Hallo,
ich hatte da wohl was falsch interpretiert.OTL Logfile: Code:
OTL logfile created on: 7/31/2011 6:16:24 AM - Run
OTLPE by OldTimer - Version 3.1.48.0 Folder = X:\Programs\OTLPE
Microsoft Windows XP Service Pack 3 (Version = 5.1.2600) - Type = SYSTEM
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
766.00 Mb Total Physical Memory | 501.00 Mb Available Physical Memory | 65.00% Memory free
706.00 Mb Paging File | 543.00 Mb Available in Paging File | 77.00% Paging File free
Paging file location(s): C:\pagefile.sys 1152 2304 [binary data]
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 98.09 Gb Total Space | 90.95 Gb Free Space | 92.72% Space Free | Partition Type: NTFS
Drive D: | 199.99 Gb Total Space | 170.27 Gb Free Space | 85.14% Space Free | Partition Type: NTFS
Drive I: | 967.22 Mb Total Space | 853.00 Mb Free Space | 88.19% Space Free | Partition Type: FAT
Drive X: | 436.59 Mb Total Space | 0.00 Mb Free Space | 0.00% Space Free | Partition Type: CDFS
Computer Name: REATOGO | User Name: SYSTEM
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
Using ControlSet: ControlSet004
========== Win32 Services (SafeList) ==========
SRV - [2011/05/19 01:03:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto] -- D:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011/03/20 02:56:53 | 000,269,480 | ---- | M] (Avira GmbH) [Auto] -- D:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/01/04 12:47:50 | 003,987,376 | ---- | M] (Acronis) [Auto] -- D:\Programme\Gemeinsame Dateien\Acronis\CDP\afcdpsrv.exe -- (afcdpsrv)
SRV - [2010/08/02 13:48:48 | 000,780,408 | ---- | M] (Acronis) [Auto] -- D:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2009/03/20 11:02:37 | 000,079,360 | ---- | M] (Creative Labs) [On_Demand] -- D:\Programme\Gemeinsame Dateien\Creative Labs Shared\Service\MT6Licensing.exe -- (Creative Media Toolbox 6 Licensing Service)
SRV - [2008/10/20 00:08:20 | 000,307,968 | ---- | M] (TuneUp Software GmbH) [On_Demand] -- D:\WINDOWS\system32\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - [2008/02/27 07:15:14 | 000,028,416 | ---- | M] (TuneUp Software GmbH) [Auto] -- D:\WINDOWS\system32\uxtuneup.dll -- (UxTuneUp)
SRV - [2005/04/03 18:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand] -- D:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand] -- -- (PDCOMP)
DRV - File not found [Kernel | System] -- -- (PCIDump)
DRV - File not found [Kernel | System] -- -- (lbrtfdc)
DRV - File not found [Kernel | System] -- -- (i2omgmt)
DRV - File not found [Kernel | System] -- -- (Changer)
DRV - [2011/03/20 02:56:53 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System] -- D:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/01/04 12:47:52 | 000,163,232 | ---- | M] (Acronis) [File_System | On_Demand] -- D:\WINDOWS\system32\drivers\afcdp.sys -- (afcdp)
DRV - [2011/01/04 12:47:48 | 000,911,680 | ---- | M] (Acronis) [Kernel | Boot] -- D:\WINDOWS\system32\drivers\tdrpm258.sys -- (tdrpman258) Acronis Try&Decide and Restore Points filter (build 258)
DRV - [2011/01/04 12:47:46 | 000,600,928 | ---- | M] (Acronis) [Kernel | Boot] -- D:\WINDOWS\system32\drivers\timntr.sys -- (timounter)
DRV - [2011/01/04 12:47:38 | 000,170,464 | ---- | M] (Acronis) [Kernel | Boot] -- D:\WINDOWS\system32\drivers\snapman.sys -- (snapman)
DRV - [2010/11/30 03:18:30 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto] -- D:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009/05/11 04:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System] -- D:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009/02/13 06:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System] -- D:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008/04/13 18:23:10 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2007/06/19 03:51:16 | 000,081,832 | R--- | M] (MCCI Corporation) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\s816bus.sys -- (s816bus) Sony Ericsson Device 816 driver (WDM)
DRV - [2007/03/26 13:21:06 | 004,395,008 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2006/09/18 09:59:08 | 000,090,800 | R--- | M] (MCCI) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\se27unic.sys -- (se27unic) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (WDM)
DRV - [2006/09/18 09:59:02 | 000,086,560 | R--- | M] (MCCI) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\SE27obex.sys -- (SE27obex)
DRV - [2006/09/18 09:59:00 | 000,018,704 | R--- | M] (MCCI) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\se27nd5.sys -- (se27nd5) Sony Ericsson Device 039 USB Ethernet Emulation SEMC39 (NDIS)
DRV - [2006/09/18 09:58:58 | 000,088,688 | R--- | M] (MCCI) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\SE27mgmt.sys -- (SE27mgmt) Sony Ericsson Device 039 USB WMC Device Management Drivers (WDM)
DRV - [2006/09/18 09:58:54 | 000,097,184 | R--- | M] (MCCI) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\SE27mdm.sys -- (SE27mdm)
DRV - [2006/09/18 09:58:52 | 000,009,360 | R--- | M] (MCCI) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\SE27mdfl.sys -- (SE27mdfl)
DRV - [2006/09/18 09:58:48 | 000,061,600 | R--- | M] (MCCI) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\SE27bus.sys -- (SE27bus) Sony Ericsson Device 039 Driver driver (WDM)
DRV - [2004/08/03 17:31:34 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C)
DRV - [2004/03/08 07:55:50 | 000,013,567 | ---- | M] (B.H.A Corporation) [Kernel | System] -- D:\WINDOWS\System32\drivers\CDRBSDRV.SYS -- (cdrbsdrv)
DRV - [2002/10/15 17:41:06 | 000,102,220 | ---- | M] (Sony Corporation) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\sonypvs1.sys -- (sonypvs1)
DRV - [2001/08/17 07:19:20 | 000,096,256 | ---- | M] (Copyright (C) Creative Technology Ltd. 1994-2001) [Kernel | On_Demand] -- D:\WINDOWS\system32\drivers\ctlsb16.sys -- (ctlsb16) Creative SB16/AWE32/AWE64-Treiber (WDM)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\Gast_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\JensRall_ON_D\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.n-tv.de/
IE - HKU\JensRall_ON_D\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "eBay"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.n-tv.de/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: toolbar@gmx.net:1.4.1
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: D:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: D:\Dokumente und Einstellungen\JensRall\Lokale Einstellungen\Anwendungsdaten\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011/06/21 15:20:19 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011/05/02 01:56:03 | 000,000,000 | ---D | M]
[2008/09/14 05:23:32 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\JensRall\Anwendungsdaten\mozilla\Extensions
[2011/06/20 15:45:26 | 000,000,000 | ---D | M] (No name found) -- D:\Dokumente und Einstellungen\JensRall\Anwendungsdaten\mozilla\Firefox\Profiles\jlp6f24i.default\extensions
[2011/05/02 01:56:04 | 000,000,000 | ---D | M] (No name found) -- D:\Programme\Mozilla Firefox\extensions
[2010/10/21 13:35:35 | 000,000,000 | ---D | M] (Java Console) -- D:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) --
() (No name found) -- D:\DOKUMENTE UND EINSTELLUNGEN\JENSRALL\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\JLP6F24I.DEFAULT\EXTENSIONS\TOOLBAR@GMX.NET.XPI
[2010/10/21 13:35:25 | 000,000,000 | ---D | M] (Java Quick Starter) -- D:\PROGRAMME\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011/06/21 15:20:18 | 000,142,296 | ---- | M] (Mozilla Foundation) -- D:\Programme\mozilla firefox\components\browsercomps.dll
[2010/10/21 13:35:24 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- D:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2010/01/01 04:00:00 | 000,001,392 | ---- | M] () -- D:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010/01/01 04:00:00 | 000,002,252 | ---- | M] () -- D:\Programme\mozilla firefox\searchplugins\bing.xml
[2010/01/01 04:00:00 | 000,001,153 | ---- | M] () -- D:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2010/01/01 04:00:00 | 000,006,805 | ---- | M] () -- D:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2010/01/01 04:00:00 | 000,001,178 | ---- | M] () -- D:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2010/01/01 04:00:00 | 000,001,105 | ---- | M] () -- D:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2001/08/23 08:00:00 | 000,000,820 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - D:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (EpsonToolBandKicker Class) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - D:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - D:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O3 - HKU\JensRall_ON_D\..\Toolbar\WebBrowser: (EPSON Web-To-Page) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - D:\Programme\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acronis Scheduler2 Service] D:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe (Acronis)
O4 - HKLM..\Run: [Adobe ARM] D:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Photo Downloader] D:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] D:\Programme\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Alcmtr] D:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] D:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [HPDJ Taskbar Utility] D:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb12.exe (HP)
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] D:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SAOB Monitor] D:\Programme\Acronis\OnlineBackupStandalone\TrueImageMonitor.exe (Acronis)
O4 - HKLM..\Run: [SunJavaUpdateSched] D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TrueImageMonitor.exe] D:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis)
O4 - HKU\JensRall_ON_D..\Run: [Compar] D:\Dokumente und Einstellungen\JensRall\Anwendungsdaten\Adobe\Update\vidmmc.exe ()
O4 - HKU\JensRall_ON_D..\Run: [CreativeTaskScheduler] D:\Programme\Creative\Shared Files\CTSched.exe (Creative Technology Ltd)
O4 - HKU\JensRall_ON_D..\Run: [SpybotSD TeaTimer] D:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\HP Image Zone Schnellstart.lnk = D:\Programme\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
O4 - Startup: D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk = D:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)
O4 - Startup: D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Picture Package Menu.lnk = D:\Programme\Sony Corporation\Picture Package\Picture Package Menu\SonyTray.exe (Sony Corporation)
O4 - Startup: D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Picture Package VCD Maker.lnk = D:\Programme\Sony Corporation\Picture Package\Picture Package Applications\Residence.exe (Sony Corporation.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\Gast_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\JensRall_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\LocalService_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\NetworkService_ON_D\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - D:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (C:\Dokumente und Einstellungen\JensRall\Anwendungsdaten\jashla.exe) - D:\Dokumente und Einstellungen\JensRall\Anwendungsdaten\jashla.exe (Lindholm Astor Wightman Tektronix)
O24 - Desktop Components:0 () - hxxp://thumbs.ebaystatic.com/m/m_rtUoZvAdU5h1QAgB57BGA/80.jpg
O24 - Desktop Components:1 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: D:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\HP\Digital Imaging\wallpaper.bmp
O24 - Desktop BackupWallPaper: D:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\HP\Digital Imaging\wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2008/09/12 12:54:15 | 000,000,000 | ---- | M] () - D:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2006/03/24 07:06:41 | 000,000,053 | R--- | M] () - X:\AUTORUN.INF -- [ CDFS ]
O33 - MountPoints2\{b42a855e-560b-11df-bfbd-0030842bb583}\Shell - "" = AutoRun
O33 - MountPoints2\{b42a855e-560b-11df-bfbd-0030842bb583}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{b42a855e-560b-11df-bfbd-0030842bb583}\Shell\AutoRun\command - "" = "H:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011/07/29 18:58:41 | 000,125,952 | ---- | C] (Lindholm Astor Wightman Tektronix) -- D:\Dokumente und Einstellungen\JensRall\Anwendungsdaten\jashla.exe
[2011/07/29 16:09:22 | 000,000,000 | RH-D | C] -- D:\Dokumente und Einstellungen\JensRall\Recent
[2011/07/09 17:58:20 | 000,000,000 | ---D | C] -- D:\Programme\Gitarrero Software
[2011/07/09 17:58:20 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\JensRall\Startmenü\Programme\Gitarrero Notenmeister
[2005/05/11 17:36:48 | 000,012,288 | ---- | C] (Hewlett-Packard Co.) -- D:\WINDOWS\Fonts\RandFont.dll
[4 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[3 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
[2 D:\*.tmp files -> D:\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011/07/30 03:38:39 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2011/07/30 03:38:18 | 000,002,206 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2011/07/30 03:36:45 | 000,000,498 | ---- | M] () -- D:\WINDOWS\tasks\1-Klick-Wartung.job
[2011/07/29 18:58:41 | 000,125,952 | ---- | M] (Lindholm Astor Wightman Tektronix) -- D:\Dokumente und Einstellungen\JensRall\Anwendungsdaten\jashla.exe
[2011/07/29 17:30:51 | 000,081,191 | ---- | M] () -- D:\WINDOWS\System32\nvapps.xml
[2011/07/29 02:15:32 | 001,749,046 | ---- | M] () -- D:\Dokumente und Einstellungen\JensRall\Desktop\28.7.11 96W.pdf
[2011/07/27 18:37:32 | 003,686,454 | ---- | M] () -- D:\WINDOWS\wallpaper.bmp
[2011/07/27 17:08:45 | 000,237,924 | ---- | M] () -- D:\Dokumente und Einstellungen\JensRall\Eigene Dateien\bigstockphoto_African_Beauty____1204661.jpg
[2011/07/12 11:47:49 | 000,002,513 | ---- | M] () -- D:\Dokumente und Einstellungen\JensRall\Desktop\Microsoft Excel.lnk
[4 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[3 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
[2 D:\*.tmp files -> D:\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011/07/29 02:14:44 | 001,749,046 | ---- | C] () -- D:\Dokumente und Einstellungen\JensRall\Desktop\28.7.11 96W.pdf
[2011/07/27 17:08:44 | 000,237,924 | ---- | C] () -- D:\Dokumente und Einstellungen\JensRall\Eigene Dateien\bigstockphoto_African_Beauty____1204661.jpg
[2011/01/04 11:22:16 | 000,106,910 | ---- | C] () -- D:\WINDOWS\hpqins05.dat.temp
[2011/01/04 09:44:38 | 000,078,183 | ---- | C] () -- D:\WINDOWS\hpqins05.dat
[2010/11/09 18:22:45 | 000,010,263 | ---- | C] () -- D:\Dokumente und Einstellungen\JensRall\Telekommunikation Rall_JensRall_elster_2048.pfx
[2010/10/22 08:06:17 | 000,000,000 | ---- | C] () -- D:\Dokumente und Einstellungen\Gast\Ÿ9Ÿ9
[2010/10/20 07:35:22 | 000,000,000 | ---- | C] () -- D:\Dokumente und Einstellungen\JensRall\Ÿ9Ÿ9
[2010/09/04 00:59:00 | 000,000,664 | ---- | C] () -- D:\WINDOWS\System32\d3d9caps.dat
[2010/07/26 13:21:59 | 000,000,063 | ---- | C] () -- D:\WINDOWS\wininit.ini
[2010/07/26 08:34:36 | 000,162,304 | ---- | C] () -- D:\WINDOWS\System32\ztvunrar36.dll
[2010/07/26 08:34:36 | 000,153,088 | ---- | C] () -- D:\WINDOWS\System32\UNRAR3.dll
[2010/07/26 08:34:36 | 000,077,312 | ---- | C] () -- D:\WINDOWS\System32\ztvunace26.dll
[2010/07/26 08:34:36 | 000,075,264 | ---- | C] () -- D:\WINDOWS\System32\unacev2.dll
[2010/07/17 14:38:47 | 000,000,000 | ---- | C] () -- D:\Dokumente und Einstellungen\JensRall\Ÿ;Ÿ;
[2010/07/15 11:26:37 | 000,000,137 | ---- | C] () -- D:\Dokumente und Einstellungen\Gast\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2010/05/23 15:22:08 | 000,000,337 | ---- | C] () -- D:\WINDOWS\SIERRA.INI
[2009/11/20 13:09:02 | 000,067,216 | ---- | C] () -- D:\WINDOWS\K_DEBRIS.EXE
[2009/10/02 01:18:26 | 000,000,234 | ---- | C] () -- D:\WINDOWS\PrnHlpLogConfig.ini
[2009/10/02 01:18:26 | 000,000,214 | ---- | C] () -- D:\WINDOWS\HP_InstantSHareJPG.ini
[2009/10/02 01:18:25 | 000,000,217 | ---- | C] () -- D:\WINDOWS\HP_IZClosingDiscErrorPatch.ini
[2009/10/02 01:18:17 | 000,000,227 | ---- | C] () -- D:\WINDOWS\HP_CounterReport_Update_HPSU.ini
[2009/10/02 01:18:16 | 000,000,214 | ---- | C] () -- D:\WINDOWS\HP_48BitScanUpdatePatch.ini
[2009/09/30 16:00:46 | 000,179,727 | ---- | C] () -- D:\WINDOWS\hpoins27.dat
[2009/09/30 16:00:46 | 000,000,932 | ---- | C] () -- D:\WINDOWS\hpomdl27.dat
[2009/09/19 09:56:50 | 000,000,017 | ---- | C] () -- D:\WINDOWS\Missing.ini
[2009/08/25 17:33:11 | 000,000,560 | ---- | C] () -- D:\Dokumente und Einstellungen\JensRall\Anwendungsdaten\ViewerApp.dat
[2009/08/25 16:22:57 | 000,003,654 | ---- | C] () -- D:\WINDOWS\System32\drivers\Sonyhcp.dll
[2009/03/09 09:41:03 | 000,000,221 | ---- | C] () -- D:\WINDOWS\NCLogConfig.ini
[2009/03/06 10:31:13 | 000,111,932 | ---- | C] () -- D:\WINDOWS\System32\EPPICPrinterDB.dat
[2009/03/06 10:31:13 | 000,031,053 | ---- | C] () -- D:\WINDOWS\System32\EPPICPattern131.dat
[2009/03/06 10:31:13 | 000,027,417 | ---- | C] () -- D:\WINDOWS\System32\EPPICPattern121.dat
[2009/03/06 10:31:13 | 000,026,154 | ---- | C] () -- D:\WINDOWS\System32\EPPICPattern1.dat
[2009/03/06 10:31:13 | 000,024,903 | ---- | C] () -- D:\WINDOWS\System32\EPPICPattern3.dat
[2009/03/06 10:31:13 | 000,021,390 | ---- | C] () -- D:\WINDOWS\System32\EPPICPattern5.dat
[2009/03/06 10:31:13 | 000,020,148 | ---- | C] () -- D:\WINDOWS\System32\EPPICPattern2.dat
[2009/03/06 10:31:13 | 000,011,811 | ---- | C] () -- D:\WINDOWS\System32\EPPICPattern4.dat
[2009/03/06 10:31:13 | 000,004,943 | ---- | C] () -- D:\WINDOWS\System32\EPPICPattern6.dat
[2009/03/06 10:31:13 | 000,001,146 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_DU.dat
[2009/03/06 10:31:13 | 000,001,139 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_PT.dat
[2009/03/06 10:31:13 | 000,001,139 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_BP.dat
[2009/03/06 10:31:13 | 000,001,136 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_ES.dat
[2009/03/06 10:31:13 | 000,001,129 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_FR.dat
[2009/03/06 10:31:13 | 000,001,129 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_CF.dat
[2009/03/06 10:31:13 | 000,001,120 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_IT.dat
[2009/03/06 10:31:13 | 000,001,107 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_GE.dat
[2009/03/06 10:31:13 | 000,001,104 | ---- | C] () -- D:\WINDOWS\System32\EPPICPresetData_EN.dat
[2009/03/06 10:31:13 | 000,000,097 | ---- | C] () -- D:\WINDOWS\System32\PICSDK.ini
[2009/03/06 10:30:08 | 000,000,025 | ---- | C] () -- D:\WINDOWS\CDE D78DEFGIPS.ini
[2008/12/10 17:53:45 | 000,113,280 | ---- | C] () -- D:\WINDOWS\hpoins07.dat.temp
[2008/09/17 01:26:51 | 000,021,124 | ---- | C] () -- D:\WINDOWS\hpomdl07.dat.temp
[2008/09/14 15:21:45 | 001,617,920 | ---- | C] () -- D:\WINDOWS\System32\nwiz.exe
[2008/09/14 15:21:44 | 001,662,976 | ---- | C] () -- D:\WINDOWS\System32\nvwdmcpl.dll
[2008/09/14 15:21:44 | 001,019,904 | ---- | C] () -- D:\WINDOWS\System32\nvwimg.dll
[2008/09/14 15:21:43 | 000,466,944 | ---- | C] () -- D:\WINDOWS\System32\nvshell.dll
[2008/09/14 15:21:42 | 000,286,720 | ---- | C] () -- D:\WINDOWS\System32\nvnt4cpl.dll
[2008/09/14 15:21:41 | 001,470,464 | ---- | C] () -- D:\WINDOWS\System32\nview.dll
[2008/09/14 15:21:41 | 001,339,392 | ---- | C] () -- D:\WINDOWS\System32\nvdspsch.exe
[2008/09/14 15:21:41 | 000,581,632 | ---- | C] () -- D:\WINDOWS\System32\nvhwvid.dll
[2008/09/14 15:21:36 | 000,442,368 | ---- | C] () -- D:\WINDOWS\System32\nvappbar.exe
[2008/09/14 15:21:36 | 000,196,608 | ---- | C] () -- D:\WINDOWS\System32\nvapi.dll
[2008/09/14 15:21:35 | 000,425,984 | ---- | C] () -- D:\WINDOWS\System32\keystone.exe
[2008/09/14 05:23:33 | 000,000,000 | ---- | C] () -- D:\WINDOWS\nsreg.dat
[2008/09/13 02:52:41 | 000,000,403 | ---- | C] () -- D:\WINDOWS\ODBC.INI
[2008/09/12 17:11:59 | 000,019,968 | ---- | C] () -- D:\Dokumente und Einstellungen\JensRall\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008/09/12 16:00:17 | 000,000,141 | ---- | C] () -- D:\Dokumente und Einstellungen\JensRall\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008/09/12 15:37:58 | 000,112,841 | ---- | C] () -- D:\WINDOWS\hpoins07.dat
[2008/09/12 15:37:58 | 000,021,124 | ---- | C] () -- D:\WINDOWS\hpomdl07.dat
[2008/09/12 13:43:22 | 000,004,161 | ---- | C] () -- D:\WINDOWS\ODBCINST.INI
[2008/09/12 13:42:22 | 000,149,992 | ---- | C] () -- D:\WINDOWS\System32\FNTCACHE.DAT
[2008/09/12 12:56:18 | 000,002,048 | --S- | C] () -- D:\WINDOWS\bootstat.dat
[2008/09/12 12:51:35 | 000,021,740 | ---- | C] () -- D:\WINDOWS\System32\emptyregdb.dat
[2007/08/16 09:17:50 | 000,143,360 | ---- | C] () -- D:\WINDOWS\System32\nsldap32v50.dll
[2005/12/21 10:57:04 | 000,024,576 | ---- | C] () -- D:\WINDOWS\System32\nsldappr32v50.dll
[2005/12/21 10:54:34 | 000,040,960 | ---- | C] () -- D:\WINDOWS\System32\nsldapssl32v50.dll
[2004/08/03 19:12:38 | 000,001,804 | ---- | C] () -- D:\WINDOWS\System32\dcache.bin
[2004/08/02 08:20:40 | 000,004,569 | ---- | C] () -- D:\WINDOWS\System32\secupd.dat
[2001/08/23 08:00:00 | 013,107,200 | ---- | C] () -- D:\WINDOWS\System32\oembios.bin
[2001/08/23 08:00:00 | 000,673,088 | ---- | C] () -- D:\WINDOWS\System32\mlang.dat
[2001/08/23 08:00:00 | 000,391,000 | ---- | C] () -- D:\WINDOWS\System32\perfh007.dat
[2001/08/23 08:00:00 | 000,380,350 | ---- | C] () -- D:\WINDOWS\System32\perfh009.dat
[2001/08/23 08:00:00 | 000,272,128 | ---- | C] () -- D:\WINDOWS\System32\perfi009.dat
[2001/08/23 08:00:00 | 000,269,480 | ---- | C] () -- D:\WINDOWS\System32\perfi007.dat
[2001/08/23 08:00:00 | 000,218,003 | ---- | C] () -- D:\WINDOWS\System32\dssec.dat
[2001/08/23 08:00:00 | 000,063,580 | ---- | C] () -- D:\WINDOWS\System32\perfc007.dat
[2001/08/23 08:00:00 | 000,052,764 | ---- | C] () -- D:\WINDOWS\System32\perfc009.dat
[2001/08/23 08:00:00 | 000,046,258 | ---- | C] () -- D:\WINDOWS\System32\mib.bin
[2001/08/23 08:00:00 | 000,034,478 | ---- | C] () -- D:\WINDOWS\System32\perfd007.dat
[2001/08/23 08:00:00 | 000,028,626 | ---- | C] () -- D:\WINDOWS\System32\perfd009.dat
[2001/08/23 08:00:00 | 000,004,463 | ---- | C] () -- D:\WINDOWS\System32\oembios.dat
[2001/08/23 08:00:00 | 000,000,741 | ---- | C] () -- D:\WINDOWS\System32\noise.dat
[2001/07/06 09:30:00 | 000,003,254 | ---- | C] () -- D:\WINDOWS\System32\HPTCPMON.INI
[1999/01/22 14:46:58 | 000,065,536 | ---- | C] () -- D:\WINDOWS\System32\MSRTEDIT.DLL
[1998/03/22 08:50:02 | 000,010,240 | ---- | C] () -- D:\WINDOWS\System32\vidx16.dll
========== LOP Check ==========
[2011/01/04 12:48:03 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
[2010/10/03 13:17:28 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\elsterformular
[2010/05/08 09:39:56 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\StarMoney 7.0
[2008/09/14 04:06:35 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online
[2008/09/14 13:28:51 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Teleca
[2010/07/26 11:26:13 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2008/10/20 00:08:11 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2009/03/06 10:37:26 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\UDL
[2011/07/30 03:36:45 | 000,000,498 | ---- | M] () -- D:\WINDOWS\Tasks\1-Klick-Wartung.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 122 bytes -> D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A8ADE5D8
@Alternate Data Stream - 121 bytes -> D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:DFC5A2B2
@Alternate Data Stream - 102 bytes -> D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:CB0AACC9
< End of report > --- --- --- |