habe mal versucht was ich konnte:
- Windows im abgesichertem Modus mit Netzwerktreibern gestartet.
- Otl runtergeladen und scannen lassen. :OTL Logfile: Code:
OTL Extras logfile created on: 03.02.2012 22:36:23 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\***\Downloads
64bit- Professional (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format:
dd.MM.yyyy
3,67 Gb Total Physical Memory | 2,93 Gb Available Physical Memory | 79,94%
Memory free
7,34 Gb Paging File | 6,67 Gb Available in Paging File | 90,84% Paging File
free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% =
C:\Program Files (x86)
Drive C: | 454,97 Gb Total Space | 334,39 Gb Free Space | 73,50% Space Free
| Partition Type: NTFS
Computer Name: ***| User Name: ***| Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include
64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name
Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- C:\Program Files
(x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft
Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft
Corporation)
.html [@ = ChromeHTML] -- C:\Program Files
(x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla
Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit:
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files
(x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files
(x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1"
(Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe"
"C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe"
"C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe
%SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files
(x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [CEWE FOTOSCHAU] -- "C:\Program Files
(x86)\Saturn\Fotoservice\CEWE FOTOSCHAU.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Fotoservice] -- "C:\Program Files
(x86)\Saturn\Fotoservice\Fotoservice.exe" "%1" ()
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [Saturn Fotoservice] -- "C:\Program Files
(x86)\Saturn\Fotoservice\Saturn Fotoservice.exe" "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft
Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files
(x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
https [open] -- "C:\Program Files
(x86)\Google\Chrome\Application\chrome.exe" -- "%1" (Google Inc.)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1"
(Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe
%SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [Browse with &IrfanView] -- "C:\Program Files
(x86)\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan)
Directory [CEWE FOTOSCHAU] -- "C:\Program Files
(x86)\Saturn\Fotoservice\CEWE FOTOSCHAU.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Fotoservice] -- "C:\Program Files
(x86)\Saturn\Fotoservice\Fotoservice.exe" "%1" ()
Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L"
Directory [Saturn Fotoservice] -- "C:\Program Files
(x86)\Saturn\Fotoservice\Saturn Fotoservice.exe" "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security
Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
"DefaultOutboundAction" = 0
"DefaultInboundAction" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List
==========
64bit:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series" = Canon MG5200
series MP Drivers
"{26A24AE4-039D-4CA4-87B4-2F86416020FF}" = Java(TM) 6 Update 20 (64-bit)
"{436E0B79-2CFB-4E5F-9380-E17C1B25D0C5}" = WIDCOMM Bluetooth Software
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit
Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit
MUI (German) 2007
"{90140000-006D-0407-1000-0000000FF1CE}" = Microsoft Office Klick-und-Los
2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error
Reporting
"{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}" = Alps Pointing-device for VAIO
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile
Phones
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4
Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4
Client Profile
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0899D75A-C2FC-42EA-A702-5B9A5F24EAD5}" = VAIO Smart Network
"{0D0F662B-EBEA-4075-819E-74798AD42CDE}" = VAIO Care
"{11D08055-939C-432b-98C3-E072478A0CD7}" = PSE10 STI Installer
"{17DFE37C-064E-4834-AD8F-A4B2B4DF68F8}" = Adobe Photoshop Elements 8.0
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet
Explorer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008
Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{22D3A614-482C-444A-932C-9DA1B8ECDFD2}" = Elements 10 Organizer
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet
Explorer
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20
"{2F9D63BE-A891-4E39-AFB3-7402D486800C}" = VAIO Hardware Diagnostics
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications
Platform
"{36C5BBF0-E5BF-4DE1-B684-7E90B0C93FB5}" = VAIO Care
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{40A66DF6-22D3-44B5-A7D3-83B118A2C0DC}" = Norton Online Backup
"{441C8911-CEC0-19E6-6CAC-694553E06A28}" = myphotobook.de
"{4685A344-6718-4923-AA9D-158A0A2E1CFB}" = SmartSound Quicktracks for
Premiere Elements 8.0
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{57B955CE-B5D3-495D-AF1B-FAEE0540BFEF}" = VAIO Data Restore Tool
"{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync
"{5A92468F-3ED8-4F96-A9E1-4F176C80EC29}" = VAIO Quick Web Access
"{5BEE8F1F-BD32-4553-8107-500439E43BD7}" = VAIO Update
"{5DDAFB4B-C52E-468A-9E23-3B0CEEB671BF}" = VAIO-Support für Übertragungen
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine
Components
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox
Plugin
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008
Redistributable - x86 9.0.30729
"{70991E0A-1108-437E-BA7D-085702C670C0}" =
"{72042FA6-5609-489F-A8EA-3C2DD650F667}" = VAIO Control Center
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{803E4FA5-A940-4420-B89D-A8BC2E160247}" =
"{8211C280-5B02-4E7E-B55F-845A207249BA}" = VAIO Data Restore Tool
"{82F09B1C-F602-4552-9C40-5BD5F8EAF750}" =
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005
Redistributable
"{850C7BD3-9F3F-46AD-9396-E7985B38C55E}" = Windows Live Fotogalerie
"{855DDD3C-131E-42A8-BCBD-F9581F80CACB}" =
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI
(German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI
(German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI
(German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI
(German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI
(German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI
(German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German)
2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English)
2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French)
2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian)
2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing
(German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI
(German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI
(German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI
(German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI
(German) 2007
"{90140011-0066-0407-0000-0000000FF1CE}" = Microsoft Office Starter 2010 -
Deutsch
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{969E11AA-8F3A-F162-1A5A-0965E216B6CE}" = Adobe Download Assistant
"{A0E583D1-23F7-4C35-9620-B169D7715E4B}" = Adobe Premiere Elements 8.0
"{A127C3C0-055E-38CF-B38F-1E85F8BBBFFE}" = Adobe Community Help
"{A7C30414-2382-4086-B0D6-01A88ABA21C3}" = VAIO Gate
"{A7DA438C-2E43-4C20-BFDA-C1F4A6208558}" =
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.5 - Deutsch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B7546697-2A80-4256-A24B-1C33163F535B}" = VAIO Gate Default
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C6E893E7-E5EA-4CD5-917C-5443E753FCBD}" = VAIO-Handbuch
"{C7477742-DDB4-43E5-AC8D-0259E1E661B1}" =
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D6C630BF-8DBB-4042-8562-DC9A52CB6E7E}" = Intel(R) Turbo Boost Technology
Driver
"{DE8AAC73-6D8D-483E-96EA-CAEDDADB9079}" = ArcSoft WebCam Companion 3
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{EE549AF9-8FAA-4584-83B2-ECF1BC9DC1FF}" = Adobe Photoshop Elements 10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005
Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Graphics Media
Accelerator Driver
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio
Driver
"{F761359C-9CED-45AE-9A51-9D6605CD55C4}" = Evernote
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{FB77DB0C-6951-47B6-9D80-A0FDBEE0334C}" =
"{FE23D063-934D-4829-A0D8-00634CE79B4A}" = Adobe AIR
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop Elements 10" = Adobe Photoshop Elements 10
"Adobe Photoshop Elements 8.0" = Adobe Photoshop Elements 8.0
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Canon MG5200 series Benutzerregistrierung" = Canon MG5200 series
Benutzerregistrierung
"Canon_IJ_Network_Scan_UTILITY" = Canon IJ Network Scan Utility
"Canon_IJ_Network_UTILITY" = Canon IJ Network Tool
"CanonMyPrinter" = Canon My Printer
"CanonSolutionMenuEX" = Canon Solution Menu EX
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Citavi" = Citavi 2.5
"com.adobe.downloadassistant.AdobeDownloadAssistant" = Adobe Download
Assistant
"de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1" =
myphotobook.de
"Easy-PhotoPrint EX" = Canon Easy-PhotoPrint EX
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Fotoservice" = Fotoservice
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version
3.10.14.1206
"Google Chrome" = Google Chrome
"hotpot_is1" = HotPotatoes v 6.3.0.4
"InstallShield_{4685A344-6718-4923-AA9D-158A0A2E1CFB}" = SmartSound
Quicktracks for Premiere Elements 8.0
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version
1.60.1.1000
"MediaNavigation.CDLabelPrint" = CD-LabelPrint
"Mozilla Firefox (3.6.26)" = Mozilla Firefox (3.6.26)
"MP Navigator EX 4.0" = Canon MP Navigator EX 4.0
"mp3-2-wav" = mp3-2-wav converter 1.14
"Office14.Click2Run" = Microsoft Office Klick-und-Los 2010
"PremElem80" = Adobe Premiere Elements 8.0
"Saturn Fotoservice" = Saturn Fotoservice
"splashtop" = VAIO Quick Web Access
"Uninstall_is1" = Uninstall 1.0.0.1
"VAIO Help and Support" =
"VAIO screensaver" = VAIO screensaver
"WinLiveSuite_Wave3" = Windows Live Essentials
========== HKEY_CURRENT_USER Uninstall List
==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"FoxTab Music Converter" = FoxTab Music Converter
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 12.01.2012 10:20:37 | Computer Name = ** | Source = SideBySide |
ID =
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in
Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 13.01.2012 16:44:35 | Computer Name = ***| Source = SideBySide |
ID = *
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in
Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 14.01.2012 19:30:45 | Computer Name = * | Source = SideBySide |
ID = **
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in
Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 16.01.2012 08:56:39 | Computer Name = *** | Source = SideBySide |
ID = ***
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in
Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 17.01.2012 11:48:35 | Computer Name = ***| Source = SideBySide |
ID = *
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in
Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 19.01.2012 06:42:04 | Computer Name = *** | Source = SideBySide |
ID = **
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\Program Files
(x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in
Manifest- oder
Richtliniendatei "c:\Program Files (x86)\Common Files\Adobe
AIR\Versions\1.0\Adobe
AIR.dll" in Zeile 3. Der Wert
"MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
des "version"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 23.01.2012 13:15:04 | Computer Name = Elena | Source = SideBySide |
ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\program files
(x86)\common
files\Adobe\OOBE\PDApp\DWA\resources\libraries\ARKCmdCaps.dll". Die
abhängige Assemblierung
"Microsoft.VC90.CRT,processorArchitecture="x86",type="win32",version="9.0.30729.1""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte
Diagnose das Programm
"sxstrace.exe".
Error - 23.01.2012 13:15:04 | Computer Name = Elena | Source = SideBySide |
ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\program files
(x86)\common
files\Adobe\OOBE\PDApp\DWA\resources\libraries\ARKCmdDefrag.dll". Die
abhängige Assemblierung
"Microsoft.VC90.CRT,processorArchitecture="x86",type="win32",version="9.0.30729.1""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte
Diagnose das Programm
"sxstrace.exe".
Error - 23.01.2012 13:15:04 | Computer Name = Elena | Source = SideBySide |
ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\program files
(x86)\common
files\Adobe\OOBE\PDApp\DWA\resources\libraries\ARKCmdFS.dll". Die abhängige
Assemblierung
"Microsoft.VC90.CRT,processorArchitecture="x86",type="win32",version="9.0.30729.1""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte
Diagnose das Programm
"sxstrace.exe".
Error - 23.01.2012 13:15:04 | Computer Name = ***| Source = SideBySide |
ID = **
Description = Fehler beim Generieren des Aktivierungskontextes für
"c:\program files
(x86)\common
files\Adobe\OOBE\PDApp\DWA\resources\libraries\ARKEngine.dll". Die
abhängige Assemblierung
"Microsoft.VC90.CRT,processorArchitecture="x86",type="win32",version="9.0.30729.1""
konnte nicht gefunden werden. Verwenden Sie für eine detaillierte
Diagnose das Programm
"sxstrace.exe".
[ Media Center Events ]
Error - 19.03.2011 08:55:32 | Computer Name =**| Source = MCUpdate |
ID = 0
Description = 13:55:32 - Fehler beim Herstellen der Internetverbindung.
13:55:32
- Serververbindung konnte nicht hergestellt werden..
Error - 19.03.2011 08:55:53 | Computer Name = Elena | Source = MCUpdate |
ID = 0
Description = 13:55:38 - Fehler beim Herstellen der Internetverbindung.
13:55:38
- Serververbindung konnte nicht hergestellt werden..
Error - 19.03.2011 09:56:00 | Computer Name = Elena | Source = MCUpdate |
ID = 0
Description = 14:56:00 - Fehler beim Herstellen der Internetverbindung.
14:56:00
- Serververbindung konnte nicht hergestellt werden..
Error - 19.03.2011 09:56:07 | Computer Name = Elena | Source = MCUpdate |
ID = 0
Description = 14:56:05 - Fehler beim Herstellen der Internetverbindung.
14:56:05
- Serververbindung konnte nicht hergestellt werden..
Error - 20.03.2011 07:28:34 | Computer Name = Elena | Source = MCUpdate |
ID = 0
Description = 12:28:34 - Fehler beim Herstellen der Internetverbindung.
12:28:34
- Serververbindung konnte nicht hergestellt werden..
Error - 20.03.2011 07:28:44 | Computer Name = Elena | Source = MCUpdate |
ID = 0
Description = 12:28:39 - Fehler beim Herstellen der Internetverbindung.
12:28:39
- Serververbindung konnte nicht hergestellt werden..
Error - 20.03.2011 08:29:16 | Computer Name = Elena | Source = MCUpdate |
ID = 0
Description = 13:29:16 - Fehler beim Herstellen der Internetverbindung.
13:29:16
- Serververbindung konnte nicht hergestellt werden..
Error - 20.03.2011 08:29:22 | Computer Name = Elena | Source = MCUpdate |
ID = 0
Description = 13:29:21 - Fehler beim Herstellen der Internetverbindung.
13:29:21
- Serververbindung konnte nicht hergestellt werden..
[ System Events ]
Error - 03.02.2012 17:26:43 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:31:43 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:31:43 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:31:43 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:33:51 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:33:51 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:33:51 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:38:51 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:38:51 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 03.02.2012 17:38:51 | Computer Name = Elena | Source = Service
Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server"
abhängig, der
aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
< End of report > --- --- ---
OTL Logfile: Code:
OTL logfile created on: 03.02.2012 22:36:23 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Elena
Geuer\Downloads
64bit- Professional (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format:
dd.MM.yyyy
3,67 Gb Total Physical Memory | 2,93 Gb Available Physical Memory | 79,94%
Memory free
7,34 Gb Paging File | 6,67 Gb Available in Paging File | 90,84% Paging File
free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% =
C:\Program Files (x86)
Drive C: | 454,97 Gb Total Space | 334,39 Gb Free Space | 73,50% Space Free
| Partition Type: NTFS
Computer Name: ELENA | User Name: Elena | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include
64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name
Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Elena \Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla
Corporation)
========== Modules (No Company Name) ==========
MOD - C:\Program Files (x86)\Mozilla Firefox\js3250.dll ()
========== Win32 Services (SafeList) ==========
SRV:64bit: - (VAIO Power Management) -- C:\Program Files\Sony\VAIO
Power Management\SPMService.exe (Sony Corporation)
SRV:64bit: - (VSNService) -- C:\Program Files\Sony\VAIO Smart
Network\VSNService.exe (Sony Corporation)
SRV:64bit: - (VUAgent) -- C:\Program Files\Sony\VAIO Update
5\VUAgent.exe (Sony Corporation)
SRV:64bit: - (SampleCollector) -- C:\Program Files\Sony\VAIO
Care\VCPerfService.exe (Sony Corporation)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll
(Microsoft Corporation)
SRV - (AdobeActiveFileMonitor10.0) -- C:\Program Files (x86)\Adobe\Elements
10 Organizer\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir
Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir
Desktop\sched.exe (Avira GmbH)
SRV - (FLEXnet Licensing Service) -- C:\Program Files (x86)\Common
Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso
Software Inc.)
SRV - (btwdins) -- C:\Programme\WIDCOMM\Bluetooth Software\btwdins.exe
(Broadcom Corporation.)
SRV - (NOBU) -- C:\Program Files (x86)\Symantec\Norton Online
Backup\NOBuAgent.exe (Symantec Corporation)
SRV - (VAIO Event Service) -- C:\Program Files (x86)\Sony\VAIO Event
Service\VESMgr.exe (Sony Corporation)
SRV - (UNS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management
Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Management
Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) --
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft
Corporation)
SRV - (ACDaemon) -- C:\Program Files (x86)\Common Files\ArcSoft\Connection
Service\Bin\ACService.exe (ArcSoft Inc.)
SRV - (IAStorDataMgrSvc) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R)
Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (sftvsa) -- C:\Program Files (x86)\Microsoft Application
Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) -- C:\Program Files (x86)\Microsoft Application
Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (AdobeActiveFileMonitor8.0) -- C:\Program Files (x86)\Adobe\Elements
Organizer 8.0\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) --
C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft
Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (ssadmdm) -- C:\Windows\SysNative\drivers\ssadmdm.sys
(MCCI Corporation)
DRV:64bit: - (ssadbus) SAMSUNG Android USB Composite Device driver
(WDM) -- C:\Windows\SysNative\drivers\ssadbus.sys (MCCI Corporation)
DRV:64bit: - (ssadserd) SAMSUNG Android USB Diagnostic Serial Port
(WDM) -- C:\Windows\SysNative\drivers\ssadserd.sys (MCCI Corporation)
DRV:64bit: - (androidusb) --
C:\Windows\SysNative\drivers\ssadadb.sys (Google Inc)
DRV:64bit: - (ssadmdfl) SAMSUNG Android USB Modem (Filter) --
C:\Windows\SysNative\drivers\ssadmdfl.sys (MCCI Corporation)
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys
(Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys
(Avira GmbH)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys
(Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys
(Advanced Micro Devices)
DRV:64bit: - (IntcDAud) Intel(R) --
C:\Windows\SysNative\drivers\IntcDAud.sys (Intel(R) Corporation)
DRV:64bit: - (igfx) -- C:\Windows\SysNative\drivers\igdkmd64.sys
(Intel Corporation)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys
(ATI Technologies Inc.)
DRV:64bit: - (btwrchid) -- C:\Windows\SysNative\drivers\btwrchid.sys
(Broadcom Corporation.)
DRV:64bit: - (btwampfl) -- C:\Windows\SysNative\drivers\btwampfl.sys
(Broadcom Corporation.)
DRV:64bit: - (btwavdt) -- C:\Windows\SysNative\drivers\btwavdt.sys
(Broadcom Corporation.)
DRV:64bit: - (btwaudio) -- C:\Windows\SysNative\drivers\btwaudio.sys
(Broadcom Corporation.)
DRV:64bit: - (btwl2cap) -- C:\Windows\SysNative\drivers\btwl2cap.sys
(Broadcom Corporation.)
DRV:64bit: - (risdsnpe) --
C:\Windows\SysNative\drivers\risdsne64.sys (REDC)
DRV:64bit: - (rimspci) -- C:\Windows\SysNative\drivers\rimssne64.sys
(REDC)
DRV:64bit: - (ApfiltrService) --
C:\Windows\SysNative\drivers\Apfiltr.sys (Alps Electric Co., Ltd.)
DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys
(Marvell)
DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys
(Atheros Communications, Inc.)
DRV:64bit: - (Impcd) -- C:\Windows\SysNative\drivers\Impcd.sys
(Intel Corporation)
DRV:64bit: - (HECIx64) Intel(R) --
C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (SFEP) -- C:\Windows\SysNative\drivers\SFEP.sys (Sony
Corporation)
DRV:64bit: - (PxHlpa64) -- C:\Windows\SysNative\drivers\PxHlpa64.sys
(Sonic Solutions)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys
(Intel Corporation)
DRV:64bit: - (Sftvol) -- C:\Windows\SysNative\drivers\Sftvollh.sys
(Microsoft Corporation)
DRV:64bit: - (Sftredir) --
C:\Windows\SysNative\drivers\Sftredirlh.sys (Microsoft Corporation)
DRV:64bit: - (Sftplay) -- C:\Windows\SysNative\drivers\Sftplaylh.sys
(Microsoft Corporation)
DRV:64bit: - (Sftfs) -- C:\Windows\SysNative\drivers\Sftfslh.sys
(Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys
(Microsoft Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys
(AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys
(LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys
(Hewlett-Packard Company)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys
(Promise Technology)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys
(Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys
(Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys
(Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys
(Hauppauge Computer Works, Inc.)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft
Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page =
C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No
CLSID value found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL =
hxxp://www.google.com/ig/redirectdomain?brand=SVEE&bmod=SVEE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page =
hxxp://search.babylon.com/home?AF=100581&tt=030112_ncp2
IE - HKCU\..\URLSearchHook: - No CLSID value found
IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - No
CLSID value found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings:
"ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings:
"ProxyOverride" = <local>
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Search the web (Babylon)"
FF - prefs.js..browser.search.order.1: "Search the web (Babylon)"
FF - prefs.js..browser.search.selectedEngine: "Search the web (Babylon)"
FF - prefs.js..browser.search.suggest.enabled: false
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/ig"
FF - prefs.js..extensions.enabledItems: engine@conduit.com:3.2.5.2
FF - prefs.js..extensions.enabledItems:
{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:3.2.5.2
FF - prefs.js..extensions.enabledItems:
{800b5000-a755-47e1-992b-48a1c1357f07}:1.1.7
FF - prefs.js..extensions.enabledItems:
{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.9
FF - prefs.js..extensions.enabledItems:
{ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: 2020Player_IKEA@2020Technologies.com
:5.0.7.0
FF - prefs.js..extensions.enabledItems: ffxtlbr@babylon.com:1.2.0
FF - prefs.js..extensions.enabledItems:
{dc572301-7619-498c-a57d-39143191b318}:0.3.8.7
FF - prefs.js..keyword.URL: "
hxxp://search.babylon.com/?AF=100581&tt=030112_ncp2&babsrc=adbartrp&mntrId=a44f9c4d0000000000004c0f6eddcf4d&q=
"
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer:
C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files
(x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0:
C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416:
C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft
Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/GoogleUpdate;version=3: C:\Program Files
(x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/GoogleUpdate;version=9: C:\Program Files
(x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files
(x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox
3.6.26\extensions\\Components: C:\Program Files (x86)\Mozilla
Firefox\components [2012.02.03 12:19:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox
3.6.26\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
[2012.02.03 12:19:48 | 000,000,000 | ---D | M]
[2011.01.10 22:56:36 | 000,000,000 | ---D | M] (No name found) --
C:\Users\Elena **\AppData\Roaming\mozilla\Extensions
[2012.02.03 12:56:23 | 000,000,000 | ---D | M] (No name found) --
C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions
[2011.02.04 16:34:34 | 000,000,000 | ---D | M] ("ICQ Toolbar") --
C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.03.16 11:47:06 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") --
C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.01.30 16:22:19 | 000,000,000 | ---D | M] (softonic-de3 Community
Toolbar) -- C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\{cc05a3e3-64c3-4af2-bfc1-af0d66b69065}
[2011.09.28 08:43:45 | 000,000,000 | ---D | M] (Adblock Plus) --
C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.12.30 21:54:52 | 000,000,000 | ---D | M] (No name found) --
C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011.06.22 20:54:49 | 000,000,000 | ---D | M] (20-20 3D Viewer - IKEA) --
C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\2020Player_IKEA@2020Technologies.com
[2011.01.30 16:22:19 | 000,000,000 | ---D | M] (Conduit Engine) --
C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\ engine@conduit.com
[2011.12.30 19:31:10 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\ ffxtlbr@babylon.com
[2011.12.30 21:54:51 | 000,000,000 | ---D | M] (No name found) --
C:\Users\Elena **\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\chrome\content\extensions
[2011.12.30 21:54:51 | 000,000,000 | ---D | M] (No name found) --
C:\Users\Elena
Geuer\AppData\Roaming\mozilla\Firefox\Profiles\hd4lfunq.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\modules\extensions
[2012.02.01 22:42:09 | 000,000,950 | ---- | M] () -- C:\Users\Elena
**\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-1.xml
[2011.12.22 13:08:19 | 000,000,950 | ---- | M] () -- C:\Users\Elena
*\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-10.xml
[2011.12.30 19:55:18 | 000,000,950 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-11.xml
[2011.03.24 13:52:25 | 000,000,950 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-2.xml
[2011.05.02 11:02:32 | 000,000,950 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-3.xml
[2011.06.22 17:05:00 | 000,000,950 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-4.xml
[2011.08.18 17:26:36 | 000,000,950 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-5.xml
[2011.09.04 12:38:04 | 000,000,950 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-6.xml
[2011.09.08 08:30:46 | 000,000,950 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-7.xml
[2011.09.28 09:28:43 | 000,000,950 | ---- | M] () -- C:\Users\Elena
AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-8.xml
[2011.11.12 00:19:37 | 000,000,950 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin-9.xml
[2011.02.04 16:34:34 | 000,000,168 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin.gif
[2011.02.04 16:34:34 | 000,000,618 | ---- | M] () -- C:\Users\Elena
\AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin.src
[2011.03.01 09:37:43 | 000,001,056 | ---- | M] () -- C:\Users\Elena
AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\icqplugin.xml
[2011.05.19 07:03:43 | 000,005,430 | ---- | M] () -- C:\Users\Elena
AppData\Roaming\Mozilla\Firefox\Profiles\hd4lfunq.default\searchplugins\usb--literatur-suchen-de.xml
[2012.01.10 23:28:33 | 000,000,000 | ---D | M] (No name found) --
C:\Program Files (x86)\mozilla firefox\extensions
[2012.01.10 23:28:33 | 000,000,000 | ---D | M] (No name found) --
C:\Program Files (x86)\mozilla firefox\extensions\adapter@babylontc.com
[2012.01.10 23:28:33 | 000,000,000 | ---D | M] (No name found) --
C:\Program Files (x86)\mozilla firefox\extensions\ocr@babylon.com
[2010.12.03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Program Files
(x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.01.10 21:33:25 | 000,002,352 | ---- | M] () -- C:\Program Files
(x86)\mozilla firefox\searchplugins\babylon.xml
[2010.12.03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Program Files
(x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.12.03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Program Files
(x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.12.03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Program Files
(x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.12.03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files
(x86)\mozilla firefox\searchplugins\yahoo-de.xml
========== Chrome ==========
CHR - default_search_provider: Search the web (Babylon) (Enabled)
CHR - default_search_provider: search_url =
hxxp://search.babylon.com/?q={searchTerms}&babsrc=SP_def&AF=100581&tt=030112_ncp2
CHR - default_search_provider: suggest_url =
{google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files
(x86)\Google\Chrome\Application\16.0.912.77\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Program Files
(x86)\Google\Chrome\Application\16.0.912.77\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files
(x86)\Google\Chrome\Application\16.0.912.77\gcswf32.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files
(x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.200.2 (Enabled) = C:\Program
Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U20 (Enabled) = C:\Program Files
(x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files
(x86)\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) =
C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
CHR - plugin: Google Update (Enabled) = C:\Program Files
(x86)\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: Windows Live\u00AE Photo Gallery (Enabled) = C:\Program Files
(x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Shockwave Flash (Enabled) =
C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) -
C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Google Toolbar Helper) -
{AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files
(x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Google Toolbar Notifier BHO) -
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} -
C:\Programme\Google\GoogleToolbarNotifier\5.7.7227.1100\swg64.dll (Google
Inc.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID
value found.
O2 - BHO: (Groove GFS Browser Helper) -
{72853161-30C5-4D22-B7F9-0BBC1D38A37E} -
C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) -
{AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files
(x86)\Google\GoogleToolbarNotifier\5.7.7227.1100\swg.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) -
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files
(x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) -
{2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files
(x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files
(x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe
Systems Incorporated)
O4:64bit: - HKLM..\Run: [CanonMyPrinter] C:\Program
Files\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir
Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CanonSolutionMenuEx] C:\Program Files
(x86)\Canon\Solution Menu EX\CNSEMAIN.EXE (CANON INC.)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Program Files
(x86)\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [KiesHelper] C:\Program Files
(x86)\Samsung\Kies\KiesHelper.exe (Samsung)
O4 - HKCU..\Run: [KiesPDLR] C:\Program Files
(x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe ()
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Users\Malwarebytes'
Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)]
C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll
(Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer:
NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer:
NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System:
ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System:
ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter -
C:\Users\Elena
\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8:64bit: - Extra context menu item: Google Sidewiki... -
res://C:\Program Files (x86)\Google\Google
Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xel
exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not
found
O8 - Extra context menu item: Free YouTube to MP3 Converter -
C:\Users\Elena
\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files
(x86)\Google\Google
Toolbar\Component\GoogleToolbarDynamic_mui_en_7461B1589E8B4FB7.dll/cmsidewiki.html
File not found
O8 - Extra context menu item: Nach Microsoft E&xel exportieren -
res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: An OneNote senden -
{2670000A-7350-4f3c-8081-5663EE0C6C49} -
C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden -
{2670000A-7350-4f3c-8081-5663EE0C6C49} -
C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: Add to Evernote - {E0B8C461-F8FB-49b4-8373-FE32E92528A6}
- C:\Program Files (x86)\Evernote\Evernote3.5\enbar.dll (Evernote
Corporation)
O9 - Extra 'Tools' menuitem : Add to Evernote -
{E0B8C461-F8FB-49b4-8373-FE32E92528A6} - C:\Program Files
(x86)\Evernote\Evernote3.5\enbar.dll (Evernote Corporation)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java
Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java
Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java
Plug-in 1.6.0_20)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java
Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java
Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java
Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer =
192.168.1.1
O17 -
HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BC863AAA-54E2-4F05-A57B-5B003D0368DB}:
DhcpNameServer = 192.168.2.1
O17 -
HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C3FA99C0-6D20-46D3-A571-87208C430CB4}:
DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18 - Protocol\Handler\grooveLocalGWS
{88FED34C-F0CA-4636-A375-3CB6248B04CD} -
C:\PROGRA~2\MICROS~1\Office12\GRA32A~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} -
C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} -
C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -
C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml
{807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common
Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} -
C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) -
C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit -
(C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe
(Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet -
(SystemPropertiesPerformance.exe) -
C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe)
-C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe)
-C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) -
C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck -
{E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID
value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} -
C:\PROGRA~2\MICROS~1\Office12\GR469A~1.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{af095b55-5264-11e0-883c-c0cb38f21ddb}\Shell - "" =
AutoRun
O33 -
MountPoints2\{af095b55-5264-11e0-883c-c0cb38f21ddb}\Shell\AutoRun\command -
"" = E:\setup.exe -a
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days
==========
[2012.02.03 22:18:32 | 000,000,000 | ---D | C] -- C:\Users\Elena
\AppData\Roaming\Malwarebytes
[2012.02.03 22:18:28 | 000,000,000 | ---D | C] --
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes'
Anti-Malware
[2012.02.03 22:18:28 | 000,000,000 | ---D | C] --
C:\ProgramData\Malwarebytes
[2012.02.03 22:18:27 | 000,023,152 | ---- | C] (Malwarebytes Corporation)
-- C:\Windows\SysNative\drivers\mbam.sys
[2012.02.03 18:55:20 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\2012_02_03
[2012.02.02 11:23:48 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\AppData\Roaming\Auslogics
[2012.02.01 12:12:02 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\Offenbarung 23
[2012.02.01 12:10:58 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\Silvester
[2012.01.31 18:52:00 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\Michel Birbaek Frauengeschichten
[2012.01.29 20:33:59 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\examen deutsch
[2012.01.29 20:33:16 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\Literaturverfilmungen WS 11-12
[2012.01.20 17:27:23 | 000,000,000 | ---D | C] --
C:\ProgramData\regid.1986-12.com.adobe
[2012.01.20 17:20:37 | 000,000,000 | ---D | C] -- C:\Program Files\Common
Files\Adobe
[2012.01.20 17:16:19 | 000,010,224 | ---- | C] (Sonic Solutions) --
C:\Windows\SysNative\drivers\cdralw2k.sys
[2012.01.20 17:16:19 | 000,010,224 | ---- | C] (Sonic Solutions) --
C:\Windows\SysNative\drivers\cdr4_xp.sys
[2012.01.20 16:04:14 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2012.01.20 16:04:12 | 000,000,000 | ---D | C] -- C:\Program Files
(x86)\Adobe Download Assistant
[2012.01.13 18:30:55 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\handy kontakte
[2012.01.12 14:44:30 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\AppData\Roaming\Temp
[2012.01.11 17:18:35 | 001,446,912 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\lsasrv.dll
[2012.01.11 17:18:34 | 000,395,776 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\webio.dll
[2012.01.11 17:18:34 | 000,314,368 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysWow64\webio.dll
[2012.01.11 17:18:34 | 000,136,192 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\sspicli.dll
[2012.01.11 17:18:33 | 000,028,672 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\sspisrv.dll
[2012.01.11 17:18:33 | 000,028,160 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\secur32.dll
[2012.01.11 10:06:46 | 001,328,640 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysWow64\quartz.dll
[2012.01.11 10:06:45 | 001,572,864 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\quartz.dll
[2012.01.11 10:06:45 | 000,514,560 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysWow64\qdvd.dll
[2012.01.11 10:06:45 | 000,366,592 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\qdvd.dll
[2012.01.11 10:06:35 | 000,852,480 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\jscript.dll
[2012.01.11 10:06:35 | 000,716,800 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysWow64\jscript.dll
[2012.01.11 10:06:28 | 001,739,160 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\ntdll.dll
[2012.01.11 10:06:13 | 000,077,312 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\packager.dll
[2012.01.11 10:06:12 | 000,067,072 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysWow64\packager.dll
[2012.01.10 21:38:01 | 000,719,872 | ---- | C] (Abysmal Software) --
C:\Windows\SysWow64\devil.dll
[2012.01.10 21:38:01 | 000,369,152 | ---- | C] (The Public) --
C:\Windows\SysWow64\avisynth.dll
[2012.01.10 21:38:01 | 000,070,656 | ---- | C] (www.helixcommunity.org) --
C:\Windows\SysWow64\yv12vfw.dll
[2012.01.10 21:38:01 | 000,070,656 | ---- | C] (www.helixcommunity.org) --
C:\Windows\SysWow64\i420vfw.dll
[2012.01.10 21:37:59 | 000,000,000 | ---D | C] -- C:\Program Files
(x86)\AviSynth 2.5
[2012.01.10 21:33:51 | 000,278,528 | ---- | C] (Real Networks, Inc) --
C:\Windows\SysWow64\pncrt.dll
[2012.01.10 21:33:34 | 000,000,000 | ---D | C] -- C:\Program Files\Babylon
[2012.01.10 21:33:34 | 000,000,000 | ---D | C] -- C:\Program Files
(x86)\Babylon
[2012.01.10 21:31:37 | 000,000,000 | ---D | C] -- C:\Program Files
(x86)\eRightSoft
[2012.01.10 20:25:09 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\AppData\Roaming\vlc
[2012.01.09 22:44:59 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\examen ews
[2012.01.06 13:43:18 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Desktop\geocaching
[2012.01.06 11:13:09 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\AppData\Local\Samsung
[2012.01.06 11:13:02 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\AppData\Roaming\Samsung
[2012.01.06 11:12:59 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\Documents\samsung
[2012.01.06 11:11:26 | 001,917,416 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\WdfCoInstaller01005.dll
[2012.01.06 11:11:26 | 001,917,416 | ---- | C] (Microsoft Corporation) --
C:\Windows\SysNative\drivers\WdfCoInstaller01005.dll
[2012.01.06 11:11:26 | 000,177,640 | ---- | C] (MCCI Corporation) --
C:\Windows\SysNative\drivers\ssadmdm.sys
[2012.01.06 11:11:26 | 000,157,672 | ---- | C] (MCCI Corporation) --
C:\Windows\SysNative\drivers\ssadbus.sys
[2012.01.06 11:11:26 | 000,036,328 | ---- | C] (Google Inc) --
C:\Windows\SysNative\drivers\ssadadb.sys
[2012.01.06 11:11:26 | 000,016,872 | ---- | C] (MCCI Corporation) --
C:\Windows\SysNative\drivers\ssadmdfl.sys
[2012.01.06 11:11:26 | 000,013,800 | ---- | C] (MCCI Corporation) --
C:\Windows\SysNative\drivers\ssadwhnt.sys
[2012.01.06 11:11:26 | 000,013,800 | ---- | C] (MCCI Corporation) --
C:\Windows\SysNative\drivers\ssadwh.sys
[2012.01.06 11:11:26 | 000,013,288 | ---- | C] (MCCI Corporation) --
C:\Windows\SysNative\drivers\ssadcmnt.sys
[2012.01.06 11:11:26 | 000,013,288 | ---- | C] (MCCI Corporation) --
C:\Windows\SysNative\drivers\ssadcm.sys
[2012.01.06 11:11:25 | 000,146,920 | ---- | C] (MCCI Corporation) --
C:\Windows\SysNative\drivers\ssadserd.sys
[2012.01.06 11:10:06 | 000,000,000 | ---D | C] --
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
[2012.01.06 11:10:03 | 004,659,712 | ---- | C] (Dmitry Streblechenko) --
C:\Windows\SysWow64\Redemption.dll
[2012.01.06 11:09:55 | 000,821,824 | ---- | C] (Devguru Co., Ltd.) --
C:\Windows\SysWow64\dgderapi.dll
[2012.01.06 11:09:55 | 000,000,000 | ---D | C] -- C:\Program Files
(x86)\MarkAny
[2012.01.06 11:09:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2012.01.06 11:09:32 | 000,000,000 | ---D | C] -- C:\Program Files
(x86)\Samsung
[2012.01.06 11:08:35 | 000,000,000 | ---D | C] -- C:\Users\Elena
Geuer\AppData\Local\Downloaded Installations
[2011.02.01 22:34:45 | 000,250,544 | ---- | C] (KeyWorks Software) --
C:\Program Files (x86)\Common Files\keyhelp.ocx
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.02.03 22:24:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.03 22:24:14 | 2955,485,184 | -HS- | M] () -- C:\hiberfil.sys
[2012.02.03 22:18:28 | 000,000,977 | ---- | M] () --
C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.02.03 21:09:18 | 000,001,120 | ---- | M] () --
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.02.03 20:45:00 | 000,001,124 | ---- | M] () --
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.02.03 17:08:07 | 000,013,664 | -H-- | M] () --
C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.03 17:08:07 | 000,013,664 | -H-- | M] () --
C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.02.02 11:24:33 | 000,502,921 | ---- | M] () -- C:\test.xml
[2012.02.02 10:42:58 | 000,049,281 | ---- | M] () -- C:\Users\Elena \Desktop\folie2.pdf
[2012.02.01 13:02:56 | 001,500,254 | ---- | M] () --
C:\Windows\SysNative\PerfStringBackup.INI
[2012.02.01 13:02:56 | 000,654,844 | ---- | M] () --
C:\Windows\SysNative\perfh007.dat
[2012.02.01 13:02:56 | 000,616,686 | ---- | M] () --
C:\Windows\SysNative\perfh009.dat
[2012.02.01 13:02:56 | 000,130,426 | ---- | M] () --
C:\Windows\SysNative\perfc007.dat
[2012.02.01 13:02:56 | 000,106,808 | ---- | M] () --
C:\Windows\SysNative\perfc009.dat
[2012.01.20 17:22:14 | 000,420,272 | ---- | M] () --
C:\Windows\SysNative\FNTCACHE.DAT
[2012.01.10 21:33:27 | 000,000,476 | ---- | M] () -- C:\user.js
[2012.01.06 11:12:28 | 000,000,000 | -H-- | M] () --
C:\Windows\SysNative\drivers\Msft_Kernel_ssadadb_01005.Wdf
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.02.03 22:18:28 | 000,000,977 | ---- | C] () --
C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.02.02 10:46:30 | 000,502,921 | ---- | C] () -- C:\test.xml
[2012.02.02 10:42:58 | 000,049,281 | ---- | C] () -- C:\Users\Elena
\Desktop\folie2.pdf
[2012.01.20 17:20:29 | 000,000,997 | ---- | C] () --
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
[2012.01.20 17:16:19 | 000,001,912 | ---- | C] () --
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop
Elements 10.lnk
[2012.01.20 16:04:12 | 000,001,043 | ---- | C] () --
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Download
Assistant.lnk
[2012.01.10 21:38:01 | 000,032,256 | ---- | C] () --
C:\Windows\SysWow64\AVSredirect.dll
[2012.01.06 11:12:28 | 000,000,000 | -H-- | C] () --
C:\Windows\SysNative\drivers\Msft_Kernel_ssadadb_01005.Wdf
[2011.12.23 22:02:43 | 000,007,597 | ---- | C] () -- C:\Users\Elena
\AppData\Local\Resmon.ResmonCfg
[2011.12.23 20:58:28 | 000,030,568 | ---- | C] () --
C:\Windows\MusiccityDownload.exe
[2011.12.23 20:58:24 | 000,974,848 | ---- | C] () --
C:\Windows\SysWow64\cis-2.4.dll
[2011.12.23 20:58:24 | 000,081,920 | ---- | C] () --
C:\Windows\SysWow64\issacapi_bs-2.3.dll
[2011.12.23 20:58:24 | 000,065,536 | ---- | C] () --
C:\Windows\SysWow64\issacapi_pe-2.3.dll
[2011.12.23 20:58:24 | 000,057,344 | ---- | C] () --
C:\Windows\SysWow64\issacapi_se-2.3.dll
[2011.03.27 12:33:22 | 000,054,063 | ---- | C] () -- C:\Users\Elena
\AppData\Roaming\mdbu.bin
[2011.01.12 18:03:08 | 001,500,444 | ---- | C] () --
C:\Windows\SysWow64\PerfStringBackup.INI
[2011.01.11 00:29:58 | 000,000,056 | -H-- | C] () --
C:\ProgramData\ezsidmv.dat
[2010.07.12 23:11:37 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010.07.12 21:27:34 | 000,870,560 | ---- | C] () --
C:\Windows\SysWow64\igkrng575.bin
[2010.07.12 21:27:34 | 000,208,896 | ---- | C] () --
C:\Windows\SysWow64\iglhsip32.dll
[2010.07.12 21:27:34 | 000,143,360 | ---- | C] () --
C:\Windows\SysWow64\iglhcp32.dll
[2010.07.12 21:27:33 | 000,104,636 | ---- | C] () --
C:\Windows\SysWow64\igfcg575m.bin
[2010.07.12 21:27:32 | 000,127,868 | ---- | C] () --
C:\Windows\SysWow64\igcompkrng575.bin
[2010.07.12 21:27:25 | 000,028,732 | ---- | C] () --
C:\Windows\SysWow64\ativvsny.dat
[2010.07.12 21:27:25 | 000,026,936 | ---- | C] () --
C:\Windows\SysWow64\ativvsnl.dat
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () --
C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () --
C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () --
C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () --
C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () --
C:\Windows\SysWow64\mlang.dat
========== LOP Check ==========
[2011.09.15 15:51:08 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\Academic Software Zurich
[2012.02.02 11:23:48 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\Auslogics
[2011.12.30 22:11:25 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\Canneverbe Limited
[2011.02.17 21:42:24 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\Canon
[2011.04.29 14:17:11 | 000,000,000 | ---D | M] -- C:\Users\Elena
AppData\Roaming\CD-LabelPrint
[2012.01.20 16:04:14 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
[2011.04.11 23:11:56 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\de.myphotobook.creator.001F9DF2D0BAABEB11F42CCEE43224607B61109C.1
[2011.12.23 21:48:57 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\Dropbox
[2011.12.29 20:56:19 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\DVDVideoSoft
[2011.03.16 11:47:05 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.03.15 22:49:58 | 000,000,000 | ---D | M] -- C:\Users\Elena
AppData\Roaming\GetRightToGo
[2011.02.04 16:35:17 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\ICQ
[2011.01.30 16:41:46 | 000,000,000 | ---D | M] -- C:\Users\Elena \AppData\Roaming\IrfanView
[2012.01.06 11:13:02 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\Samsung
[2011.10.04 22:20:38 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\Scribus
[2012.01.29 22:39:18 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\SoftGrid Client
[2012.01.12 14:44:30 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\Temp
[2011.01.12 18:05:02 | 000,000,000 | ---D | M] -- C:\Users\Elena
\AppData\Roaming\TP
[2011.12.27 12:17:42 | 000,032,640 | ---- | M] () --
C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report > --- --- ---
und nun? |