akira.d.air | 16.06.2010 19:59 | ich glaube du hast mein problem missverstanden. :confused:
aber egal, ein freund hat mir geholfen!
Hier sind die zwei Logfiles
OTL.txt
OTL Logfile:
OTL EXTRAS Logfile: Code:
OTL logfile created on: 16.06.2010 20:46:47 - Run 1
OTL by OldTimer - Version 3.2.6.0 Folder = D:\Dokumente und Einstellungen\8. Dimension\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
895,00 Mb Total Physical Memory | 550,00 Mb Available Physical Memory | 61,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): D:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 102,74 Gb Total Space | 102,66 Gb Free Space | 99,92% Space Free | Partition Type: NTFS
Drive D: | 130,14 Gb Total Space | 111,17 Gb Free Space | 85,42% Space Free | Partition Type: NTFS
Drive E: | 694,47 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: PERSI
Current User Name: 8. Dimension
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan
========== Processes (SafeList) ==========
PRC - [2010.06.16 20:38:50 | 000,572,416 | ---- | M] (OldTimer Tools) -- D:\Dokumente und Einstellungen\8. Dimension\Desktop\OTL.exe
PRC - [2010.02.18 12:43:18 | 000,248,040 | ---- | M] (Sun Microsystems, Inc.) -- D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
PRC - [2010.01.03 18:07:48 | 000,246,520 | ---- | M] () -- D:\Programme\ICQ6Toolbar\ICQ Service.exe
PRC - [2009.09.30 20:58:42 | 000,026,464 | ---- | M] (Microsoft Corporation) -- D:\Programme\Windows Live\Contacts\wlcomm.exe
PRC - [2009.07.21 14:34:28 | 000,185,089 | ---- | M] (Avira GmbH) -- D:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2009.05.19 12:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) -- D:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
PRC - [2009.05.13 16:48:18 | 000,108,289 | ---- | M] (Avira GmbH) -- D:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2009.03.02 13:08:43 | 000,209,153 | ---- | M] (Avira GmbH) -- D:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\explorer.exe
PRC - [2007.10.11 08:45:56 | 000,051,712 | ---- | M] (ArcSoft) -- D:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe
PRC - [2007.10.11 08:45:52 | 000,031,232 | ---- | M] (ArcSoft) -- D:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACDaemon.exe
PRC - [2007.09.28 15:12:14 | 000,330,240 | ---- | M] (ArcSoft, Inc.) -- D:\Programme\Hama\Hama Webcam Suite\Magic-i Visual Effects\Magic-i Visual Effects.exe
PRC - [2007.07.11 16:09:48 | 000,020,480 | ---- | M] () -- D:\WINDOWS\FixCamera.exe
PRC - [2007.04.21 09:37:02 | 000,270,336 | ---- | M] () -- D:\WINDOWS\tsnpstd3.exe
PRC - [2006.09.19 09:07:28 | 000,827,392 | ---- | M] () -- D:\WINDOWS\vsnpstd3.exe
========== Modules (SafeList) ==========
MOD - [2010.06.16 20:38:50 | 000,572,416 | ---- | M] (OldTimer Tools) -- D:\Dokumente und Einstellungen\8. Dimension\Desktop\OTL.exe
MOD - [2008.04.14 04:21:06 | 000,110,592 | ---- | M] (Microsoft Corporation) -- D:\WINDOWS\system32\msscript.ocx
========== Win32 Services (SafeList) ==========
SRV - [2010.01.03 18:07:48 | 000,246,520 | ---- | M] () [Auto | Running] -- D:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2009.08.05 22:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- D:\Programme\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2009.07.21 14:34:28 | 000,185,089 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2009.05.19 12:36:18 | 000,240,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- D:\Programme\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe -- (SeaPort)
SRV - [2009.05.13 16:48:18 | 000,108,289 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2007.10.11 08:45:56 | 000,051,712 | ---- | M] (ArcSoft) [Auto | Running] -- D:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
========== Driver Services (SafeList) ==========
DRV - [2010.03.07 00:00:08 | 000,056,816 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- D:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.08.05 22:48:42 | 000,054,752 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- D:\WINDOWS\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009.05.11 10:12:20 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.03.30 10:33:03 | 000,096,104 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2009.02.13 12:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008.10.29 07:34:40 | 000,644,096 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\rt2870.sys -- (rt2870)
DRV - [2008.04.13 18:36:05 | 000,144,384 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\hdaudbus.sys -- (HDAudBus)
DRV - [2007.11.27 21:06:42 | 004,630,016 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007.11.08 23:52:00 | 006,866,368 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nv4_mini.sys -- (nv)
DRV - [2007.05.30 19:15:08 | 000,013,184 | ---- | M] (ArcSoft, Inc.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\ArcSoftKsUFilter.sys -- (ArcSoftKsUFilter)
DRV - [2007.03.27 18:19:36 | 010,252,544 | ---- | M] (Sonix Co. Ltd.) [Kernel | On_Demand | Stopped] -- D:\WINDOWS\system32\drivers\snpstd3.sys -- (SNPSTD3) USB PC Camera (SNPSTD3)
DRV - [2007.03.06 06:27:32 | 000,019,968 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2007.03.06 06:27:28 | 000,058,752 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2007.02.16 02:50:32 | 000,012,032 | R--- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\nvsmu.sys -- (nvsmu)
DRV - [2006.11.10 15:05:00 | 000,018,688 | ---- | M] (Arcsoft, Inc.) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\afc.sys -- (Afc)
DRV - [2001.08.17 14:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
DRV - [2001.08.17 13:14:24 | 000,444,416 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\fpcibase.sys -- (fpcibase)
DRV - [2001.08.17 13:13:48 | 000,037,568 | ---- | M] (AVM GmbH) [Kernel | On_Demand | Running] -- D:\WINDOWS\system32\drivers\avmwan.sys -- (AVMWAN)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://search.live.com/sphome.aspx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.live.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2431245
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
[2010.06.09 22:18:59 | 000,000,000 | ---D | M] -- D:\Programme\Mozilla Firefox\extensions
O1 HOSTS File: ([2004.08.04 14:00:00 | 000,000,820 | ---- | M]) - D:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - File not found
O2 - BHO: (Search Helper) - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - File not found
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - File not found
O2 - BHO: (no name) - {D032570A-5F63-4812-A094-87D007C23012} - D:\WINDOWS\system32\iebho.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - File not found
O2 - BHO: (Windows Live Toolbar Helper) - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - File not found
O2 - BHO: (JQSIEStartDetectorImpl Class) - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - File not found
O3 - HKLM\..\Toolbar: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - D:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - D:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\WebBrowser: (&Windows Live Toolbar) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - D:\Programme\Windows Live\Toolbar\wltcore.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Alcmtr] D:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [ArcSoft Connection Service] D:\Programme\Gemeinsame Dateien\ArcSoft\Connection Service\Bin\ACDaemon.exe (ArcSoft)
O4 - HKLM..\Run: [avgnt] D:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [FixCamera] D:\WINDOWS\FixCamera.exe ()
O4 - HKLM..\Run: [NvCplDaemon] D:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] D:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] D:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [snpstd3] D:\WINDOWS\vsnpstd3.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] D:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [tsnpstd3] D:\WINDOWS\tsnpstd3.exe ()
O4 - Startup: D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Magic-i Visual Effects.lnk = D:\Programme\Hama\Hama Webcam Suite\Magic-i Visual Effects\Magic-i Visual Effects.exe (ArcSoft, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - D:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - D:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7 - {88EB38EF-4D2C-436D-ABD3-56B232674062} - D:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - D:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - D:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - D:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - D:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (D:\WINDOWS\system32\userinit.exe) - D:\WINDOWS\system32\userinit.exe ()
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: D:\Dokumente und Einstellungen\8. Dimension\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: D:\Dokumente und Einstellungen\8. Dimension\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.03.05 20:37:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2003.10.21 18:09:36 | 000,000,115 | R--- | M] () - E:\Autorun.inf -- [ CDFS ]
O32 - AutoRun File - [2003.11.12 20:12:21 | 000,000,000 | R--D | M] - E:\autorun -- [ CDFS ]
O32 - AutoRun File - [2003.10.21 18:09:36 | 000,036,864 | R--- | M] () - E:\autorun.exe -- [ CDFS ]
O33 - MountPoints2\{b7a17542-288b-11df-9428-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{b7a17542-288b-11df-9428-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{b7a17542-288b-11df-9428-806d6172696f}\Shell\AutoRun\command - "" = E:\autorun.exe -- [2003.10.21 18:09:36 | 000,036,864 | R--- | M] ()
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O36 - AppCertDlls: krnlonui - (D:\WINDOWS\system32\autoon32.dll) - D:\WINDOWS\system32\autoon32.dll ()
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 90 Days ==========
[2010.06.16 20:38:49 | 000,572,416 | ---- | C] (OldTimer Tools) -- D:\Dokumente und Einstellungen\8. Dimension\Desktop\OTL.exe
[2010.06.12 16:36:20 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Adobe
[2010.06.10 21:22:55 | 000,000,000 | ---D | C] -- D:\Programme\trend micro
[2010.06.10 21:22:54 | 000,000,000 | ---D | C] -- D:\rsit
[2010.06.10 16:05:03 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\Uniblue
[2010.05.18 17:16:50 | 000,000,000 | ---D | C] -- D:\WINDOWS\Prefetch
[2010.05.18 17:04:16 | 000,000,000 | ---D | C] -- D:\WINDOWS\l2schemas
[2010.05.18 17:04:16 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\de
[2010.05.18 17:04:16 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\bits
[2010.05.18 16:57:56 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\ReinstallBackups
[2010.05.18 16:54:35 | 000,000,000 | -H-D | C] -- D:\WINDOWS\$NtServicePackUninstall$
[2010.05.14 20:49:47 | 000,155,648 | ---- | C] ( ) -- D:\WINDOWS\System32\rsnpstd3.dll
[2010.05.14 20:49:47 | 000,053,248 | ---- | C] ( ) -- D:\WINDOWS\csnpstd3.dll
[2010.05.14 20:49:47 | 000,000,000 | ---D | C] -- D:\Programme\Gemeinsame Dateien\snpstd3
[2010.05.14 20:49:27 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\InstallShield
[2010.05.01 18:50:24 | 000,000,000 | ---D | C] -- D:\Programme\THQ
[2010.05.01 14:25:57 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\appmgmt
[2010.05.01 14:21:09 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\.tuxguitar-1.2
[2010.05.01 14:20:34 | 000,000,000 | ---D | C] -- D:\Programme\TuxGuitar
[2010.05.01 14:20:34 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Lokale Einstellungen\Anwendungsdaten\Conduit
[2010.05.01 14:20:33 | 000,000,000 | ---D | C] -- D:\Programme\Conduit
[2010.04.23 15:52:06 | 000,000,000 | ---D | C] -- D:\Programme\Atari
[2010.04.19 17:18:15 | 000,000,000 | ---D | C] -- D:\Programme\UBISOFT
[2010.04.18 19:40:34 | 000,000,000 | ---D | C] -- D:\Programme\Microsoft Games
[2010.04.18 19:26:06 | 000,086,016 | ---- | C] (MindVision) -- D:\WINDOWS\unvise32qt.exe
[2010.04.18 19:25:45 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QuickTime
[2010.04.18 19:25:33 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\QuickTime
[2010.04.18 19:25:31 | 000,000,000 | ---D | C] -- D:\Programme\QuickTime
[2010.04.18 19:18:52 | 000,000,000 | ---D | C] -- D:\Programme\heureka
[2010.04.11 18:08:41 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\Meine empfangenen Dateien
[2010.04.08 13:37:05 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\WinRAR
[2010.04.05 23:03:34 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\WebCam Media
[2010.04.05 23:03:30 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Lokale Einstellungen\Anwendungsdaten\ArcSoft
[2010.04.05 23:03:24 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\WebCam Albums
[2010.04.05 23:03:24 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\ArcSoft
[2010.04.05 23:02:21 | 000,018,688 | ---- | C] (Arcsoft, Inc.) -- D:\WINDOWS\System32\drivers\afc.sys
[2010.04.05 23:02:00 | 000,056,064 | ---- | C] (ArcSoft, Inc.) -- D:\WINDOWS\System32\ArcSoftKsUFilter.dll
[2010.04.05 23:02:00 | 000,013,184 | ---- | C] (ArcSoft, Inc.) -- D:\WINDOWS\System32\drivers\ArcSoftKsUFilter.sys
[2010.04.05 23:01:48 | 000,000,000 | ---D | C] -- D:\Programme\Gemeinsame Dateien\ArcSoft
[2010.04.05 23:01:47 | 000,212,480 | ---- | C] (Eastman Kodak) -- D:\WINDOWS\System32\PCDLIB32.DLL
[2010.04.05 23:01:46 | 000,000,000 | ---D | C] -- D:\Programme\Hama
[2010.04.04 21:31:23 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Tracing
[2010.04.04 21:30:20 | 000,000,000 | ---D | C] -- D:\Programme\Microsoft Silverlight
[2010.04.04 21:24:00 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\skypePM
[2010.04.04 21:23:19 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\Skype
[2010.03.30 13:27:15 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\Dokumente
[2010.03.20 23:59:10 | 000,000,000 | ---D | C] -- D:\Programme\Audacity
[2010.03.20 23:46:03 | 000,000,000 | ---D | C] -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\ICQ
[2010.03.20 17:50:47 | 000,000,000 | ---D | C] -- D:\Programme\Microsoft Sync Framework
[2010.03.20 12:14:55 | 000,000,000 | ---D | C] -- D:\WINDOWS\ie7updates
[2010.03.20 12:14:24 | 000,000,000 | ---D | C] -- D:\WINDOWS\WBEM
[2010.03.20 12:14:24 | 000,000,000 | ---D | C] -- D:\WINDOWS\System32\de-de
[2010.03.20 12:12:33 | 000,000,000 | -H-D | C] -- D:\WINDOWS\ie7
[2010.03.20 12:11:43 | 000,000,000 | -H-D | C] -- D:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2010.03.20 12:07:29 | 000,000,000 | -H-D | C] -- D:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
[2010.03.20 12:02:25 | 000,000,000 | ---D | C] -- D:\WINDOWS\network diagnostic
[2007.03.12 11:41:52 | 000,061,440 | ---- | C] ( ) -- D:\WINDOWS\System32\vsnpstd3.dll
[2005.11.23 12:55:32 | 000,053,248 | ---- | C] ( ) -- D:\WINDOWS\System32\csnpstd3.dll
[4 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 90 Days ==========
[2010.06.16 20:38:50 | 000,572,416 | ---- | M] (OldTimer Tools) -- D:\Dokumente und Einstellungen\8. Dimension\Desktop\OTL.exe
[2010.06.16 17:57:47 | 000,013,742 | ---- | M] () -- D:\WINDOWS\System32\wpa.dbl
[2010.06.16 17:57:09 | 000,000,006 | -H-- | M] () -- D:\WINDOWS\tasks\SA.DAT
[2010.06.16 17:57:07 | 000,002,048 | --S- | M] () -- D:\WINDOWS\bootstat.dat
[2010.06.16 16:22:55 | 003,145,728 | -H-- | M] () -- D:\Dokumente und Einstellungen\8. Dimension\NTUSER.DAT
[2010.06.16 16:22:27 | 005,330,310 | -H-- | M] () -- D:\Dokumente und Einstellungen\8. Dimension\Lokale Einstellungen\Anwendungsdaten\IconCache.db
[2010.06.16 16:05:55 | 000,318,976 | ---- | M] () -- D:\WINDOWS\System32\iebho.dll
[2010.06.15 17:57:38 | 000,081,920 | ---- | M] () -- D:\WINDOWS\System32\userinit.exe
[2010.06.14 12:49:04 | 001,042,054 | ---- | M] () -- D:\WINDOWS\System32\PerfStringBackup.INI
[2010.06.14 12:49:04 | 000,448,802 | ---- | M] () -- D:\WINDOWS\System32\perfh007.dat
[2010.06.14 12:49:04 | 000,432,670 | ---- | M] () -- D:\WINDOWS\System32\perfh009.dat
[2010.06.14 12:49:04 | 000,080,258 | ---- | M] () -- D:\WINDOWS\System32\perfc007.dat
[2010.06.14 12:49:04 | 000,067,626 | ---- | M] () -- D:\WINDOWS\System32\perfc009.dat
[2010.06.11 15:24:23 | 000,108,600 | ---- | M] () -- D:\WINDOWS\System32\FNTCACHE.DAT
[2010.06.10 22:44:55 | 000,001,374 | ---- | M] () -- D:\WINDOWS\imsins.BAK
[2010.06.05 23:25:50 | 000,046,592 | ---- | M] () -- D:\WINDOWS\System32\autoon32.dll
[2010.06.05 19:51:31 | 000,002,243 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2010.05.23 23:46:28 | 000,016,792 | ---- | M] () -- D:\Dokumente und Einstellungen\8. Dimension\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
[2010.05.18 17:18:08 | 000,316,640 | ---- | M] () -- D:\WINDOWS\WMSysPr9.prx
[2010.05.14 21:10:50 | 000,000,750 | ---- | M] () -- D:\WINDOWS\win.ini
[2010.05.01 18:51:35 | 000,002,089 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\SpongeBob Schwammkopf - Schlacht um Bikini Bottom.lnk
[2010.04.24 18:14:23 | 000,001,579 | ---- | M] () -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\Brief an Großmama.rtf
[2010.04.23 15:54:43 | 000,001,709 | ---- | M] () -- D:\Dokumente und Einstellungen\8. Dimension\Desktop\Asterix & Obelix XXL.lnk
[2010.04.19 17:18:28 | 000,001,839 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Spielen Prince of Persia The Sands of Time.lnk
[2010.04.18 20:21:29 | 000,001,783 | ---- | M] () -- D:\Dokumente und Einstellungen\8. Dimension\Desktop\Age of Empires II.lnk
[2010.04.18 19:43:00 | 000,001,683 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Zoo Tycoon.lnk
[2010.04.18 19:25:43 | 000,000,361 | ---- | M] () -- D:\WINDOWS\System32\QuickTime.qtp
[2010.04.05 23:02:22 | 000,001,729 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Hama Webcam Suite.lnk
[2010.04.05 23:02:01 | 000,001,925 | ---- | M] () -- D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Magic-i Visual Effects.lnk
[2010.04.03 15:36:13 | 000,001,558 | ---- | M] () -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\Ess Plan.rtf
[2010.04.03 14:46:07 | 000,001,790 | ---- | M] () -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\Mad World Tabs.rtf
[4 D:\WINDOWS\*.tmp files -> D:\WINDOWS\*.tmp -> ]
[1 D:\WINDOWS\System32\*.tmp files -> D:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.06.16 16:05:55 | 000,318,976 | ---- | C] () -- D:\WINDOWS\System32\iebho.dll
[2010.06.05 23:25:50 | 000,046,592 | ---- | C] () -- D:\WINDOWS\System32\autoon32.dll
[2010.05.14 20:49:54 | 000,020,480 | ---- | C] () -- D:\WINDOWS\FixCamera.exe
[2010.05.14 20:49:50 | 000,270,336 | ---- | C] () -- D:\WINDOWS\tsnpstd3.exe
[2010.05.01 18:51:35 | 000,002,089 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\SpongeBob Schwammkopf - Schlacht um Bikini Bottom.lnk
[2010.04.24 18:14:22 | 000,001,579 | ---- | C] () -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\Brief an Großmama.rtf
[2010.04.23 15:54:43 | 000,001,709 | ---- | C] () -- D:\Dokumente und Einstellungen\8. Dimension\Desktop\Asterix & Obelix XXL.lnk
[2010.04.19 18:08:26 | 000,069,632 | ---- | C] () -- D:\WINDOWS\System32\xmltok.dll
[2010.04.19 18:08:26 | 000,036,864 | ---- | C] () -- D:\WINDOWS\System32\xmlparse.dll
[2010.04.19 18:08:26 | 000,035,840 | ---- | C] () -- D:\WINDOWS\System32\comdlg32.oca
[2010.04.19 18:08:26 | 000,029,184 | ---- | C] () -- D:\WINDOWS\System32\MSINET.oca
[2010.04.19 17:18:28 | 000,001,839 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Spielen Prince of Persia The Sands of Time.lnk
[2010.04.18 20:21:29 | 000,001,783 | ---- | C] () -- D:\Dokumente und Einstellungen\8. Dimension\Desktop\Age of Empires II.lnk
[2010.04.18 19:43:00 | 000,001,683 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Zoo Tycoon.lnk
[2010.04.18 19:25:43 | 000,000,361 | ---- | C] () -- D:\WINDOWS\System32\QuickTime.qtp
[2010.04.05 23:02:22 | 000,001,729 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Desktop\Hama Webcam Suite.lnk
[2010.04.05 23:02:01 | 000,001,925 | ---- | C] () -- D:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Magic-i Visual Effects.lnk
[2010.04.03 15:36:13 | 000,001,558 | ---- | C] () -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\Ess Plan.rtf
[2010.04.03 14:46:07 | 000,001,790 | ---- | C] () -- D:\Dokumente und Einstellungen\8. Dimension\Eigene Dateien\Mad World Tabs.rtf
[2010.03.05 22:07:31 | 000,004,675 | ---- | C] () -- D:\WINDOWS\Ascd_tmp.ini
[2010.03.05 22:07:30 | 000,010,288 | ---- | C] () -- D:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007.11.08 23:52:00 | 001,703,936 | ---- | C] () -- D:\WINDOWS\System32\nvwdmcpl.dll
[2007.11.08 23:52:00 | 001,474,560 | ---- | C] () -- D:\WINDOWS\System32\nview.dll
[2007.11.08 23:52:00 | 001,019,904 | ---- | C] () -- D:\WINDOWS\System32\nvwimg.dll
[2007.11.08 23:52:00 | 000,466,944 | ---- | C] () -- D:\WINDOWS\System32\nvshell.dll
[2007.11.08 23:52:00 | 000,286,720 | ---- | C] () -- D:\WINDOWS\System32\nvnt4cpl.dll
[2004.02.27 16:36:18 | 000,015,498 | ---- | C] () -- D:\WINDOWS\snpstd3.ini
[1997.06.14 10:56:08 | 000,056,832 | ---- | C] () -- D:\WINDOWS\System32\iyvu9_32.dll
========== LOP Check ==========
[2010.06.05 21:06:55 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\ICQ
[2010.03.14 23:41:17 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\MSNInstaller
[2010.06.10 16:05:03 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\8. Dimension\Anwendungsdaten\Uniblue
[2010.03.10 20:31:33 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Electronic Arts
[2010.03.06 14:05:57 | 000,000,000 | ---D | M] -- D:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
========== Purity Check ==========
< End of report > --- --- ---
--- --- ---
Extras.Txt
OTL EXTRAS Logfile: Code:
OTL Extras logfile created on: 16.06.2010 20:46:47 - Run 1
OTL by OldTimer - Version 3.2.6.0 Folder = D:\Dokumente und Einstellungen\8. Dimension\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.13)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
895,00 Mb Total Physical Memory | 550,00 Mb Available Physical Memory | 61,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 80,00% Paging File free
Paging file location(s): D:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = D: | %SystemRoot% = D:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 102,74 Gb Total Space | 102,66 Gb Free Space | 99,92% Space Free | Partition Type: NTFS
Drive D: | 130,14 Gb Total Space | 111,17 Gb Free Space | 85,42% Space Free | Partition Type: NTFS
Drive E: | 694,47 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: PERSI
Current User Name: 8. Dimension
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: On
Skip Microsoft Files: On
File Age = 90 Days
Output = Standard
Quick Scan
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Programme\Windows Live\Messenger\wlcsdk.exe" = D:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"D:\Programme\ICQ7.0\ICQ.exe" = D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"D:\Programme\ICQ7.0\aolload.exe" = D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"D:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = D:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Programme\Windows Live\Messenger\wlcsdk.exe" = D:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)
"D:\Programme\ICQ7.0\ICQ.exe" = D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"D:\Programme\ICQ7.0\aolload.exe" = D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"D:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = D:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{1F0D5576-C383-4E5E-9906-0B47BECBB8B6}" = Hama Webcam Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{70B7A167-0B88-445D-A3EA-97C73AA88CAC}" = Windows Live Toolbar
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8C453F13-6877-4D34-8816-009ABDE306DB}" = Prince of Persia The Sands of Time
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{994223F3-A99B-4DDD-9E1D-0190A17C6860}" = Windows Live Family Safety
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}" = Die*Sims™*3
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D562E689-0ECD-4239-B1A0-323252893405}" = Asterix & Obelix XXL
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{E95FEA31-034D-42D0-8ED6-44D7F838BA6E}" = SpongeBob Schwammkopf - Schlacht um Bikini Bottom
"{ECD03DA7-5952-406A-8156-5F0C93618D1F}" = Hama Webcam AC-150
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Age of Empires 2.0" = Microsoft Age of Empires II
"Audacity_is1" = Audacity 1.2.6
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"EA0D8F08C10A625644188FE542C75305CB084120" = Windows-Treiberpaket - Ralink Technology, Corp. (rt2870) Net (10/29/2008 1.02.04.0000)
"ICQToolbar" = ICQ Toolbar
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{D562E689-0ECD-4239-B1A0-323252893405}" = Asterix & Obelix XXL
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MSNINST" = MSN
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"QuickTime" = QuickTime
"WIC" = Windows Imaging Component
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Zoo Tycoon 1.0" = Microsoft Zoo Tycoon
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 04.05.2010 17:09:49 | Computer Name = PERSI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung msnmsgr.exe, Version 14.0.8089.726, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00000074.
Error - 14.05.2010 14:39:00 | Computer Name = PERSI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung uwebcam.exe, Version 2.0.10.65, fehlgeschlagenes
Modul quicktime.qts, Version 5.0.2.15, Fehleradresse 0x0007fd6b.
Error - 14.05.2010 14:39:41 | Computer Name = PERSI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung mediaimpression.exe, Version 1.1.5.157,
fehlgeschlagenes Modul quicktime.qts, Version 5.0.2.15, Fehleradresse 0x0007fd6b.
Error - 14.05.2010 14:52:27 | Computer Name = PERSI | Source = ESENT | ID = 490
Description = svchost (1192) Versuch, Datei "D:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der
Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet
wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error - 14.05.2010 14:52:27 | Computer Name = PERSI | Source = ESENT | ID = 470
Description = Catalog Database (1192) Datenbank D:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb
wurde teilweise angehängt. Anhängungsstufe: 3. Fehler: -1032.
Error - 14.05.2010 15:06:24 | Computer Name = PERSI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung uwebcam.exe, Version 2.0.10.65, fehlgeschlagenes
Modul quicktime.qts, Version 5.0.2.15, Fehleradresse 0x0007fd6b.
Error - 14.05.2010 15:18:21 | Computer Name = PERSI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung wlxquicktimecontrolhost.exe, Version 14.0.8081.709,
fehlgeschlagenes Modul quicktime.qts, Version 5.0.2.15, Fehleradresse 0x0007fd6b.
Error - 14.05.2010 15:19:22 | Computer Name = PERSI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung wlxquicktimecontrolhost.exe, Version 14.0.8081.709,
fehlgeschlagenes Modul quicktime.qts, Version 5.0.2.15, Fehleradresse 0x0007fd6b.
Error - 14.05.2010 15:20:14 | Computer Name = PERSI | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung biolab.exe, Version 8.0.0.187, fehlgeschlagenes
Modul quicktime.qts, Version 5.0.2.15, Fehleradresse 0x0007fd6b.
Error - 14.05.2010 17:40:53 | Computer Name = PERSI | Source = Avira AntiVir | ID = 4112
Description = Bei der Anforderung nach einer Resource des Betriebssystems trat ein
Fehler auf. Die Resource 'ThreadInit' wurde nicht zugewiesen. Der Grund hierfür könnte
zu wenig Hauptspeicher oder ein anderer Systemfehler sein. Fehlercode: 0x18
[ System Events ]
Error - 14.05.2010 15:18:52 | Computer Name = PERSI | Source = DCOM | ID = 10010
Description = Der Server "{AE3A66BB-85FE-49B8-BF7B-4DB4E0005091}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error - 14.05.2010 15:19:54 | Computer Name = PERSI | Source = DCOM | ID = 10010
Description = Der Server "{AE3A66BB-85FE-49B8-BF7B-4DB4E0005091}" konnte innerhalb
des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error - 25.05.2010 14:59:57 | Computer Name = PERSI | Source = Dhcp | ID = 1001
Description = Diesem Computer konnte keine Netzwerkadresse durch den DHCP-Server
für die Netzwerkkarte mit der Netzwerkadresse 000CF680950B zugeteilt werden. Der
folgende Fehler ist aufgetreten: %%121. Es wird weiterhin im Hintergrund versucht,
eine Adresse vom Netzwerkadressserver (DHCP) zugeteilt zu bekommen.
< End of report > --- --- --- |