Der Malwarebytes-Scan von heute:
Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org
Datenbank Version: 5237
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
03.12.2010 16:52:14
mbam-log-2010-12-03 (16-52-14).txt
Art des Suchlaufs: Vollständiger Suchlauf (D:\|E:\|H:\|)
Durchsuchte Objekte: 284067
Laufzeit: 1 Stunde(n), 49 Minute(n), 46 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
Ich habe ca. 50 Scans der letzten 1 1/2 Jahre, die brauchst du nicht alle :wtf:
Sie waren alle ohne Befund!
Welchen Zeitraum soll ich posten?
Hier die OTL-Scan:OTL Logfile: Code:
OTL Extras logfile created on: 03.12.2010 16:56:31 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = D:\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 0,00 Gb Available Physical Memory | 20,00% Memory free
4,00 Gb Paging File | 2,00 Gb Available in Paging File | 57,00% Paging File free
Paging file location(s): H:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Programme
Drive D: | 78,12 Gb Total Space | 70,42 Gb Free Space | 90,15% Space Free | Partition Type: NTFS
Drive E: | 180,90 Gb Total Space | 78,61 Gb Free Space | 43,46% Space Free | Partition Type: NTFS
Drive H: | 39,07 Gb Total Space | 11,34 Gb Free Space | 29,04% Space Free | Partition Type: NTFS
Computer Name: THOMAS-5D486166 | User Name: Thomas | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- H:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "H:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "H:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring" = 1
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"H:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\WNt500x86\RpcSandraSrv.exe" = H:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service -- File not found
"H:\WINDOWS\system32\ZoneLabs\vsmon.exe" = H:\WINDOWS\system32\ZoneLabs\vsmon.exe:*:Enabled:vsmon -- (Check Point Software Technologies LTD)
"D:\Tobit Radio.fx\Server\rfx-server.exe" = D:\Tobit Radio.fx\Server\rfx-server.exe:*:Enabled:Radio.fx Server -- File not found
"D:\Tobit Radio.fx\Client\rfx-client.exe" = D:\Tobit Radio.fx\Client\rfx-client.exe:*:Enabled:Radio.fx Client -- File not found
"H:\Programme\Soluto\Soluto.exe" = H:\Programme\Soluto\Soluto.exe:*:Enabled:Soluto Tray -- (Soluto)
"H:\Programme\Soluto\SolutoService.exe" = H:\Programme\Soluto\SolutoService.exe:*:Enabled:Soluto Service -- (Soluto)
"H:\Programme\Soluto\SolutoConsole.exe" = H:\Programme\Soluto\SolutoConsole.exe:*:Enabled:Soluto Console -- (Soluto)
"H:\Programme\Soluto\SolutoUpdateService.exe" = H:\Programme\Soluto\SolutoUpdateService.exe:*:Enabled:Soluto Update Service -- (Soluto)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{0138F525-6C8A-333F-A105-14AE030B9A54}" = Visual C++ 9.0 CRT (x86) WinSXS MSM
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP4700_series" = Canon iP4700 series Printer Driver
"{11F5D779-7BD9-465A-BBC4-10701386BCB9}" = FW LiveUpdate
"{121634B0-2F4B-11D3-ADA3-00C04F52DD52}" = Windows Installer Clean Up
"{14A13865-DF58-41AF-AFA3-7EA7AB4CDF8F}" = StarMoney
"{1B54FF9E-5FDD-11DE-8B01-005056C00008}" = Paragon Festplatten Manager 10 - Total Defrag
"{1E1DFF42-2EE8-4852-A7AB-C5174321D68F}" = Paragon Backup & Recovery™ 11 Kompakt
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{25569723-DC5A-4467-A639-79535BF01B71}" = Adobe Help Center 2.1
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java(TM) 6 Update 22
"{2792F12C-3515-4D69-8083-B557AF35F06F}" = LightScribe 1.4.89.1
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4002D3D8-6112-4E5B-9D12-9EBA1CD42196}" = Wings Platinum 4
"{4286E640-B5FB-11DF-AC4B-005056C00008}" = Google Earth
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5809E7CF-4DCF-11D4-9875-00105ACE7734}" = Logitech MouseWare 9.79.1
"{5888428E-699C-4E71-BF71-94EE06B497DA}" = TuneUp Utilities 2008
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69640730-B830-4C24-BB5C-222DA1260548}" = Turbo Lister 2
"{8109E5E7-A23D-4B67-A26D-7DAC358D46A2}" = Soluto
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A809006-C25A-4A3A-9DAB-94659BCDB107}" = NVIDIA PhysX
"{94A065D9-B24E-4B17-B983-DA95FA80F2F9}" = Hoffnung für heute
"{986A654F-F1E4-11DD-9FCA-005056C00008}" = Paragon Festplatten Manager 10 - Partition Manager
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A7B609FB-83D8-4FC3-8477-1BC65ECFE85B}" = Adobe Photoshop Elements 5.0
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.1 - Deutsch
"{AEB9948B-4FF2-47C9-990E-47014492A0FE}" = MSXML 6.0 Parser
"{AFC4FEEE-6E08-4CC9-815E-5CEDF2C15E2E}_is1" = Terminplaner .Net
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B43BB989-19AE-4EC4-AF90-2DBD946F9FA6}" = StarMoney 6.0 S-Edition
"{BCE46757-7674-4416-BEDB-68205A60409E}" = Canon CanoScan Toolbox 4.1
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = AMD Processor Driver
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{CA529363-D0F2-41EA-B44B-D7515A254645}" = Multimedia Card Reader
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D299837D-74C1-41A9-8783-966610A9BED7}" = Preispiraten
"{D52A721B-E44C-4AD7-AD4F-29D83144384B}" = Microsoft Tool Web Package : EXTRACT.EXE
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}" = OpenOffice.org 3.2
"{E2883E8F-472F-4fb0-9522-AC9BF37916A7}" = Adobe Download Manager
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{E948B551-08DB-4163-8995-8C43B03D1B19}" = maxdome Download Manager 4.1.300.78
"{EE1879F1-0A0F-46D2-90AC-645B69A8C8F2}" = StarMoney
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FD0955C7-C64C-45DC-A991-FDC4E50C4E09}" = Multimedia Card Reader
"7-Zip" = 7-Zip 4.65
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop Elements 5" = Adobe Photoshop Elements 5.0
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Amazon MP3-Downloader" = Amazon MP3-Downloader 1.0.9
"AP-Wagen EDV_is1" = AP-Wagen EDV 1.1
"ArtStudioPro_is1" = ArtStudioPro
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.12 (Unicode)
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Biet-O-Matic v2.8.0" = Biet-O-Matic v2.8.0
"Browser Defender_is1" = Browser Defender 3.0
"Canon iP4700 series Benutzerregistrierung" = Canon iP4700 series Benutzerregistrierung
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"CCleaner" = CCleaner
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Easy-WebPrint EX" = Canon Easy-WebPrint EX
"Eisenbahn 98_is1" = AP Modellbahn
"Fraps" = Fraps
"getplugin" = www.gas-tankstellen.de getplugin
"Google Desktop" = Google Desktop
"Google Updater" = Google Updater
"HijackThis" = HijackThis 2.0.2
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{69640730-B830-4C24-BB5C-222DA1260548}" = Turbo Lister 2
"InstallShield_{CA529363-D0F2-41EA-B44B-D7515A254645}" = Multimedia Card Reader
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"MapCreator 2" = MapCreator 2
"Media Markt Fotoservice_is1" = Media Markt Fotoservice
"MediaNavigation.CDLabelPrint" = CD-LabelPrint
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Recover Keys_is1" = Recover Keys
"Secunia PSI" = Secunia PSI
"Spyware Doctor" = Spyware Doctor 8.0
"SystemRequirementsLab" = System Requirements Lab
"TeraCopy_is1" = TeraCopy 2.12
"ThumbsPlus7x" = ThumbsPlus 7x (deutsch)
"Unlocker" = Unlocker 1.8.7
"VLC media player" = VLC media player 1.1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinTrack_is1" = WinTrack v8.02
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XP Codec Pack" = XP Codec Pack
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"Zattoo4" = Zattoo4 4.0.5
"ZoneAlarm" = ZoneAlarm
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 05.10.2010 16:55:44 | Computer Name = THOMAS-5D486166 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung , Version 0.0.0.0, fehlgeschlagenes Modul
unknown, Version 0.0.0.0, Fehleradresse 0x00000000.
Error - 12.10.2010 01:01:39 | Computer Name = THOMAS-5D486166 | Source = Google Update | ID = 20
Description =
Error - 12.10.2010 02:01:37 | Computer Name = THOMAS-5D486166 | Source = Google Update | ID = 20
Description =
Error - 19.11.2010 18:15:17 | Computer Name = THOMAS-5D486166 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung pcwstart.exe, Version 5.0.0.3, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x01d1d64d.
Error - 21.11.2010 07:33:56 | Computer Name = THOMAS-5D486166 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung plugin-container.exe, Version 1.9.2.3951,
fehlgeschlagenes Modul ntdll.dll, Version 5.1.2600.5755, Fehleradresse 0x0000100b.
Error - 23.11.2010 13:57:09 | Computer Name = THOMAS-5D486166 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3951, fehlgeschlagenes
Modul libheuristic.dll, Version 0.0.0.0, Fehleradresse 0x0000e1a2.
[ System Events ]
Error - 01.12.2010 16:51:38 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 01.12.2010 16:51:51 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
Lbd
Error - 02.12.2010 01:08:51 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 02.12.2010 01:09:03 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
Lbd
Error - 02.12.2010 11:30:03 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 02.12.2010 11:30:13 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
Lbd
Error - 03.12.2010 02:08:08 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 03.12.2010 02:08:21 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
Lbd
Error - 03.12.2010 09:27:02 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 03.12.2010 09:27:14 | Computer Name = THOMAS-5D486166 | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
Lbd
< End of report > --- --- ---
_________________________________________________________________
Und der Zweite:OTL Logfile: Code:
OTL logfile created on: 03.12.2010 16:56:31 - Run 1
OTL by OldTimer - Version 3.2.17.3 Folder = D:\Downloads
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 0,00 Gb Available Physical Memory | 20,00% Memory free
4,00 Gb Paging File | 2,00 Gb Available in Paging File | 57,00% Paging File free
Paging file location(s): H:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = H: | %SystemRoot% = H:\WINDOWS | %ProgramFiles% = H:\Programme
Drive D: | 78,12 Gb Total Space | 70,42 Gb Free Space | 90,15% Space Free | Partition Type: NTFS
Drive E: | 180,90 Gb Total Space | 78,61 Gb Free Space | 43,46% Space Free | Partition Type: NTFS
Drive H: | 39,07 Gb Total Space | 11,34 Gb Free Space | 29,04% Space Free | Partition Type: NTFS
Computer Name: THOMAS-5D486166 | User Name: Thomas | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - D:\Downloads\OTL.exe (OldTimer Tools)
PRC - H:\Programme\Terminplaner.NET\Terminplaner.exe (Ronny Decke)
PRC - H:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - H:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - H:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - H:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - H:\Programme\Mozilla Firefox\plugin-container.exe (Mozilla Corporation)
PRC - H:\Programme\PC Tools Security\pctsGui.exe (PC Tools)
PRC - H:\Programme\Soluto\Soluto.exe (Soluto)
PRC - H:\Programme\Soluto\SolutoService.exe (Soluto)
PRC - H:\Programme\PC Tools Security\BDT\BDTUpdateService.exe (Threat Expert Ltd.)
PRC - H:\Programme\PC Tools Security\BDT\FGuard.exe (Threat Expert Ltd.)
PRC - H:\Programme\PC Tools Security\pctsSvc.exe (PC Tools)
PRC - H:\Programme\PC Tools Security\TFEngine\TFService.exe (PC Tools)
PRC - H:\Programme\Google\Google Desktop Search\GoogleDesktop.exe (Google)
PRC - H:\WINDOWS\system32\ZoneLabs\vsmon.exe (Check Point Software Technologies LTD)
PRC - H:\Programme\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
PRC - H:\Programme\Secunia\PSI\psi.exe (Secunia)
PRC - H:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - H:\Programme\PC Tools Security\pctsAuxs.exe (PC Tools)
PRC - H:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - H:\Programme\ComBib\Hoffnung fuer heute\Hoffnung fuer heute.exe (combib)
PRC - H:\Programme\maxdome\DCBin\DCService.exe (Entriq, Inc.)
PRC - H:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - H:\Programme\TuneUp Utilities 2008\MemOptimizer.exe (TuneUp Software GmbH)
PRC - H:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - H:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - H:\Programme\Logitech\MouseWare\system\EM_EXEC.EXE (Logitech Inc.)
========== Modules (SafeList) ==========
MOD - D:\Downloads\OTL.exe (OldTimer Tools)
MOD - H:\Programme\PC Tools Security\TFEngine\TFWAH.dll (PC Tools)
MOD - H:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - H:\Programme\PC Tools Security\PCTGMhk.dll (PC Tools)
MOD - H:\WINDOWS\system32\msvcp60.dll (Microsoft Corporation)
MOD - H:\Programme\Gemeinsame Dateien\Logitech\Scrolling\LGMSGHK.DLL (Logitech Inc.)
MOD - H:\Programme\Logitech\MouseWare\system\LgWndHk.dll (Logitech Inc.)
========== Win32 Services (SafeList) ==========
SRV - (HidServ) -- H:\WINDOWS\System32\hidserv.dll File not found
SRV - (AppMgmt) -- H:\WINDOWS\System32\appmgmts.dll File not found
SRV - (AntiVirSchedulerService) -- H:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- H:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (SolutoService) -- H:\Programme\Soluto\SolutoService.exe (Soluto)
SRV - (Browser Defender Update Service) -- H:\Programme\PC Tools Security\BDT\BDTUpdateService.exe (Threat Expert Ltd.)
SRV - (nosGetPlusHelper) getPlus(R) -- H:\Programme\NOS\bin\getPlus_Helper_3004.dll (NOS Microsystems Ltd.)
SRV - (sdCoreService) -- H:\Programme\PC Tools Security\pctsSvc.exe (PC Tools)
SRV - (ThreatFire) -- H:\Programme\PC Tools Security\TFEngine\TFService.exe (PC Tools)
SRV - (GoogleDesktopManager-051210-111108) -- H:\Programme\Google\Google Desktop Search\GoogleDesktop.exe (Google)
SRV - (Paragon System Backup Dienst) -- H:\Programme\Paragon Software\Backup and Recovery 11 Kompakt\program\dbhservice.exe (Paragon Software Group)
SRV - (vsmon) -- H:\WINDOWS\System32\ZoneLabs\vsmon.exe (Check Point Software Technologies LTD)
SRV - (getPlusHelper) getPlus(R) -- H:\Programme\NOS\bin\getPlus_Helper.dll (NOS Microsystems Ltd.)
SRV - (aspnet_state) -- H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe (Microsoft Corporation)
SRV - (WPFFontCache_v0400) -- H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing) -- H:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe (Microsoft Corporation)
SRV - (sdAuxService) -- H:\Programme\PC Tools Security\pctsAuxs.exe (PC Tools)
SRV - (TuneUp.Defrag) -- H:\WINDOWS\system32\TuneUpDefragService.exe (TuneUp Software GmbH)
SRV - (Prosieben) -- H:\Programme\maxdome\DCBin\DCService.exe (Entriq, Inc.)
SRV - (UxTuneUp) -- H:\WINDOWS\system32\uxtuneup.dll (TuneUp Software GmbH)
SRV - (AdobeActiveFileMonitor5.0) -- H:\Programme\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe ()
SRV - (LightScribeService) -- H:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
========== Driver Services (SafeList) ==========
DRV - (SunkFilt) -- H:\WINDOWS\System32\Drivers\sunkfilt.sys File not found
DRV - (SANDRA) -- H:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3\WNt500x86\Sandra.sys File not found
DRV - (Lbd) -- H:\WINDOWS\System32\DRIVERS\Lbd.sys File not found
DRV - (CrystalSysInfo) -- H:\Programme\MediaCoder\SysInfo.sys File not found
DRV - (AmdTools) -- H:\WINDOWS\System32\DRIVERS\AmdTools.sys File not found
DRV - (avgntflt) -- H:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avipbb) -- H:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (PCGenFAM) -- H:\WINDOWS\system32\DRIVERS\PCGenFAM.sys (Soluto LTD.)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- H:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (pctgntdi) -- H:\WINDOWS\system32\drivers\pctgntdi.sys (PC Tools)
DRV - (pctplsg) -- H:\WINDOWS\system32\drivers\pctplsg.sys (PC Tools)
DRV - (TfSysMon) -- H:\WINDOWS\system32\drivers\TfSysMon.sys (PC Tools)
DRV - (TfFsMon) -- H:\WINDOWS\system32\drivers\TfFsMon.sys (PC Tools)
DRV - (TfNetMon) -- H:\WINDOWS\system32\drivers\TfNetMon.sys (PC Tools)
DRV - (PCTCore) -- H:\WINDOWS\system32\drivers\PCTCore.sys (PC Tools)
DRV - (pctEFA) -- H:\WINDOWS\system32\drivers\pctEFA.sys (PC Tools)
DRV - (pctDS) -- H:\WINDOWS\system32\drivers\pctDS.sys (PC Tools)
DRV - (Uim_IM) -- H:\WINDOWS\system32\drivers\Uim_IM.sys (Paragon)
DRV - (hotcore3) -- H:\WINDOWS\system32\DRIVERS\hotcore3.sys (Paragon Software Group)
DRV - (UimBus) -- H:\WINDOWS\system32\drivers\UimBus.sys (Windows (R) 2000 DDK provider)
DRV - (nv) -- H:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (PSI) -- H:\WINDOWS\system32\drivers\psi_mf.sys (Secunia)
DRV - (vsdatant) -- H:\WINDOWS\system32\vsdatant.sys (Check Point Software Technologies LTD)
DRV - (Monfilt) -- H:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) -- H:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (avgio) -- H:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (ssmdrv) -- H:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (HDAudBus) -- H:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (AmdPPM) -- H:\WINDOWS\system32\drivers\AmdPPM.sys (Advanced Micro Devices)
DRV - (nvnetbus) -- H:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- H:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (AmdK8) -- H:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (nvata) -- H:\WINDOWS\system32\DRIVERS\nvata.sys (NVIDIA Corporation)
DRV - (LMouFlt2) -- H:\WINDOWS\system32\drivers\LMouFlt2.Sys (Logitech, Inc.)
DRV - (LHidUsb) -- H:\WINDOWS\system32\drivers\LHidUsb.sys (Logitech, Inc.)
DRV - (LHidFlt2) -- H:\WINDOWS\system32\drivers\LHidFlt2.Sys (Logitech, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - H:\Programme\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultthis.engineName: "Bildungsspender Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2546143&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Bildungsspender Customized Web Search"
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.2
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {C8D3D3BE-7ADC-4109-BF8C-6330A9F58B0C}:1.0.5.0
FF - prefs.js..extensions.enabledItems: {62760FD6-B943-48C9-AB09-F99C6FE96088}:2.1.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1.6.2.63
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: DeviceDetection@logitech.com:1.20.0.66
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: {cb84136f-9c44-433a-9048-c5cd9df1dc16}:2.0.6
FF - HKLM\software\mozilla\Firefox\extensions\\{cb84136f-9c44-433a-9048-c5cd9df1dc16}: H:\Programme\PC Tools Security\BDT\Firefox\ [2010.11.16 17:44:53 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: H:\Programme\Mozilla Firefox\components [2010.12.01 19:03:52 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: H:\Programme\Mozilla Firefox\plugins [2010.12.01 19:03:49 | 000,000,000 | ---D | M]
[2009.06.17 16:09:32 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Extensions
[2009.06.17 16:09:32 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Extensions\MediaCoder
[2010.12.02 17:21:17 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions
[2010.05.02 15:56:11 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.09.03 14:20:14 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2010.11.26 16:41:53 | 000,000,000 | ---D | M] (eBay Sidebar for Firefox) -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}
[2010.02.06 14:18:31 | 000,000,000 | ---D | M] (Preispiraten) -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\{C8D3D3BE-7ADC-4109-BF8C-6330A9F58B0C}
[2010.06.11 19:10:40 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2010.11.18 22:25:25 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2010.09.23 15:42:51 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\DeviceDetection@logitech.com
[2010.10.09 07:48:30 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\googlesharing@extension.thoughtcrime.org
[2010.10.09 07:48:30 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\googlesharing@extension.thoughtcrime.org\chrome
[2010.10.09 07:48:30 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\googlesharing@extension.thoughtcrime.org\components
[2010.10.09 07:48:30 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\extensions\googlesharing@extension.thoughtcrime.org\defaults
[2010.09.12 19:55:04 | 000,000,933 | ---- | M] () -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Mozilla\Firefox\Profiles\ssw3e47h.default\searchplugins\conduit.xml
[2010.12.02 17:21:17 | 000,000,000 | ---D | M] -- H:\Programme\Mozilla Firefox\extensions
[2008.07.14 14:29:36 | 000,000,000 | ---D | M] (Preispiraten) -- H:\Programme\Mozilla Firefox\extensions\{C8D3D3BE-7ADC-4109-BF8C-6330A9F58B0C}
[2010.04.15 21:00:00 | 000,000,000 | ---D | M] (Java Console) -- H:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.08.25 16:39:58 | 000,000,000 | ---D | M] (Java Console) -- H:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.10.14 20:38:49 | 000,000,000 | ---D | M] (Java Console) -- H:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010.09.15 03:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- H:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.10.27 06:44:13 | 000,001,392 | ---- | M] () -- H:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.10.27 06:44:13 | 000,002,344 | ---- | M] () -- H:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.10.27 06:44:13 | 000,006,805 | ---- | M] () -- H:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.10.27 06:44:13 | 000,001,178 | ---- | M] () -- H:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.10.27 06:44:13 | 000,001,105 | ---- | M] () -- H:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2009.02.02 18:40:13 | 000,292,709 | R--- | M]) - H:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 123topsearch.com
O1 - Hosts: 127.0.0.1 www.123topsearch.com
O1 - Hosts: 127.0.0.1 132.com
O1 - Hosts: 127.0.0.1 www.132.com
O1 - Hosts: 127.0.0.1 136136.net
O1 - Hosts: 127.0.0.1 www.136136.net
O1 - Hosts: 127.0.0.1 163ns.com
O1 - Hosts: 127.0.0.1 www.163ns.com
O1 - Hosts: 10075 more lines...
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - H:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (PC Tools Browser Guard BHO) - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - H:\Programme\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - H:\Programme\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - H:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - H:\Programme\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll (Google Inc.)
O2 - BHO: (Preispiraten) - {E9E027BF-C3F3-4022-8F6B-8F6D39A59684} - H:\Programme\Preispiraten\IEButtonPPInterface.dll ()
O3 - HKLM\..\Toolbar: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - H:\Programme\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKLM\..\Toolbar: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - H:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O3 - HKCU\..\Toolbar\WebBrowser: (PC Tools Browser Guard) - {472734EA-242A-422B-ADF8-83D1E48CC825} - H:\Programme\PC Tools Security\BDT\PCTBrowserDefender.dll (Threat Expert Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - H:\Programme\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe ARM] H:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] H:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Google Desktop Search] H:\Programme\Google\Google Desktop Search\GoogleDesktop.exe (Google)
O4 - HKLM..\Run: [ISTray] H:\Programme\PC Tools Security\pctsGui.exe (PC Tools)
O4 - HKLM..\Run: [Logitech Utility] H:\WINDOWS\LOGI_MWX.EXE (Logitech Inc.)
O4 - HKLM..\Run: [nwiz] H:\Programme\NVIDIA Corporation\nView\nwiz.exe ()
O4 - HKLM..\Run: [PCTools FGuard] H:\Programme\PC Tools Security\BDT\FGuard.exe (Threat Expert Ltd.)
O4 - HKLM..\Run: [SunJavaUpdateSched] H:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [ZoneAlarm Client] H:\Programme\Zone Labs\ZoneAlarm\zlclient.exe (Check Point Software Technologies LTD)
O4 - HKCU..\Run: [SpybotSD TeaTimer] H:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKCU..\Run: [TuneUp MemOptimizer] H:\Programme\TuneUp Utilities 2008\MemOptimizer.exe (TuneUp Software GmbH)
O4 - Startup: H:\Dokumente und Einstellungen\Thomas\Startmenü\Programme\Autostart\Hoffnung fuer heute.LNK = H:\Programme\ComBib\Hoffnung fuer heute\Hoffnung fuer heute.exe (combib)
O4 - Startup: H:\Dokumente und Einstellungen\Thomas\Startmenü\Programme\Autostart\Secunia PSI.lnk = H:\Programme\Secunia\PSI\psi.exe (Secunia)
O4 - Startup: H:\Dokumente und Einstellungen\Thomas\Startmenü\Programme\Autostart\TerminplanerStart.lnk = H:\Programme\Terminplaner.NET\Terminplaner.exe (Ronny Decke)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarsOnTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoBandCustomize = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoMovingBands = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCloseDragDropBands = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSetTaskbar = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSaveSettings = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ClassicShell = 0
O8 - Extra context menu item: &Preispiratensuche nach markiertem Text - H:\\Programme\\Preispiraten\\preispiraten.html ()
O9 - Extra Button: Preispiraten - {350F4DA2-3886-4BB8-A1A8-D7F57B56DFFF} - H:\Programme\Preispiraten\preispiraten3ie.exe ()
O9 - Extra 'Tools' menuitem : Preispiraten - {350F4DA2-3886-4BB8-A1A8-D7F57B56DFFF} - H:\Programme\Preispiraten\preispiraten3ie.exe ()
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - H:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - H:\Programme\Gemeinsame Dateien\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - H:\Programme\Gemeinsame Dateien\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - H:\Programme\Gemeinsame Dateien\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - H:\Programme\Gemeinsame Dateien\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O15 - HKCU\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKCU\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} https://support.microsoft.com/OAS/ActiveX/MSDcode.cab (Microsoft Data Collection Control)
O16 - DPF: {162247AF-26A7-44FC-A93A-69506EA244F3} https://account.maxdome.de/presentation/script/HWTest.CAB (HWTest.HWTestControl)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} hxxp://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab (Symantec AntiVirus scanner)
O16 - DPF: {33564D57-9980-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/D/0/D/D0DD87DA-994F-4334-8B55-AF2E4D98ED0C/wmv9dmo.cab (Reg Error: Key error.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1215790325546 (WUWebControl Class)
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} hxxp://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab (Symantec RuFSI Utility Class)
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1215796493687 (MUWebControl Class)
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} hxxp://www.nvidia.com/content/DriverDownload/nforce/NvidiaSmartScan.cab (NVIDIA Smart Scan)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (get_atlcom Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.169.184.33 83.169.184.97
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - H:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (H:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - H:\Programme\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (explorer.exe) - H:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (H:\Programme\Soluto\soluto.exe /userinit) - H:\Programme\Soluto\soluto.exe (Soluto)
O24 - Desktop Components:AutorunsDisabled () -
O24 - Desktop WallPaper: H:\Dokumente und Einstellungen\Thomas\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: H:\Dokumente und Einstellungen\Thomas\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010.11.29 21:47:02 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\vlc
[2010.11.20 14:38:08 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\Thomas\Lokale Einstellungen\Anwendungsdaten\Threat Expert
[2010.11.19 23:05:54 | 000,000,000 | RH-D | C] -- H:\Dokumente und Einstellungen\Thomas\Recent
[2010.11.19 07:15:10 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\Thomas\Eigene Dateien\kinder-Dateien
[2010.11.16 17:44:50 | 001,865,680 | ---- | C] (Threat Expert Ltd.) -- H:\WINDOWS\PCTBDCore.dll
[2010.11.16 17:44:50 | 000,739,280 | ---- | C] (Threat Expert Ltd.) -- H:\WINDOWS\PCTBDRes.dll
[2010.11.16 17:44:50 | 000,149,456 | ---- | C] (PC Tools) -- H:\WINDOWS\SGDetectionTool.dll
[2010.11.16 17:44:49 | 000,068,880 | --S- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\TfSysMon.sys
[2010.11.16 17:44:49 | 000,051,984 | --S- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\TfFsMon.sys
[2010.11.16 17:44:49 | 000,033,552 | --S- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\TfNetMon.sys
[2010.11.16 17:42:31 | 000,656,320 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\pctEFA.sys
[2010.11.16 17:42:31 | 000,338,880 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\pctDS.sys
[2010.11.16 17:42:30 | 000,247,824 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\pctgntdi.sys
[2010.11.16 17:42:29 | 000,237,632 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\PCTCore.sys
[2010.11.16 17:42:29 | 000,159,296 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\PCTAppEvent.sys
[2010.11.16 17:42:22 | 000,087,400 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\pctNdis-PacketFilter.sys
[2010.11.16 17:42:22 | 000,031,960 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\pctNdis-DNS.sys
[2010.11.16 17:42:21 | 000,123,968 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\pctplfw.sys
[2010.11.16 17:42:21 | 000,070,536 | ---- | C] (PC Tools) -- H:\WINDOWS\System32\drivers\pctplsg.sys
[2010.11.16 17:42:02 | 000,000,000 | ---D | C] -- H:\Programme\PC Tools Security
[2010.11.16 17:42:02 | 000,000,000 | ---D | C] -- H:\Programme\Gemeinsame Dateien\PC Tools
[2010.11.16 17:42:02 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\PC Tools
[2010.11.16 17:42:02 | 000,000,000 | ---D | C] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Tools
[2010.03.31 07:02:44 | 000,074,672 | ---- | C] (Beepa P/L) -- H:\Programme\fraps64.dat
[2010.03.31 07:02:36 | 002,181,040 | ---- | C] (Beepa P/L) -- H:\Programme\fraps.exe
[2010.03.31 07:00:06 | 000,159,744 | ---- | C] (Beepa P/L) -- H:\Programme\frapslcd.dll
[2010.03.31 06:20:48 | 000,156,592 | ---- | C] (Beepa P/L) -- H:\Programme\fraps64.dll
[2010.03.31 06:20:46 | 000,206,768 | ---- | C] (Beepa P/L) -- H:\Programme\fraps32.dll
[2008.10.31 10:08:23 | 000,036,069 | ---- | C] (Beepa Pty Ltd) -- H:\Programme\uninstall.exe
[2008.10.03 00:46:18 | 000,184,320 | ---- | C] (Beepa P/L) -- H:\Programme\fraps.dll
[2004.11.24 20:25:52 | 000,335,872 | ---- | C] ( ) -- H:\WINDOWS\System32\drvc.dll
[3 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[3 H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
[2 H:\WINDOWS\System32\dllcache\*.tmp files -> H:\WINDOWS\System32\dllcache\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.12.03 17:00:02 | 000,000,494 | ---- | M] () -- H:\WINDOWS\tasks\1-Klick-Wartung.job
[2010.12.03 16:03:03 | 000,001,088 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.12.03 14:42:55 | 000,004,212 | -H-- | M] () -- H:\WINDOWS\System32\zllictbl.dat
[2010.12.03 14:28:23 | 000,001,627 | ---- | M] () -- H:\Dokumente und Einstellungen\Thomas\Startmenü\Programme\Autostart\TerminplanerStart.lnk
[2010.12.03 14:26:54 | 000,001,044 | ---- | M] () -- H:\WINDOWS\tasks\Google Software Updater.job
[2010.12.03 14:26:39 | 000,001,084 | ---- | M] () -- H:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.12.03 14:26:28 | 000,002,048 | --S- | M] () -- H:\WINDOWS\bootstat.dat
[2010.12.01 19:03:54 | 000,001,573 | ---- | M] () -- H:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2010.11.29 21:43:31 | 000,016,384 | ---- | M] () -- H:\Dokumente und Einstellungen\Thomas\Desktop\Notizen Chronik 2010.doc
[2010.11.29 17:42:18 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- H:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.11.29 17:42:06 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- H:\WINDOWS\System32\drivers\mbam.sys
[2010.11.27 09:29:19 | 000,002,422 | ---- | M] () -- H:\WINDOWS\System32\wpa.dbl
[2010.11.22 16:34:07 | 000,061,960 | ---- | M] (Avira GmbH) -- H:\WINDOWS\System32\drivers\avgntflt.sys
[2010.11.19 23:05:08 | 000,000,661 | ---- | M] () -- H:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk
[2010.11.19 07:15:24 | 000,733,298 | ---- | M] () -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\mdb.bin
[2010.11.19 07:15:10 | 000,005,511 | ---- | M] () -- H:\Dokumente und Einstellungen\Thomas\Eigene Dateien\kinder.psc
[2010.11.17 14:26:05 | 000,000,463 | ---- | M] () -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\SamsungLiveUpdateConfig.ini
[2010.11.16 17:42:40 | 000,694,456 | ---- | M] () -- H:\WINDOWS\System32\drivers\Cat.DB
[2010.11.16 17:42:28 | 000,001,621 | ---- | M] () -- H:\Dokumente und Einstellungen\All Users\Desktop\Spyware Doctor.lnk
[2010.11.06 08:22:30 | 000,126,856 | ---- | M] (Avira GmbH) -- H:\WINDOWS\System32\drivers\avipbb.sys
[2010.11.03 17:41:02 | 000,098,392 | ---- | M] (Sunbelt Software) -- H:\WINDOWS\System32\drivers\SBREDrv.sys
[3 H:\WINDOWS\System32\*.tmp files -> H:\WINDOWS\System32\*.tmp -> ]
[3 H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
[2 H:\WINDOWS\System32\dllcache\*.tmp files -> H:\WINDOWS\System32\dllcache\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.11.19 23:05:08 | 000,000,661 | ---- | C] () -- H:\Dokumente und Einstellungen\All Users\Desktop\CCleaner.lnk
[2010.11.19 07:15:10 | 000,005,511 | ---- | C] () -- H:\Dokumente und Einstellungen\Thomas\Eigene Dateien\kinder.psc
[2010.11.16 17:44:51 | 000,767,952 | ---- | C] () -- H:\WINDOWS\BDTSupport.dll
[2010.11.16 17:44:51 | 000,000,882 | ---- | C] () -- H:\WINDOWS\RegSDImport.xml
[2010.11.16 17:44:51 | 000,000,879 | ---- | C] () -- H:\WINDOWS\RegISSImport.xml
[2010.11.16 17:44:50 | 000,002,074 | ---- | C] () -- H:\WINDOWS\UDB.zip
[2010.11.16 17:44:50 | 000,000,131 | ---- | C] () -- H:\WINDOWS\IDB.zip
[2010.11.16 17:42:32 | 000,694,456 | ---- | C] () -- H:\WINDOWS\System32\drivers\Cat.DB
[2010.11.16 17:42:28 | 000,001,621 | ---- | C] () -- H:\Dokumente und Einstellungen\All Users\Desktop\Spyware Doctor.lnk
[2010.11.15 22:12:56 | 000,073,792 | ---- | C] () -- H:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2010.10.05 20:58:19 | 000,000,036 | ---- | C] () -- H:\Dokumente und Einstellungen\Thomas\Lokale Einstellungen\Anwendungsdaten\housecall.guid.cache
[2010.09.24 17:26:25 | 000,000,094 | ---- | C] () -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Microsoft.SqlServer.Compact.351.32.bc
[2010.08.12 19:28:49 | 000,000,073 | ---- | C] () -- H:\WINDOWS\30 Jahre Doro.INI
[2010.07.22 18:59:50 | 000,554,496 | ---- | C] () -- H:\WINDOWS\System32\dvmsg.dll
[2010.06.13 19:46:06 | 000,017,408 | ---- | C] () -- H:\Dokumente und Einstellungen\Thomas\Lokale Einstellungen\Anwendungsdaten\WebpageIcons.db
[2010.06.08 18:19:53 | 000,000,083 | ---- | C] () -- H:\WINDOWS\TC.INI
[2010.04.04 20:09:52 | 000,000,072 | ---- | C] () -- H:\WINDOWS\Hochzeit Lydia&Bert pur.INI
[2010.04.04 17:03:33 | 000,000,073 | ---- | C] () -- H:\WINDOWS\Hochzeit Lydia&Bert gesamt.pt4.INI
[2010.04.04 09:45:57 | 000,000,073 | ---- | C] () -- H:\WINDOWS\Hochzeit Lydia&Bert.INI
[2010.04.04 09:44:49 | 000,000,073 | ---- | C] () -- H:\WINDOWS\Relativ+.INI
[2010.03.31 06:10:20 | 000,019,716 | ---- | C] () -- H:\Programme\changes.txt
[2010.03.31 05:56:10 | 000,001,872 | ---- | C] () -- H:\Programme\README.HTM
[2009.12.31 13:34:29 | 000,000,073 | ---- | C] () -- H:\WINDOWS\Jahresrückblick 2009.INI
[2009.06.25 15:47:49 | 000,000,064 | ---- | C] () -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.ldb
[2009.06.15 17:53:58 | 000,000,085 | ---- | C] () -- H:\WINDOWS\Prnprint.ini
[2009.05.27 17:04:47 | 000,025,713 | ---- | C] () -- H:\WINDOWS\CSTBox.INI
[2009.01.29 15:55:26 | 000,027,648 | ---- | C] () -- H:\WINDOWS\System32\AVSredirect.dll
[2008.12.19 16:15:58 | 004,338,246 | ---- | C] () -- H:\WINDOWS\System32\libavcodec.dll
[2008.12.17 18:41:18 | 000,884,237 | ---- | C] () -- H:\WINDOWS\System32\ff_x264.dll
[2008.12.17 18:22:58 | 000,093,184 | ---- | C] () -- H:\WINDOWS\System32\ff_wmv9.dll
[2008.12.17 18:22:48 | 000,057,344 | ---- | C] () -- H:\WINDOWS\System32\ff_vfw.dll
[2008.12.17 18:17:34 | 000,239,247 | ---- | C] () -- H:\WINDOWS\System32\ff_theora.dll
[2008.12.17 17:59:54 | 000,560,802 | ---- | C] () -- H:\WINDOWS\System32\libmplayer.dll
[2008.10.31 16:55:37 | 000,000,103 | ---- | C] () -- H:\Programme\FRAPSLOG.TXT
[2008.08.03 15:25:05 | 000,015,873 | ---- | C] () -- H:\WINDOWS\System32\Inetde.dll
[2008.08.02 10:18:10 | 000,003,273 | ---- | C] () -- H:\WINDOWS\scenelib24.ini
[2008.07.16 19:46:10 | 000,000,463 | ---- | C] () -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\SamsungLiveUpdateConfig.ini
[2008.07.16 16:13:55 | 000,000,116 | ---- | C] () -- H:\WINDOWS\NeroDigital.ini
[2008.07.14 17:31:21 | 000,733,298 | ---- | C] () -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\mdb.bin
[2008.07.12 11:13:44 | 000,051,712 | ---- | C] () -- H:\Dokumente und Einstellungen\Thomas\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.07.11 17:41:35 | 000,008,704 | ---- | C] () -- H:\WINDOWS\System32\CNMVS78.DLL
[2008.07.11 17:00:01 | 000,004,161 | ---- | C] () -- H:\WINDOWS\ODBCINST.INI
[2007.09.16 18:07:00 | 000,286,720 | ---- | C] () -- H:\WINDOWS\System32\nvnt4cpl.dll
[2004.10.03 18:50:54 | 000,129,024 | ---- | C] () -- H:\WINDOWS\System32\ff_mpeg2enc.dll
========== LOP Check ==========
[2008.07.11 17:41:38 | 000,000,000 | -H-D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2008.07.28 17:17:50 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eBay
[2008.07.14 20:53:51 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\espionServerData
[2009.12.28 16:45:32 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\expLauncher
[2010.10.05 20:29:41 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\F-Secure
[2009.12.28 17:07:26 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\launcher
[2008.07.18 17:32:02 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MailFrontier
[2009.08.03 12:19:08 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\maxdome
[2009.12.28 17:11:50 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\mergeparts
[2010.09.24 16:55:50 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Paragon
[2009.06.16 20:01:20 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Drivers HeadQuarters
[2009.12.22 21:34:08 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Publish Data
[2009.12.28 17:09:35 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\redistpart
[2008.07.11 20:09:32 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Software4u
[2010.09.24 17:36:44 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Soluto
[2010.12.03 16:42:16 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2009.05.10 18:02:32 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2008.12.05 17:30:57 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\aborange
[2009.09.16 19:17:08 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Amazon
[2010.09.26 13:32:35 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\apm
[2010.09.24 17:03:44 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Audacity
[2009.10.31 18:32:09 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\AV Stumpfl
[2008.07.15 20:07:43 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\BayCalculator
[2010.12.02 22:07:50 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\BOM
[2009.12.23 22:20:42 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Broad Intelligence
[2010.11.30 20:35:06 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Canon
[2010.02.09 17:54:58 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Canon Easy-WebPrint EX
[2010.01.19 14:41:11 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\CD-LabelPrint
[2010.04.15 21:05:01 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\CheckPoint
[2009.11.14 22:24:44 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\ComBib
[2010.05.12 17:10:01 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Downloaded Installations
[2008.07.11 17:51:38 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\metaspinner media GmbH
[2008.07.11 17:51:38 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\metaspinner net GmbH
[2008.12.22 15:31:54 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\OpenOffice.org
[2008.07.22 19:48:55 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Opera
[2010.07.25 14:47:07 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\phonostar GmbH
[2009.10.21 20:26:39 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\RDecke
[2010.04.15 15:49:46 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\SAD
[2008.07.18 16:49:44 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Smart PC Solutions
[2010.12.01 09:18:37 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\TeraCopy
[2010.04.08 20:01:35 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\ThumbsPlus
[2010.07.22 19:08:55 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\Tobit
[2010.07.26 09:32:42 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\TubeBox
[2008.07.16 16:04:02 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\TuneUp Software
[2010.01.28 20:44:54 | 000,000,000 | ---D | M] -- H:\Dokumente und Einstellungen\Thomas\Anwendungsdaten\WinTrack
[2010.12.03 17:00:02 | 000,000,494 | ---- | M] () -- H:\WINDOWS\Tasks\1-Klick-Wartung.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 489 bytes -> H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:05EE1EEF
@Alternate Data Stream - 201 bytes -> H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:DFC5A2B2
@Alternate Data Stream - 102 bytes -> H:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:430C6D84
< End of report > --- --- ---
MfG TThomas |