OTL Logfile: Code:
OTL logfile created on: 20.02.2013 19:39:11 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\freeman\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,17 Gb Available Physical Memory | 72,25% Memory free
4,84 Gb Paging File | 4,21 Gb Available in Paging File | 87,10% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 143,13 Gb Total Space | 68,01 Gb Free Space | 47,52% Space Free | Partition Type: NTFS
Computer Name: DJWJVK3J | User Name: freeman | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\freeman\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Programme\Samsung\Kies\Kies.exe (Samsung)
PRC - C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Programme\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
PRC - C:\Programme\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Programme\Nero\Nero8\InCD\NBHRegInCDSrv.exe (Nero AG)
PRC - C:\Programme\Nero\Nero8\InCD\InCDsrv.exe (Nero AG)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Dell\MediaDirect\PCMService.exe (CyberLink Corp.)
PRC - C:\Programme\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation)
PRC - C:\Programme\Intel\Wireless\Bin\WLKEEPER.exe (Intel(R) Corporation)
PRC - C:\Programme\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation)
PRC - C:\Programme\Intel\Wireless\Bin\Dot1XCfg.exe (Intel Corporation)
PRC - C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
========== Modules (No Company Name) ==========
MOD - C:\Programme\Alwil Software\Avast5\defs\13022000\algo.dll ()
MOD - C:\Programme\Alwil Software\Avast5\defs\13021902\algo.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\DeviceHost\7f345e66934146fd5f2aaea9d0eeb158\DeviceHost.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.Multime#\9753e53a69949682b6b3947cf6266743\Kies.Common.Multimedia.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.MainUI\219742880f25663e6dd034f28f93c96d\Kies.Common.MainUI.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.Util\c301999e6fb4635eec88d9cb13c0b2ec\Kies.Common.Util.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.UI\d4afc3f90faf34f8a41b48fbb4778d9a\Kies.UI.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\GongSolutions.Wpf.D#\83bf0a1846e2477fc62f4bb4c3408127\GongSolutions.Wpf.DragDrop.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.ServiceProce#\81c0ff81b2ad570ee85d6cd7ce751bba\System.ServiceProcess.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies\582dc7adee1a9ca43d12d9eda5056561\Kies.ni.exe ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Theme\9547b6408b93eb86aed3774457bcd815\Kies.Theme.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\DummyStorePlugin\1cfcfa27ba42a9ae3b13d4ecd2ad3659\DummyStorePlugin.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\DevicePodcast\7f4c0f2ef99f9da90d960ec9c414e424\DevicePodcast.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\DeviceVideo\50ec054fd0362a41c9b741d522cf6084\DeviceVideo.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\DevicePhoto\3f6e6f1b67c913f184d7f12514f818da\DevicePhoto.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\DeviceMusic\1be986d3f51f86037b1fbd1483af57d9\DeviceMusic.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\VideoManager\97c764ace77d0eb9e522bb33a5c40cff\VideoManager.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PhotoManager\a8c32126c7eaf58c14ab65f35fa23afa\PhotoManager.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Podcaster\bfcde8708af85fad4589c9b2baf9134e\Podcaster.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\ff3157a926a4c62bd7c4fc462b44d4ae\Kies.Common.DeviceServiceLib.FirmwareUpdate.FirmwareUpdateAgentHelper.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.Pims\1cabd95ac7ae348432ecb52a1cbad756\Kies.Common.Pims.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Phonebook\9016847cccb98300eec0996553d7e7a5\Phonebook.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\DeviceCommonLib\8172fc619724f9ff01b61b2ff3c43bff\DeviceCommonLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\lib_Samsung_WitchPl#\3a8ddbbcd100d5630b6929169e8e4bd4\lib_Samsung_WitchPlaylist_v0.1.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Plugin.Content#\31cf4861ad2a4ea2e5cc0fce0b97e5d7\Kies.Plugin.ContentsManagerLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\MusicManager\c113524d93632b369246aeae79f421ff\MusicManager.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BATPlugin\f48f715d6ab97920980e3121d8a60c35\BATPlugin.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.StoreMa#\4055ce30dbdb84f2f3560e6cb883134a\Kies.Common.StoreManager.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.MediaDB\df304879fe55d5ebf9d64a4f94acbcc9\Kies.Common.MediaDB.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\ASF_cSharpAPI\779a065e9d217d3a3aeeb354f9fce387\ASF_cSharpAPI.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.AllShare\4bde149a6e4b5cbe6d6d9fd63bafbf80\Kies.Common.AllShare.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.FUSCryptLib\7296ee8d41eeb2bcc543df81eea19ebe\Interop.FUSCryptLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\79e92ed96ec5f1c4f562de9dc5d09fd2\Kies.Common.DeviceServiceLib.FirmwareUpdate.Common.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\c3cda346210d555748e0ee7c8467943a\Kies.Common.DeviceServiceLib.FirmwareUpdate.Downloader.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\0b49647da758c71de995e34612add065\Kies.Common.DeviceServiceLib.FileService.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.DevFileServ#\d1baf93e68f207b043f0861c5ee2d7ea\Interop.DevFileServiceLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.CDBurnCOMLib\c1739a9b18cf8b334e60bfc1e4d126db\Interop.CDBurnCOMLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\f635d8dc1390ce7ff0db7d25ea1aadee\Kies.Common.DeviceServiceLib.DeviceDataService.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.SyncService#\6169b94e04d363fb40d22ff30aaf24df\Interop.SyncServiceLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.DeviceManag#\d410d0b24dd23bff0ee0803559dd90ea\Interop.DeviceManagerLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.DeviceServi#\ed97f510e91aff4e4f00987ec1fb8b70\Interop.DeviceServiceModelDBLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\f6ae7000cda7f49e02b8ba05d329f028\Kies.Common.DeviceServiceLib.Interface.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.DeviceDataS#\0a17379e34031a7d1828d29a442a0b66\Interop.DeviceDataServiceLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.ConnectionM#\9f58a36246af15635bcce1b3ccc1c6d3\Interop.ConnectionManagerLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\e93cdcb2ef8d4d327785d81269ab8ea0\Kies.Common.DeviceServiceLib.DeviceManagement.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DeviceS#\178648e9fe2145d7e281f2881e956199\Kies.Common.DeviceService.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.MP3FileInfo#\5f0b67eb5313c092d5b8b56426dd30e2\Interop.MP3FileInfoCOMLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.OGGFileInfo#\b2c7788a3e89dfe8758d6184bac1b663\Interop.OGGFileInfoCOMLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.PRPLAYERCOR#\7316848f01ce1da27fc2d701f32cae0d\Interop.PRPLAYERCORELib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.P3MPINTERFA#\111be4cc197cabb6340170eeb54ae535\Interop.P3MPINTERFACECTRLLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.DBManag#\6ff313ce5f0b0593b00c46c9ebf6ce52\Kies.Common.DBManager.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\ICSharpCode.SharpZi#\78c73ae3f99d95d788e3690a561a7701\ICSharpCode.SharpZipLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Common.CRMMana#\b09b5aa29b27f372debe459161e61e78\Kies.Common.CRMManager.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CabLib\af22e5bb6307e2882abe5fbdb3c00c8e\CabLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Locale\dac369ddd19fc96fdc5c6bbea73d66b0\Kies.Locale.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.DeviceSearc#\4f4243b3bc2e4cdf0ec6e7ad5559aa20\Interop.DeviceSearchLib.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.MVVM\54a1fa3d80338ea79ee361f0011dfc15\Kies.MVVM.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Kies.Interface\af72bf6da78cc0720ef6fbc52c1e3b24\Kies.Interface.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Runtime.Remo#\1818a0dcd8e00ef24981eb52acf3f6bd\System.Runtime.Remoting.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xaml\25732130189e8f468a7d98647edffe8e\System.Xaml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\7de7ccd4d0e5a6fda2187aff3d5c4ee8\PresentationFramework.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\a23c39d504467a0024e5f20c0f962f3f\System.Xml.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\947b4fe468a1a03516ee26d9b3f4240a\System.Configuration.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationCore\608b2aa3ab5dfc3986285304a95a6dbf\PresentationCore.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\e773b94cc3f3fc25509904acb76cfe08\System.Core.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\WindowsBase\639dacb8fc8d07719bdb5742940b4c33\WindowsBase.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\5f79b00e1aaeafcc07907aa61fd3599e\System.ni.dll ()
MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\6a1ccc1e1a79ce267d3d1808af382cd6\mscorlib.ni.dll ()
MOD - C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
MOD - C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\fdm_ffext@freedownloadmanager.org\components\vmsfdmff.dll ()
MOD - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\PDFShell.DEU ()
MOD - C:\WINDOWS\system32\msdmo.dll ()
MOD - C:\Programme\Intel\Wireless\Bin\iWMSProv.dll ()
MOD - C:\Programme\Intel\Wireless\Bin\acAuth.dll ()
MOD - C:\Programme\Microsoft ActiveSync\rapiproxystub.dll ()
========== Services (SafeList) ==========
SRV - (stllssvr) -- C:\Programme\Gemeinsame Dateien\SureThing Shared\stllssvr.exe File not found
SRV - (sprtsvc_dellsupportcenter) -- C:\Programme\Dell Support Center\bin\sprtsvc.exe /service /p dellsupportcenter File not found
SRV - (HidServ) -- %SystemRoot%\System32\hidserv.dll File not found
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (avast! Antivirus) -- C:\Programme\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (NMIndexingService) -- C:\Programme\Gemeinsame Dateien\Nero\Lib\NMIndexingService.exe (Nero AG)
SRV - (NeroRegInCDSrv) -- C:\Programme\Nero\Nero8\InCD\NBHRegInCDSrv.exe (Nero AG)
SRV - (InCDsrv) -- C:\Programme\Nero\Nero8\InCD\InCDsrv.exe (Nero AG)
SRV - (WLANKEEPER) -- C:\Programme\Intel\Wireless\Bin\WLKEEPER.exe (Intel(R) Corporation)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)
========== Driver Services (SafeList) ==========
DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (mbr) -- C:\ComboFix\mbr.sys File not found
DRV - (lbrtfdc) -- File not found
DRV - (DBGMSG) -- dbgmsg.sys File not found
DRV - (Changer) -- File not found
DRV - (catchme) -- C:\DOKUME~1\freeman\LOKALE~1\Temp\catchme.sys File not found
DRV - (aswSnx) -- C:\WINDOWS\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswSP) -- C:\WINDOWS\System32\drivers\aswSP.sys (AVAST Software)
DRV - (aswTdi) -- C:\WINDOWS\System32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswRdr) -- C:\WINDOWS\System32\drivers\aswRdr.sys (AVAST Software)
DRV - (aswMon2) -- C:\WINDOWS\System32\drivers\aswmon2.sys (AVAST Software)
DRV - (Aavmker4) -- C:\WINDOWS\System32\drivers\aavmker4.sys (AVAST Software)
DRV - (aswFsBlk) -- C:\WINDOWS\System32\drivers\aswFsBlk.sys (AVAST Software)
DRV - (ssudmdm) -- C:\WINDOWS\system32\drivers\ssudmdm.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV - (dg_ssudbus) -- C:\WINDOWS\system32\drivers\ssudbus.sys (DEVGURU Co., LTD.(www.devguru.co.kr))
DRV - (FTSER2K) -- C:\WINDOWS\system32\drivers\ftser2k.sys (FTDI Ltd.)
DRV - (UsbserFilt) -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys (Nokia)
DRV - (upperdev) -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys (Nokia)
DRV - (nmwcdc) -- C:\WINDOWS\system32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcd) -- C:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia)
DRV - (incdrm) -- C:\WINDOWS\system32\drivers\InCDRm.sys (Nero AG)
DRV - (InCDPass) -- C:\WINDOWS\system32\drivers\InCDPass.sys (Nero AG)
DRV - (InCDRec) -- C:\WINDOWS\system32\drivers\InCDrec.sys (Nero AG)
DRV - (InCDfs) -- C:\WINDOWS\system32\drivers\InCDfs.sys (Nero AG)
DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (GTUQBUS) -- C:\WINDOWS\system32\drivers\gtuqbus.sys (Option N.V.)
DRV - (GTPTSER) -- C:\WINDOWS\system32\drivers\gtptser.sys (Option N.V.)
DRV - (OEM02Vfx) -- C:\WINDOWS\system32\drivers\OEM02Vfx.sys (EyePower Games Pte. Ltd.)
DRV - (OEM02Dev) -- C:\WINDOWS\system32\drivers\OEM02Dev.sys (Creative Technology Ltd.)
DRV - (NETw4x32) -- C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation)
DRV - (HSF_DPV) -- C:\WINDOWS\system32\drivers\HSF_DPV.sys (Conexant Systems, Inc.)
DRV - (HSFHWAZL) -- C:\WINDOWS\system32\drivers\HSFHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\WINDOWS\system32\drivers\HSF_CNXT.sys (Conexant Systems, Inc.)
DRV - (STHDA) -- C:\WINDOWS\system32\drivers\sthda.sys (SigmaTel, Inc.)
DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (rismxdp) -- C:\WINDOWS\system32\drivers\rixdptsk.sys (REDC)
DRV - (rimsptsk) -- C:\WINDOWS\system32\drivers\rimsptsk.sys (REDC)
DRV - (rimmptsk) -- C:\WINDOWS\system32\drivers\rimmptsk.sys (REDC)
DRV - (PDNMp50) -- C:\WINDOWS\system32\drivers\PDNMp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (PDNSp50) -- C:\WINDOWS\system32\drivers\PDNSp50.sys (Printing Communications Assoc., Inc. (PCAUSA))
DRV - (bcm4sbxp) -- C:\WINDOWS\system32\drivers\bcm4sbxp.sys (Broadcom Corporation)
DRV - (DXEC02) -- C:\WINDOWS\system32\drivers\dxec02.sys (Knowles Acoustics)
DRV - (FTDIBUS) -- C:\WINDOWS\system32\drivers\ftdibus.sys (FTDI Ltd.)
DRV - (APPDRV) -- C:\WINDOWS\system32\drivers\APPDRV.SYS (Dell Inc)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://alice.aol.de
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Page_URL = hxxp://partnerpage.google.com/smallbiz.dell.com/de_de?hl=de&client=dell-row&channel=de-smb&ibd=3080328
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = hxxp://partnerpage.google.com/smallbiz.dell.com/de_de?hl=de&client=dell-row&channel=de-smb&ibd=3080328
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://partnerpage.google.com/smallbiz.dell.com/de_de?hl=de&client=dell-row&channel=de-smb&ibd=3080328
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://partnerpage.google.com/smallbiz.dell.com/de_de?hl=de&client=dell-row&channel=de-smb&ibd=3080328
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.sparkasse-staufen-breisach.de/
IE - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.update: false
FF - prefs.js..browser.startup.homepage: "hxxp://www.ebay.de/"
FF - prefs.js..extensions.enabledAddons: %7B1A2D0EC4-75F5-4c91-89C4-3656F6E44B68%7D:0.4.6
FF - prefs.js..extensions.enabledAddons: %7B6e84150a-d526-41f1-a480-a67d3fed910d%7D:1.5.1
FF - prefs.js..extensions.enabledAddons: %7B902D2C4A-457A-4EF9-AD43-7014562929FF%7D:0.4.6
FF - prefs.js..extensions.enabledAddons: fdm_ffext%40freedownloadmanager.org:1.5.7.6
FF - prefs.js..extensions.enabledAddons: %7B62760FD6-B943-48C9-AB09-F99C6FE96088%7D:2.5.4
FF - prefs.js..extensions.enabledAddons: %7B19503e42-ca3c-4c27-b1e2-9cdb2170ee34%7D:1.5.4.1
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.2
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {249df6a2-e336-47d1-b6c3-ec711ad140ca}:0.5.1.00023
FF - prefs.js..extensions.enabledItems: {62760FD6-B943-48C9-AB09-F99C6FE96088}:2.1.6
FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.2.8
FF - prefs.js..extensions.enabledItems: {6e84150a-d526-41f1-a480-a67d3fed910d}:1.4.5.1
FF - prefs.js..extensions.enabledItems: {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}:0.4.6
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {902D2C4A-457A-4EF9-AD43-7014562929FF}:0.4.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: fdm_ffext@freedownloadmanager.org:1.3.4
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_5_502_149.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Programme\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_39: C:\WINDOWS\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll File not found
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Programme\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.12.16 23:49:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\wrc@avast.com: C:\Programme\Alwil Software\Avast5\WebRep\FF [2012.11.18 21:10:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Components: C:\Programme\Mozilla Firefox\components [2013.02.06 12:40:39 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2013.02.06 12:40:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2013.01.10 12:51:16 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 17.0.2\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2013.01.10 12:51:19 | 000,000,000 | ---D | M]
[2010.05.13 08:39:54 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Extensions
[2010.05.13 08:39:54 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2013.02.14 14:14:49 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions
[2011.01.02 18:42:00 | 000,000,000 | ---D | M] (Image Zoom) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}
[2010.08.06 16:21:06 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.10.11 20:38:34 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011.01.03 11:16:39 | 000,000,000 | ---D | M] (Context Search) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{902D2C4A-457A-4EF9-AD43-7014562929FF}
[2012.12.15 09:54:21 | 000,000,000 | ---D | M] (Free Download Manager plugin) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\fdm_ffext@freedownloadmanager.org
[2013.02.12 17:08:54 | 000,348,127 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi
[2012.12.12 21:23:15 | 000,139,198 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{249df6a2-e336-47d1-b6c3-ec711ad140ca}.xpi
[2012.12.21 19:05:09 | 000,728,761 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}.xpi
[2012.04.28 13:02:10 | 000,081,104 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{6e84150a-d526-41f1-a480-a67d3fed910d}.xpi
[2013.02.14 14:14:49 | 000,817,280 | ---- | M] () (No name found) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Mozilla\Firefox\Profiles\vymxzuon.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.02.06 12:40:20 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.02.06 12:40:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
[2013.02.06 12:40:19 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
[2013.02.06 12:40:20 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
[2013.02.06 12:40:20 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA}
[2013.02.06 12:40:38 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2012.06.20 07:12:46 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.08 18:31:44 | 000,002,465 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012.06.20 07:12:46 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012.06.20 07:12:46 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.06.20 07:12:46 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.06.20 07:12:46 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2013.02.19 21:09:06 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (CBrowserHelperObject Object) - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Programme\Dell\BAE\BAE.dll (Dell Inc.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Programme\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [DivXMediaServer] C:\Programme\DivX\DivX Media Server\DivXMediaServer.exe ()
O4 - HKLM..\Run: [DivXUpdate] C:\Programme\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [IntelWireless] C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Programme\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [KiesTrayAgent] C:\Programme\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKLM..\Run: [NeroFilterCheck] C:\Programme\Gemeinsame Dateien\Nero\Lib\NeroCheck.exe (Nero AG)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVHotkey] C:\WINDOWS\System32\nvhotkey.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [Opti OTB] C:\Programme\Boxking\OTB\OTB.exe ()
O4 - HKLM..\Run: [PCMService] C:\Programme\Dell\MediaDirect\PCMService.exe (CyberLink Corp.)
O4 - HKLM..\Run: [SigmatelSysTrayApp] C:\WINDOWS\stsystra.exe (SigmaTel, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005..\Run: [KiesPreload] C:\Programme\Samsung\Kies\Kies.exe (Samsung)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O8 - Extra context menu item: Alles mit FDM herunterladen - C:\Programme\Free Download Manager\dlall.htm ()
O8 - Extra context menu item: Auswahl mit FDM herunterladen - C:\Programme\Free Download Manager\dlselected.htm ()
O8 - Extra context menu item: Datei mit FDM herunterladen - C:\Programme\Free Download Manager\dllink.htm ()
O8 - Extra context menu item: Videos mit FDM herunterladen - C:\Programme\Free Download Manager\dlfvideo.htm ()
O15 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\..Trusted Domains: microsoft.com ([*.update] http in Vertrauenswürdige Sites)
O15 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\..Trusted Domains: microsoft.com ([*.update] https in Vertrauenswürdige Sites)
O15 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\..Trusted Domains: microsoft.com ([update] http in Vertrauenswürdige Sites)
O15 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\..Trusted Domains: microsoft.com ([update] https in Vertrauenswürdige Sites)
O15 - HKU\S-1-5-21-2996378729-2477001294-3108411674-1005\..Trusted Domains: update.com ([download.windows] https in Vertrauenswürdige Sites)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1207763972718 (WUWebControl Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1232481574187 (MUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_39-windows-i586.cab (Java Plug-in 1.6.0_39)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{01DE84A6-6341-469C-A648-16456889F02D}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{484CAA69-E536-4838-BF0D-BAF73DC5C3EB}: NameServer = 62.109.123.7 213.191.92.86
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 () - hxxp://i.dell.com/images/global/brand/icons/moved_.png
O24 - Desktop Components:1 (Die derzeitige Homepage) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004.08.13 13:54:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2013.02.20 19:35:48 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\freeman\Desktop\OTL.exe
[2013.02.20 04:12:05 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2013.02.19 20:59:06 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2013.02.19 20:56:51 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2013.02.19 20:56:50 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2013.02.19 20:56:50 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2013.02.19 20:56:50 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2013.02.19 20:56:02 | 000,000,000 | ---D | C] -- C:\Qoobox
[2013.02.19 20:55:44 | 000,000,000 | ---D | C] -- C:\WINDOWS\erdnt
[2013.02.19 20:02:43 | 005,034,457 | R--- | C] (Swearware) -- C:\Dokumente und Einstellungen\freeman\Desktop\ComboFix.exe
[2013.02.19 16:10:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\7-Zip
[2013.02.19 16:10:45 | 000,000,000 | ---D | C] -- C:\Programme\7-Zip
[2013.02.19 15:18:40 | 000,688,992 | ---- | C] (Swearware) -- C:\Dokumente und Einstellungen\freeman\Desktop\dds.exe
[2013.02.19 15:18:22 | 000,688,992 | R--- | C] (Swearware) -- C:\Dokumente und Einstellungen\freeman\Desktop\dds.com
[2013.02.19 12:53:48 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\freeman\Desktop\HiJackThis204.exe
[2013.02.15 17:05:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\freeman\Desktop\Flash
[2013.02.13 11:10:18 | 000,759,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vgx.dll
[2013.02.08 21:34:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\CrashDump
[2013.02.06 12:40:17 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[2013.02.03 16:59:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\NativeFus_Log
[2013.02.03 16:59:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\freeman\Lokale Einstellungen\Anwendungsdaten\Samsung
[2013.02.03 16:58:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Samsung
[2013.02.03 16:54:04 | 000,181,344 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\WINDOWS\System32\drivers\ssudmdm.sys
[2013.02.03 16:54:03 | 000,083,168 | ---- | C] (DEVGURU Co., LTD.(www.devguru.co.kr)) -- C:\WINDOWS\System32\drivers\ssudbus.sys
[2013.02.03 16:52:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\MyFree Codec
[2013.02.03 16:52:32 | 000,000,000 | ---D | C] -- C:\Programme\MyFree Codec
[2013.02.03 16:46:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Samsung
[2013.02.03 16:46:45 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\WINDOWS\System32\Redemption.dll
[2013.02.03 16:46:26 | 000,821,824 | ---- | C] (Devguru Co., Ltd.) -- C:\WINDOWS\System32\dgderapi.dll
[2013.02.03 16:46:26 | 000,319,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\DIFxAPI.dll
[2013.02.03 16:46:26 | 000,020,032 | ---- | C] (Devguru Co., Ltd) -- C:\WINDOWS\System32\drivers\dgderdrv.sys
[2013.02.03 16:45:00 | 000,000,000 | ---D | C] -- C:\Programme\Samsung
[2013.02.03 16:45:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2013.02.03 16:32:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\freeman\Lokale Einstellungen\Anwendungsdaten\Downloaded Installations
[2013.02.03 15:19:13 | 000,158,128 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2013.02.03 15:19:13 | 000,149,936 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2013.02.03 15:19:13 | 000,149,936 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2013.01.28 15:30:38 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\freeman\Recent
[2008.07.02 21:57:02 | 000,047,360 | ---- | C] (VSO Software) -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\pcouffin.sys
[72 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013.02.20 19:35:48 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\freeman\Desktop\OTL.exe
[2013.02.20 18:56:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2013.02.20 15:53:00 | 000,000,310 | -H-- | M] () -- C:\WINDOWS\tasks\avast! Emergency Update.job
[2013.02.20 12:06:00 | 000,056,895 | ---- | M] () -- C:\WINDOWS\System32\nvModes.001
[2013.02.19 21:09:06 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2013.02.19 20:59:15 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2013.02.19 20:03:01 | 005,034,457 | R--- | M] (Swearware) -- C:\Dokumente und Einstellungen\freeman\Desktop\ComboFix.exe
[2013.02.19 19:56:17 | 000,183,162 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2013.02.19 19:55:23 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2013.02.19 19:55:16 | 3219,169,280 | -HS- | M] () -- C:\hiberfil.sys
[2013.02.19 18:20:07 | 000,587,671 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\adwcleaner0.exe
[2013.02.19 16:22:19 | 000,063,849 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\Logfile.zip
[2013.02.19 16:19:28 | 000,054,034 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\gmer.zip
[2013.02.19 16:19:22 | 000,000,404 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\defogger_disable.zip
[2013.02.19 16:19:04 | 000,004,414 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\attach.zip
[2013.02.19 16:18:53 | 000,004,581 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\dds.zip
[2013.02.19 16:10:15 | 001,110,476 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\7z920.exe
[2013.02.19 15:53:42 | 000,003,002 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2013.02.19 15:29:04 | 000,374,784 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\hssrmio5.exe
[2013.02.19 15:26:21 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\defogger_reenable
[2013.02.19 15:24:23 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\Defogger.exe
[2013.02.19 15:18:42 | 000,688,992 | ---- | M] (Swearware) -- C:\Dokumente und Einstellungen\freeman\Desktop\dds.exe
[2013.02.19 15:18:23 | 000,688,992 | R--- | M] (Swearware) -- C:\Dokumente und Einstellungen\freeman\Desktop\dds.com
[2013.02.19 12:53:48 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\freeman\Desktop\HiJackThis204.exe
[2013.02.17 01:33:37 | 000,000,664 | ---- | M] () -- C:\WINDOWS\System32\d3d9caps.dat
[2013.02.15 17:33:03 | 530,329,212 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\I8190XXALK6_I8190XEFALK1_HOME_rooted_by_avicohh.zip
[2013.02.15 16:29:49 | 000,198,809 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\Odin3-v1.85.zip
[2013.02.15 14:23:19 | 000,004,384 | ---- | M] () -- C:\WINDOWS\Raktuell.ini
[2013.02.13 20:11:29 | 000,550,160 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2013.02.13 20:11:29 | 000,524,262 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2013.02.13 20:11:29 | 000,115,892 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2013.02.13 20:11:29 | 000,097,894 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2013.02.13 20:06:01 | 000,194,568 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2013.02.13 11:22:35 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2013.02.10 15:53:38 | 000,004,075 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\DModem_Trace.trc
[2013.02.09 23:56:14 | 000,697,712 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2013.02.09 23:56:14 | 000,074,096 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2013.02.07 18:45:06 | 004,988,850 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\com.avast.android.mobilesecurity.apk
[2013.02.03 18:21:05 | 019,939,656 | ---- | M] () -- C:\Dokumente und Einstellungen\freeman\Desktop\Samsung Benutzerhandbuch.pdf
[2013.02.03 17:01:58 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\UMDF\Msft_User_WpdMtpDr_01_00_00.Wdf
[2013.02.03 16:58:43 | 000,001,597 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Samsung Kies.lnk
[2013.01.29 16:09:03 | 000,000,155 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2013.01.26 04:55:37 | 000,552,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\oleaut32.dll
[72 C:\WINDOWS\System32\dllcache\*.tmp files -> C:\WINDOWS\System32\dllcache\*.tmp -> ]
[10 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013.02.19 20:59:15 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2013.02.19 20:59:10 | 000,262,448 | RHS- | C] () -- C:\cmldr
[2013.02.19 20:56:51 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2013.02.19 20:56:50 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2013.02.19 20:56:50 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2013.02.19 20:56:50 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2013.02.19 20:56:50 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2013.02.19 18:20:07 | 000,587,671 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\adwcleaner0.exe
[2013.02.19 16:21:36 | 000,063,849 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\Logfile.zip
[2013.02.19 16:19:28 | 000,054,034 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\gmer.zip
[2013.02.19 16:19:22 | 000,000,404 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\defogger_disable.zip
[2013.02.19 16:19:04 | 000,004,414 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\attach.zip
[2013.02.19 16:18:53 | 000,004,581 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\dds.zip
[2013.02.19 16:10:14 | 001,110,476 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\7z920.exe
[2013.02.19 15:29:04 | 000,374,784 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\hssrmio5.exe
[2013.02.19 15:26:21 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\defogger_reenable
[2013.02.19 15:24:23 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\Defogger.exe
[2013.02.15 17:09:09 | 530,329,212 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\I8190XXALK6_I8190XEFALK1_HOME_rooted_by_avicohh.zip
[2013.02.15 16:29:49 | 000,198,809 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\Odin3-v1.85.zip
[2013.02.13 11:21:46 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2013.02.07 18:45:05 | 004,988,850 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\com.avast.android.mobilesecurity.apk
[2013.02.03 18:20:41 | 019,939,656 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Desktop\Samsung Benutzerhandbuch.pdf
[2013.02.03 16:58:43 | 000,001,597 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Samsung Kies.lnk
[2012.12.18 10:06:10 | 000,030,568 | ---- | C] () -- C:\WINDOWS\MusiccityDownload.exe
[2012.12.18 10:06:06 | 000,974,848 | ---- | C] () -- C:\WINDOWS\System32\cis-2.4.dll
[2012.12.18 10:06:06 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\issacapi_bs-2.3.dll
[2012.12.18 10:06:06 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\issacapi_pe-2.3.dll
[2012.12.18 10:06:06 | 000,057,344 | ---- | C] () -- C:\WINDOWS\System32\issacapi_se-2.3.dll
[2012.10.22 13:48:10 | 000,000,111 | ---- | C] () -- C:\WINDOWS\telephon.ini
[2012.09.27 19:22:48 | 000,007,603 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\.recently-used.xbel
[2012.09.10 07:12:20 | 000,693,208 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-S-1-5-21-2996378729-2477001294-3108411674-1005-0.dat
[2012.09.10 07:12:19 | 000,204,514 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\WPFFontCache_v0400-System.dat
[2012.02.18 00:33:16 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.01.03 17:41:27 | 000,000,000 | ---- | C] () -- C:\WINDOWS\OpPrintServer.INI
[2011.09.02 22:24:24 | 000,002,508 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\$_hpcst$.hpc
[2011.03.05 18:15:46 | 000,086,082 | R--- | C] () -- C:\WINDOWS\System32\ftdiunin.exe
[2011.03.05 18:15:46 | 000,000,110 | R--- | C] () -- C:\WINDOWS\System32\ftdiun2k.ini
[2010.08.31 22:26:50 | 000,003,584 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.05.27 21:21:52 | 000,002,101 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\default.pls
[2009.02.20 22:22:12 | 000,004,075 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\DModem_Trace.trc
[2008.07.02 21:57:02 | 000,007,887 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\pcouffin.cat
[2008.07.02 21:57:02 | 000,001,144 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\pcouffin.inf
[2008.05.02 14:14:55 | 000,001,024 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\.rnd
[2008.04.21 15:16:30 | 000,001,496 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\wklnhst.dat
[2008.04.02 11:59:29 | 000,000,140 | ---- | C] () -- C:\Dokumente und Einstellungen\freeman\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
========== ZeroAccess Check ==========
[2004.08.13 14:02:02 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2010.09.09 15:17:08 | 001,510,400 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.02.09 11:51:44 | 000,473,600 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2008.04.14 03:22:32 | 000,273,920 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2010.07.11 13:51:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Alwil Software
[2008.11.10 22:18:33 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2011.03.17 11:17:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Downloaded Installations
[2011.03.17 09:15:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations
[2010.05.14 16:28:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LightScribe
[2011.03.17 09:12:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nokia
[2008.10.13 22:47:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic
[2008.09.20 19:05:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2010.12.10 21:32:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC-Doctor
[2013.02.12 13:29:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PCDr
[2013.02.03 16:52:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Samsung
[2011.10.31 14:25:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SupportSoft
[2011.03.25 22:58:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2008.04.17 16:52:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Vodafone
[2009.08.27 13:33:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\vsosdk
[2011.03.19 22:40:27 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}
[2010.02.04 12:26:32 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2012.11.25 00:06:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Canon
[2008.11.24 18:16:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\CD-LabelPrint
[2008.09.20 19:21:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Datalayer
[2011.12.16 23:56:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\DDMSettings
[2011.05.29 17:52:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Free Download Manager
[2012.09.27 19:34:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\gtk-2.0
[2011.03.05 22:20:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\ImgSoft.de
[2012.05.27 00:03:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Nokia
[2009.10.31 17:46:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\OpenOffice.org
[2008.09.20 20:49:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\PC Suite
[2010.12.10 18:26:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\PCDr
[2010.01.10 01:01:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\PersBackup
[2013.02.03 16:58:57 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Samsung
[2008.05.19 19:50:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Simple Star
[2011.03.16 07:49:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\TeamViewer
[2008.05.19 20:42:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Template
[2010.05.13 08:39:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Thunderbird
[2008.04.02 14:59:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\tmp
[2011.03.19 16:23:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\TuneUp Software
[2011.03.19 15:59:39 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Uniblue
[2009.09.04 21:13:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\freeman\Anwendungsdaten\Vso
[2008.04.15 15:35:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\NetworkService\Anwendungsdaten\Bytemobile
========== Purity Check ==========
< End of report >
--- --- ---
OTL Logfile: Code:
OTL Extras logfile created on: 20.02.2013 19:39:11 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Dokumente und Einstellungen\freeman\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,17 Gb Available Physical Memory | 72,25% Memory free
4,84 Gb Paging File | 4,21 Gb Available in Paging File | 87,10% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 143,13 Gb Total Space | 68,01 Gb Free Space | 47,52% Space Free | Partition Type: NTFS
Computer Name: DJWJVK3J | User Name: freeman | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
.url [@ = InternetShortcut] -- rundll32.exe ieframe.dll,OpenURL %l
[HKEY_USERS\S-1-5-21-2996378729-2477001294-3108411674-1005\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -osint -url "%1" (Mozilla Corporation)
InternetShortcut [open] -- rundll32.exe ieframe.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"26675:TCP" = 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\rapimgr.exe" = C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\wcescomm.exe" = C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\WCESMgr.exe" = C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"%windir%\system32\sessmgr.exe" = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\rapimgr.exe" = C:\Programme\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\wcescomm.exe" = C:\Programme\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\WCESMgr.exe" = C:\Programme\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application -- (Microsoft Corporation)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{00170407-78E1-11D2-B60F-006097C998E7}" = Microsoft Word 2000
"{06BE8AFD-A8E2-4B63-BAE7-287016D16ACB}" = mSSO
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0B8FE30C-D5B2-4453-B26B-E9BED2D11423}" = OTB
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{0E94871C-623C-464F-A117-B8474BFF84E1}" = Nokia MTP driver
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP610_series" = Canon MP610 series
"{1D5E29AD-39A9-4D0A-A8B6-46A6FCD8C995}" = Live! Cam Avatar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83216033FF}" = Java(TM) 6 Update 39
"{2C164906-E68F-462A-9010-70DD022223EF}" = RemoteCapture Task 1.0.2
"{2F81FBFC-9A37-431F-9050-14B55485DF5A}" = Internet Library
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35E1EC43-D4FC-4E4A-AAB3-20DDA27E8BB0}" = Sonic Activation Module
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{3F92ABBB-6BBF-11D5-B229-002078017FBF}" = NetWaiting
"{498A4E3D-562E-4129-8722-6DCAB12384AE}" = Windows Communication Foundation Language Pack - DEU
"{49D687E5-6784-431B-A0A2-2F23B8CC5A1B}" = mHlpDell
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D568C38-0552-4CDD-A643-01FAFA2957EF}" = Nokia Software Updater
"{4D6183C0-005C-4B1F-8261-4B0F71F1C4A5}" = Nokia Multimedia Player
"{4FCB1267-7380-4EBA-9A6C-69809C6E8227}" = Nokia Music Player
"{531317A5-586A-4E36-87C1-CA823447B375}" = Nokia PC Suite
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{5CCABD37-479D-4304-B1A5-67952C25F8F2}" = Nokia Software Launcher
"{612B9183-67A9-4B44-9877-2F059E35B86A}" = Broadcom 440x 10/100 Integrated Controller
"{62230596-37E5-4618-A329-0D21F529A86F}" = Browser Address Error Redirector
"{63DB9CCD-2B56-4217-9A3D-507AC78320CA}" = mWMI
"{65D0C510-D7B6-4438-9FC8-E6B91115AB0D}" = Live! Cam Avatar Creator
"{69640730-B830-4C24-BB5C-222DA1260548}" = Turbo Lister 2
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7228FD8C-3B9E-4204-AE36-8A466107685B}" = Windows Workflow Foundation DE Language Pack
"{74F7662C-B1DB-489E-A8AC-07A06B24978B}" = Dell System Restore
"{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{829CD169-E692-48E8-9BDE-A3E8D8B65538}" = mSCfg
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8927E07C-97F7-4A54-88FB-D976F50DD46E}" = Turbo Lister 2
"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{90120000-0020-0409-0000-0000000FF1CE}" = Compatibility Pack for the 2007 Office system
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{92DF2F1B-F63C-4D9A-B3E1-B2D11AE29790}" = Windows Presentation Foundation Language Pack (DEU)
"{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{9518F764-C54D-47B2-9E73-154B21E79FD2}" = RAW Image Task 1.0
"{99E862CC-6F69-4D39-99AA-DBF71BF3B585}" = OpenOffice.org 3.1
"{9BDEF074-020E-458D-ADC5-8FF68E0C9B56}" = OutlookAddinSetup
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9C6978E8-B6D0-4AB7-A7A0-D81A74FBF745}" = MediaDirect
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A5A70E61-FEAB-4CEC-977C-BE0EF8DC05AB}" = PC Connectivity Solution
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{B208806F-A231-4FA0-AB3F-5C1B8979223E}" = Microsoft ActiveSync 4.0
"{B9B9863A-32FD-4133-ADB7-46244ED77694}" = Camera Support Core Library
"{BA75BE51-5E2E-4FA4-923C-63ACEAD63FB9}" = VAG-COM 311 Deutsch
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{BEF56F2D-56ED-4176-BF72-7B68D4A3B98D}" = Canon PhotoRecord
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}" = Canon Utilities ZoomBrowser EX
"{C5074CC4-0E26-4716-A307-960272A90040}" = QuickSet
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{C99C0593-3B48-41D9-B42F-6E035B320449}" = Broadcom Management Programs
"{C9FFC925-E27E-436E-A2DF-652324D51033}" = Nero 8 Essentials
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D1B5E9C8-4CCF-44E3-87D6-7C00D7DA5370}" = IntelliSonic Speech Enhancement
"{DE286975-ACF1-45B8-9EF7-34E162B2C817}" = MovieEdit Task
"{E646DCF0-5A68-11D5-B229-002078017FBF}" = Digital Line Detect
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore
"{EE565795-2776-415A-B31C-EB3A8D7C6FA4}" = Nokia Lifeblog 2.1
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F1FDAA01-988C-423F-AC12-0D8F333943FD}" = Nokia Connectivity Cable Driver
"{F2A7F421-1679-48D5-B918-96999014ED53}" = Microsoft .NET Framework 3.0 German Language Pack
"{F37942A8-B21B-4C5A-A1D2-B676BF55EAE0}" = Camera Window
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}" = mDrWiFi
"{F63A3748-B93D-4360-9AD4-B064481A5C7B}" = Modem-Diagnose-Tool
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"3271E907F27C989F2C244ACB3D32020E3DD3CA6F" = Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"7-Zip" = 7-Zip 9.20
"AC3Filter_is1" = AC3Filter 1.63b
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Advanced Video FX Engine" = Advanced Video FX Engine
"AutoScan8400" = AutoScan8400
"avast" = avast! Free Antivirus
"Avi2Dvd" = Avi2Dvd 0.6.1
"AviSynth" = AviSynth 2.5
"Canon MP610 series Benutzerregistrierung" = Canon MP610 series Benutzerregistrierung
"CanonMyPrinter" = Canon My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"CCleaner" = CCleaner
"CD Bremse_is1" = CD Bremse 1.49
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2C06&SUBSYS_14F1000F" = Conexant HDA D330 MDC V.92 Modem
"CoreAAC Audio Decoder" = CoreAAC Audio Decoder (remove only)
"Creative OEM002" = Laptop Integrated Webcam Driver (1.03.02.0719)
"Dell Webcam Center" = Dell Webcam Center
"Dell Webcam Manager" = Dell Webcam Manager
"DivX Setup" = DivX-Setup
"DVD Shrink DE_is1" = DVD Shrink 3.2 deutsch
"DVDFab 6_is1" = DVDFab 6.0.4.0 (28/07/2009)
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Free Download Manager_is1" = Free Download Manager Language pack
"Free PDF to Word Doc Converter_is1" = Free PDF to Word Doc Converter v1.1
"FTDICOMM" = FTDI USB Serial Converter Drivers
"HaaliMkx" = Haali Media Splitter
"InstallShield_{2C164906-E68F-462A-9010-70DD022223EF}" = Canon RemoteCapture Task for ZoomBrowser EX
"InstallShield_{2F81FBFC-9A37-431F-9050-14B55485DF5A}" = Canon Internet Library for ZoomBrowser EX
"InstallShield_{4D6183C0-005C-4B1F-8261-4B0F71F1C4A5}" = Nokia Multimedia Player
"InstallShield_{69640730-B830-4C24-BB5C-222DA1260548}" = Turbo Lister 2
"InstallShield_{758C8301-2696-4855-AF45-534B1200980A}" = Samsung Kies
"InstallShield_{9518F764-C54D-47B2-9E73-154B21E79FD2}" = Canon RAW Image Task for ZoomBrowser EX
"InstallShield_{B9B9863A-32FD-4133-ADB7-46244ED77694}" = Canon Camera Support Core Library
"InstallShield_{DE286975-ACF1-45B8-9EF7-34E162B2C817}" = Canon MovieEdit Task for ZoomBrowser EX
"InstallShield_{F37942A8-B21B-4C5A-A1D2-B676BF55EAE0}" = Canon Camera Window for ZoomBrowser EX
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100
"MediaNavigation.CDLabelPrint" = CD-LabelPrint
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU
"Microsoft .NET Framework 3.0 German Language Pack" = Microsoft .NET Framework 3.0 German Language Pack
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"MozBackup_is1" = MozBackup 1.4.7
"Mozilla Firefox 18.0.2 (x86 de)" = Mozilla Firefox 18.0.2 (x86 de)
"Mozilla Thunderbird 17.0.2 (x86 de)" = Mozilla Thunderbird 17.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MP Navigator EX 1.0" = Canon MP Navigator EX 1.0
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NVIDIA Drivers" = NVIDIA Drivers
"PC-Doctor for Windows" = Dell Support Center
"ProInst" = Intel(R) PROSet/Wireless Software
"SearchAssist" = SearchAssist
"SynTPDeinstKey" = Dell Touchpad
"VLC media player" = VLC media player 2.0.4
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.6.4
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-2996378729-2477001294-3108411674-1005\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"f031ef6ac137efc5" = Dell Driver Download Manager
"MyFreeCodec" = MyFreeCodec
"PC Suite für den Nokia 9110 Communicator V1.4" = PC Suite für den Nokia 9110 Communicator V1.4
========== Last 20 Event Log Errors ==========
[ Antivirus Events ]
Error - 07.10.2009 14:07:45 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 07.10.2009 14:07:46 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 07.10.2009 14:07:49 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 07.10.2009 14:07:50 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 07.10.2009 14:07:51 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 07.10.2009 14:07:52 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 07.11.2009 05:18:51 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 07.11.2009 17:15:32 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 09.11.2009 02:47:55 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
Error - 09.11.2009 02:58:04 | Computer Name = DJWJVK3J | Source = avast! | ID = 33554522
Description =
[ Application Events ]
Error - 24.12.2012 10:33:09 | Computer Name = DJWJVK3J | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung MDirect.exe, Version 4.7.0.2704, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 24.12.2012 10:35:22 | Computer Name = DJWJVK3J | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung MDirect.exe, Version 4.7.0.2704, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 24.12.2012 10:35:22 | Computer Name = DJWJVK3J | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung MDirect.exe, Version 4.7.0.2704, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 16.01.2013 00:42:06 | Computer Name = DJWJVK3J | Source = .NET Runtime Optimization Service | ID = 1103
Description = .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32)
- Tried to start a service that wasn't the latest version of CLR Optimization service.
Will shutdown
Error - 20.01.2013 13:40:52 | Computer Name = DJWJVK3J | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 18.0.1.4764, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 29.01.2013 11:07:25 | Computer Name = DJWJVK3J | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung showtime.exe, Version 4.3.9.0, fehlgeschlagenes
Modul qdvd.dll, Version 6.5.2600.6169, Fehleradresse 0x0002b9b6.
Error - 29.01.2013 11:09:15 | Computer Name = DJWJVK3J | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung ShowTime.exe, Version 4.3.9.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 29.01.2013 11:09:16 | Computer Name = DJWJVK3J | Source = Application Hang | ID = 1001
Description = Fehlerhafter Speicherbereich 1062004572.
Error - 03.02.2013 13:12:01 | Computer Name = DJWJVK3J | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Kies.exe, Version 1.0.0.1077, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 10.02.2013 12:22:49 | Computer Name = DJWJVK3J | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 18.0.2.4780, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
[ System Events ]
Error - 12.02.2013 12:02:44 | Computer Name = DJWJVK3J | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SupportSoft Sprocket Service (dellsupportcenter)" wurde
aufgrund folgenden Fehlers nicht gestartet: %%5
Error - 12.02.2013 12:04:28 | Computer Name = DJWJVK3J | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "upnphost"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {204810B9-73B2-11D4-BF42-00B0D0118B56}
Error - 13.02.2013 15:07:07 | Computer Name = DJWJVK3J | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SupportSoft Sprocket Service (dellsupportcenter)" wurde
aufgrund folgenden Fehlers nicht gestartet: %%5
Error - 13.02.2013 15:08:49 | Computer Name = DJWJVK3J | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "upnphost"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {204810B9-73B2-11D4-BF42-00B0D0118B56}
Error - 16.02.2013 20:34:15 | Computer Name = DJWJVK3J | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SupportSoft Sprocket Service (dellsupportcenter)" wurde
aufgrund folgenden Fehlers nicht gestartet: %%5
Error - 16.02.2013 20:34:41 | Computer Name = DJWJVK3J | Source = Service Control Manager | ID = 7011
Description = Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung
von Dienst NVSvc.
Error - 16.02.2013 20:35:06 | Computer Name = DJWJVK3J | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "upnphost"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {204810B9-73B2-11D4-BF42-00B0D0118B56}
Error - 19.02.2013 10:41:43 | Computer Name = DJWJVK3J | Source = atapi | ID = 262153
Description = Das Gerät \Device\Ide\IdePort1 hat innerhalb der Fehlerwartezeit nicht
geantwortet.
Error - 19.02.2013 14:56:33 | Computer Name = DJWJVK3J | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SupportSoft Sprocket Service (dellsupportcenter)" wurde
aufgrund folgenden Fehlers nicht gestartet: %%5
Error - 19.02.2013 14:57:58 | Computer Name = DJWJVK3J | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1058" aufgetreten, als der Dienst "upnphost"
mit den Argumenten "" gestartet wurde, um den folgenden Server zu verwenden: {204810B9-73B2-11D4-BF42-00B0D0118B56}
< End of report >
--- --- ---
Hallo,
der Rechner läuft eigentlich gut. Was heute war ist: das ich auf Thunderbird die Links in den Emails nicht mehr öffen konnte , bzw. die haben sich nicht mehr automatisch geöffnet. Das habe ich durch eine Einstellung korrigiert.
Danke Gruss Peter |
AdwCleaner auf deinen Desktop.
SecurityCheck und:
WARNUNG an die MITLESER: 
Textbox. 