Trojaner-Board - Achtung! Aus Sicherheitsgründen wurde ihr Windowssystem blockiert. Trojaner

Otl
[spoiler ]OTL Logfile:

Code:

OTL logfile created on: 25.01.2012 18:22:46 - Run 1

OTL by OldTimer - Version 3.2.31.0     Folder = C:\Dokumente und Einstellungen\Administrator.HOME-PC\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.5512)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

2,00 Gb Total Physical Memory | 1,53 Gb Available Physical Memory | 76,28% Memory free

3,85 Gb Paging File | 3,57 Gb Available in Paging File | 92,62% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Programme

Drive C: | 117,19 Gb Total Space | 17,80 Gb Free Space | 15,19% Space Free | Partition Type: NTFS

Drive D: | 87,89 Gb Total Space | 11,29 Gb Free Space | 12,84% Space Free | Partition Type: NTFS

Drive E: | 27,80 Gb Total Space | 1,50 Gb Free Space | 5,40% Space Free | Partition Type: NTFS

 

Computer Name: STEPHAQN | User Name: Administrator | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2012.01.25 18:14:02 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Desktop\24960-OTL.exe

PRC - [2011.11.10 07:04:50 | 000,370,504 | ---- | M] (Splashtop Inc.) -- C:\Programme\Splashtop\Splashtop Software Updater\SSUService.exe

PRC - [2011.09.09 10:13:20 | 000,518,472 | ---- | M] (Splashtop Inc.) -- C:\Programme\Splashtop\Splashtop Remote\Server\SRService.exe

PRC - [2011.08.15 16:18:14 | 001,955,208 | ---- | M] (LogMeIn Inc.) -- C:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe

PRC - [2011.08.15 16:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) -- C:\Programme\LogMeIn Hamachi\hamachi-2.exe

PRC - [2011.02.18 16:37:16 | 000,037,664 | ---- | M] (Apple Inc.) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe

PRC - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () -- C:\Programme\ICQ6Toolbar\ICQ Service.exe

PRC - [2010.10.29 14:49:28 | 000,249,064 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe

PRC - [2010.04.30 12:56:04 | 000,160,424 | R--- | M] (4G Systems GmbH & Co. KG) -- C:\WINDOWS.0\starter4g.exe

PRC - [2010.04.30 12:55:54 | 000,145,064 | R--- | M] (4G Systems GmbH & Co. KG) -- C:\WINDOWS.0\service4g.exe

PRC - [2010.04.12 18:03:44 | 000,329,168 | ---- | M] () -- C:\Programme\XSManager\WTGService.exe

PRC - [2009.10.11 20:22:14 | 000,207,360 | ---- | M] (AVM Berlin) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Apps\2.0\6TQBAN4L.25E\2VP395VW.0D2\frit..tion_f8d772dfbb3f7453_0002.0001_0db5bf169ed5c0c1\fritzbox-usb-fernanschluss.exe

PRC - [2008.04.23 02:08:13 | 000,483,328 | ---- | M] (Adobe Systems Inc.) -- C:\Programme\Adobe\Acrobat 7.0\Distillr\acrotray.exe

PRC - [2008.04.15 02:40:39 | 000,032,256 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Adobe\Acrobat 7.0\Acrobat\Acrobat_sl.exe

PRC - [2008.04.14 06:52:46 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS.0\explorer.exe

PRC - [2008.04.14 06:52:46 | 000,059,904 | ---- | M] (Корпорация Майкрософт) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Anwendungsdaten\Mozilla\Firefox\firefox.exe

PRC - [2007.11.05 14:28:10 | 000,204,915 | ---- | M] (Option) -- C:\Programme\T-Mobile\web'n'walk Manager\GtDetectSc.exe

PRC - [2007.03.02 16:55:30 | 000,278,608 | ---- | M] () -- C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

PRC - [2005.08.24 01:29:52 | 000,118,272 | ---- | M] (TuneUp Software GmbH) -- C:\Programme\TuneUpUtilities2006\WinStylerThemeSvc.exe

PRC - [2003.03.20 07:21:00 | 001,855,488 | ---- | M] (C-Media Electronic Inc. (www.cmedia.com.tw)) -- C:\WINDOWS.0\mixer.exe

 

 
 ========== Modules (No Company Name) ==========

 

MOD - [2011.02.24 01:57:18 | 000,555,112 | ---- | M] () -- C:\Programme\NVIDIA Corporation\nView\nvShell.dll

MOD - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () -- C:\Programme\ICQ6Toolbar\ICQ Service.exe

MOD - [2010.09.16 16:18:47 | 000,539,648 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\b4dc4bd8534d90fbb7430926ad990cd9\PresentationFramework.Luna.ni.dll

MOD - [2010.09.16 16:18:05 | 014,320,128 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\9519494798a88867406b5755e1dbded6\PresentationFramework.ni.dll

MOD - [2010.09.16 16:17:47 | 012,428,800 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9a254c455892c02355ab0ab0f0727c5b\System.Windows.Forms.ni.dll

MOD - [2010.09.16 16:17:39 | 001,587,200 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Drawing\6978f2e90f13bc720d57fa6895c911e2\System.Drawing.ni.dll

MOD - [2010.09.16 16:17:38 | 001,800,704 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Deployment\df1efcbac5973454c608890f72eb994d\System.Deployment.ni.dll

MOD - [2010.09.16 16:17:34 | 012,213,248 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\PresentationCore\12dcb10b76012416357bdbb010fdaa97\PresentationCore.ni.dll

MOD - [2010.09.16 16:17:23 | 003,311,104 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\WindowsBase\df20e56b59b1b1a595af305ddc0777ba\WindowsBase.ni.dll

MOD - [2010.09.16 16:17:15 | 005,449,728 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Xml\36f3953f24d4f0b767bf172331ad6f3e\System.Xml.ni.dll

MOD - [2010.09.16 16:17:11 | 000,970,752 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb4cb21d14767292e079366a5d3d76cd\System.Configuration.ni.dll

MOD - [2010.09.16 16:17:08 | 007,867,392 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c8041330ad90929d\System.ni.dll

MOD - [2010.09.16 16:17:01 | 011,485,184 | ---- | M] () -- C:\WINDOWS.0\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\mscorlib.ni.dll

MOD - [2010.09.16 16:04:55 | 000,249,856 | ---- | M] () -- C:\WINDOWS.0\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll

MOD - [2010.09.16 16:04:26 | 000,413,696 | ---- | M] () -- C:\WINDOWS.0\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.Deployment.resources.dll

MOD - [2010.04.12 18:03:44 | 000,329,168 | ---- | M] () -- C:\Programme\XSManager\WTGService.exe

MOD - [2009.10.11 20:22:03 | 000,368,640 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Apps\2.0\6TQBAN4L.25E\2VP395VW.0D2\frit..tion_f8d772dfbb3f7453_0002.0001_0db5bf169ed5c0c1\managedupnp.dll

MOD - [2008.04.14 06:53:08 | 000,056,832 | ---- | M] () -- C:\WINDOWS.0\system32\MSDvbNP.ax

MOD - [2008.04.14 06:53:08 | 000,033,280 | ---- | M] () -- C:\WINDOWS.0\system32\PsisRndr.ax

MOD - [2008.04.14 06:52:24 | 000,363,520 | ---- | M] () -- C:\WINDOWS.0\system32\PsisDecd.dll

MOD - [2008.04.14 06:52:18 | 000,014,336 | ---- | M] () -- C:\WINDOWS.0\system32\msdmo.dll

MOD - [2007.03.02 16:55:30 | 000,278,608 | ---- | M] () -- C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe

MOD - [2007.03.02 16:55:16 | 000,241,750 | ---- | M] () -- C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapEngine.dll

MOD - [2006.01.12 21:20:48 | 001,265,664 | ---- | M] () -- C:\Programme\Adobe\Acrobat 7.0\Distillr\adistres.DEU

MOD - [2006.01.12 21:20:26 | 000,019,968 | ---- | M] () -- C:\Programme\Adobe\Acrobat 7.0\Distillr\acrotray.DEU

MOD - [2006.01.12 21:13:46 | 000,019,968 | ---- | M] () -- C:\Programme\Adobe\Acrobat 7.0\Distillr\acrotray.FRA

MOD - [2005.10.19 10:56:28 | 000,125,952 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll

MOD - [2005.08.24 01:29:52 | 000,076,288 | ---- | M] () -- C:\Programme\TuneUpUtilities2006\WinStylerThemeHelper.dll

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - File not found [On_Demand | Stopped] --  -- (ServiceLayer)

SRV - File not found [On_Demand | Stopped] --  -- (McComponentHostService)

SRV - [2011.11.10 07:04:50 | 000,370,504 | ---- | M] (Splashtop Inc.) [Auto | Running] -- C:\Programme\Splashtop\Splashtop Software Updater\SSUService.exe -- (SSUService)

SRV - [2011.09.09 10:13:20 | 000,518,472 | ---- | M] (Splashtop Inc.) [Auto | Running] -- C:\Programme\Splashtop\Splashtop Remote\Server\SRService.exe -- (SplashtopRemoteService)

SRV - [2011.08.15 16:18:10 | 001,361,288 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Programme\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)

SRV - [2011.02.18 16:37:16 | 000,037,664 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)

SRV - [2010.11.21 10:49:24 | 000,247,608 | ---- | M] () [Auto | Running] -- C:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)

SRV - [2010.04.30 12:55:54 | 000,145,064 | R--- | M] (4G Systems GmbH & Co. KG) [Auto | Running] -- C:\WINDOWS.0\service4g.exe -- (XS Stick Service)

SRV - [2010.04.12 18:03:44 | 000,329,168 | ---- | M] () [Auto | Running] -- C:\Programme\XSManager\WTGService.exe -- (WTGService)

SRV - [2009.04.22 22:45:34 | 000,098,488 | ---- | M] (SiSoftware) [On_Demand | Stopped] -- C:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\RpcAgentSrv.exe -- (SandraAgentSrv)

SRV - [2009.04.08 19:54:12 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)

SRV - [2009.04.05 12:28:54 | 000,072,704 | ---- | M] (Adobe Systems) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe -- (Adobe LM Service)

SRV - [2007.11.05 14:28:10 | 000,204,915 | ---- | M] (Option) [Auto | Running] -- C:\Programme\T-Mobile\web'n'walk Manager\GtDetectSc.exe -- (GtDetectSc)

SRV - [2007.03.02 16:55:30 | 000,278,608 | ---- | M] () [Auto | Running] -- C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe -- (CLCapSvc) CyberLink Background Capture Service (CBCS)

SRV - [2007.03.02 16:55:30 | 000,110,677 | ---- | M] () [Auto | Stopped] -- C:\Programme\CyberLink\PowerCinema\Kernel\TV\CLSched.exe -- (CLSched) CyberLink Task Scheduler (CTS)

SRV - [2006.06.01 20:06:00 | 000,089,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)

SRV - [2005.08.24 01:29:52 | 000,118,272 | ---- | M] (TuneUp Software GmbH) [Auto | Running] -- C:\Programme\TuneUpUtilities2006\WinStylerThemeSvc.exe -- (TUWinStylerThemeSvc)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - [2011.11.08 18:43:59 | 000,103,424 | ---- | M] (Mobile Connector) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\cmnsusbser.sys -- (cmnsusbser)

DRV - [2011.10.09 19:31:48 | 000,101,248 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\avmaudio.sys -- (avmaudio)

DRV - [2011.09.16 07:24:26 | 000,070,400 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lgandnetndis.sys -- (andnetndis)

DRV - [2011.02.14 02:42:36 | 000,020,864 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lgusbdiag.sys -- (UsbDiag)

DRV - [2011.02.14 02:42:34 | 000,025,216 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lgusbmodem.sys -- (USBModem)

DRV - [2011.02.14 02:42:32 | 000,013,056 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lgusbbus.sys -- (usbbus)

DRV - [2010.12.07 14:23:00 | 000,025,088 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lgandmodem.sys -- (ANDModem)

DRV - [2010.12.07 14:23:00 | 000,020,736 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lganddiag.sys -- (AndDiag)

DRV - [2010.12.07 14:23:00 | 000,020,096 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lgandgps.sys -- (AndGps)

DRV - [2010.12.07 14:22:58 | 000,014,336 | ---- | M] (LG Electronics Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lgandbus.sys -- (Andbus)

DRV - [2010.08.02 16:19:22 | 000,025,728 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\lgandadb.sys -- (androidusb)

DRV - [2010.07.05 21:50:42 | 000,029,000 | ---- | M] (Senstic) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\camsource.sys -- (avshws)

DRV - [2010.03.02 21:57:06 | 000,031,304 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\senaudio.sys -- (PocketAudio) Senstic PocketAudio (WDM)

DRV - [2010.02.03 15:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\hamachi.sys -- (hamachi)

DRV - [2009.10.11 20:22:05 | 000,101,248 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\avmaura.sys -- (avmaura)

DRV - [2009.06.19 15:59:34 | 000,019,712 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\motccgp.sys -- (motccgp)

DRV - [2009.05.08 10:56:12 | 000,042,752 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\motodrv.sys -- (MotDev)

DRV - [2009.04.12 22:51:26 | 000,026,216 | ---- | M] (SiSoftware) [Kernel | On_Demand | Stopped] -- C:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\WNt500x86\sandra.sys -- (SANDRA)

DRV - [2009.04.07 13:36:34 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\Drivers\sptd.sys -- (sptd)

DRV - [2009.01.29 16:18:00 | 000,008,320 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\motccgpfl.sys -- (motccgpfl)

DRV - [2009.01.29 16:15:54 | 000,023,680 | ---- | M] (Motorola) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\motmodem.sys -- (motmodem)

DRV - [2008.04.14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\gameenum.sys -- (gameenum)

DRV - [2008.04.13 23:16:24 | 000,015,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\MPE.sys -- (MPE)

DRV - [2008.01.03 15:10:16 | 000,105,856 | R--- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)

DRV - [2007.07.09 14:17:36 | 000,095,744 | ---- | M] (Option NV) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\Gt51Ip.sys -- (GT72NDISIPXP)

DRV - [2007.06.26 13:38:46 | 000,051,968 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\gt72ubus.sys -- (GT72UBUS)

DRV - [2007.05.23 04:20:58 | 000,036,496 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\btcusb.sys -- (Btcsrusb)

DRV - [2007.04.26 10:33:52 | 001,482,048 | R--- | M] (C-Media Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\cmuda3.sys -- (cmuda3)

DRV - [2007.03.30 13:38:14 | 000,008,064 | ---- | M] (Option N.V.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\gtptser.sys -- (GTPTSER)

DRV - [2007.02.22 11:15:56 | 000,137,216 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\nmwcd.sys -- (nmwcd)

DRV - [2007.02.22 11:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\nmwcdcm.sys -- (nmwcdcm)

DRV - [2007.02.22 11:15:14 | 000,012,288 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\nmwcdcj.sys -- (nmwcdcj)

DRV - [2007.02.22 11:15:14 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\nmwcdc.sys -- (nmwcdc)

DRV - [2007.01.26 00:00:00 | 000,265,088 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\fwlanusb.sys -- (FWLANUSB)

DRV - [2007.01.26 00:00:00 | 000,004,352 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\avmeject.sys -- (avmeject)

DRV - [2007.01.23 14:44:00 | 000,020,496 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\L8042Kbd.sys -- (L8042Kbd)

DRV - [2006.11.02 07:00:08 | 000,039,368 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\winusb.sys -- (WinUSB)

DRV - [2006.09.24 14:28:46 | 000,005,248 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | Boot | Running] -- C:\WINDOWS.0\system32\speedfan.sys -- (speedfan)

DRV - [2006.03.27 16:53:28 | 000,167,808 | ---- | M] (NETGEAR Inc.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\wg111v2.sys -- (RTLWUSB)

DRV - [2005.11.03 15:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x)

DRV - [2005.09.02 15:43:54 | 000,827,008 | R--- | M] (Philips Semiconductors GmbH) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\3xHybrid.sys -- (3xHybrid)

DRV - [2005.08.10 13:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)

DRV - [2005.07.20 14:35:00 | 000,036,480 | ---- | M] (Motorola Inc) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\P2k.sys -- (P2k)

DRV - [2005.05.23 19:29:00 | 000,392,448 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\snpstd2.sys -- (snpstd2)

DRV - [2005.05.16 14:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS.0\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)

DRV - [2004.05.17 11:21:54 | 000,017,280 | ---- | M] (Intellon, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS.0\system32\plcndis5.sys -- (PLCNDIS5)

DRV - [2002.11.18 08:51:40 | 000,377,358 | ---- | M] (C-Media Inc) [Kernel | On_Demand | Running] -- C:\WINDOWS.0\system32\drivers\cmaudio.sys -- (cmpci) C-Media PCI Audio Driver (WDM)

DRV - [2002.10.02 07:57:12 | 000,013,532 | ---- | M] (Windows (R) 2000 DDK provider) [Kernel | On_Demand | Stopped] -- C:\WINDOWS.0\system32\drivers\SjyPkt.sys -- (SjyPkt)

DRV - [1996.04.03 20:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS.0\system32\giveio.sys -- (giveio)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.haokan123.com/

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS.0\system32\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.haokan123.com/

IE - HKCU\..\URLSearchHook:  - No CLSID value found

IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)

IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

 
 ========== FireFox ==========

 

FF - prefs.js..browser.search.defaultenginename: "ICQ Search"

FF - prefs.js..browser.search.selectedEngine: "Google"

FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/ig"

FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.8.20100408.6

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004

FF - prefs.js..extensions.enabledItems: orbit_ffext@orbitdownloader:2.02

FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1

FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7

FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:2.7.2.0

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24

FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.3.1&q="

 

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS.0\system32\Macromed\Flash\NPSWF32.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS.0\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Programme\iTunes\Mozilla Plugins\npitunes.dll ()

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Web Player\npdivx32.dll (DivX,Inc.)

FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0:  File not found

FF - HKLM\Software\MozillaPlugins\@garmin.com/GpsControl: C:\Programme\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINDOWS.0\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player:  File not found

FF - HKCU\Software\MozillaPlugins\@movenetworks.com/Quantum Media Player:  File not found

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.01.09 16:42:53 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.10.12 19:59:05 | 000,000,000 | ---D | M]

 

[2009.04.07 13:40:31 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Extensions

[2012.01.23 16:13:10 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\extensions

[2012.01.08 15:36:41 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}

[2010.10.25 19:36:35 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}

[2012.01.23 16:13:10 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

[2011.05.08 11:22:45 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\extensions\engine@conduit.com

[2009.09.16 18:52:55 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\extensions\moveplayer@movenetworks.com

[2011.11.29 18:02:22 | 000,000,933 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\11-suche.xml

[2011.11.29 18:02:22 | 000,002,419 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\englische-ergebnisse.xml

[2011.11.29 18:02:22 | 000,010,525 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\gmx-suche.xml

[2012.01.23 20:15:55 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-1.xml

[2011.03.06 17:13:32 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-2.xml

[2011.03.27 10:39:20 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-3.xml

[2011.04.30 11:59:58 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-4.xml

[2011.05.06 19:48:35 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-5.xml

[2011.05.14 16:39:44 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-6.xml

[2011.06.25 13:06:10 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-7.xml

[2011.08.18 19:50:22 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-8.xml

[2011.08.31 20:26:45 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin-9.xml

[2011.03.30 14:14:34 | 000,001,042 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\icqplugin.xml

[2011.11.29 18:02:22 | 000,002,457 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\lastminute.xml

[2011.11.29 18:02:22 | 000,005,508 | ---- | M] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\Mozilla\Firefox\Profiles\00gtti0s.default\searchplugins\webde-suche.xml

[2011.11.13 21:27:06 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions

[2011.08.29 23:46:24 | 000,000,000 | ---D | M] (Click to call with Skype) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\ADMINISTRATOR.HOME-PC\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\00GTTI0S.DEFAULT\EXTENSIONS\{DC572301-7619-498C-A57D-39143191B318}.XPI

() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\ADMINISTRATOR.HOME-PC\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\00GTTI0S.DEFAULT\EXTENSIONS\TOOLBAR@WEB.DE.XPI

[2009.07.17 10:55:13 | 000,000,000 | ---D | M] (Orbit Downloader Firefox Integration) -- C:\PROGRAMME\ORBITDOWNLOADER\ADDONS\ORBITFF

[2012.01.09 16:42:53 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll

[2011.02.02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll

[2010.07.28 10:20:04 | 000,124,200 | ---- | M] (DeLorme) -- C:\Programme\mozilla firefox\plugins\nppnplugin.dll

[2011.07.11 22:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Programme\mozilla firefox\plugins\npwachk.dll

[2011.10.07 16:25:25 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml

[2011.10.07 16:25:25 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml

[2011.10.07 16:25:25 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml

[2011.10.07 16:25:25 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml

[2011.10.07 16:25:25 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml

[2011.10.07 16:25:25 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2009.09.22 16:40:58 | 000,000,853 | ---- | M]) - C:\WINDOWS.0\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O1 - Hosts: 127.0.0.1                                activate.adobe.com

O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Programme\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)

O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)

O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)

O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)

O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)

O3 - HKLM\..\Toolbar: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Programme\Orbitdownloader\GrabPro.dll ()

O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)

O3 - HKCU\..\Toolbar\WebBrowser: (Grab Pro) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Programme\Orbitdownloader\GrabPro.dll ()

O4 - HKLM..\Run: []  File not found

O4 - HKLM..\Run: [Acrobat Assistant 7.0] C:\Programme\Adobe\Acrobat 7.0\Distillr\Acrotray.exe (Adobe Systems Inc.)

O4 - HKLM..\Run: [C-Media Mixer] C:\WINDOWS.0\mixer.exe (C-Media Electronic Inc. (www.cmedia.com.tw))

O4 - HKLM..\Run: [CmPCIaudio] RunDll32 CMICNFG3.cpl,CMICtrlWnd File not found

O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found

O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)

O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS.0\System32\NvCpl.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS.0\System32\NvMcTray.dll (NVIDIA Corporation)

O4 - HKLM..\Run: [starter4g] C:\WINDOWS.0\starter4g.exe (4G Systems GmbH & Co. KG)

O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

O4 - HKCU..\Run: [AVMUSBFernanschluss] C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Apps\2.0\6TQBAN4L.25E\2VP395VW.0D2\frit..tion_f8d772dfbb3f7453_0002.0001_0db5bf169ed5c0c1\AVMAutoStart.exe (AVM Berlin)

O4 - HKCU..\Run: [Firefox helper] C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Anwendungsdaten\Mozilla\Firefox\firefox.exe (Корпорация Майкрософт)

O4 - Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Autostart\Adobe Acrobat Speed Launcher.lnk = C:\WINDOWS.0\Installer\{AC76BA86-1033-F400-7760-000000000002}\SC_Acrobat.exe ()

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 1

O8 - Extra context menu item: &Download by Orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)

O8 - Extra context menu item: &Grab video by Orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)

O8 - Extra context menu item: Ausgewählte Verknüpfungen in Adobe PDF konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Ausgewählte Verknüpfungen in vorhandene PDF-Datei konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Auswahl in Adobe PDF konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Auswahl in vorhandene PDF-Datei konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert link target to Adobe PDF - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert link target to existing PDF - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert selected links to Adobe PDF - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert selected links to existing PDF - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert selection to Adobe PDF - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert selection to existing PDF - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert to Adobe PDF - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Convert to existing PDF - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Do&wnload selected by Orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)

O8 - Extra context menu item: Down&load all by Orbit - C:\Programme\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)

O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()

O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()

O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: In vorhandene PDF-Datei konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Verknüpfungsziel in Adobe PDF konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O8 - Extra context menu item: Verknüpfungsziel in vorhandene PDF-Datei konvertieren - C:\Programme\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)

O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)

O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)

O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{36C4384D-8D9A-4433-BA7A-38AD5C0F5CDC}: NameServer = 192.168.178.1

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)

O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)

O18 - Protocol\Filter\text/xml {807553E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE11\MSOXMLMF.DLL (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS.0\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (C:\WINDOWS.0\system32\userinit.exe) -C:\WINDOWS.0\system32\userinit.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2009.04.05 11:19:45 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O33 - MountPoints2\{31a87768-0a31-11e1-9db3-0019668e3bbe}\Shell - "" = AutoRun

O33 - MountPoints2\{31a87768-0a31-11e1-9db3-0019668e3bbe}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{31a87768-0a31-11e1-9db3-0019668e3bbe}\Shell\AutoRun\command - "" = J:\autorun.exe

O33 - MountPoints2\{54a546fc-2e82-11de-abf0-0019668e3bbe}\Shell - "" = Autorun

O33 - MountPoints2\{54a546fc-2e82-11de-abf0-0019668e3bbe}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{54a546fc-2e82-11de-abf0-0019668e3bbe}\Shell\AutoRun\command - "" = C:\WINDOWS.0\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RECYCLER\S-1-9-90-100002473-100002232-100019806-1353.com f:\

O33 - MountPoints2\{54a546fc-2e82-11de-abf0-0019668e3bbe}\Shell\Open\command - "" = RECYCLER\S-1-9-90-100002473-100002232-100019806-1353.com f:\

O33 - MountPoints2\{654942e4-2dbd-11de-abc0-0019668e3bbe}\Shell\verb1\command - "" = desktop.exe

O33 - MountPoints2\{70f81c39-a9ee-11de-9853-0019668e3bbe}\Shell\autoPlay\commaND - "" = raue.cmd

O33 - MountPoints2\{70f81c39-a9ee-11de-9853-0019668e3bbe}\Shell\AutoRun\command - "" = raue.cmd

O33 - MountPoints2\{70f81c39-a9ee-11de-9853-0019668e3bbe}\Shell\ExploRE\CoMmANd - "" = raue.cmd

O33 - MountPoints2\{70f81c39-a9ee-11de-9853-0019668e3bbe}\Shell\open\COmmAnd - "" = raue.cmd

O33 - MountPoints2\{b5bb660c-e7f4-11de-98e7-0019668e3bbe}\Shell - "" = AutoRun

O33 - MountPoints2\{b5bb660c-e7f4-11de-98e7-0019668e3bbe}\Shell\AutoRun - "" = Auto&Play

O33 - MountPoints2\{b5bb660c-e7f4-11de-98e7-0019668e3bbe}\Shell\AutoRun\command - "" = J:\setup.exe AUTORUN=1

O34 - HKLM BootExecute: (autocheck autochk *)

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2012.01.25 18:16:17 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Desktop\24960-OTL.exe

[2012.01.04 00:32:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Startmenü\Programme\°²»úÍø

[2012.01.03 22:45:25 | 000,581,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS.0\System32\WinUSBCoInstaller.dll

[2010.07.09 18:10:09 | 000,061,440 | ---- | C] ( ) -- C:\WINDOWS.0\System32\csnpstd2.dll

[2010.07.09 18:10:09 | 000,036,864 | ---- | C] ( ) -- C:\WINDOWS.0\System32\vsnpstd2.dll

[2010.03.29 20:34:52 | 000,098,304 | ---- | C] ( ) -- C:\WINDOWS.0\System32\rsnpstd2.dll

[58 C:\WINDOWS.0\*.tmp files -> C:\WINDOWS.0\*.tmp -> ]

[3 C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\*.tmp -> ]

[2 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2012.01.25 18:17:49 | 000,002,323 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Autostart\Adobe Acrobat Speed Launcher.lnk

[2012.01.25 18:17:29 | 000,002,048 | --S- | M] () -- C:\WINDOWS.0\bootstat.dat

[2012.01.25 18:17:28 | 2146,750,464 | -HS- | M] () -- C:\hiberfil.sys

[2012.01.25 18:14:02 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Desktop\24960-OTL.exe

[2012.01.24 18:10:10 | 000,520,090 | ---- | M] () -- C:\WINDOWS.0\System32\perfh007.dat

[2012.01.24 18:10:10 | 000,496,094 | ---- | M] () -- C:\WINDOWS.0\System32\perfh009.dat

[2012.01.24 18:10:10 | 000,101,506 | ---- | M] () -- C:\WINDOWS.0\System32\perfc007.dat

[2012.01.24 18:10:10 | 000,084,578 | ---- | M] () -- C:\WINDOWS.0\System32\perfc009.dat

[2012.01.24 17:03:06 | 000,000,151 | ---- | M] () -- C:\WINDOWS.0\PhotoSnapViewer.INI

[2012.01.23 15:41:01 | 000,002,206 | ---- | M] () -- C:\WINDOWS.0\System32\wpa.dbl

[2012.01.20 17:16:32 | 000,000,408 | ---- | M] () -- C:\WINDOWS.0\tasks\1-Klick-Wartung.job

[2012.01.03 22:58:52 | 000,000,000 | -H-- | M] () -- C:\WINDOWS.0\System32\drivers\Msft_Kernel_WinUSB_01007.Wdf

[2012.01.03 21:56:55 | 000,000,423 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Dokumente\Verknüpfung mit Gemeinsame Dokumente.lnk

[2012.01.03 19:16:02 | 000,000,000 | -H-- | M] () -- C:\WINDOWS.0\System32\drivers\Msft_Kernel_lgandadb_01005.Wdf

[2012.01.03 17:31:44 | 000,002,413 | ---- | M] () -- C:\WINDOWS.0\System32\lgAxconfig.ini

[58 C:\WINDOWS.0\*.tmp files -> C:\WINDOWS.0\*.tmp -> ]

[3 C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\*.tmp -> ]

[2 C:\WINDOWS.0\System32\*.tmp files -> C:\WINDOWS.0\System32\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2012.01.25 18:17:28 | 2146,750,464 | -HS- | C] () -- C:\hiberfil.sys

[2012.01.03 22:58:52 | 000,000,000 | -H-- | C] () -- C:\WINDOWS.0\System32\drivers\Msft_Kernel_WinUSB_01007.Wdf

[2012.01.03 21:56:55 | 000,000,423 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Dokumente\Verknüpfung mit Gemeinsame Dokumente.lnk

[2012.01.03 19:24:20 | 000,002,323 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Startmenü\Programme\Autostart\Adobe Acrobat Speed Launcher.lnk

[2012.01.03 19:16:02 | 000,000,000 | -H-- | C] () -- C:\WINDOWS.0\System32\drivers\Msft_Kernel_lgandadb_01005.Wdf

[2011.11.06 20:10:08 | 000,000,600 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Anwendungsdaten\PUTTY.RND

[2011.10.22 08:39:02 | 000,053,248 | ---- | C] () -- C:\WINDOWS.0\System32\CommonDL.dll

[2011.10.22 08:39:02 | 000,002,413 | ---- | C] () -- C:\WINDOWS.0\System32\lgAxconfig.ini

[2011.10.10 19:39:35 | 000,103,509 | ---- | C] () -- C:\WINDOWS.0\hpoins04.dat.temp

[2011.10.10 19:39:35 | 000,017,176 | ---- | C] () -- C:\WINDOWS.0\hpomdl04.dat.temp

[2011.04.28 10:46:17 | 000,000,114 | ---- | C] () -- C:\WINDOWS.0\System32\nvUnsupRes.dat

[2011.04.28 01:22:14 | 000,097,360 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\Fwusb1b.bin

[2011.03.04 10:45:35 | 000,000,026 | ---- | C] () -- C:\WINDOWS.0\CMCDPLAY.INI

[2010.11.21 14:26:26 | 000,259,604 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrsdb0.bin

[2010.11.21 14:26:24 | 000,259,604 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrsdb1.bin

[2010.11.21 14:26:24 | 000,000,001 | ---- | C] () -- C:\WINDOWS.0\System32\nvdrssel.bin

[2010.11.21 14:26:02 | 002,116,894 | ---- | C] () -- C:\WINDOWS.0\System32\nvdata.bin

[2010.10.12 21:10:55 | 000,040,508 | -H-- | C] () -- C:\WINDOWS.0\System32\mlfcache.dat

[2010.09.06 17:04:09 | 000,000,010 | ---- | C] () -- C:\WINDOWS.0\WININIT.INI

[2010.07.09 18:10:09 | 000,392,448 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\snpstd2.sys

[2010.07.09 18:10:09 | 000,286,720 | ---- | C] () -- C:\WINDOWS.0\vsnpstd2.exe

[2010.07.09 18:10:09 | 000,053,248 | ---- | C] () -- C:\WINDOWS.0\System32\dsnpstd2.dll

[2010.07.09 18:10:09 | 000,015,541 | ---- | C] () -- C:\WINDOWS.0\snpstd2.ini

[2010.06.29 16:16:38 | 000,000,530 | ---- | C] () -- C:\WINDOWS.0\eReg.dat

[2010.06.28 14:31:28 | 000,000,263 | ---- | C] () -- C:\WINDOWS.0\game.ini

[2009.12.14 19:36:09 | 000,000,111 | ---- | C] () -- C:\WINDOWS.0\telephon.ini

[2009.12.08 18:26:56 | 000,010,240 | ---- | C] () -- C:\WINDOWS.0\System32\vidx16.dll

[2009.12.08 18:26:52 | 000,004,333 | ---- | C] () -- C:\WINDOWS.0\mixerdef.ini

[2009.12.08 18:26:18 | 000,039,279 | ---- | C] () -- C:\WINDOWS.0\cmijack.dat

[2009.12.08 18:26:18 | 000,028,165 | ---- | C] () -- C:\WINDOWS.0\cmijack.ini

[2009.12.08 18:26:17 | 000,023,041 | ---- | C] () -- C:\WINDOWS.0\cmaudio.dat

[2009.12.08 18:26:17 | 000,018,240 | ---- | C] () -- C:\WINDOWS.0\cmaudio.ini

[2009.12.08 18:26:12 | 000,000,411 | ---- | C] () -- C:\WINDOWS.0\CMISETUP.INI

[2009.12.06 12:17:50 | 000,000,056 | -H-- | C] () -- C:\WINDOWS.0\System32\ezsidmv.dat

[2009.12.01 17:51:52 | 000,005,259 | ---- | C] () -- C:\WINDOWS.0\Cmicnfgp.ini.cfg

[2009.12.01 17:51:50 | 000,000,582 | ---- | C] () -- C:\WINDOWS.0\cmudaxp.ini

[2009.11.28 13:38:55 | 000,000,038 | ---- | C] () -- C:\WINDOWS.0\popcinfot.dat

[2009.11.15 15:07:28 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\$_hpcst$.hpc

[2009.11.08 05:09:40 | 000,000,151 | ---- | C] () -- C:\WINDOWS.0\PhotoSnapViewer.INI

[2009.10.12 10:27:12 | 000,000,116 | ---- | C] () -- C:\WINDOWS.0\NeroDigital.ini

[2009.10.11 20:27:30 | 000,103,509 | ---- | C] () -- C:\WINDOWS.0\hpoins04.dat

[2009.10.11 20:27:30 | 000,017,176 | ---- | C] () -- C:\WINDOWS.0\hpomdl04.dat

[2009.09.18 12:20:58 | 000,033,533 | ---- | C] () -- C:\WINDOWS.0\System32\CoreVorbis-uninstall.exe

[2009.09.18 12:20:54 | 000,036,734 | ---- | C] () -- C:\WINDOWS.0\System32\OggDSuninst.exe

[2009.09.18 12:20:22 | 000,077,824 | ---- | C] () -- C:\WINDOWS.0\System32\MMSwitch.dll

[2009.09.18 12:20:22 | 000,040,960 | ---- | C] () -- C:\WINDOWS.0\System32\MMAVILNG.exe

[2009.08.23 16:20:19 | 000,004,981 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\mtbjfghn.xbe

[2009.07.09 13:25:23 | 000,000,065 | ---- | C] () -- C:\WINDOWS.0\FISHUI.INI

[2009.04.28 16:52:30 | 010,059,776 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\sandra.mda

[2009.04.20 09:57:33 | 000,036,864 | ---- | C] () -- C:\WINDOWS.0\System32\cmll10sx.dll

[2009.04.20 09:57:32 | 000,000,530 | ---- | C] () -- C:\WINDOWS.0\System32\tx13_ic.ini

[2009.04.19 16:20:46 | 000,000,406 | ---- | C] () -- C:\WINDOWS.0\ODBC.INI

[2009.04.18 16:49:53 | 000,022,328 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\PnkBstrK.sys

[2009.04.18 16:49:53 | 000,022,328 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Anwendungsdaten\PnkBstrK.sys

[2009.04.18 16:49:08 | 000,103,736 | ---- | C] () -- C:\WINDOWS.0\System32\PnkBstrB.exe

[2009.04.18 16:49:07 | 000,669,184 | ---- | C] () -- C:\WINDOWS.0\System32\pbsvc.exe

[2009.04.18 16:49:07 | 000,066,872 | ---- | C] () -- C:\WINDOWS.0\System32\PnkBstrA.exe

[2009.04.16 12:24:14 | 000,921,600 | ---- | C] () -- C:\WINDOWS.0\System32\vorbisenc.dll

[2009.04.16 12:24:14 | 000,237,568 | ---- | C] () -- C:\WINDOWS.0\System32\OggDS.dll

[2009.04.16 12:24:14 | 000,188,416 | ---- | C] () -- C:\WINDOWS.0\System32\vorbis.dll

[2009.04.16 12:24:14 | 000,045,056 | ---- | C] () -- C:\WINDOWS.0\System32\Ogg.dll

[2009.04.16 10:12:06 | 000,000,000 | ---- | C] () -- C:\WINDOWS.0\ativpsrm.bin

[2009.04.08 14:47:54 | 000,098,816 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009.04.07 20:25:27 | 000,003,072 | R--- | C] () -- C:\WINDOWS.0\System32\34CoInstaller.dll

[2009.04.07 20:25:23 | 000,363,520 | ---- | C] () -- C:\WINDOWS.0\System32\PsisDecd.dll

[2009.04.07 14:09:06 | 000,458,752 | R--- | C] () -- C:\WINDOWS.0\System32\Cmeaupci.exe

[2009.04.07 14:09:00 | 000,106,496 | R--- | C] () -- C:\WINDOWS.0\Vmix.dll

[2009.04.07 14:09:00 | 000,000,140 | ---- | C] () -- C:\WINDOWS.0\Cmicnfg3.ini.cfl

[2009.04.07 14:08:37 | 000,065,536 | R--- | C] () -- C:\WINDOWS.0\System32\CmiInstallResAll.dll

[2009.04.07 14:08:37 | 000,003,189 | R--- | C] () -- C:\WINDOWS.0\Cmicnfg3.ini.cfg

[2009.04.07 14:08:37 | 000,000,725 | R--- | C] () -- C:\WINDOWS.0\cmudax3.ini

[2009.04.07 14:08:37 | 000,000,168 | ---- | C] () -- C:\WINDOWS.0\Cmicnfg3.ini.imi

[2009.04.07 14:08:26 | 005,802,528 | -HS- | C] () -- C:\WINDOWS.0\System32\drivers\fidbox.dat

[2009.04.07 14:08:26 | 000,761,888 | -HS- | C] () -- C:\WINDOWS.0\System32\drivers\fidbox2.dat

[2009.04.07 13:40:32 | 000,000,000 | ---- | C] () -- C:\WINDOWS.0\nsreg.dat

[2009.04.07 13:27:46 | 000,000,664 | ---- | C] () -- C:\WINDOWS.0\System32\d3d9caps.dat

[2009.04.07 12:52:20 | 000,004,500 | ---- | C] () -- C:\WINDOWS.0\Ascd_tmp.ini

[2009.04.07 12:52:17 | 000,010,288 | ---- | C] () -- C:\WINDOWS.0\System32\drivers\ASUSHWIO.SYS

[2009.04.06 19:11:11 | 000,004,249 | ---- | C] () -- C:\WINDOWS.0\ODBCINST.INI

[2009.04.06 19:08:21 | 002,083,856 | ---- | C] () -- C:\WINDOWS.0\System32\FNTCACHE.DAT

[2009.04.06 18:23:29 | 000,002,048 | --S- | C] () -- C:\WINDOWS.0\bootstat.dat

[2009.04.06 18:15:13 | 000,021,740 | ---- | C] () -- C:\WINDOWS.0\System32\emptyregdb.dat

[2009.04.05 16:25:57 | 000,228,736 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat

[2008.10.28 16:40:48 | 000,173,552 | ---- | C] () -- C:\WINDOWS.0\System32\xlive.dll.cat

[2007.03.29 23:00:40 | 000,203,264 | R--- | C] () -- C:\WINDOWS.0\System32\CddbCdda.dll

[2006.06.01 20:06:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS.0\System32\oembios.bin

[2006.06.01 20:06:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS.0\System32\mlang.dat

[2006.06.01 20:06:00 | 000,520,090 | ---- | C] () -- C:\WINDOWS.0\System32\perfh007.dat

[2006.06.01 20:06:00 | 000,496,094 | ---- | C] () -- C:\WINDOWS.0\System32\perfh009.dat

[2006.06.01 20:06:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS.0\System32\perfi009.dat

[2006.06.01 20:06:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS.0\System32\perfi007.dat

[2006.06.01 20:06:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS.0\System32\dssec.dat

[2006.06.01 20:06:00 | 000,101,506 | ---- | C] () -- C:\WINDOWS.0\System32\perfc007.dat

[2006.06.01 20:06:00 | 000,084,578 | ---- | C] () -- C:\WINDOWS.0\System32\perfc009.dat

[2006.06.01 20:06:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS.0\System32\mib.bin

[2006.06.01 20:06:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS.0\System32\perfd007.dat

[2006.06.01 20:06:00 | 000,031,232 | R--- | C] () -- C:\WINDOWS.0\System32\cmdow.exe

[2006.06.01 20:06:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS.0\System32\perfd009.dat

[2006.06.01 20:06:00 | 000,005,702 | ---- | C] () -- C:\WINDOWS.0\System32\OUTLPERF.INI

[2006.06.01 20:06:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS.0\System32\secupd.dat

[2006.06.01 20:06:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS.0\System32\oembios.dat

[2006.06.01 20:06:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS.0\System32\dcache.bin

[2006.06.01 20:06:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS.0\System32\noise.dat

[1996.04.03 20:33:26 | 000,005,248 | ---- | C] () -- C:\WINDOWS.0\System32\giveio.sys

 
 ========== Alternate Data Streams ==========

 

@Alternate Data Stream - 122 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS.0\Anwendungsdaten\TEMP:5F64C164
 

< End of report >

--- --- ---

[/spoiler ]

Extras
[/spoiler]OTL Logfile:

Code:

OTL Extras logfile created on: 25.01.2012 18:22:46 - Run 1

OTL by OldTimer - Version 3.2.31.0     Folder = C:\Dokumente und Einstellungen\Administrator.HOME-PC\Desktop

Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 6.0.2900.5512)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

2,00 Gb Total Physical Memory | 1,53 Gb Available Physical Memory | 76,28% Memory free

3,85 Gb Paging File | 3,57 Gb Available in Paging File | 92,62% Paging File free

Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS.0 | %ProgramFiles% = C:\Programme

Drive C: | 117,19 Gb Total Space | 17,80 Gb Free Space | 15,19% Space Free | Partition Type: NTFS

Drive D: | 87,89 Gb Total Space | 11,29 Gb Free Space | 12,84% Space Free | Partition Type: NTFS

Drive E: | 27,80 Gb Total Space | 1,50 Gb Free Space | 5,40% Space Free | Partition Type: NTFS

 

Computer Name: STEPHAQN | User Name: Administrator | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

exefile [open] -- "%1" %*

InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [cmd] -- cmd.exe /k "cd %L" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

"UpdatesDisableNotify" = 0

"AntiVirusOverride" = 0

"FirewallOverride" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 
 ========== System Restore Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]

"DisableSR" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]

"Start" = 0

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007

"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

"1782:TCP" = 1782:TCP:*:Enabled:SensticPocketServiceWin.exe Operation Port (1782)

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007

"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008

"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

"5353:TCP" = 5353:TCP:*:Disabled:Adobe CSI CS4

"1782:TCP" = 1782:TCP:*:Enabled:SensticPocketServiceWin.exe Operation Port (1782)

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"C:\Programme\ICQ7.5\ICQ.exe" = C:\Programme\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5 -- (ICQ, LLC.)

"C:\Programme\Ipod Software\PocketControl\SensticPocketServiceWin.exe" = C:\Programme\Ipod Software\PocketControl\SensticPocketServiceWin.exe:*:Enabled:SensticPocketServiceWin.exe

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"D:\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe" = D:\GTA4\Grand Theft Auto IV\LaunchGTAIV.exe:*:Enabled:Grand Theft Auto IV -- ()

"\\HURENSOHN\BlueSoleil\BlueSoleil.exe" = \\HURENSOHN\BlueSoleil\BlueSoleil.exe:*:Enabled:BlueSoleil

"C:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\RpcAgentSrv.exe" = C:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\RpcAgentSrv.exe:*:Enabled:SiSoftware Deployment Agent Service -- (SiSoftware)

"D:\Crysis\Bin32\Crysis.exe" = D:\Crysis\Bin32\Crysis.exe:*:Enabled:Crysis_32 -- (Crytek GmbH)

"D:\Crysis\Bin32\CrysisDedicatedServer.exe" = D:\Crysis\Bin32\CrysisDedicatedServer.exe:*:Enabled:CrysisDedicatedServer_32 -- (Crytek GmbH)

"C:\WINDOWS.0\system32\muzapp.exe" = C:\WINDOWS.0\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)

"C:\Programme\Orbitdownloader\orbitdm.exe" = C:\Programme\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)

"C:\Programme\Orbitdownloader\orbitnet.exe" = C:\Programme\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)

"C:\Programme\Gemeinsame Dateien\Adobe\CS4ServiceManager\CS4ServiceManager.exe" = C:\Programme\Gemeinsame Dateien\Adobe\CS4ServiceManager\CS4ServiceManager.exe:*:Disabled:Adobe CSI CS4 -- (Adobe Systems Incorporated)

"D:\TmNationsForever\TmNationsForever\TmForever.exe" = D:\TmNationsForever\TmNationsForever\TmForever.exe:*:Enabled:TmForever -- ()

"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ

"D:\GTA4\Grand Theft Auto IV\GTAIV.exe" = D:\GTA4\Grand Theft Auto IV\GTAIV.exe:*:Enabled:Grand Theft Auto IV -- (Take-Two Interactive Software, Inc.)

"D:\World of Warcraft (3.0.9)\WoW-3.2.0.10192-to-3.2.0.10314-deDE-downloader.exe" = D:\World of Warcraft (3.0.9)\WoW-3.2.0.10192-to-3.2.0.10314-deDE-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)

"D:\World of Warcraft (3.0.9)\Launcher.exe" = D:\World of Warcraft (3.0.9)\Launcher.exe:*:Enabled:Blizzard Launcher -- (Blizzard Entertainment)

"D:\World of Warcraft (3.0.9)\WoW-3.2.0.10314-to-3.2.2.10482-deDE-downloader.exe" = D:\World of Warcraft (3.0.9)\WoW-3.2.0.10314-to-3.2.2.10482-deDE-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)

"D:\World of Warcraft (3.0.9)\WoW-3.2.2.10482-to-3.2.2.10505-deDE-downloader.exe" = D:\World of Warcraft (3.0.9)\WoW-3.2.2.10482-to-3.2.2.10505-deDE-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)

"C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Apps\2.0\6TQBAN4L.25E\2VP395VW.0D2\frit..tion_f8d772dfbb3f7453_0002.0001_0db5bf169ed5c0c1\fritzbox-usb-fernanschluss.exe" = C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Apps\2.0\6TQBAN4L.25E\2VP395VW.0D2\frit..tion_f8d772dfbb3f7453_0002.0001_0db5bf169ed5c0c1\fritzbox-usb-fernanschluss.exe:*:Enabled:FRITZ!Box USB-Fernanschluss -- (AVM Berlin)

"C:\Programme\devolo\informer\devinf.exe" = C:\Programme\devolo\informer\devinf.exe:*:Enabled:devolo Informer -- (devolo AG)

"C:\Programme\devolo\easyshare\easyshare.exe" = C:\Programme\devolo\easyshare\easyshare.exe:*:Enabled:devolo EasyShare -- (devolo AG)

"D:\steamup\steamapps\common\peggle nights\PeggleNights.exe" = D:\steamup\steamapps\common\peggle nights\PeggleNights.exe:*:Enabled:Peggle Nights Demo

"C:\Programme\Skype\Plugin Manager\skypePM.exe" = C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager

"D:\steamup\steamapps\common\peggle deluxe\Peggle.exe" = D:\steamup\steamapps\common\peggle deluxe\Peggle.exe:*:Enabled:Peggle Deluxe Demo

"C:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\WNt500x86\RpcSandraSrv.exe" = C:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service -- (SiSoftware)

"C:\Programme\Alice Software\AliceSetup.exe" = C:\Programme\Alice Software\AliceSetup.exe:LocalSubNet:Enabled:AliceSetup.exe -- (Hansenet)

"D:\Cod4\iw3mp.exe" = D:\Cod4\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) -- ()

"D:\Steam\Steam.exe" = D:\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)

"D:\Steam\steamapps\common\peggle nights\PeggleNights.exe" = D:\Steam\steamapps\common\peggle nights\PeggleNights.exe:*:Enabled:Peggle Nights -- ()

"C:\Programme\ICQ7.5\ICQ.exe" = C:\Programme\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5 -- (ICQ, LLC.)

"C:\Programme\Ipod Software\PocketControl\SensticPocketServiceWin.exe" = C:\Programme\Ipod Software\PocketControl\SensticPocketServiceWin.exe:*:Enabled:SensticPocketServiceWin.exe

"C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Apps\2.0\6TQBAN4L.25E\2VP395VW.0D2\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\fritzbox-usb-fernanschluss.exe" = C:\Dokumente und Einstellungen\Administrator.HOME-PC\Lokale Einstellungen\Apps\2.0\6TQBAN4L.25E\2VP395VW.0D2\frit..tion_8488884cfbcefd60_0002.0002_8541bf1f4a1c673d\fritzbox-usb-fernanschluss.exe:*:Enabled:FRITZ!Box USB-Fernanschluss

"C:\Programme\Unified Remote\RemoteServer.exe" = C:\Programme\Unified Remote\RemoteServer.exe:*:Enabled:Unified Remote -- (Unified Remote)

"C:\Dokumente und Einstellungen\Administrator.HOME-PC\Desktop\Zeugs\Webcam\iWebcameraApp.exe" = C:\Dokumente und Einstellungen\Administrator.HOME-PC\Desktop\Zeugs\Webcam\iWebcameraApp.exe:*:Enabled:iWebcameraApp -- (drahtwerk)

 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{000E79B7-E725-4F01-870A-C12942B7F8E4}" = Crysis(R)

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam

"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu

"{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4

"{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4

"{08B3869E-D282-424C-9AFC-870E04A4BA14}" = Rockstar Games Social Club

"{098727E1-775A-4450-B573-3F441F1CA243}" = kuler

"{098A2A49-7CF3-4F08-A38D-FB879117152A}" = Adobe Color NA Extra Settings CS4

"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended

"{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4

"{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup

"{0DC0E85F-36E4-463B-B3EA-4CD8ED2222A1}" = Adobe Color EU Recommended Settings CS4

"{0F60FD8E-3E58-4F8E-BF2C-DFA4C9987AE2}_is1" = DeLorme Send To GPS 1.2

"{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4

"{11964613-805F-432D-A12B-169554B793E7}" = Nokia Connectivity Cable Driver

"{13B792AA-C078-43A4-8A3A-8B12D629940D}" = Counter-Strike 1.6

"{13E92303-C1AC-4012-9E22-54EACBF54888}" = MCCI(r)Firmware Update Driver for MTK

"{15F4085A-BC98-4590-AFFD-03BBBE49524E}" = Garmin Communicator Plugin

"{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4

"{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4

"{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB

"{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}" = Adobe AIR

"{1B343C8C-F170-4829-8481-E163317C5830}" = iTunes

"{1C6B69CB-7BB1-4281-9DC2-A23BF0642F2A}" = Motorola Software Update

"{1F63ED0B-EDD2-4037-B6AB-1358C624AF48}" = Scan

"{25DEC9F7-08C7-4511-9B4A-40A61E40658E}" = web'n'walk Manager

"{2637C347-9DAD-11D6-9EA2-00055D0CA761}" = PowerCinema

"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 24

"{297190A1-4B0D-4CD6-8B9F-3907F15C3FD8}" = Adobe CS4 American English Speech Analysis Models

"{2A3A4BD6-6CE0-4E2A-80D2-1D0FF6ACBFBA}" = LG United Mobile Driver

"{2A981294-F14C-4F0F-9627-D793270922F8}" = Bonjour

"{2DC94AFD-A6E2-4AB4-9132-4A3F8E07B386}" = Apple Application Support

"{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}" = Logitech SetPoint

"{2EFEAD58-3311-4B2B-9D8A-8D663581D109}" = Splashtop Streamer

"{31492759-0E89-46B5-9770-F6E5808E3017}" = xImage

"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4

"{39F6E2B4-CFE8-C30A-66E8-489651F0F34C}" = Adobe Media Player

"{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4

"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile

"{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4

"{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin

"{414A373B-59DF-4102-94CA-9FE9A74CBDDA}" = Garmin Trip and Waypoint Manager v5

"{42347B75-9660-2DA4-63FD-D35E344E1031}" = Nero 7 Premium

"{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4AA3D64E-9EC3-4B0F-AB91-5885AC55641F}" = Microsoft Games for Windows - LIVE 

"{4E6D3F7E-6419-41F7-B7A3-689807348764}" = RSDLite

"{566BB41D-F006-4956-A5D3-94D8DFFA7F51}" = Adobe Setup

"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime

"{579BA58C-F33D-4970-9953-B94B43768AC3}" = Grand Theft Auto IV

"{5AB36A6C-27A8-4CB1-89A1-9D05F3F16625}" = Mobile Mouse Server

"{5EAD5443-7194-46CC-A055-428E6ABB1BAF}" = Adobe Encore CS4

"{60DB5894-B5A1-4B62-B0F3-669A22C0EE5D}" = Adobe Dynamiclink Support

"{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4

"{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support

"{65F9E1F3-A2C1-4AA9-9F33-A3AEB0255F0E}" = Garmin USB Drivers

"{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4

"{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK

"{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}" = Battlefield 1942

"{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari

"{7406DF60-016D-476B-A2C7-55D997592047}" = Adobe OnLocation CS4

"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5

"{75F509C3-5F01-48C1-ACB9-B9B38A952E6C}" = Unified Remote

"{767CC44C-9BBC-438D-BAD3-FD4595DD148B}" = VC80CRTRedist - 8.0.50727.762

"{7AC09F4A-6AA6-4848-8959-A109BA079C5C}" = Trek 310

"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec

"{7C5B4583-7CBF-4289-B195-03B553959DEA}" = VoiceOver Kit

"{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4

"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable

"{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4

"{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4

"{868D7896-99D4-4513-BC62-2B3AD3E24926}" = TuneUp Utilities 2006

"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder

"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight

"{8BBB5E4C-3F5E-4C07-BFBE-33B34600783A}" = LogMeIn Hamachi

"{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}" = CDDRV_Installer

"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003

"{90170407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office FrontPage 2003

"{92DF2F1B-F63C-4D9A-B3E1-B2D11AE29790}" = Windows Presentation Foundation Language Pack (DEU)

"{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4

"{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4

"{99A40651-0BC2-4095-8F9A-A40FAB224FEF}" = PC Connectivity Solution

"{99E862CC-6F69-4D39-99AA-DBF71BF3B585}" = OpenOffice.org 3.1

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9ABFB92D-93DA-49EE-8ABF-F8195DE45CA9}" = Counter-Strike 1.6

"{9D210D79-AEC5-453B-960C-4DD2C73931E1}" = Bonjour-Druckdienste

"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2

"{A4EA3AB4-E78C-4286-96DF-26035507CE55}" = AiO_Scan

"{A71D5E81-B967-43DB-93D7-FD31BFB95748}" = MobileMe Control Panel

"{A982E6CC-9F0D-4948-9B18-BDFD55DE4A72}" = Nokia PC Suite

"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5

"{ABBC8011-1E42-4ADA-9794-574349612CEF}" = iWebcamera

"{AC76BA86-1033-F400-7760-000000000002}" = Adobe Acrobat 7.0 Professional - English, Français, Deutsch

"{B1102A25-3AA3-446B-AA0F-A699B07A02FD}" = Garmin USB Drivers

"{B169BC97-B8AA-4ACA-9CF2-9D0FF5BABDF7}" = Adobe Premiere Pro CS4 Functional Content

"{B29AD377-CC12-490A-A480-1452337C618D}" = Connect

"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 270.61

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 270.61

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NView" = NVIDIA nView 135.70

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4

"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Click to Call with Skype

"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player

"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX

"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation

"{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module

"{BE9CEAAA-F069-4331-BF2F-8D350F6504F4}" = Adobe Media Encoder CS4 Additional Exporter

"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2

"{C20CE592-B0F8-4D20-BF31-0151CA6331A6}" = EmoDio

"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU

"{C3113E55-7BCB-4de3-8EBF-60E6CE6B2196}_is1" = SiSoftware Sandra Lite 2009.SP3

"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU

"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update

"{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4

"{C89C8D86-4423-4A58-AA40-DD259ACE07C1}" = KhalSetup

"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver

"{CACAEB5F-174D-4C7C-AC56-A33289A807CA}" = Apple Mobile Device Support

"{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw

"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1

"{D499F8DE-3F31-4900-9157-61061613704B}" = Adobe Premiere Pro CS4

"{D4E3C357-E294-4593-BF33-811822CC26FD}" = IMG2MS

"{DD1BD6BA-21C0-42C2-910B-11AE19FAD760}" = VideoCAM Eye

"{DE3BB35E-C0CE-4CA1-9CB4-CD9E69364BD9}" = Adobe Premiere Pro CS4

"{DEB90B8E-0DCB-48CE-B90E-8842A2BD643E}" = Adobe Media Encoder CS4

"{E0F252A6-DE85-4E93-A93B-DFC3537B3965}" = WG111v2 Configuration Utility

"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)

"{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4

"{EA6EB7D0-C920-4434-B43D-0DDD0AF8F497}" = Garmin MapSource

"{EE353798-E875-42E0-B58D-7E6696182EA8}" = Adobe Media Encoder CS4 Dolby

"{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help

"{F2A7F421-1679-48D5-B918-96999014ED53}" = Microsoft .NET Framework 3.0 German Language Pack

"{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4

"{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4

"{FB068BA4-C6EA-4D47-A491-C40E23E77F89}" = Motorola Driver Installation 3.9.0

"{FC6B78BE-922F-45D4-9D47-D10C494658F6}" = TSConverter

"{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All

"{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}" = HighMAT-Erweiterung für den Microsoft Windows XP-Assistenten zum Schreiben von CDs

"{FD052FB9-FE90-4438-B355-15EDC89D8FB1}" = Microsoft Games for Windows - LIVE Redistributable

"°²»úÍøÒ»¼üRoot¹¤¾ß" = °²»úÍøÒ»¼üRoot¹¤¾ß 2.2

"7-Zip" = 7-Zip 4.65

"Adobe Acrobat 7.0 Professional - EFG" = Adobe Acrobat 7.1.0 Professional

"Adobe AIR" = Adobe AIR

"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 11

"Adobe_26b63376f4efc354dae41af6b5e3343" = Adobe Premiere Pro CS4

"Adobe_faf656ef605427ee2f42989c3ad31b8" = Adobe Photoshop CS4

"Alice Software" = Alice Software 4.10.0

"Audacity_is1" = Audacity 1.2.6

"C-Media Oxygen HD Sound" = ASUS Xonar DX Audio

"C-Media PCI Sound" = C-Media PCI Audio

"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player

"CoreVorbis Audio Decoder" = CoreVorbis Audio Decoder (remove only)

"DIVXCodec" = DivX Codec 3.1alpha release

"dlanconf" = devolo dLAN-Konfigurationsassistent

"dslmon" = devolo Informer

"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar

"DXTXTRA" = Microsoft DirectX Transform optional components

"easyclean" = devolo EasyClean

"easyshare" = devolo EasyShare

"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7

"Free Studio_is1" = Free Studio version 5.0.4

"Free Video to iPod Converter_is1" = Free Video to iPod Converter version 3.1

"Free YouTube to iPod Converter_is1" = Free YouTube to iPod Converter version 3.1

"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.9.35.324

"Frequenzweiche_is1" = Frequenzweiche 4.x

"Guitar Pro 5_is1" = Guitar Pro 5.2

"ICQToolbar" = ICQ Toolbar

"InstallShield_{2EFEAD58-3311-4B2B-9D8A-8D663581D109}" = Splashtop Streamer

"InstallShield_{C20CE592-B0F8-4D20-BF31-0151CA6331A6}" = EmoDio

"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)

"LogMeIn Hamachi" = LogMeIn Hamachi

"Microsoft .NET Framework 3.0 German Language Pack" = Microsoft .NET Framework 3.0 German Language Pack

"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU

"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended

"Minecraft Beta Cracked" = Minecraft Beta Cracked

"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)

"Mp3tag" = Mp3tag v2.46a

"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP

"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager

"OggDS" = Direct Show Ogg Vorbis Filter (remove only)

"OpenAL" = OpenAL

"Orbit_is1" = Orbit Downloader

"PCI Audio Applications" = PCI Audio Applications

"PCI Audio Driver" = PCI Audio Driver

"Pontifex II" = Pontifex II

"PunkBusterSvc" = PunkBuster Services

"screensaver_shell" = screensaver_shell

"Steam App 3540" = Peggle Nights

"TeamSpeak 3 Client" = TeamSpeak 3 Client

"TmNationsForever_is1" = TmNationsForever

"Uninstall_is1" = Uninstall 1.0.0.1

"uniquemagicmp3taggerappid_is1" = Magic MP3 Tagger 2.2.6

"Virtual DJ - Atomix Productions" = Virtual DJ - Atomix Productions

"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

"WIC" = Windows Imaging Component

"Winamp" = Winamp

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"Windows Media Player" = Windows Media Player 11

"Windows XP Service Pack" = Windows XP Service Pack 3

"WinRAR archiver" = WinRAR Archivierer

"winusb0100" = Microsoft WinUsb 1.0

"WMFDist11" = Windows Media Format 11 runtime

"wmp11" = Windows Media Player 11

"World of Warcraft" = World of Warcraft

"Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5

"XMedia Recode" = XMedia Recode 3.0.0.2

"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0

"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0

"XSManager" = XSManager

"Yawle_0.3b" = YAWLE 0.5b

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"CreepSmash" = CreepSmash

"f6791b188d8f3ff8" = AVM FRITZ!Box USB-Fernanschluss

"Smart Shutdown Manager" = Smart Shutdown Manager

"Winamp Detect" = Winamp Erkennungs-Plug-in

"World Wind Java Application Template" = World Wind Java Application Template

 
 ========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 15.10.2011 06:56:48 | Computer Name = STEPHAQN | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung winamp.exe, Version 5.6.2.3173, fehlgeschlagenes

 Modul msvcr90.dll, Version 9.0.30729.4148, Fehleradresse 0x00056b6a.

 

Error - 15.10.2011 06:57:07 | Computer Name = STEPHAQN | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung winamp.exe, Version 5.6.2.3173, fehlgeschlagenes

 Modul msvcr90.dll, Version 9.0.30729.4148, Fehleradresse 0x00056b6a.

 

Error - 15.10.2011 07:02:24 | Computer Name = STEPHAQN | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung winamp.exe, Version 5.6.2.3173, fehlgeschlagenes

 Modul msvcr90.dll, Version 9.0.30729.4148, Fehleradresse 0x00056b6a.

 

Error - 15.10.2011 07:02:35 | Computer Name = STEPHAQN | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung winamp.exe, Version 5.6.2.3173, fehlgeschlagenes

 Modul msvcr90.dll, Version 9.0.30729.4148, Fehleradresse 0x00056b6a.

 

Error - 15.10.2011 08:36:14 | Computer Name = STEPHAQN | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung winamp.exe, Version 5.6.2.3173, fehlgeschlagenes

 Modul msvcr90.dll, Version 9.0.30729.4148, Fehleradresse 0x00056b6a.

 

Error - 15.10.2011 08:37:10 | Computer Name = STEPHAQN | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung winamp.exe, Version 5.6.2.3173, fehlgeschlagenes

 Modul msvcr90.dll, Version 9.0.30729.4148, Fehleradresse 0x00056b6a.

 

Error - 18.10.2011 14:51:56 | Computer Name = STEPHAQN | Source = crypt32 | ID = 131080

Description = Der automatische Aktualisierungsabruf der Drittanbieterstammlisten-Sequenznummer

 von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>

 ist fehlgeschlagen mit dem Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung

 zurückgegeben.  .

 

Error - 30.10.2011 08:29:37 | Computer Name = STEPHAQN | Source = MsiInstaller | ID = 10005

Description = Product: Unified Remote -- This application requires .NET Framework

 4.0 Client Profile or Full. Please install the .NET Framework then run this installer

 again.

 

Error - 30.10.2011 08:29:57 | Computer Name = STEPHAQN | Source = MsiInstaller | ID = 10005

Description = Product: Unified Remote -- This application requires .NET Framework

 4.0 Client Profile or Full. Please install the .NET Framework then run this installer

 again.

 

Error - 28.11.2011 13:21:47 | Computer Name = STEPHAQN | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung javaw.exe, Version 6.0.240.7, fehlgeschlagenes

 Modul nvoglnt.dll, Version 6.14.12.7061, Fehleradresse 0x0072df7f.

 

[ System Events ]

Error - 25.01.2012 12:25:20 | Computer Name = STEPHAQN | Source = Service Control Manager | ID = 7022

Description = Der Dienst "CyberLink Background Capture Service (CBCS)" wurde nicht

 ordnungsgemäß gestartet.

 

Error - 25.01.2012 12:25:20 | Computer Name = STEPHAQN | Source = Service Control Manager | ID = 7001

Description = Der Dienst "CyberLink Task Scheduler (CTS)" ist vom Dienst "CyberLink

 Background Capture Service (CBCS)" abhängig, der aufgrund folgenden Fehlers nicht

 gestartet wurde:   %%1070

 

Error - 25.01.2012 12:34:31 | Computer Name = STEPHAQN | Source = Service Control Manager | ID = 7022

Description = Der Dienst "CyberLink Background Capture Service (CBCS)" wurde nicht

 ordnungsgemäß gestartet.

 

Error - 25.01.2012 12:34:31 | Computer Name = STEPHAQN | Source = Service Control Manager | ID = 7001

Description = Der Dienst "CyberLink Task Scheduler (CTS)" ist vom Dienst "CyberLink

 Background Capture Service (CBCS)" abhängig, der aufgrund folgenden Fehlers nicht

 gestartet wurde:   %%1070

 

Error - 25.01.2012 13:12:50 | Computer Name = STEPHAQN | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {1BE1F766-5536-11D1-B726-00C04FB926AF}

 

Error - 25.01.2012 13:13:43 | Computer Name = STEPHAQN | Source = Service Control Manager | ID = 7026

Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:

   Fips  intelppm

 

Error - 25.01.2012 13:15:51 | Computer Name = STEPHAQN | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "StiSvc"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {A1F4E726-8CF1-11D1-BF92-0060081ED811}

 

Error - 25.01.2012 13:16:33 | Computer Name = STEPHAQN | Source = DCOM | ID = 10005

Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"

 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {1BE1F766-5536-11D1-B726-00C04FB926AF}

 

Error - 25.01.2012 13:19:06 | Computer Name = STEPHAQN | Source = Service Control Manager | ID = 7022

Description = Der Dienst "CyberLink Background Capture Service (CBCS)" wurde nicht

 ordnungsgemäß gestartet.

 

Error - 25.01.2012 13:19:06 | Computer Name = STEPHAQN | Source = Service Control Manager | ID = 7001

Description = Der Dienst "CyberLink Task Scheduler (CTS)" ist vom Dienst "CyberLink

 Background Capture Service (CBCS)" abhängig, der aufgrund folgenden Fehlers nicht

 gestartet wurde:   %%1070

 

 

< End of report >

--- --- ---
[spoiler]