme\VMware\VMware Player\vmware-ufad.exe (VMware, Inc.) SRV - (aspnet_state) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe (Microsoft Corporation) SRV - (WPFFontCache_v0400) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (NetTcpPortSharing) -- C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) SRV - (rpcapd) Remote Packet Capture Protocol v.0 (experimental) -- C:\Programme\WinPcap\rpcapd.exe (CACE Technologies, Inc.) SRV - (SandraAgentSrv) -- C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011\RpcAgentSrv.exe (SiSoftware) SRV - (FsUsbExService) -- C:\WINDOWS\system32\FsUsbExService.Exe (Teruten) SRV - (Adobe LM Service) -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe (Adobe Systems) SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation) SRV - (fsproflt) -- C:\WINDOWS\system32\fsproflt.exe (FSPro Labs) SRV - (UserAccess7) SecuROM User Access Service (V7) -- C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.) SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation) SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation) SRV - (STI Simulator) -- C:\WINDOWS\system32\PAStiSvc.exe () SRV - (MDM) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe (Microsoft Corporation) SRV - (SoundMAX Agent Service (default)) -- C:\Programme\Analog Devices\SoundMAX\SMAgent.exe (Analog Devices, Inc.) ========== Driver Services (SafeList) ========== DRV - (w810obex) -- C:\WINDOWS\System32\DRIVERS\w810obex.sys File not found DRV - (w810mgmt) Sony Ericsson W810 USB WMC Device Management Drivers (WDM) -- C:\WINDOWS\System32\DRIVERS\w810mgmt.sys File not found DRV - (w810mdm) -- C:\WINDOWS\System32\DRIVERS\w810mdm.sys File not found DRV - (w810mdfl) -- C:\WINDOWS\System32\DRIVERS\w810mdfl.sys File not found DRV - (w810bus) Sony Ericsson W810 Driver driver (WDM) -- C:\WINDOWS\System32\DRIVERS\w810bus.sys File not found DRV - (sony_ssm.sys) -- x:\Temp\sony_ssm.sys File not found DRV - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\WINDOWS\System32\DRIVERS\snp2uvc.sys File not found DRV - (PORTMON) -- C:\Dokumente und Einstellungen\Timo K\Desktop\Sysinternal Suite\PORTMSYS.SYS File not found DRV - (PLCMPR5) -- C:\WINDOWS\System32\PLCMPR5.SYS File not found DRV - (EagleNT) -- C:\WINDOWS\System32\drivers\EagleNT.sys File not found DRV - (CardReaderFilter) -- C:\WINDOWS\system32\drivers\USBCRFT.SYS (ICSI Technology Ltd.) DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH) DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH) DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys () DRV - (vmx86) -- C:\WINDOWS\system32\drivers\vmx86.sys (VMware, Inc.) DRV - (vmci) -- C:\WINDOWS\system32\drivers\vmci.sys (VMware, Inc.) DRV - (VMparport) -- C:\WINDOWS\system32\drivers\vmparport.sys (VMware, Inc.) DRV - (vmkbd) -- C:\WINDOWS\system32\drivers\VMkbd.sys (VMware, Inc.) DRV - (VMnetBridge) -- C:\WINDOWS\system32\drivers\vmnetbridge.sys (VMware, Inc.) DRV - (VMnetuserif) -- C:\WINDOWS\system32\drivers\vmnetuserif.sys (VMware, Inc.) DRV - (hcmon) -- C:\WINDOWS\system32\drivers\hcmon.sys (VMware, Inc.) DRV - (vmusb) -- C:\WINDOWS\system32\drivers\vmusb.sys (VMware, Inc.) DRV - (VMnetAdapter) -- C:\WINDOWS\system32\drivers\vmnetadapter.sys (VMware, Inc.) DRV - (cpuz134) -- C:\WINDOWS\system32\drivers\cpuz134_x32.sys (Windows (R) Win 7 DDK provider) DRV - (PSI) -- C:\WINDOWS\system32\drivers\psi_mf.sys (Secunia) DRV - (vstor2-ws60) -- C:\Programme\VMware\VMware Player\vstor2-ws60.sys (VMware, Inc.) DRV - (NPF) -- C:\WINDOWS\system32\drivers\npf.sys (CACE Technologies, Inc.) DRV - (SANDRA) -- C:\Programme\SiSoftware\SiSoftware Sandra Lite 2011\WNt500x86\sandra.sys (SiSoftware) DRV - (hamachi) -- C:\WINDOWS\system32\drivers\hamachi.sys (LogMeIn, Inc.) DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH) DRV - (FsUsbExDisk) -- C:\WINDOWS\system32\FsUsbExDisk.Sys () DRV - (VClone) -- C:\WINDOWS\system32\drivers\VClone.sys (Elaborate Bytes AG) DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH) DRV - (ggsemc) -- C:\WINDOWS\system32\drivers\ggsemc.sys (Sony Ericsson Mobile Communications) DRV - (ggflt) -- C:\WINDOWS\system32\drivers\ggflt.sys (Sony Ericsson Mobile Communications) DRV - (RsFx0102) -- C:\WINDOWS\system32\drivers\RsFx0102.sys (Microsoft Corporation) DRV - (FSProFilter) -- C:\WINDOWS\System32\Drivers\FSPFltd.sys (FSPro Labs) DRV - (MPE) -- C:\WINDOWS\system32\drivers\mpe.sys (Microsoft Corporation) DRV - (gameenum) -- C:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation) DRV - (ACEDRV05) -- C:\WINDOWS\system32\drivers\ACEDRV05.sys (Protect Software GmbH) DRV - (WmXlCore) -- C:\WINDOWS\system32\drivers\WmXlCore.sys (Logitech Inc.) DRV - (WmVirHid) -- C:\WINDOWS\system32\drivers\WmVirHid.sys (Logitech Inc.) DRV - (WmFilter) -- C:\WINDOWS\system32\drivers\WmFilter.sys (Logitech Inc.) DRV - (WmBEnum) -- C:\WINDOWS\system32\drivers\WmBEnum.sys (Logitech Inc.) DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.) DRV - (cmuda3) -- C:\WINDOWS\system32\drivers\cmudax3.sys (C-Media Inc) DRV - (sfdrv01) StarForce Protection Environment Driver (version 1.x) -- C:\WINDOWS\System32\drivers\sfdrv01.sys (Protection Technology (StarForce)) DRV - (sfsync04) StarForce Protection Synchronization Driver (version 4.x) -- C:\WINDOWS\System32\drivers\sfsync04.sys (Protection Technology (StarForce)) DRV - (RTLWUSB) -- C:\WINDOWS\system32\drivers\wg111v2.sys (NETGEAR Inc.) DRV - (sfhlp02) StarForce Protection Helper Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfhlp02.sys (Protection Technology (StarForce)) DRV - (AF05BDA) -- C:\WINDOWS\system32\drivers\AF05BDA.sys (AfaTech ) DRV - (DSDrv4) -- C:\Programme\DScaler\DSDrv4.sys () DRV - (L8042Kbd) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech, Inc.) DRV - (PAC207) -- C:\WINDOWS\system32\drivers\PFC027.sys () DRV - (sfsync02) StarForce Protection Synchronization Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfsync02.sys (Protection Technology) DRV - (A_USBETHMP) -- C:\WINDOWS\system32\drivers\usbethmp.sys (Intellon Corporation) DRV - (cmpci) TerraTec Aureon 5.1 (WDM) -- C:\WINDOWS\system32\drivers\cmaudio.sys (C-Media Inc) DRV - (NSNDIS5) -- C:\WINDOWS\system32\nsndis5.sys (Printing Communications Assoc., Inc. (PCAUSA)) DRV - (LVCap138) -- C:\WINDOWS\system32\drivers\lvcap138.sys (Philips) DRV - (lvtuner) -- C:\WINDOWS\system32\drivers\lvtuner.sys (Philips) DRV - (viaagp1) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.) DRV - (cmigameport) -- C:\WINDOWS\system32\drivers\cmigameport.sys () DRV - (aslm75) -- C:\WINDOWS\system32\drivers\ASLM75.SYS () ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com/ie IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.defaulturl: "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=" FF - prefs.js..browser.search.selectedEngine: "ICQ Search" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://start.icq.com/" FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0 FF - prefs.js..extensions.enabledItems: {fb7d98cb-b228-4ecb-acac-e7101156338e}:1.5.40.0 FF - prefs.js..extensions.enabledItems: searchrecs@veoh.com:1.5.1 FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1 FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.6 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.6&q=" FF - HKLM\software\mozilla\Firefox\Extensions\\{3112ca9c-de6d-4884-a869-9855de68056c}: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Google\Toolbar for Firefox\{3112ca9c-de6d-4884-a869-9855de68056c} [2009.11.29 20:24:46 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.11.07 14:52:28 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.11.07 14:52:23 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2010.11.07 14:53:44 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2010.10.09 09:17:10 | 000,000,000 | ---D | M] [2010.01.08 13:28:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Extensions [2010.01.08 13:28:01 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.10.30 11:22:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions [2010.08.04 17:45:44 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions\{20a82645-c095-46ed-80e3-08825760534b} [2010.07.31 22:16:58 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c} [2008.07.23 19:56:00 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1} [2010.06.23 12:27:41 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07} [2010.06.11 12:43:34 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C} [2009.02.02 13:25:07 | 000,000,000 | ---D | M] (Techno4ever Toolbar) -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions\{fb7d98cb-b228-4ecb-acac-e7101156338e} [2010.02.23 12:37:45 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions\searchrecs@veoh.com [2010.10.08 18:42:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\extensions\staged-xpis [2008.12.05 07:17:33 | 000,001,185 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\searchplugins\am-lat-deu.xml [2010.10.30 11:22:49 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\searchplugins\icqplugin-1.xml [2010.08.01 11:16:09 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\searchplugins\icqplugin-2.xml [2010.10.05 08:43:38 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\searchplugins\icqplugin-3.xml [2010.06.23 12:27:41 | 000,000,168 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\searchplugins\icqplugin.gif [2010.06.23 12:27:41 | 000,000,618 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\searchplugins\icqplugin.src [2010.07.11 09:53:26 | 000,001,056 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Mozilla\Firefox\Profiles\hfy3d0o5.default\searchplugins\icqplugin.xml [2010.11.07 14:55:35 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions [2010.09.19 18:13:26 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010.11.07 14:55:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} [2008.02.08 20:44:17 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions\search@searchsettings.com [2010.11.07 14:55:16 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll O1 HOSTS File: ([2010.09.17 14:59:33 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated) O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.) O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found. O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {FB7D98CB-B228-4ECB-ACAC-E7101156338E} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Programme\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.) O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [AppleSyncNotifier] C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleSyncNotifier.exe (Apple Inc.) O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [BrMfcWnd] C:\Programme\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.) O4 - HKLM..\Run: [CmPCIaudio] File not found O4 - HKLM..\Run: [Dit] C:\WINDOWS\Dit.exe (ICSI Technology Ltd.) O4 - HKLM..\Run: [IndexSearch] C:\Programme\ScanSoft\PaperPort\IndexSearch.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [mylbx] C:\Programme\My Lockbox\mylbx.exe (FSPro Labs) O4 - HKLM..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe () O4 - HKLM..\Run: [PaperPort PTD] C:\Programme\ScanSoft\PaperPort\pptd40nt.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [PPort11reminder] C:\Programme\ScanSoft\PaperPort\Ereg\Ereg.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SSBkgdUpdate] C:\Programme\Gemeinsame Dateien\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.) O4 - HKLM..\Run: [VMware hqtray] C:\Programme\VMware\VMware Player\hqtray.exe (VMware, Inc.) O4 - HKCU..\Run: [LDM] C:\Programme\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (Logitech Inc.) O4 - HKCU..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.) O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\WG111v2 Smart Wizard Wireless Setting.lnk = C:\Programme\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe () O4 - Startup: C:\Dokumente und Einstellungen\Timo K\Startmenü\Programme\Autostart\Adobe Gamma.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) O4 - Startup: C:\Dokumente und Einstellungen\Timo K\Startmenü\Programme\Autostart\AutorunsDisabled [2010.11.15 20:50:10 | 000,000,000 | -H-D | M] O4 - Startup: C:\Dokumente und Einstellungen\Timo K\Startmenü\Programme\Autostart\Secunia PSI.lnk = C:\Programme\Secunia\PSI\psi.exe (Secunia) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubedownload.htm () O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubetomp3.htm () O8 - Extra context menu item: Google Sidewiki... - C:\Programme\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_950DF09FAB501E03.dll (Google Inc.) O9 - Extra Button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra 'Tools' menuitem : ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Programme\ICQ7.2\ICQ.exe (ICQ, LLC.) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll File not found O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll File not found O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found O9 - Extra Button: PokerStars.net - {FA9B9510-9FCB-4ca0-818C-5D0987B47C4D} - D:\Timo\PokerStarsUpdate.exe File not found O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Programme\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Programme\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control) O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1283783143515 (MUWebControl Class) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22) O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Programme\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.) O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll File not found O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation) O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.) O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Timo K\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Timo K\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007.07.14 16:18:11 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ] O32 - AutoRun File - [2010.08.29 21:35:30 | 000,000,000 | ---- | M] () - X:\AUTORUN.INF -- [ FAT32 ] O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.11.17 12:44:12 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Timo K\Desktop\OTL.exe [2010.11.16 22:03:59 | 000,000,000 | ---D | C] -- C:\Programme\Lavalys [2010.11.16 22:03:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Desktop\Facharbeit [2010.11.16 15:19:56 | 000,000,000 | ---D | C] -- C:\Lop SD [2010.11.15 20:50:10 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Timo K\Startmenü\Programme\Autostart\AutorunsDisabled [2010.11.15 18:20:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Desktop\10.12 [2010.11.15 16:53:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Malwarebytes [2010.11.15 16:52:10 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys [2010.11.15 16:52:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes [2010.11.15 16:52:02 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys [2010.11.15 16:52:01 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware [2010.11.14 14:39:32 | 000,000,000 | ---D | C] -- D:\Timo\Oberon Media [2010.11.13 13:13:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Desktop\Hijackthis [2010.11.13 10:42:46 | 000,000,000 | ---D | C] -- D:\Timo\Dokumente [2010.11.13 10:08:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Desktop\Dokumente [2010.11.12 23:56:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Desktop\tasch2 [2010.11.12 22:42:36 | 000,000,000 | ---D | C] -- D:\Timo\Borland Studio-Projekte [2010.11.12 22:42:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Lokale Einstellungen\Anwendungsdaten\Borland [2010.11.12 22:42:35 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Timo K\.xmqs [2010.11.12 22:42:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\.borland [2010.11.12 22:39:39 | 000,000,000 | ---D | C] -- D:\Timo\Borland Studio Projects [2010.11.12 22:39:38 | 000,000,000 | ---D | C] -- C:\Programme\Borland [2010.11.12 22:37:49 | 000,000,000 | ---D | C] -- D:\Timo\MDAC [2010.11.12 22:37:37 | 000,000,000 | ---D | C] -- D:\Timo\Install [2010.11.12 22:37:36 | 000,000,000 | ---D | C] -- D:\Timo\IB75 [2010.11.12 22:27:42 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Visual Studio .NET 2003 [2010.11.12 22:27:20 | 000,000,000 | -HSD | C] -- C:\Config.Msi [2010.11.12 20:00:16 | 000,000,000 | ---D | C] -- C:\Programme\SiSoftware [2010.11.07 17:40:38 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Timo K\Recent [2010.11.07 14:55:34 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.11.07 14:55:34 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.11.07 14:55:34 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.11.06 20:12:10 | 000,000,000 | ---D | C] -- C:\Programme\Astroburn Lite [2010.11.06 20:12:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Astroburn Lite [2010.11.06 20:12:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Astroburn Lite [2010.11.06 19:53:45 | 000,000,000 | ---D | C] -- C:\Programme\DAEMON Tools Lite [2010.11.06 19:53:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\DAEMON Tools Lite [2010.11.06 19:53:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite [2010.11.06 18:33:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Desktop\Ferien [2010.10.31 08:38:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Timo K\Desktop\Musik [2010.10.21 19:53:40 | 000,974,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc42.dll [2010.10.21 19:53:40 | 000,953,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mfc40u.dll [2010.10.21 19:53:27 | 000,617,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\comctl32.dll [2009.04.12 16:11:37 | 000,047,360 | ---- | C] (VSO Software) -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\pcouffin.sys [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2010.11.17 12:44:14 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Timo K\Desktop\OTL.exe [2010.11.17 12:43:43 | 000,001,044 | ---- | M] () -- C:\WINDOWS\tasks\Google Software Updater.job [2010.11.17 12:40:31 | 000,001,084 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job [2010.11.17 12:40:25 | 000,013,568 | ---- | M] (ICSI Technology Ltd.) -- C:\WINDOWS\System32\drivers\USBCRFT.SYS [2010.11.17 12:40:13 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat [2010.11.16 22:05:00 | 000,001,088 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job [2010.11.16 15:17:11 | 000,000,211 | -HS- | M] () -- C:\boot.ini [2010.11.15 21:22:31 | 000,000,879 | ---- | M] () -- C:\WINDOWS\System\Cmicnfg3.ini [2010.11.15 15:19:05 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl [2010.11.14 14:42:13 | 000,002,121 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\iTunes.lnk [2010.11.14 00:00:39 | 000,000,073 | ---- | M] () -- C:\WINDOWS\EurekaLog.ini [2010.11.13 23:49:50 | 000,000,160 | ---- | M] () -- C:\demofile.dat [2010.11.13 22:39:10 | 000,018,432 | ---- | M] () -- C:\dvb.GRF [2010.11.13 21:34:43 | 001,453,272 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Desktop\Bilder [2010.11.12 22:41:28 | 000,000,894 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Desktop\Turbo Delphi.lnk [2010.11.12 19:48:32 | 000,000,000 | ---- | M] () -- C:\image.nrg [2010.11.07 14:55:15 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll [2010.11.07 14:55:15 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe [2010.11.07 14:55:15 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe [2010.11.07 14:55:15 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe [2010.11.07 14:55:15 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl [2010.11.07 14:53:46 | 000,001,638 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Thunderbird.lnk [2010.11.07 14:27:07 | 000,126,856 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys [2010.11.07 14:27:07 | 000,060,936 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys [2010.11.06 19:57:23 | 000,118,784 | ---- | M] () -- C:\Dokumente und Einstellungen\Timo K\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.11.06 19:53:57 | 000,691,696 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys [2010.11.04 22:24:38 | 014,835,712 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.mda [2010.10.31 08:24:33 | 000,594,608 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat [2010.10.31 08:24:33 | 000,569,818 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat [2010.10.31 08:24:33 | 000,130,318 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat [2010.10.31 08:24:33 | 000,112,958 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat [2010.10.26 20:51:23 | 000,055,621 | ---- | M] () -- D:\Timo\William Edward Burghardt Du Bois.docx [2010.10.22 09:13:40 | 000,228,000 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT [5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ] [3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ] [1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ] ========== Files Created - No Company Name ========== [2010.11.14 00:00:39 | 000,000,073 | ---- | C] () -- C:\WINDOWS\EurekaLog.ini [2010.11.13 23:48:11 | 000,000,160 | ---- | C] () -- C:\demofile.dat [2010.11.13 21:34:43 | 001,453,272 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Desktop\Bilder [2010.11.13 10:08:06 | 000,034,235 | ---- | C] () -- D:\Timo\Versuch zur Katalase.docx [2010.11.13 10:07:53 | 000,016,930 | ---- | C] () -- D:\Timo\GK Skifahren 2011.odt [2010.11.13 10:07:41 | 008,651,240 | ---- | C] () -- D:\Timo\Datenschleuder.pdf [2010.11.13 10:07:40 | 000,001,884 | ---- | C] () -- D:\Timo\Manual (PDF).lnk [2010.11.12 22:58:34 | 000,000,894 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Desktop\Turbo Delphi.lnk [2010.11.12 22:34:24 | 000,007,001 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\reg736.txt [2010.11.12 20:00:21 | 014,835,712 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.mda [2010.11.12 19:27:28 | 000,000,000 | ---- | C] () -- C:\image.nrg [2010.11.06 19:53:57 | 000,691,696 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys [2010.10.26 20:51:22 | 000,055,621 | ---- | C] () -- D:\Timo\William Edward Burghardt Du Bois.docx [2010.09.11 13:39:43 | 000,431,798 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-527237240-1606980848-839522115-1004-0.dat [2010.09.11 13:39:42 | 000,215,038 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat [2010.08.27 22:55:00 | 000,027,136 | ---- | C] () -- C:\WINDOWS\System32\BDSShellRes150.dll [2010.08.27 22:55:00 | 000,027,136 | ---- | C] () -- C:\WINDOWS\System32\BDSShellRes.dll [2010.08.14 11:12:27 | 001,708,544 | ---- | C] () -- C:\WINDOWS\System32\libqt4intf.dll [2010.08.12 21:08:23 | 000,242,056 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat [2010.08.12 17:55:43 | 000,000,616 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Rim.Desktop.Exception.log [2010.08.11 16:50:14 | 000,000,755 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\Rim.Desktop.HttpServerSetup.log [2010.08.07 13:08:57 | 000,001,193 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\BBMS_EXCEPTION.txt [2010.05.04 14:20:48 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmrmdrv3.dll [2010.05.04 14:20:23 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\CmiInstallResAll.dll [2010.05.04 14:20:23 | 000,000,542 | ---- | C] () -- C:\WINDOWS\Cmicnfg3.ini.imi [2010.05.04 14:20:20 | 000,000,727 | R--- | C] () -- C:\WINDOWS\cmudax3.ini [2010.01.26 16:46:45 | 000,000,600 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\winscp.rnd [2009.12.25 00:07:39 | 000,110,592 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDevice.Dll [2009.12.25 00:07:39 | 000,036,608 | ---- | C] () -- C:\WINDOWS\System32\FsUsbExDisk.Sys [2009.12.25 00:07:30 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\$_hpcst$.hpc [2009.10.20 19:19:30 | 000,053,299 | ---- | C] () -- C:\WINDOWS\System32\pthreadVC.dll [2009.08.22 12:57:31 | 000,000,432 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI [2009.08.22 12:55:42 | 000,000,093 | ---- | C] () -- C:\WINDOWS\brpcfx.ini [2009.08.22 12:55:38 | 000,000,221 | ---- | C] () -- C:\WINDOWS\Brpfx04a.ini [2009.08.22 12:52:41 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\BRTCPCON.DLL [2009.08.22 12:52:41 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\BRLMW03A.INI [2009.08.22 12:52:32 | 000,000,091 | ---- | C] () -- C:\WINDOWS\Brfaxrx.ini [2009.08.22 12:52:31 | 000,106,496 | ---- | C] () -- C:\WINDOWS\System32\BrMuSNMP.dll [2009.08.22 12:42:38 | 000,031,664 | ---- | C] () -- C:\WINDOWS\maxlink.ini [2009.04.12 16:12:02 | 000,000,033 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\pcouffin.log [2009.04.12 16:11:37 | 000,087,608 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\inst.exe [2009.04.12 16:11:37 | 000,007,887 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\pcouffin.cat [2009.04.12 16:11:37 | 000,001,144 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Anwendungsdaten\pcouffin.inf [2009.02.16 13:48:32 | 000,138,512 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys [2008.08.06 22:54:20 | 000,000,000 | ---- | C] () -- C:\WINDOWS\mngui.INI [2008.08.06 20:07:47 | 000,000,139 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat [2008.05.02 07:51:58 | 000,000,736 | ---- | C] () -- C:\WINDOWS\SamsungMaster.INI [2008.04.05 20:22:23 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll [2008.04.05 20:22:23 | 000,180,224 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll [2008.02.21 18:02:11 | 000,000,133 | ---- | C] () -- C:\WINDOWS\System32\AddPort.ini [2008.02.21 18:02:10 | 000,003,254 | R--- | C] () -- C:\WINDOWS\System32\hptcpmon.ini [2008.02.21 18:01:51 | 000,749,568 | R--- | C] () -- C:\WINDOWS\System32\agissi.dll [2008.02.21 18:01:47 | 011,206,656 | R--- | C] () -- C:\WINDOWS\System32\zhhp_res.dll [2008.02.21 18:01:46 | 000,114,688 | R--- | C] () -- C:\WINDOWS\System32\vshp2600.dll [2008.02.21 18:00:43 | 000,000,623 | ---- | C] () -- C:\WINDOWS\hpntwksetup.ini [2007.10.25 17:26:10 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys [2007.09.29 21:08:55 | 000,000,050 | ---- | C] () -- C:\WINDOWS\cdplayer.ini [2007.09.15 19:47:55 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll [2007.09.15 19:47:55 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll [2007.09.15 10:23:07 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll [2007.08.16 17:37:54 | 000,000,045 | ---- | C] () -- C:\WINDOWS\Twacker.ini [2007.08.16 17:37:45 | 000,000,031 | ---- | C] () -- C:\WINDOWS\DevCap.ini [2007.08.10 11:11:40 | 000,010,240 | ---- | C] () -- C:\WINDOWS\System32\vidx16.dll [2007.07.16 15:48:51 | 000,118,784 | ---- | C] () -- C:\Dokumente und Einstellungen\Timo K\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2007.07.15 17:19:29 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html [2007.07.15 10:37:29 | 000,006,272 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASLM75.SYS [2007.07.15 10:31:00 | 000,000,044 | ---- | C] () -- C:\WINDOWS\System32\msssc.dll [2007.07.15 10:30:35 | 000,003,289 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini [2007.07.15 10:30:33 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS [2007.07.14 18:55:25 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI [2007.07.14 18:09:14 | 000,000,260 | R--- | C] () -- C:\WINDOWS\Dit.INI [2007.07.14 17:26:46 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\psisdecd.dll [2007.07.14 17:01:23 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI [2005.11.07 09:54:04 | 000,020,480 | ---- | C] () -- C:\Programme\Gemeinsame Dateien\UninstallDrv.exe [2005.05.27 13:57:16 | 000,162,304 | ---- | C] () -- C:\WINDOWS\System32\drivers\PFC027.sys [2005.01.25 14:15:42 | 000,010,240 | R--- | C] () -- C:\WINDOWS\System32\PA207USD.DLL [2002.02.07 15:54:34 | 000,003,712 | ---- | C] () -- C:\WINDOWS\System32\drivers\cmigameport.sys < End of report > Viele Grüße Tiko |
|
17.11.2010, 13:20
| #13 |
| | 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll Einen Haken gesetzt bei "Grafiken deaktiveren" war die Lösung. |
|
| Themen zu 2 Funde in C:/System Volume Information; Einmal eine A013....7.exe und A014...6.dll |
| antivir, antivir guard, avg, avira, bho, bonjour, c:/system volumen information, converter, desktop, einstellungen, excel, frage, google, hijack, hijackthis, hkus\s-1-5-18, internet, internet explorer, logfile, mp3, netgear, plug-in, rundll, senden, server, software, usb, virus, windows, windows xp |
Linear-Darstellung
