AntiVir Fund: TR/Kazy.mekml.1
Hallo!
Ich bin ganz neu hier. Ich habe mir auch den TR/Kazy.mekml.1 eingefangen. Ich hab hier jetzt schon ein bißchen gelesen und anscheinend haben viele dieses Problem.
Mein Problem ist, dass ich nicht wirklich Ahnung von solchen Sachen hab und natürlich passiert sowas immer, wenn der Bruder nicht da ist. Ich hoffe ihr könnt mir helfen.
Symptome sind wie bei den Anderen: Dateien weg, Fehlermeldungen über defekte Festplatten, Windows Recovery hat sich geöffnet, Hintergrund schwarz...
Ich habe mir schon mal den OTL runtergeladen und durchlaufen lassen.
Hier die Logs: Code:
OTL logfile created on: 27.04.2011 13:28:27 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = D:\Usenext
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.023,00 Mb Total Physical Memory | 368,00 Mb Available Physical Memory | 36,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 125,46 Gb Total Space | 38,80 Gb Free Space | 30,93% Space Free | Partition Type: NTFS
Drive D: | 97,65 Gb Total Space | 26,86 Gb Free Space | 27,51% Space Free | Partition Type: NTFS
Drive E: | 9,76 Gb Total Space | 5,28 Gb Free Space | 54,15% Space Free | Partition Type: FAT32
Drive F: | 366,95 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: *** | User Name: Familie*** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011.04.27 13:28:06 | 000,580,608 | ---- | M] (OldTimer Tools) -- D:\Usenext\OTL.exe
PRC - [2011.04.27 13:18:27 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- D:\Usenext\HiJackThis204.exe
PRC - [2011.04.26 16:54:26 | 000,569,344 | ---- | M] (WinTrust) -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\sFGtypQnwU.exe
PRC - [2011.03.18 19:56:37 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2011.03.17 19:23:39 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.03.09 14:30:08 | 000,247,728 | ---- | M] (TomTom) -- C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe
PRC - [2011.03.09 14:30:08 | 000,092,592 | ---- | M] (TomTom) -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2011.02.28 16:15:30 | 000,427,008 | ---- | M] (Sony Ericsson) -- C:\Programme\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe
PRC - [2010.12.13 14:52:46 | 000,074,960 | ---- | M] () -- C:\Programme\Sony Ericsson\Sony Ericsson PC Companion\PCCompanionInfo.exe
PRC - [2010.12.13 09:39:27 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2010.12.13 09:39:19 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.08.13 12:58:56 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2010.02.18 11:43:18 | 000,248,040 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe
PRC - [2010.01.14 22:10:53 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2010.01.03 18:07:48 | 000,246,520 | ---- | M] () -- C:\Programme\ICQ6Toolbar\ICQ Service.exe
PRC - [2008.04.14 04:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2008.04.14 04:22:34 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\attrib.exe
PRC - [2006.03.15 16:41:18 | 000,348,160 | ---- | M] (TP-LINK TECHNOLOGIES CO., LTD) -- C:\Programme\TP-LINK\TWCU\TWCU.exe
PRC - [2005.09.03 15:18:30 | 000,094,208 | ---- | M] (Nero AG) -- C:\Programme\Gemeinsame Dateien\Ahead\Lib\NMBgMonitor.exe
PRC - [2005.08.05 07:10:44 | 000,036,864 | ---- | M] () -- C:\WINDOWS\system32\acs.exe
========== Modules (SafeList) ==========
MOD - [2011.04.27 13:28:06 | 000,580,608 | ---- | M] (OldTimer Tools) -- D:\Usenext\OTL.exe
MOD - [2010.08.23 18:11:46 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (SeaPort)
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - [2011.03.17 19:23:39 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.03.09 14:30:08 | 000,092,592 | ---- | M] (TomTom) [Auto | Running] -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2011.02.10 15:29:24 | 000,150,528 | ---- | M] (Avanquest Software) [On_Demand | Stopped] -- C:\Programme\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe -- (Sony Ericsson PCCompanion)
SRV - [2010.12.13 09:39:27 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010.08.13 12:58:56 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2010.06.14 15:07:14 | 000,615,936 | ---- | M] (Nokia) [On_Demand | Stopped] -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer)
SRV - [2010.01.03 18:07:48 | 000,246,520 | ---- | M] () [Auto | Running] -- C:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2008.12.04 18:52:26 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2005.08.05 07:10:44 | 000,036,864 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\acs.exe -- (ACS)
SRV - [2005.04.04 00:41:10 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe -- (IDriverT)
========== Driver Services (SafeList) ==========
DRV - [2011.03.17 19:23:41 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010.12.13 09:39:38 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010.06.17 15:27:02 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.02.26 14:32:58 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerfltj.sys -- (UsbserFilt)
DRV - [2010.02.26 14:32:46 | 000,008,192 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\usbser_lowerflt.sys -- (upperdev)
DRV - [2010.02.26 14:32:44 | 000,022,528 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmbo.sys -- (nmwcdc)
DRV - [2010.02.26 14:32:44 | 000,018,176 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\ccdcmb.sys -- (nmwcd)
DRV - [2010.02.26 14:21:22 | 000,137,344 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsu.sys -- (nmwcdnsu)
DRV - [2010.02.26 14:21:22 | 000,008,320 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmwcdnsuc.sys -- (nmwcdnsuc)
DRV - [2009.02.13 12:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008.11.10 16:09:59 | 000,717,296 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2008.08.26 10:26:12 | 000,018,816 | ---- | M] (Nokia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\pccsmcfd.sys -- (pccsmcfd)
DRV - [2008.04.13 20:53:09 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [2007.11.01 08:38:56 | 004,620,288 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RtkHDAud.sys -- (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2007.10.23 12:51:04 | 000,103,296 | R--- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\Rtenicxp.sys -- (RTLE8023xp)
DRV - [2007.09.07 10:19:16 | 000,347,776 | R--- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rt73.sys -- (RT73)
DRV - [2007.07.27 12:46:06 | 000,251,680 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\acehlp10.sys -- (acehlp10)
DRV - [2007.07.27 10:13:08 | 000,330,144 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ACEDRV10.sys -- (acedrv10)
DRV - [2007.07.12 12:58:54 | 000,049,904 | R--- | M] (Avanquest Software) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\BVRPMPR5.SYS -- (BVRPMPR5)
DRV - [2006.10.09 16:03:56 | 000,017,152 | ---- | M] (Deutsche Telekom AG, Marmiko IT-Solutions GmbH) [Kernel | On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys -- (MIINPazX)
DRV - [2006.01.16 12:45:30 | 000,360,288 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ar5523.sys -- (AR5523)
DRV - [2005.05.23 08:27:00 | 000,137,884 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005.05.23 08:27:00 | 000,080,272 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2005.05.23 08:27:00 | 000,010,864 | R--- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2004.11.24 03:00:00 | 000,014,976 | R--- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avmunet.sys -- (AVMUNET)
DRV - [2003.07.16 23:28:02 | 000,017,142 | ---- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\CBTNDIS5.sys -- (CBTNDIS5)
DRV - [2003.05.14 17:01:42 | 000,062,673 | R--- | M] (Funk Software, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\odysseyIM3.sys -- (odysseyIM3)
DRV - [2002.11.12 11:01:46 | 000,036,048 | ---- | M] (THOMSON multimedia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcan5ln.sys -- (alcan5ln) Alcatel SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS)
DRV - [2002.11.12 11:01:42 | 000,748,544 | ---- | M] (THOMSON multimedia) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\alcaudsl.sys -- (alcaudsl)
DRV - [2001.08.17 14:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Live Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "chrome://speeddial/content/speeddial.xul"
FF - prefs.js..extensions.enabledItems: {0545b830-f0aa-4d7e-8820-50a4629a56fe}:4.6.4
FF - prefs.js..extensions.enabledItems: moveplayer@movenetworks.com:1.0.0.071303000004
FF - prefs.js..extensions.enabledItems: personas@christopher.beard:1.6.1
FF - prefs.js..extensions.enabledItems: {64161300-e22b-11db-8314-0800200c9a66}:0.9.5.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: bkmrksync@nokia.com:1.0.0.732
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\bkmrksync@nokia.com: D:\Nokia\Nokia PC Suite 7\bkmrksync\ [2010.08.24 22:16:18 | 000,000,000 | -H-D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.04.08 13:51:09 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 4.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.04.08 13:51:07 | 000,000,000 | ---D | M]
[2011.01.02 18:02:33 | 000,000,000 | -H-D | M] (No name found) -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Extensions
[2011.01.02 18:02:33 | 000,000,000 | -H-D | M] (No name found) -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Extensions\home2@tomtom.com
[2011.04.08 13:52:15 | 000,000,000 | -H-D | M] (No name found) -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Firefox\Profiles\h8uu6pym.default\extensions
[2010.04.29 19:34:01 | 000,000,000 | -H-D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Firefox\Profiles\h8uu6pym.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.08.14 16:01:47 | 000,000,000 | -H-D | M] ("DVDVideoSoft Menu") -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Firefox\Profiles\h8uu6pym.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2009.04.11 20:23:43 | 000,000,000 | -H-D | M] (Move Media Player) -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Firefox\Profiles\h8uu6pym.default\extensions\moveplayer@movenetworks.com
[2011.04.23 20:11:41 | 000,000,944 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Firefox\Profiles\h8uu6pym.default\searchplugins\icqplugin.xml
[2008.09.03 18:39:18 | 000,002,344 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Firefox\Profiles\h8uu6pym.default\searchplugins\itflexidictde.xml
[2008.07.13 01:01:56 | 000,002,105 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Mozilla\Firefox\Profiles\h8uu6pym.default\searchplugins\youtube-video-search.xml
[2011.04.08 13:51:09 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2010.01.25 21:25:10 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Programme\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2010.05.04 13:56:13 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
File not found (No name found) --
() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\FAMILIE***\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\H8UU6PYM.DEFAULT\EXTENSIONS\{0545B830-F0AA-4D7E-8820-50A4629A56FE}.XPI
() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\FAMILIE***\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\H8UU6PYM.DEFAULT\EXTENSIONS\{64161300-E22B-11DB-8314-0800200C9A66}.XPI
() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\FAMILIE***\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\H8UU6PYM.DEFAULT\EXTENSIONS\PERSONAS@CHRISTOPHER.BEARD.XPI
[2010.05.04 13:56:00 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAMME\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011.03.18 19:56:37 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Programme\Mozilla Firefox\components\browsercomps.dll
[2010.05.04 13:55:58 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
[2006.09.26 13:03:14 | 000,098,304 | ---- | M] (Zylom) -- C:\Programme\Mozilla Firefox\plugins\npzylomgamesplayer.dll
[2010.01.01 10:00:00 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.01.01 10:00:00 | 000,002,252 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\bing.xml
[2010.01.01 10:00:00 | 000,001,153 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.01.01 10:00:00 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.01.01 10:00:00 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.01.01 10:00:00 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2004.08.04 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Programme\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No CLSID value found.
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\Alcmtr.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TWCU] C:\Programme\TP-LINK\TWCU\TWCU.exe (TP-LINK TECHNOLOGIES CO., LTD)
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Programme\Gemeinsame Dateien\Ahead\lib\NMBgMonitor.exe (Nero AG)
O4 - HKCU..\Run: [ICQ] File not found
O4 - HKCU..\Run: [PC Suite Tray] D:\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKCU..\Run: [sFGtypQnwU] C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\sFGtypQnwU.exe (WinTrust)
O4 - HKCU..\Run: [Sony Ericsson PC Companion] C:\Programme\Sony Ericsson\Sony Ericsson PC Companion\PCCompanion.exe (Sony Ericsson)
O4 - HKCU..\Run: [TomTomHOME.exe] C:\Programme\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
O4 - Startup: C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Autostart\Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe (Adobe Systems Incorporated)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableTaskMgr = 1
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\WINDOWS\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Programme\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Programme\ICQ7.4\ICQ.exe (ICQ, LLC.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {33564D57-0000-0010-8000-00AA00389B71} hxxp://download.microsoft.com/download/F/6/E/F6E491A6-77E1-4E20-9F5F-94901338C922/wmv9VCM.CAB (Reg Error: Key error.)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} hxxp://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab (MSN Photo Upload Tool)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab (Java Plug-in 1.6.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2004.10.27 19:48:54 | 000,000,150 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{927eca6f-65bb-11e0-b12b-002127c386f9}\Shell - "" = AutoRun
O33 - MountPoints2\{927eca6f-65bb-11e0-b12b-002127c386f9}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{927eca6f-65bb-11e0-b12b-002127c386f9}\Shell\AutoRun\command - "" = H:\Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011.04.27 13:30:34 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Familie***\Recent
[2011.04.26 17:17:15 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Startmenü\Programme\Windows Recovery
[2011.04.26 16:54:26 | 000,569,344 | ---- | C] (WinTrust) -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\sFGtypQnwU.exe
[2011.04.14 00:40:10 | 004,284,416 | ---- | C] (Google Inc.) -- C:\WINDOWS\System32\GPhotos.scr
[2011.04.13 21:51:21 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\ICQ7.4
[2011.04.13 21:49:25 | 000,000,000 | ---D | C] -- C:\Programme\ICQ7.4
[2011.04.13 13:15:42 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\Sony
[2011.04.13 13:14:25 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Eigene Dateien\My Podcasts
[2011.04.13 13:14:25 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Eigene Dateien\Media Go
[2011.04.13 13:13:18 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Sony
[2011.04.13 13:13:17 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Sony Shared
[2011.04.13 13:12:45 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\Downloaded Installations
[2011.04.13 13:12:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Sony Corporation
[2011.04.13 13:12:37 | 000,000,000 | ---D | C] -- C:\Programme\Sony
[2011.04.13 13:11:41 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Sony
[2011.04.13 13:11:41 | 000,000,000 | ---D | C] -- C:\Programme\Sony Media Go Install
[2011.04.13 13:04:51 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Sony Ericsson
[2011.04.13 13:04:50 | 000,000,000 | ---D | C] -- C:\Programme\Sony Ericsson
[2011.04.13 13:04:50 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Sony Ericsson
[2011.04.10 20:00:56 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Picasa 3
[2011.03.30 11:44:30 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\LittleGamesCompany
[2011.03.30 11:44:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\LittleGamesCompany
[2011.03.30 11:13:46 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\Sungift Games
[2011.03.30 11:13:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\Sungift Games
[2011.03.30 11:03:03 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Eigene Dateien\Die Kunst des Mordens - Die todliche Spur
[2011.03.30 10:42:38 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\MysteriousCaseOfJekyllAndHyde
[2011.03.30 10:31:27 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\V-Games
[2011.03.30 10:07:39 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\ThreeDays2
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011.04.27 13:15:22 | 000,270,893 | ---- | M] () -- C:\WINDOWS\System32\NvApps.xml
[2011.04.27 13:15:14 | 000,001,086 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011.04.27 13:15:01 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.04.27 13:13:14 | 000,001,090 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011.04.26 17:23:47 | 000,000,392 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\18145076
[2011.04.26 17:21:07 | 000,441,124 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2011.04.26 17:21:07 | 000,071,060 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2011.04.26 17:21:06 | 000,458,822 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2011.04.26 17:21:05 | 000,084,326 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2011.04.26 17:17:27 | 000,000,871 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Desktop\Windows Recovery.lnk
[2011.04.26 17:17:22 | 000,000,144 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\~18145076r
[2011.04.26 17:17:22 | 000,000,128 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\~18145076
[2011.04.26 16:54:26 | 000,569,344 | ---- | M] (WinTrust) -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\sFGtypQnwU.exe
[2011.04.25 21:28:25 | 000,000,116 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011.04.25 21:28:24 | 000,172,032 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.04.25 20:34:46 | 000,007,168 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Eigene Dateien\photothumb.db
[2011.04.23 19:45:39 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.04.20 09:04:47 | 000,051,396 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\wklnhst.dat
[2011.04.16 23:31:40 | 733,448,192 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Desktop\2007-Rec-cineonws4616-1.avi
[2011.04.16 23:17:22 | 733,898,752 | -H-- | M] () -- C:\Dokumente und Einstellungen\Familie***\Desktop\2009-Rec_2-cineonws861.avi
[2011.04.16 18:19:23 | 001,578,264 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2011.04.15 16:36:12 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011.04.15 14:08:33 | 000,001,781 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Google Chrome.lnk
[2011.04.14 00:40:10 | 004,284,416 | ---- | M] (Google Inc.) -- C:\WINDOWS\System32\GPhotos.scr
[2011.04.13 21:51:21 | 000,001,455 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\ICQ7.4.lnk
[2011.04.13 13:13:18 | 000,001,606 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Media Go.lnk
[2011.04.13 13:05:06 | 000,001,873 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Sony Ericsson PC Companion 2.0.lnk
[2011.04.08 13:51:14 | 000,000,700 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Mozilla Firefox.lnk
[5 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.04.26 17:17:26 | 000,000,871 | -H-- | C] () -- C:\Dokumente und Einstellungen\Familie***\Desktop\Windows Recovery.lnk
[2011.04.26 17:17:22 | 000,000,144 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\~18145076r
[2011.04.26 17:17:21 | 000,000,128 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\~18145076
[2011.04.26 17:17:03 | 000,000,392 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\18145076
[2011.04.17 02:41:52 | 733,448,192 | -H-- | C] () -- C:\Dokumente und Einstellungen\Familie***\Desktop\2007-Rec-cineonws4616-1.avi
[2011.04.17 02:36:56 | 733,898,752 | -H-- | C] () -- C:\Dokumente und Einstellungen\Familie***\Desktop\2009-Rec_2-cineonws861.avi
[2011.04.13 21:51:21 | 000,001,455 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\ICQ7.4.lnk
[2011.04.13 13:13:18 | 000,001,606 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Media Go.lnk
[2011.04.13 13:05:06 | 000,001,873 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Sony Ericsson PC Companion 2.0.lnk
[2011.04.08 13:51:14 | 000,000,706 | -H-- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Startmenü\Programme\Mozilla Firefox.lnk
[2011.04.08 13:51:14 | 000,000,700 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users.WINDOWS\Desktop\Mozilla Firefox.lnk
[2011.02.22 23:29:10 | 000,000,879 | ---- | C] () -- C:\WINDOWS\System32\drivers\atmapi.sys
[2010.07.08 20:29:47 | 000,000,000 | ---- | C] () -- C:\WINDOWS\PhantomOfVenice.INI
[2010.04.29 21:12:30 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2010.01.11 13:11:49 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Menu.INI
[2009.12.11 21:15:16 | 000,037,340 | -H-- | C] () -- C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\slot2.mm1
[2009.12.11 21:15:04 | 000,000,080 | -H-- | C] () -- C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\slot1.mm1
[2009.11.25 20:45:13 | 002,293,286 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2009.11.13 20:44:11 | 000,004,096 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2009.09.13 20:59:31 | 000,000,048 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2009.08.03 01:21:54 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2009.08.03 01:21:52 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2009.08.03 01:21:52 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2009.01.20 16:43:31 | 000,149,392 | ---- | C] () -- C:\WINDOWS\System32\drivers\ar5523.bin
[2009.01.20 16:43:31 | 000,149,392 | ---- | C] () -- C:\WINDOWS\System32\ar5523.bin
[2009.01.20 16:43:28 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\acs.exe
[2009.01.20 16:43:18 | 000,192,512 | ---- | C] () -- C:\WINDOWS\System32\AegisI5.exe
[2008.11.06 20:47:35 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2008.10.24 21:37:06 | 000,016,098 | ---- | C] () -- C:\WINDOWS\German2.ini
[2008.08.03 02:46:26 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2008.07.12 01:32:09 | 000,000,030 | ---- | C] () -- C:\WINDOWS\Iedit.INI
[2008.07.03 11:36:01 | 000,000,029 | ---- | C] () -- C:\WINDOWS\popcinfo.dat
[2008.06.20 21:08:42 | 000,000,116 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2008.06.20 20:46:44 | 000,000,000 | ---- | C] () -- C:\WINDOWS\Irremote.ini
[2008.06.15 13:41:15 | 000,007,680 | ---- | C] () -- C:\WINDOWS\System32\CNMVS61.DLL
[2008.06.10 15:28:10 | 000,001,144 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2008.06.10 14:26:45 | 000,005,607 | ---- | C] () -- C:\WINDOWS\System32\stci.dll
[2008.06.09 10:32:34 | 000,000,145 | -H-- | C] () -- C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2008.06.09 09:19:52 | 000,051,396 | -H-- | C] () -- C:\Dokumente und Einstellungen\Familie***\Anwendungsdaten\wklnhst.dat
[2008.06.09 09:11:22 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2008.06.08 20:01:19 | 000,004,184 | -HS- | C] () -- C:\WINDOWS\System32\KGyGaAvL.sys
[2008.06.08 18:12:25 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2008.06.08 18:09:43 | 001,578,264 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008.06.08 18:08:54 | 000,172,032 | -H-- | C] () -- C:\Dokumente und Einstellungen\Familie***\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.06.08 17:56:06 | 000,049,152 | R--- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2008.06.08 17:48:35 | 000,004,125 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2008.06.08 17:48:31 | 000,010,288 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2008.06.08 17:41:36 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2008.06.08 17:35:55 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2008.06.05 09:58:26 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2007.10.12 23:20:06 | 000,151,417 | ---- | C] () -- C:\WINDOWS\System32\xlive.dll.cat
[2007.07.02 21:41:13 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2007.07.02 21:36:50 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2005.08.22 19:22:36 | 000,000,368 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\wklnhst.dat
[2004.12.19 18:18:15 | 000,000,147 | ---- | C] () -- C:\Dokumente und Einstellungen\NetworkService\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2004.09.28 23:54:30 | 003,375,104 | ---- | C] () -- C:\WINDOWS\System32\qt-mt331.dll
[2004.08.04 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004.08.04 14:00:00 | 000,458,822 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004.08.04 14:00:00 | 000,441,124 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004.08.04 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004.08.04 14:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004.08.04 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004.08.04 14:00:00 | 000,084,326 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004.08.04 14:00:00 | 000,071,060 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004.08.04 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004.08.04 14:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004.08.04 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004.08.04 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.08.04 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004.08.04 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2001.09.04 15:12:28 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2001.09.04 15:10:20 | 000,004,518 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
========== Alternate Data Streams ==========
@Alternate Data Stream - 98 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:F35AE645
@Alternate Data Stream - 98 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:5D351BC6
@Alternate Data Stream - 96 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:6FE17A89
@Alternate Data Stream - 94 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:E07EA07E
@Alternate Data Stream - 143 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:48429D0E
@Alternate Data Stream - 141 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:700B9342
@Alternate Data Stream - 139 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:268BA8AB
@Alternate Data Stream - 138 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:AF9BF410
@Alternate Data Stream - 125 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:3FD496E1
@Alternate Data Stream - 125 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:10D98D98
@Alternate Data Stream - 124 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:DA321CD4
@Alternate Data Stream - 123 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:82529191
@Alternate Data Stream - 122 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:B30D9A49
@Alternate Data Stream - 122 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:614F17D3
@Alternate Data Stream - 120 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:BB8B6B1E
@Alternate Data Stream - 119 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:CB16385F
@Alternate Data Stream - 118 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:8F09BC2E
@Alternate Data Stream - 118 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:55BB2521
@Alternate Data Stream - 115 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:CEF2A14E
@Alternate Data Stream - 115 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:B904C348
@Alternate Data Stream - 115 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:6C5EC3CD
@Alternate Data Stream - 114 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:E32966C0
@Alternate Data Stream - 114 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:561B1D2B
@Alternate Data Stream - 114 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:12D2EB9C
@Alternate Data Stream - 113 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:9398DBB4
@Alternate Data Stream - 112 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:3B812EE0
@Alternate Data Stream - 111 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:EC2381A4
@Alternate Data Stream - 111 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:B1FBA7E1
@Alternate Data Stream - 110 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:D507B5A8
@Alternate Data Stream - 109 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:FB97DB91
@Alternate Data Stream - 109 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:409A775B
@Alternate Data Stream - 108 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:93D985FC
@Alternate Data Stream - 107 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:097FF903
@Alternate Data Stream - 106 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:3B3A35EC
@Alternate Data Stream - 105 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:D31BE97C
@Alternate Data Stream - 104 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:9ACB70D7
@Alternate Data Stream - 104 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:5C6EBC69
@Alternate Data Stream - 103 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:7A0EFE63
@Alternate Data Stream - 100 bytes -> C:\Dokumente und Einstellungen\All Users.WINDOWS\Anwendungsdaten\TEMP:ADF211B1
< End of report >
Extras: Code:
OTL Extras logfile created on: 27.04.2011 13:33:41 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = D:\Usenext
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.023,00 Mb Total Physical Memory | 356,00 Mb Available Physical Memory | 35,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 78,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 125,46 Gb Total Space | 38,80 Gb Free Space | 30,93% Space Free | Partition Type: NTFS
Drive D: | 97,65 Gb Total Space | 26,86 Gb Free Space | 27,51% Space Free | Partition Type: NTFS
Drive E: | 9,76 Gb Total Space | 5,28 Gb Free Space | 54,15% Space Free | Partition Type: FAT32
Drive F: | 366,95 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: *** | User Name: Familie*** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
http [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\ICQ7.4\ICQ.exe" = C:\Programme\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4 -- (ICQ, LLC.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\ICQ6\ICQ.exe" = C:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ Library -- (ICQ, Inc.)
"C:\Programme\SopCast\adv\SopAdver.exe" = C:\Programme\SopCast\adv\SopAdver.exe:*:Enabled:SopCast Adver
"C:\Programme\SopCast\SopCast.exe" = C:\Programme\SopCast\SopCast.exe:*:Enabled:SopCast Main Application
"C:\Programme\Nero\Nero 7\Nero ShowTime\ShowTime.exe" = C:\Programme\Nero\Nero 7\Nero ShowTime\ShowTime.exe:*:Disabled:Windows Media(TM) Audio (wma) -- (Nero AG)
"C:\Programme\KONAMI\Pro Evolution Soccer 2009\pes2009.exe" = C:\Programme\KONAMI\Pro Evolution Soccer 2009\pes2009.exe:*:Enabled:Pro Evolution Soccer 2009
"D:\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe" = D:\Medal of Honor Airborne\UnrealEngine3\Binaries\MOHA.exe:*:Enabled:Medal of Honor Airborne -- (Electronic Arts Inc.)
"D:\CoD-WaW\CoDWaWmp.exe" = D:\CoD-WaW\CoDWaWmp.exe:*:Enabled:Call of Duty(R) - World at War(TM) -- (Activision Blizzard, Inc.)
"D:\CoD-WaW\CoDWaW.exe" = D:\CoD-WaW\CoDWaW.exe:*:Enabled:Call of Duty(R) - World at War(TM) -- (Activision Blizzard, Inc.)
"F:\bin\IA\Core\MDM_Util.exe" = F:\bin\IA\Core\MDM_Util.exe:*:Enabled:MDM_Util
"C:\Programme\Activision Value\Soldier of Fortune Payback\sof3.exe" = C:\Programme\Activision Value\Soldier of Fortune Payback\sof3.exe:*:Enabled:sof3 -- ()
"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Programme\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe" = C:\Programme\Steam\SteamApps\common\call of duty modern warfare 2\iw4sp.exe:*:Enabled:Call of Duty: Modern Warfare 2
"C:\Programme\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe" = C:\Programme\Steam\SteamApps\common\call of duty modern warfare 2\iw4mp.exe:*:Enabled:Call of Duty: Modern Warfare 2 - Multiplayer -- ()
"C:\Programme\Gemeinsame Dateien\Nokia\Service Layer\A\nsl_host_process.exe" = C:\Programme\Gemeinsame Dateien\Nokia\Service Layer\A\nsl_host_process.exe:*:Enabled:Nokia Service Layer Host Process -- (Nokia Corporation)
"C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater -- (Nokia Corporation)
"D:\Kane and Lynch Dead Men\kaneandlynch.exe" = D:\Kane and Lynch Dead Men\kaneandlynch.exe:*:Enabled:Kane & Lynch: Dead Men -- (Io Interactive A/S)
"C:\Programme\ICQ7.4\ICQ.exe" = C:\Programme\ICQ7.4\ICQ.exe:*:Enabled:ICQ7.4 -- (ICQ, LLC.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{00D0200F-3B4D-4A2F-869E-533ED835A943}" = Hervorhebe-Funktion (Windows Live Toolbar)
"{06E6E30D-B498-442F-A943-07DE41D7F785}" = Microsoft Search Enhancement Pack
"{089DD780-DB3F-4CDB-A0C2-111360247298}" = PC Connectivity Solution
"{0AB1107C-BCF7-4AF5-8BC2-A0BC77D9E5EB}" = ZyAIR G-200 Wireless LAN-USB 2.0-Adapter
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation(R)Store
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1A655D51-1423-48A3-B748-8F5A0BE294C8}" = Microsoft Visual J# .NET Redistributable Package 1.1
"{1CB92574-96F2-467B-B793-5CEB35C40C29}" = Image Resizer Powertoy for Windows XP
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{218761F6-CBF6-4973-B910-A33E6563A1EA}" = Windows Live Toolbar-Erweiterung (Windows Live Toolbar)
"{225DB4AA-3CFF-47E8-B3C8-6DAD713E986E}" = Nokia PC Suite
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{25F28E39-FDBB-11DB-8314-0800200C9A66}" = Medal of Honor Airborne
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20
"{28006915-2739-4EBE-B5E8-49B25D32EB33}" = TP-LINK Wireless Client Utility Installation Program
"{2DD6C198-FA9A-40B4-8DE5-CE5206E3EB34}" = Smart Menus (Windows Live Toolbar)
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3248F0A8-6813-11D6-A77B-00B0D0160060}" = Java(TM) 6 Update 6
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{350FB27C-CF62-4EF3-AF9D-70FF313FE221}" = iTunes
"{3D960387-76B3-4758-BAF7-D156B14A032F}" = Ulead PhotoImpact 8
"{3F262ADC-5AD2-48E5-A586-44315E04A9E2}" = Microsoft Picture It!-Bibliothek 10
"{42756145-9997-4D28-809B-8756BFD00106}" = Microsoft Picture It! Foto Premium 10
"{4781569D-5404-1F26-4B2B-6DF444441031}" = Nero 7 Premium
"{48DAC839-8673-4BDC-A1AF-96035EF4481D}" = Nokia Map Manager
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4ECA710C-B818-4751-A3B8-42C2D93922A8}" = Nokia Software Updater
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{57BB7F28-4AB1-49A7-A549-F185963808F7}" = Burger Island
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{70AA9B4F-64F7-4B0D-ADD8-05802D61AF72}" = Windows Live Toolbar
"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{77F09242-A107-4CB6-A295-D8656C2C3795}" = Samsung USB Driver (MCCI 4.24)
"{786C4AD1-DCBA-49A6-B0EF-B317A344BD66}" = Windows Live Favorites für Windows Live Toolbar
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8937FCB2-2FC6-4FC3-9FB5-DE2C92DB9C38}" = Microsoft .NET Framework 2.0 Language Pack - DEU
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{911B0407-6000-11D3-8CFE-0050048383C9}" = Microsoft Word 2002
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95468B00-C081-4B27-AC96-0A2A31359E60}" = Adobe Flash Player 10 ActiveX
"{99D42EC7-652B-4819-B3E6-6450C815E03F}" = Odyssey Client
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9F7FC79B-3059-4264-9450-39EB368E3225}" = Microsoft Digital Image Library 9 - Blocker
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A66C4716-7E10-4A53-8101-00C3C11D6A9C}" = Kane and Lynch: Dead Men
"{A8DB611A-D80E-450D-85F6-3ACDD164BE31}" = Pro Evolution Soccer 2009
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A70000000000}" = Adobe Reader 7.0 - Deutsch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B26E3B0D-C2FA-4370-B068-7C476766F029}" = Microsoft Works
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation(R)Network Downloader
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C438DF2B-C5DF-4783-9CA5-9B89E501FA62}" = Works Update
"{C5C1C0F0-D62F-4DBF-81D4-D7EF397C228B}" = NVIDIA PhysX
"{C6A12D9B-D86A-4ee6-B980-95E4B26A2E13}" = Microsoft Works Suite-Add-Ins für Microsoft Word
"{C6AC04F5-5916-4A02-BC36-AF5BC0A3CBD4}" = Media Go
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CCA1EEA3-555E-4D05-AC46-4B49C6C5D887}" = Apple Mobile Device Support
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D050D7362D214723AD585B541FFB6C11}" = DivX Content Uploader
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D1B01DC9-CBAF-45F9-A387-7D00C11B630E}" = Microsoft Games for Windows - LIVE Redistributable
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.01.149
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1FDAA01-988C-423F-AC12-0D8F333943FD}" = Nokia Connectivity Cable Driver
"{FF1C31AE-0CDC-40CE-AB85-406F8B70D643}" = Bonjour
"1001 Nacht Die Abenteuer von Sindbad_is1" = 1001 Nacht Die Abenteuer von Sindbad
"2 Tasty 1.00" = 2 Tasty 1.00
"34EA302E7F4CBD17A19E33BBCB72363234956D7E" = Windows-Treiberpaket - Nokia Modem (06/09/2010 4.5)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11
"Agatha Christie - Dead Man's Folly_is1" = Agatha Christie - Dead Man's Folly
"Amelie's Cafe - Summer Time_is1" = Amelie's Cafe - Summer Time
"AmeliesCafe 1.00" = AmeliesCafe 1.00
"Ancient Spirits - Columbus' Legacy_is1" = Ancient Spirits - Columbus' Legacy
"Any Video Converter_is1" = Any Video Converter 3.0.5
"Artifacts of the Past - Mysterien der Antike_is1" = Artifacts of the Past - Mysterien der Antike
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Beach Party Craze" = Beach Party Craze
"Big City Adventure New York City_is1" = Big City Adventure New York City
"Blood Oath_is1" = Blood Oath
"Born Into Darkness_is1" = Born Into Darkness
"CANONBJ_Deinstall_CNMCP61.DLL" = Canon PIXMA iP3000
"Cassandras Abenteur 2 - Die fuenfte Sonne des Nostradamus_is1" = Cassandras Abenteur 2 - Die fuenfte Sonne des Nostradamus
"Cate West - The Vanishing Files Deluxe" = Cate West - The Vanishing Files Deluxe
"CCleaner" = CCleaner
"Club der Ermitterinnen 2 Dunkelgraue Schatten_is1" = Club der Ermitterinnen 2 Dunkelgraue Schatten
"Club der Ermittlerinnen - Kleine dunkle Lügen" = Club der Ermittlerinnen - Kleine dunkle Lügen
"Cooking Academy_is1" = Cooking Academy
"Das Mysteriöse Drachenrad_is1" = Das Mysteriöse Drachenrad
"Deadtime Stories_is1" = Deadtime Stories
"Delicious - Emily's Tea Garden 1.0.7.1" = Delicious - Emily's Tea Garden 1.0.7.1
"Der Inquisitor_is1" = Der Inquisitor
"Die Vergessenen Kinder_is1" = Die Vergessenen Kinder
"Drawn - Dark Flight Collector's Edition_is1" = Drawn - Dark Flight Collector's Edition
"Dream Day Wedding - Viva Las Vegas_is1" = Dream Day Wedding - Viva Las Vegas
"D-SAT4 4.0" = D-SAT4 4.0
"EEEE705096F837B7907659F100C9FE6DA001970F" = Windows-Treiberpaket - Nokia Modem (06/09/2010 7.01.0.7)
"Elementals The Magic Key_is1" = Elementals The Magic Key
"Empress of the Deep - Das dunkle Geheimnis_is1" = Empress of the Deep - Das dunkle Geheimnis
"Fabulous Finds_is1" = Fabulous Finds
"Farm Frenzy - Gone Fishing" = Farm Frenzy - Gone Fishing
"Farm Frenzy - Pizza Party 1.0.1.0" = Farm Frenzy - Pizza Party 1.0.1.0
"Farm Frenzy 3 - Madagascar 1.0.0.0" = Farm Frenzy 3 - Madagascar 1.0.0.0
"Farm Frenzy Gone Fishing_is1" = Farm Frenzy Gone Fishing
"Farm Mania 2_is1" = Farm Mania 2
"FishCo 1.00" = FishCo 1.00
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8
"Gardenscapes_is1" = Gardenscapes
"Ghost Town Mysteries - Bodie_is1" = Ghost Town Mysteries - Bodie
"Golden Trails - The New Western Rush_is1" = Golden Trails - The New Western Rush
"Google Chrome" = Google Chrome
"Hearts Medicine - Season One Deluxe_is1" = Hearts Medicine - Season One Deluxe
"Hidden Identity - Chicago Blackout Deluxe_is1" = Hidden Identity - Chicago Blackout Deluxe
"Hidden Magic_is1" = Hidden Magic
"Hidden Mysteries Vampire Secrets" = Hidden Mysteries Vampire Secrets
"ICQToolbar" = ICQ Toolbar
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{77F09242-A107-4CB6-A295-D8656C2C3795}" = Samsung USB Driver (MCCI 4.24)
"InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}" = Call of Duty(R) - World at War(TM) 1.1 Patch
"InstallShield_{D80A6A73-E58A-4673-AFF5-F12D7110661F}" = Call of Duty(R) - World at War(TM)
"Jane's Hotel Family Hero" = Jane's Hotel Family Hero
"Jessica - Geheimnisvolle Reise_is1" = Jessica - Geheimnisvolle Reise
"Lamp of Aladdin_is1" = Lamp of Aladdin
"Little Shop - World Traveler Deluxe_is1" = Little Shop - World Traveler Deluxe
"Lost City of Z Deluxe_is1" = Lost City of Z Deluxe
"Love and Death - Bitten_is1" = Love and Death - Bitten
"Messenger Plus! Live" = Messenger Plus! Live
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 2.0 Language Pack - DEU" = Microsoft .NET Framework 2.0 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Miriel's Enchanted Mystery Deluxe_is1" = Miriel's Enchanted Mystery Deluxe
"Mortimer Beckett and the Lost King_is1" = Mortimer Beckett and the Lost King
"Mozilla Firefox 4.0 (x86 de)" = Mozilla Firefox 4.0 (x86 de)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Mysterious Travel - The Magic Diary_is1" = Mysterious Travel - The Magic Diary
"Mystery Case Files - Dire Grove Sammleredition_is1" = Mystery Case Files - Dire Grove Sammleredition
"Mystery P.I. - Lost in Los Angeles Deluxe" = Mystery P.I. - Lost in Los Angeles Deluxe
"Mystery P.I. - Stolen in San Francisco Deluxe" = Mystery P.I. - Stolen in San Francisco Deluxe
"Mystery P.I. - The London Caper Deluxe_is1" = Mystery P.I. - The London Caper Deluxe
"Mystery P.I. - The New York Fortune_is1" = Mystery P.I. - The New York Fortune
"Mystery P.I. Lost in Los Angeles" = Mystery P.I. Lost in Los Angeles
"Mystic Diary - Die Geisterinsel_is1" = Mystic Diary - Die Geisterinsel
"Mystic Emporium_is1" = Mystic Emporium
"Nancy Drew - Das Phantom von Venedig_is1" = Nancy Drew - Das Phantom von Venedig
"Nick Chase And The Deadly Diamond_is1" = Nick Chase And The Deadly Diamond
"Nightfall Mysteries - Der Fluch der Oper_is1" = Nightfall Mysteries - Der Fluch der Oper
"Nightfall Mysteries - Die Ashburg Verschwörung_is1" = Nightfall Mysteries - Die Ashburg Verschwörung
"Nightmare Adventures - Das Verlies der Hexe" = Nightmare Adventures - Das Verlies der Hexe
"Nightmare on the Pacific" = Nightmare on the Pacific
"Nightshift Legacy - The Jaguars Eye Deluxe_is1" = Nightshift Legacy - The Jaguars Eye Deluxe
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia PC Suite" = Nokia PC Suite
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Odyssee Ins Ungewisse_is1" = Odyssee Ins Ungewisse
"OpenAL" = OpenAL
"Paige Harper and the Tome of Mystery_is1" = Paige Harper and the Tome of Mystery
"Pathfinders - Auf See vermisst_is1" = Pathfinders - Auf See vermisst
"PhotoScape" = PhotoScape
"Picasa 3" = Picasa 3
"PictureItPrem_v10" = Microsoft Picture It! Foto Premium 10
"PJ Pride Pet Detectives_is1" = PJ Pride Pet Detectives
"Potion Bar Deluxe_is1" = Potion Bar Deluxe
"ProtectDisc Driver 10" = ProtectDisc Helper Driver 10
"Public Enemies - Bonnie and Clyde_is1" = Public Enemies - Bonnie and Clyde
"Real Crimes - Der Einhorn-Killer_is1" = Real Crimes - Der Einhorn-Killer
"Real Crimes - Jack the Ripper_is1" = Real Crimes - Jack the Ripper
"Rhianna Ford und der Brief von Da Vinci_is1" = Rhianna Ford und der Brief von Da Vinci
"Robinson Crusoe and the Cursed Pirates_is1" = Robinson Crusoe and the Cursed Pirates
"Secret Mission - Die vergessene Insel_is1" = Secret Mission - Die vergessene Insel
"secrets of tahiti" = secrets of tahiti
"Shockwave" = Shockwave
"Skat-Ass 3.0 - Gläserne Karten_is1" = DATA BECKER Skat-Ass 3.0 - Gläserne Karten
"Steam App 10180" = Call of Duty: Modern Warfare 2
"Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer
"Tatort London - Die mysteriösen Fälle von Sherlo~DF87DA88_is1" = Tatort London - Die mysteriösen Fälle von Sherlock & Watson
"The Dracula Files_is1" = The Dracula Files
"The Magician's Handbook II - BlackLore_is1" = The Magician's Handbook II - BlackLore
"The Magicians Handbook II_is1" = The Magicians Handbook II
"The Tudors Deluxe_is1" = The Tudors Deluxe
"THIV_is1" = The Hell in Vietnam
"TomTom HOME" = TomTom HOME 2.8.1.2218
"tt_payback_ger" = Terrorist Takedown Payback
"Uninstall_is1" = Uninstall 1.0.0.1
"UseNeXT_is1" = UseNeXT
"VLC media player" = VLC media player 1.0.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinLiveSuite_Wave3" = Windows Live Essentials
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Women's Murder Club Twice in a Blue Moon_is1" = Women's Murder Club Twice in a Blue Moon
"Works2005Setup" = Setup-Start von Microsoft Works 2005
"Wudf01005" = Microsoft User-Mode Driver Framework Feature Pack 1.5
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 02.02.2011 10:38:17 | Computer Name = *** | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung iexplore.exe, Version 8.0.6001.18702, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 26.02.2011 15:59:40 | Computer Name = *** | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung explorer.exe, Version 6.0.2900.5512, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 26.02.2011 15:59:42 | Computer Name = *** | Source = Application Hang | ID = 1001
Description = Fehlerhafter Speicherbereich 734037209.
Error - 01.04.2011 02:21:19 | Computer Name = *** | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung plugin-container.exe, Version 1.9.2.4095,
fehlgeschlagenes Modul ntdll.dll, Version 5.1.2600.6055, Fehleradresse 0x0000100b.
Error - 01.04.2011 03:06:13 | Computer Name = *** | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung three_days.exe, Version 0.0.0.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 01.04.2011 06:16:12 | Computer Name = *** | Source = ESENT | ID = 490
Description = svchost (1604) Versuch, Datei "C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb"
für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der
Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet
wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
Error - 05.04.2011 12:34:33 | Computer Name = *** | Source = TomTomHOMEService | ID = 10000
Description =
Error - 13.04.2011 15:52:52 | Computer Name = *** | Source = MsiInstaller | ID = 10005
Description = Produkt: Windows Live Communications Platform -- Bei der Installation
dieses Pakets ist ein unerwarteter Fehler aufgetreten. Es liegt eventuell ein das
Paket betreffendes Problem vor. Der Fehlercode ist 2762. Argumente: , ,
Error - 13.04.2011 15:52:52 | Computer Name = *** | Source = MsiInstaller | ID = 10005
Description = Produkt: Windows Live Communications Platform -- Bei der Installation
dieses Pakets ist ein unerwarteter Fehler aufgetreten. Es liegt eventuell ein das
Paket betreffendes Problem vor. Der Fehlercode ist 2762. Argumente: , ,
Error - 26.04.2011 11:17:41 | Computer Name = *** | Source = WmiAdapter | ID = 4099
Description = Dienst konnte nicht geöffnet werden.
[ System Events ]
Error - 26.04.2011 11:18:56 | Computer Name = *** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "WMI-Leistungsadapter" wurde aufgrund folgenden Fehlers
nicht gestartet: %%1053
Error - 27.04.2011 05:55:24 | Computer Name = *** | Source = WPDMTPDriver | ID = 80836
Description = MTP WPD Driver has failed to start. Error 0x80070005.
Error - 27.04.2011 05:55:27 | Computer Name = *** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SeaPort" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error - 27.04.2011 06:26:45 | Computer Name = *** | Source = WPDMTPDriver | ID = 80836
Description = MTP WPD Driver has failed to start. Error 0x80070005.
Error - 27.04.2011 06:26:48 | Computer Name = *** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SeaPort" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error - 27.04.2011 06:26:52 | Computer Name = *** | Source = AR5523 | ID = 5001
Description = TP-LINK TL-WN620G 11G Wireless Adapter : Die Ressourcen konnten für
den notwendigen Vorgang nicht reserviert werden.
Error - 27.04.2011 06:50:34 | Computer Name = *** | Source = WPDMTPDriver | ID = 80836
Description = MTP WPD Driver has failed to start. Error 0x80070005.
Error - 27.04.2011 06:50:38 | Computer Name = *** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SeaPort" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error - 27.04.2011 07:15:04 | Computer Name = *** | Source = WPDMTPDriver | ID = 80836
Description = MTP WPD Driver has failed to start. Error 0x80070005.
Error - 27.04.2011 07:15:07 | Computer Name = *** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "SeaPort" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
< End of report >
Ich hoffe ihr könnt mir irgendwie helfen!! Schon mal ein dickes Danke im Voraus!! |
