Hi,
vielen Dank für die schnelle Antwort.
OTL File :OTL Logfile: Code:
OTL logfile created on: 24.11.2011 18:19:05 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Sascha Pohl\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19154)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,99 Gb Total Physical Memory | 1,37 Gb Available Physical Memory | 45,85% Memory free
6,19 Gb Paging File | 4,27 Gb Available in Paging File | 69,03% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 144,09 Gb Total Space | 39,39 Gb Free Space | 27,34% Space Free | Partition Type: NTFS
Drive D: | 144,00 Gb Total Space | 46,25 Gb Free Space | 32,12% Space Free | Partition Type: NTFS
Drive E: | 25,08 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: SASCHAPOHL-PC | User Name: Sascha Pohl | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Sascha Pohl\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Avira\AntiVir Desktop\avwebgrd.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Jumi\jumi.exe (Jumi Technologies)
PRC - C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
PRC - C:\Program Files\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital)
PRC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC)
PRC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe (WDC)
PRC - C:\Program Files\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann)
PRC - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe (Memeo)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\Buhl finance\tax 2009 Standard\taxaktuell.exe ()
PRC - C:\Program Files\Brother\Brmfcmon\BrMfimon.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Brother\Brmfcmon\BrMfcMon.exe (Brother Industries, Ltd.)
PRC - C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
PRC - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
PRC - C:\Program Files\Samsung\Easy Display Manager\dmhkcore.exe (SAMSUNG Electronics)
PRC - C:\Program Files\Samsung\EasySpeedUpManager\EasySpeedUpManager.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files\Samsung\EBM\EasyBatteryMgr3.exe (SAMSUNG Electronics co., LTD.)
PRC - C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
PRC - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
PRC - C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
PRC - C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
PRC - C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
PRC - C:\Program Files\Samsung\Samsung Magic Doctor\MagicDoctorKbdHk.exe (Samsung Electronics Co., Ltd.)
PRC - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (SafeNet, Inc)
PRC - C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe (SafeNet, Inc.)
========== Modules (No Company Name) ==========
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\b67478ec034fdf811a748f1b6b5b1c95\Microsoft.VisualBasic.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\6bc98e9b5eedaa8f71c5454d36a4b772\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\8645de531003807d00822e03986a075d\System.ServiceProcess.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\6d2f689baff5da3df134fdec0742a13c\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\e00630ec1e225a2376fdd430645e20f7\System.Web.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\40da9084d0863e07d7ce55953833b8b0\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\c1c06a392871267db27f7cbc40e1c4fb\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\1363115565fff5a641243a48f396f107\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\367c4043efc2f32d843cb588b0dc97fc\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\9e53d9921c4bb153f1ffbe1ae0e1b615\System.Data.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\f9c36ea806e77872dce891c77b68fac3\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b6632a8b2f276a8e31f5b0f6b2006cd1\mscorlib.ni.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32.dll ()
MOD - C:\Program Files\Mozilla Firefox\js3250.dll ()
MOD - C:\Program Files\Jumi\PreloadedProducts.dll ()
MOD - C:\Program Files\DivX\DivX Update\DivXUpdateCheck.dll ()
MOD - C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
MOD - C:\Program Files\Jumi\libvorbis.dll ()
MOD - C:\Program Files\Jumi\libtheora.dll ()
MOD - C:\Program Files\Jumi\libogg.dll ()
MOD - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\Memeo.API.dll ()
MOD - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\sqlite3.dll ()
MOD - C:\Program Files\Hardcopy\HcDllS.dll ()
MOD - C:\Program Files\Hardcopy\HcDLL2_29_Win32.dll ()
MOD - C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.resources\2.0.0.0_de_b77a5c561934e089\System.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Drawing.resources\2.0.0.0_de_b03f5f7f11d50a3a\System.Drawing.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\taxaktuell.exe ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wform09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wauff09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wfvie09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wsons09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wwerb09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\whau209.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\whau109.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wbae409.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wbae309.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wbae209.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wbae109.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wimp09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wfabu09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wreli09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\winc09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wsteu09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wstyle09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wstyle509.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\vpes3240.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wincb09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\wglob09.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\rszeus4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\rsdebug4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\rswinapi4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\rsodbc4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\rsdcom4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qtxml4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qtwebkit4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qttest4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qtsql4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qtscript4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qtnetwork4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qtgui4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qtcore4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\qt3support4.dll ()
MOD - C:\Program Files\Buhl finance\tax 2009 Standard\phonon4.dll ()
MOD - C:\Program Files\Brother\BrUtilities\BrLogAPI.dll ()
MOD - C:\Program Files\Common Files\LightScribe\QtGui4.dll ()
MOD - C:\Program Files\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll ()
MOD - C:\Program Files\Common Files\LightScribe\QtCore4.dll ()
MOD - C:\Program Files\Samsung\Samsung Magic Doctor\HookDllPS2.dll ()
MOD - C:\Program Files\Samsung\EasySpeedUpManager\HookDllPS2.dll ()
MOD - C:\Program Files\Samsung\Easy Display Manager\HookDllPS2.dll ()
MOD - C:\Program Files\Hardcopy\hardcopy.dll ()
========== Win32 Services (SafeList) ==========
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AntiVirWebService) -- C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (WDDMService) -- C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe (WDC)
SRV - (WDSmartWareBackgroundService) -- C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe (Memeo)
SRV - (EvtEng) -- C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel(R) Corporation)
SRV - (RegSrvc) -- C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel(R) Corporation)
SRV - (Samsung Update Plus) -- C:\Program Files\Samsung\Samsung Update Plus\SLUBackgroundService.exe ()
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
SRV - (SentinelProtectionServer) -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe (SafeNet, Inc)
SRV - (SentinelKeysServer) -- C:\Program Files\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe (SafeNet, Inc.)
========== Driver Services (SafeList) ==========
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (jumi) -- C:\Windows\System32\drivers\jumi.sys (Windows (R) Win 7 DDK provider)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (winusb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (avgio) -- C:\Program Files\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (WDC_SAM) -- C:\Windows\System32\drivers\wdcsam.sys (Western Digital Technologies)
DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NETw5v32) Intel(R) -- C:\Windows\System32\drivers\NETw5v32.sys (Intel Corporation)
DRV - (VMC302) -- C:\Windows\System32\drivers\vmc302.sys (Vimicro Corporation)
DRV - (LSDRVA) StarBoard FX-DUO Light Sensor USB Driver (lsdrva.sys) -- C:\Windows\System32\drivers\lsdrva.sys (eIT Co., Ltd. and Xiroku Inc.)
DRV - (WSDPrintDevice) -- C:\Windows\System32\drivers\WSDPrint.sys (Microsoft Corporation)
DRV - (NETw3v32) Intel(R) -- C:\Windows\System32\drivers\NETw3v32.sys (Intel Corporation)
DRV - (AmdK8) -- C:\Windows\system32\drivers\amdk8.sys ()
DRV - (KMDFMEMIO) -- C:\Windows\System32\drivers\KMDFMEMIO.sys (SAMSUNG ELECTRONICS CO., LTD.)
DRV - (Sentinel) -- C:\Windows\System32\Drivers\SENTINEL.SYS (SafeNet, Inc.)
DRV - (SNTNLUSB) -- C:\Windows\System32\drivers\SNTNLUSB.SYS (SafeNet, Inc.)
DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (Agere Systems)
DRV - (bcm4sbxp) -- C:\Windows\System32\drivers\bcm4sbxp.sys (Broadcom Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http:\\SAMSUNG NOTEBOOK PC
IE - HKLM\..\URLSearchHook: {a51a36e6-31e7-4838-9ff7-76298b527ec0} - C:\Program Files\softonic-Germany\tbsoft.dll (Conduit Ltd.)
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Hamstersoft Search Start
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Restore = http:\\SAMSUNG NOTEBOOK PC
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Ask"
FF - prefs.js..browser.search.defaultthis.engineName: "Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.7.0.6
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {a51a36e6-31e7-4838-9ff7-76298b527ec0}:3.8.0.8
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "hxxp://toolbar.ask.com/toolbarv/askRedirect?o=13165&gct=&gc=1&q="
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pack.google.com/Google Updater;version=14: C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Sascha Pohl\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Sascha Pohl\AppData\Local\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.06.27 11:31:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.18\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.06.27 11:31:10 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Sunbird 0.9\extensions\\Components: C:\Program Files\Mozilla Sunbird\components [2011.02.26 10:55:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Sunbird 0.9\extensions\\Plugins: C:\Program Files\Mozilla Sunbird\plugins [2011.02.26 10:55:40 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2011.02.26 10:55:30 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 2.0.0.24\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011.02.26 10:55:40 | 000,000,000 | ---D | M]
[2008.10.14 20:06:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sascha Pohl\AppData\Roaming\mozilla\Extensions
[2011.11.24 15:12:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sascha Pohl\AppData\Roaming\mozilla\Firefox\Profiles\1gmqi97w.default\extensions
[2011.10.14 09:50:47 | 000,000,000 | ---D | M] (DVDVideoSoftTB Community Toolbar) -- C:\Users\Sascha Pohl\AppData\Roaming\mozilla\Firefox\Profiles\1gmqi97w.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2011.10.14 09:50:48 | 000,000,000 | ---D | M] (softonic-Germany Community Toolbar) -- C:\Users\Sascha Pohl\AppData\Roaming\mozilla\Firefox\Profiles\1gmqi97w.default\extensions\{a51a36e6-31e7-4838-9ff7-76298b527ec0}
[2010.11.14 19:07:58 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\Sascha Pohl\AppData\Roaming\mozilla\Firefox\Profiles\1gmqi97w.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2008.10.14 22:25:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Sascha Pohl\AppData\Roaming\mozilla\Sunbird\Profiles\va0d4nuo.default\extensions
[2008.10.27 21:06:59 | 000,000,681 | ---- | M] () -- C:\Users\Sascha Pohl\AppData\Roaming\Mozilla\Firefox\Profiles\1gmqi97w.default\searchplugins\ask.xml
[2010.11.14 21:07:37 | 000,000,873 | ---- | M] () -- C:\Users\Sascha Pohl\AppData\Roaming\Mozilla\Firefox\Profiles\1gmqi97w.default\searchplugins\conduit.xml
[2011.05.28 10:40:21 | 000,001,061 | ---- | M] () -- C:\Users\Sascha Pohl\AppData\Roaming\Mozilla\Firefox\Profiles\1gmqi97w.default\searchplugins\yahoo-zugo.xml
[2011.04.19 16:54:13 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2008.10.14 20:06:31 | 000,000,000 | ---D | M] (Firefox Companion for eBay) -- C:\Program Files\Mozilla Firefox\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}
[2011.01.24 15:39:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.04.19 16:54:13 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2009.09.02 02:00:44 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V3.5\WINDOWS PRESENTATION FOUNDATION\DOTNETASSISTANTEXTENSION
[2011.02.02 20:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2009.03.03 11:00:30 | 001,275,856 | ---- | M] (1 mal 1 Software GmbH) -- C:\Program Files\mozilla firefox\plugins\NpFv501.dll
[2011.04.07 17:18:10 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.04.07 17:18:10 | 000,002,344 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.04.07 17:18:10 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.04.07 17:18:10 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.04.07 17:18:10 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Sascha Pohl\AppData\Local\Google\Chrome\Application\9.0.597.98\pdf.dll
CHR - plugin: Google Gears 0.5.33.0 (Enabled) = C:\Users\Sascha Pohl\AppData\Local\Google\Chrome\Application\9.0.597.98\gears.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Sascha Pohl\AppData\Local\Google\Chrome\Application\9.0.597.98\gcswf32.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: DivX Player Netscape Plugin (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npDivxPlayerPlugin.dll
CHR - plugin: Flatcast Viewer Plugin 5.0.356 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NpFv501.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Program Files\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Updater (Enabled) = C:\Program Files\Google\Google Updater\2.4.1536.6592\npCIDetect13.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.2.183.39\npGoogleOneClick8.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: Grass = C:\Users\Sascha Pohl\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmiboiefncpfjihjdedpaoammipkilla\1.0_0\
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (softonic-Germany Toolbar) - {a51a36e6-31e7-4838-9ff7-76298b527ec0} - C:\Program Files\softonic-Germany\tbsoft.dll (Conduit Ltd.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
O2 - BHO: (PDFCreator Toolbar Helper) - {C451C08A-EC37-45DF-AAAD-18B51AB5E837} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (Conduit Engine) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (softonic-Germany Toolbar) - {a51a36e6-31e7-4838-9ff7-76298b527ec0} - C:\Program Files\softonic-Germany\tbsoft.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (PDFCreator Toolbar) - {31CF9EBE-5755-4A1D-AC25-2834D952D9B4} - C:\Program Files\PDFCreator Toolbar\v3.3.0.1\PDFCreator_Toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (softonic-Germany Toolbar) - {A51A36E6-31E7-4838-9FF7-76298B527EC0} - C:\Program Files\softonic-Germany\tbsoft.dll (Conduit Ltd.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe (Brother Industries, Ltd.)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [hpqSRMon] File not found
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [mumservice] C:\Program Files\Motorola\Software Update\mumservice.exe (Motorola)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKLM..\Run: [Windows Mobile-based device management] C:\Windows\WindowsMobile\wmdSync.exe (Microsoft Corporation)
O4 - HKCU..\Run: [{D1836B5A-AAC4-7F66-DAF6-FFCB51940E03}] "C:\Users\Sascha Pohl\AppData\Roaming\Byda\ewitrom.exe" File not found
O4 - HKCU..\Run: [AdobeUpdater] "C:\Program Files\Common Files\Adobe\Updater5\AdobeUpdater.exe" File not found
O4 - HKCU..\Run: [ISUSPM] C:\ProgramData\Macrovision\FLEXnet Connect\6\ISUSPM.exe (Macrovision Corporation)
O4 - HKCU..\Run: [JumiController] C:\Program Files\Jumi\jumi.exe (Jumi Technologies)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\RunOnce: [FlashPlayerUpdate] C:\Windows\System32\Macromed\Flash\FlashUtil10w_Plugin.exe (Adobe Systems, Inc.)
O4 - Startup: C:\Users\Sascha Pohl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Hardcopy.LNK = C:\Program Files\Hardcopy\hardcopy.exe (sw4you, Siegfried Weckmann)
O4 - Startup: C:\Users\Sascha Pohl\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote Inhaltsverzeichnis.onetoc2 ()
O8 - Extra context menu item: Free YouTube Download - C:\Users\Sascha Pohl\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm ()
O8 - Extra context menu item: Free YouTube to iPhone Converter - C:\Users\Sascha Pohl\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetoiphoneconverter.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Sascha Pohl\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {B4693DA9-711A-4D04-AAE9-665E1984BB38} hxxp://mini-cabrio.ar-live.de/res/MINI_UnifeyeViewer-3.2.0.0_Setup.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab (Java Plug-in 1.6.0_04)
O16 - DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab (Java Plug-in 1.6.0_07)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{86602508-A4F0-4FD4-AA67-02B048ABA103}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DECB8486-47A8-4DB0-A326-AAD9748969B5}: DhcpNameServer = 192.168.2.1
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Public\Pictures\Sample Pictures\Tree.jpg
O24 - Desktop BackupWallPaper: C:\Users\Public\Pictures\Sample Pictures\Tree.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{1a7c9ae1-56ca-11df-bee0-0013779f3eb3}\Shell - "" = AutoRun
O33 - MountPoints2\{1a7c9ae1-56ca-11df-bee0-0013779f3eb3}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{2e6af759-1c95-11de-b7c1-0013779f3eb3}\Shell - "" = AutoRun
O33 - MountPoints2\{2e6af759-1c95-11de-b7c1-0013779f3eb3}\Shell\AutoRun\command - "" = F:\LaunchU3.exe -a
O33 - MountPoints2\{6a3fa575-30be-11de-a5a4-0013779f3eb3}\Shell\AutoRun\command - "" = C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL game.exe
O33 - MountPoints2\{9957885f-5300-11df-a20c-0013779f3eb3}\Shell - "" = AutoRun
O33 - MountPoints2\{9957885f-5300-11df-a20c-0013779f3eb3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{9957888d-5300-11df-a20c-0013779f3eb3}\Shell - "" = AutoRun
O33 - MountPoints2\{9957888d-5300-11df-a20c-0013779f3eb3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{99d2467e-dae0-11df-ab1a-0013779f3eb3}\Shell - "" = AutoRun
O33 - MountPoints2\{99d2467e-dae0-11df-ab1a-0013779f3eb3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{99d2469f-dae0-11df-ab1a-0013779f3eb3}\Shell - "" = AutoRun
O33 - MountPoints2\{99d2469f-dae0-11df-ab1a-0013779f3eb3}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{afe63c34-828e-11df-a6ee-0013779f3eb3}\Shell - "" = AutoRun
O33 - MountPoints2\{afe63c34-828e-11df-a6ee-0013779f3eb3}\Shell\AutoRun\command - "" = "G:\WD SmartWare.exe" autoplay=true
O33 - MountPoints2\{ce78c62b-55bd-11e0-8303-0013779f3eb3}\Shell - "" = AutoRun
O33 - MountPoints2\{ce78c62b-55bd-11e0-8303-0013779f3eb3}\Shell\AutoRun\command - "" = "F:\WD SmartWare.exe" autoplay=true
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011.11.24 17:34:11 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Sascha Pohl\Desktop\OTL.exe
[2011.11.24 12:14:05 | 000,000,000 | ---D | C] -- C:\Users\Sascha Pohl\AppData\Roaming\Malwarebytes
[2011.11.24 12:13:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.11.24 12:13:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.11.24 12:13:50 | 000,022,216 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.11.24 12:13:50 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.11.23 09:53:55 | 000,000,000 | ---D | C] -- C:\avrescue
[2011.11.20 22:48:35 | 000,000,000 | ---D | C] -- C:\Users\Sascha Pohl\AppData\Roaming\Ugp
[2011.11.20 22:48:35 | 000,000,000 | ---D | C] -- C:\Users\Sascha Pohl\AppData\Roaming\Byda
[2011.11.19 12:45:40 | 000,070,656 | ---- | C] (Brother Industries,Ltd.) -- C:\Windows\System32\BrWiaNCp.dll
[2011.11.19 12:45:40 | 000,070,144 | ---- | C] (Brother Industries, Ltd.) -- C:\Windows\System32\BrNetSti.dll
[2011.11.19 12:45:40 | 000,044,032 | ---- | C] (Brother Industries,Ltd) -- C:\Windows\System32\Brnsplg.dll
[2011.11.17 20:08:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
[2006.11.24 06:14:44 | 000,139,264 | ---- | C] ( ) -- C:\Windows\System32\MACSSDK_wiz.dll
[2006.11.24 06:14:44 | 000,126,976 | ---- | C] ( ) -- C:\Windows\System32\MACSSDK.dll
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011.11.24 18:15:00 | 000,001,052 | ---- | M] () -- C:\Windows\tasks\Google Software Updater.job
[2011.11.24 18:07:00 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.11.24 17:34:13 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Sascha Pohl\Desktop\OTL.exe
[2011.11.24 17:31:43 | 000,000,000 | ---- | M] () -- C:\Users\Sascha Pohl\defogger_reenable
[2011.11.24 17:30:08 | 000,050,477 | ---- | M] () -- C:\Users\Sascha Pohl\Desktop\Defogger.exe
[2011.11.24 17:24:01 | 000,001,144 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-525194859-2886908867-1202551152-1003UA.job
[2011.11.24 17:13:32 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.11.24 17:13:32 | 000,004,784 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.11.24 15:15:27 | 000,002,695 | ---- | M] () -- C:\Users\Sascha Pohl\Desktop\Microsoft Office Outlook 2007.lnk
[2011.11.24 15:01:54 | 000,002,593 | ---- | M] () -- C:\Users\Sascha Pohl\Desktop\Microsoft Office Excel 2007.lnk
[2011.11.24 12:13:54 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.11.24 09:22:12 | 000,000,430 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{A2006255-2314-4490-A64F-44B4FF438423}.job
[2011.11.24 09:20:44 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.11.24 09:19:13 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-525194859-2886908867-1202551152-1003Core.job
[2011.11.24 09:12:31 | 000,135,173 | ---- | M] () -- C:\ProgramData\nvModes.001
[2011.11.24 09:12:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.11.22 09:01:40 | 3215,572,992 | -HS- | M] () -- C:\hiberfil.sys
[2011.11.21 11:38:42 | 000,002,591 | ---- | M] () -- C:\Users\Sascha Pohl\Desktop\Microsoft Office Word 2007.lnk
[2011.11.21 10:59:48 | 001,814,608 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.11.21 10:59:48 | 000,957,282 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.11.21 10:59:48 | 000,514,860 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.11.21 10:59:48 | 000,448,896 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.11.21 07:37:24 | 000,002,072 | ---- | M] () -- C:\Users\Sascha Pohl\Desktop\Google Chrome.lnk
[2011.11.19 12:47:40 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2011.11.19 12:47:01 | 000,001,881 | ---- | M] () -- C:\Users\Public\Desktop\Brother Creative Center.lnk
[2011.11.19 12:46:43 | 000,000,242 | ---- | M] () -- C:\Windows\Brpfx04a.ini
[2011.11.19 12:46:43 | 000,000,093 | ---- | M] () -- C:\Windows\brpcfx.ini
[2011.11.19 12:46:42 | 000,000,425 | ---- | M] () -- C:\Windows\BRWMARK.INI
[2011.11.19 12:46:01 | 000,000,050 | ---- | M] () -- C:\Windows\System32\bridf08b.dat
[2011.11.16 08:17:30 | 000,002,929 | ---- | M] () -- C:\Users\Sascha Pohl\.recently-used.xbel
[2011.10.28 21:04:40 | 000,135,173 | ---- | M] () -- C:\ProgramData\nvModes.dat
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.11.24 17:31:43 | 000,000,000 | ---- | C] () -- C:\Users\Sascha Pohl\defogger_reenable
[2011.11.24 17:30:07 | 000,050,477 | ---- | C] () -- C:\Users\Sascha Pohl\Desktop\Defogger.exe
[2011.11.24 12:13:54 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.11.19 12:45:40 | 000,106,496 | ---- | C] () -- C:\Windows\System32\BrMuSNMP.dll
[2011.11.16 08:17:30 | 000,002,929 | ---- | C] () -- C:\Users\Sascha Pohl\.recently-used.xbel
[2011.10.05 17:58:42 | 000,000,043 | ---- | C] () -- C:\Windows\FFS20DeuReg.ini
[2011.06.16 02:00:23 | 000,000,000 | ---- | C] () -- C:\Users\Sascha Pohl\AppData\Local\{5EC7F1BC-8B7E-452C-BE85-7D7F5AEABFA9}
[2011.05.31 16:43:22 | 000,129,024 | ---- | C] () -- C:\Windows\System32\AVERM.dll
[2011.05.31 16:43:22 | 000,028,672 | ---- | C] () -- C:\Windows\System32\AVEQT.dll
[2011.05.25 18:29:49 | 000,000,000 | ---- | C] () -- C:\Users\Sascha Pohl\AppData\Local\{1D7800C2-6860-4045-BAA3-835B23E99FBC}
[2011.03.28 10:49:00 | 000,000,000 | ---- | C] () -- C:\Windows\Carat.INI
[2010.10.01 13:25:52 | 000,000,242 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2010.10.01 13:25:52 | 000,000,093 | ---- | C] () -- C:\Windows\brpcfx.ini
[2010.10.01 13:25:24 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2010.10.01 13:24:01 | 000,000,050 | ---- | C] () -- C:\Windows\System32\bridf08b.dat
[2010.10.01 13:22:47 | 000,000,000 | ---- | C] () -- C:\Windows\brdfxspd.dat
[2010.10.01 13:16:22 | 000,031,864 | ---- | C] () -- C:\Windows\maxlink.ini
[2009.09.11 08:39:40 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.09.11 08:39:40 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009.08.31 16:25:17 | 000,005,110 | ---- | C] () -- C:\ProgramData\xqkcebzs.dik
[2009.08.31 10:32:29 | 000,162,304 | ---- | C] () -- C:\Windows\System32\ztvunrar36.dll
[2009.08.31 10:32:29 | 000,077,312 | ---- | C] () -- C:\Windows\System32\ztvunace26.dll
[2009.08.27 14:03:56 | 000,000,032 | ---- | C] () -- C:\Windows\azeugnis.INI
[2009.06.09 13:26:54 | 000,119,477 | ---- | C] () -- C:\Windows\hpqins00.dat
[2009.05.05 10:42:36 | 000,000,132 | ---- | C] () -- C:\Windows\ODBC.INI
[2009.04.28 16:56:35 | 000,000,665 | ---- | C] () -- C:\Windows\unins000.dat
[2009.02.10 19:38:06 | 000,000,600 | ---- | C] () -- C:\Users\Sascha Pohl\AppData\Roaming\winscp.rnd
[2009.01.11 13:02:24 | 000,000,000 | ---- | C] () -- C:\Windows\buhl.ini
[2009.01.11 13:01:46 | 000,016,183 | ---- | C] () -- C:\Windows\System32\SELF32.INI
[2009.01.11 13:01:41 | 000,178,688 | ---- | C] () -- C:\Windows\System32\BpShellEx.dll
[2009.01.03 13:29:38 | 000,135,173 | ---- | C] () -- C:\ProgramData\nvModes.001
[2009.01.02 23:08:35 | 000,116,224 | ---- | C] () -- C:\Windows\System32\pdfcmnnt.dll
[2009.01.02 20:55:29 | 000,135,173 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2009.01.02 14:21:01 | 000,000,484 | ---- | C] () -- C:\Windows\wiso.ini
[2008.12.05 20:15:18 | 000,169,984 | ---- | C] () -- C:\Windows\System32\glut32.dll
[2008.11.14 14:25:54 | 000,000,552 | ---- | C] () -- C:\Users\Sascha Pohl\AppData\Local\d3d8caps.dat
[2008.11.13 20:02:19 | 000,000,680 | ---- | C] () -- C:\Users\Sascha Pohl\AppData\Local\d3d9caps.dat
[2008.11.03 18:26:35 | 000,203,842 | ---- | C] () -- C:\Windows\hpwins20.dat
[2008.10.30 18:23:09 | 000,000,069 | ---- | C] () -- C:\Windows\EasyCash.ini
[2008.10.30 18:23:00 | 000,000,137 | ---- | C] () -- C:\Windows\EasyCT.INI
[2008.10.19 17:10:00 | 000,012,097 | R--- | C] () -- C:\Windows\hpwscr20.dat
[2008.10.19 13:35:44 | 000,000,253 | ---- | C] () -- C:\Windows\tm.ini
[2008.10.19 13:35:44 | 000,000,072 | ---- | C] () -- C:\Windows\odbc_merge.INI
[2008.10.14 22:11:19 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2008.10.14 20:21:53 | 000,076,800 | ---- | C] () -- C:\Users\Sascha Pohl\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.10.14 20:06:08 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2008.07.09 07:09:20 | 000,000,012 | ---- | C] () -- C:\Windows\bthservsdp.dat
[2008.07.08 15:50:18 | 000,000,684 | ---- | C] () -- C:\Windows\HotFixList.ini
[2008.07.08 15:32:17 | 000,307,200 | ---- | C] () -- C:\Windows\SetDisplayResolution.exe
[2008.07.08 15:31:32 | 000,000,135 | R--- | C] () -- C:\Windows\System32\lngEng.ini
[2008.07.08 15:31:32 | 000,000,117 | ---- | C] () -- C:\Windows\System32\lngKor.ini
[2008.07.08 15:18:03 | 000,040,960 | ---- | C] () -- C:\Windows\System32\IhDEV.exe
[2008.07.08 15:18:02 | 000,024,576 | ---- | C] () -- C:\Windows\System32\IhINF.exe
[2008.07.08 13:54:14 | 001,814,608 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2008.07.08 13:54:14 | 000,514,860 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2008.07.08 13:54:14 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2008.07.08 13:54:14 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2008.07.08 13:45:50 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2008.02.09 17:03:07 | 000,024,576 | ---- | C] () -- C:\Windows\System32\drivers\Marker.exe
[2008.01.08 13:42:32 | 000,002,428 | R--- | C] () -- C:\Windows\hpwmdl20.dat
[2007.02.26 08:49:12 | 006,139,774 | ---- | C] () -- C:\Windows\System32\imagine digital freedom.dat
[2007.02.15 08:51:02 | 000,274,432 | ---- | C] () -- C:\Windows\System32\NDADLL.dll
[2006.11.29 09:00:30 | 000,045,056 | ---- | C] () -- C:\Windows\System32\MAWebControl.exe
[2006.11.29 09:00:28 | 000,307,200 | ---- | C] () -- C:\Windows\System32\LDBGenWizView.dll
[2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:47:37 | 000,398,576 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:33:01 | 000,957,282 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 11:33:01 | 000,448,896 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 11:25:21 | 000,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll
[2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 09:32:33 | 000,016,896 | ---- | C] () -- C:\Windows\System32\runas.exe
[2006.11.02 09:30:18 | 000,044,032 | ---- | C] () -- C:\Windows\System32\drivers\amdk8.sys
[2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2006.10.09 02:01:28 | 000,061,440 | ---- | C] () -- C:\Windows\System32\AVSAudioWideStereoDMO.dll
[2003.08.14 10:57:52 | 000,049,152 | ---- | C] () -- C:\Windows\System32\!md5sum.exe
[2001.11.14 04:56:00 | 001,802,240 | ---- | C] () -- C:\Windows\System32\lcppn21.dll
[2001.09.07 08:44:54 | 000,070,819 | ---- | C] () -- C:\Program Files\teamcal.htm
[2001.09.06 23:11:42 | 000,001,407 | ---- | C] () -- C:\Program Files\teamcal-german-outlookXP.reg
[2001.09.06 19:04:26 | 000,001,407 | ---- | C] () -- C:\Program Files\teamcal-german-outlook2000.reg
[2001.09.06 19:03:58 | 000,001,317 | ---- | C] () -- C:\Program Files\teamcal-french-outlook2000.reg
[2001.09.06 19:03:32 | 000,001,317 | ---- | C] () -- C:\Program Files\teamcal-french-outlookXP.reg
[2000.01.07 01:00:00 | 000,024,448 | ---- | C] () -- C:\Windows\sysgtime.dll
[2000.01.07 01:00:00 | 000,024,448 | ---- | C] () -- C:\Windows\System32\proclsvr.drv
========== Alternate Data Streams ==========
@Alternate Data Stream - 143 bytes -> C:\ProgramData\TEMP:8E7C96FD
@Alternate Data Stream - 111 bytes -> C:\ProgramData\TEMP:24051EFF
< End of report >
--- --- ---
EXTRAS :OTL Logfile: Code:
OTL Extras logfile created on: 24.11.2011 18:19:05 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\Sascha Pohl\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19154)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,99 Gb Total Physical Memory | 1,37 Gb Available Physical Memory | 45,85% Memory free
6,19 Gb Paging File | 4,27 Gb Available in Paging File | 69,03% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 144,09 Gb Total Space | 39,39 Gb Free Space | 27,34% Space Free | Partition Type: NTFS
Drive D: | 144,00 Gb Total Space | 46,25 Gb Free Space | 32,12% Space Free | Partition Type: NTFS
Drive E: | 25,08 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: SASCHAPOHL-PC | User Name: Sascha Pohl | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"E:\Steuersoftware\STSInstall.exe" = E:\Steuersoftware\STSInstall.exe:*:Enabled:STSInstall
"C:\Program Files\Konz\Steuer-Software\EP_Konz.exe" = C:\Program Files\Konz\Steuer-Software\EP_Konz.exe:*:Enabled:EP_Konz
"C:\Program Files\Konz\Steuer-Software\KonzSteuersoftware.exe" = C:\Program Files\Konz\Steuer-Software\KonzSteuersoftware.exe:*:Enabled:KonzSteuersoftware
"C:\Program Files\Konz\Steuer-Software\EPUpdate.exe" = C:\Program Files\Konz\Steuer-Software\EPUpdate.exe:*:Enabled:EPUpdate
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00AC3760-6C51-4461-96D2-D2E7CD9B6542}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{025EA06E-AB20-4B55-AB8C-B63E39835BBB}" = rport=137 | protocol=17 | dir=out | app=system |
"{08B48196-C931-4560-8320-1782593241A9}" = rport=445 | protocol=6 | dir=out | app=system |
"{094ED835-FD06-4585-A271-D7E7E91DEC11}" = lport=1900 | protocol=17 | dir=in | name=upnp udp |
"{0C1A823B-D779-488E-A6E7-D7E2B0E5A204}" = lport=5720 | protocol=17 | dir=in | name=jumi controller |
"{183B8E56-52FC-4737-9CA1-252149EE93CF}" = rport=2869 | protocol=6 | dir=out | app=system |
"{229073FB-9A67-4AEA-BAA4-338445C5902D}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{35A76993-3FF5-4222-9B25-4120389B4166}" = lport=137 | protocol=17 | dir=in | app=system |
"{3C65C7D4-F492-4A30-AA2F-DAADA6DF7C59}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{60293E3B-CA27-4090-8DCF-43666ABC407C}" = lport=2869 | protocol=6 | dir=in | name=upnp tcp |
"{6D2D9D3B-05FC-433B-8DD9-073A1A74B9B1}" = lport=5720 | protocol=17 | dir=in | name=jumi controller |
"{73F1CB97-13E8-4B0B-9AC9-C2A18C88517C}" = lport=2869 | protocol=6 | dir=in | name=upnp tcp |
"{7CF2AB72-B79C-4FF7-AE0A-F5436D8EF796}" = rport=138 | protocol=17 | dir=out | app=system |
"{7D01C5C4-B51A-4B00-9414-415859FBAB36}" = rport=139 | protocol=6 | dir=out | app=system |
"{82882F78-5513-460E-9A13-5E81B67E1D4E}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{8309CD9D-8592-43AE-B635-DB9D99864555}" = lport=138 | protocol=17 | dir=in | app=system |
"{9139F3E9-F7CA-4C48-AC22-CF7DE53F5855}" = lport=5720 | protocol=6 | dir=in | name=jumi controller |
"{9EDCF8B8-7939-4A93-BD58-2728EBFB2CB8}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{9FFF0675-78A4-4FEE-8143-76845D878C15}" = lport=139 | protocol=6 | dir=in | app=system |
"{A119908F-9BB4-4A3D-9797-F83F4F89AD7F}" = lport=54925 | protocol=17 | dir=in | name=brothernetwork scanner |
"{BCE68C06-737C-42A2-B1FB-6F0C93C7A823}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C97D347C-8F61-455D-975E-DA9891D58AD9}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{D0D7BF31-6B20-4734-9CBE-FF0B4BB0F330}" = lport=445 | protocol=6 | dir=in | app=system |
"{E5618719-E747-475F-B9CF-7221CA152F80}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{F0C1275E-7C5F-40EE-BE2C-F14A7A9F86D9}" = lport=1900 | protocol=17 | dir=in | name=upnp udp |
"{F576F490-883A-41C0-9BD3-C0DA7F9646C9}" = lport=5720 | protocol=6 | dir=in | name=jumi controller |
"{FEEE0E0F-6283-4CF8-9B12-5EE2616E75DA}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1E10B50C-8C35-4500-933E-3E4465107DE2}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{1E8F1786-CE98-4D4B-936B-D610FEC50635}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{28630B9E-46FA-4474-96DE-97D6732CE6C0}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{37A44D8A-7E97-4BF1-9A7D-00AE3D0B52F9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{48E89FCE-E506-4023-9424-E3C2D9FEC0B5}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{521F2BF8-DC72-49B5-B643-2F259AFA7A7F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{5C44C81B-7BB3-43DA-93E2-DD7AEBF9AFE7}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{68D8D065-4828-4E38-A311-344582FCE393}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{68E2178D-3010-4D20-B3B6-359401681ECA}" = protocol=6 | dir=in | app=c:\arconopen\programm\arconopen.exe |
"{8683F573-BAFF-47DA-8FC9-463ED4669FFE}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{8A63E08D-C2F8-4CDB-842D-B44793089850}" = protocol=6 | dir=in | app=c:\users\sascha pohl\desktop\sweetimsetup.exe |
"{8AABFA87-F446-457D-B1E3-E03EDCAE98DD}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{94815B4B-2A4C-46F1-AE17-4F6434DA63CF}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{9B16ADF5-4485-4E37-96E0-F61A4485D27D}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{9C1AE760-0041-4EBE-BBD4-1D204746BA39}" = protocol=17 | dir=in | app=c:\arconopen\programm\arconopen.exe |
"{A51ACC14-25DD-414C-A710-D248F26F55BF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{AD184265-4F79-4C46-AA5A-DCE7DADCF5C4}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{BA5B96F5-365E-40DA-BDD9-B9D4D3850143}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{CD92067C-8A01-4622-B67D-2BF96DF6B710}" = protocol=17 | dir=in | app=c:\users\sascha pohl\desktop\sweetimsetup.exe |
"{DA9D11E2-6F0F-4712-9014-FCCD71C11456}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"TCP Query User{08676432-8EDE-48E0-96D6-02D29B3D10BF}C:\carat\carat.exe" = protocol=6 | dir=in | app=c:\carat\carat.exe |
"TCP Query User{33C03CE7-BE87-4B69-8251-2EDEF739684C}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{35C38ACF-816E-4808-9AAC-19224428ADBF}C:\program files\jumi\jumi.exe" = protocol=6 | dir=in | app=c:\program files\jumi\jumi.exe |
"TCP Query User{479832FC-BB8C-4FF0-9511-4663511E04DB}C:\program files\tvuplayer\tvuplayer.exe" = protocol=6 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"TCP Query User{71910E72-2F0D-4FF4-98F2-8422E4DA6AAB}C:\carat\carat.exe" = protocol=6 | dir=in | app=c:\carat\carat.exe |
"TCP Query User{8C0D8B90-7ABB-43D6-B21A-F23FAF0E6488}C:\users\sascha pohl\desktop\pjwc12a\pjwebcam.exe" = protocol=6 | dir=in | app=c:\users\sascha pohl\desktop\pjwc12a\pjwebcam.exe |
"TCP Query User{9BDE845C-00C6-406B-8EFA-17FA10A05072}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{BE3F07BB-ED2C-4114-A890-6FD60595B910}C:\program files\jumi\jumi.exe" = protocol=6 | dir=in | app=c:\program files\jumi\jumi.exe |
"UDP Query User{0BF46D40-0980-424E-92BB-425F9FDE2F73}C:\program files\jumi\jumi.exe" = protocol=17 | dir=in | app=c:\program files\jumi\jumi.exe |
"UDP Query User{13292624-341F-4AAF-B4FE-8BCE2298CF8D}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"UDP Query User{1FE8D2AD-9E2F-436C-97C5-E6DB556789CE}C:\users\sascha pohl\desktop\pjwc12a\pjwebcam.exe" = protocol=17 | dir=in | app=c:\users\sascha pohl\desktop\pjwc12a\pjwebcam.exe |
"UDP Query User{2301A7B2-6B0B-4D53-9CDA-4AEA8730C8C8}C:\program files\jumi\jumi.exe" = protocol=17 | dir=in | app=c:\program files\jumi\jumi.exe |
"UDP Query User{312E4AA7-0CE9-4202-87FD-20B843AE55F4}C:\carat\carat.exe" = protocol=17 | dir=in | app=c:\carat\carat.exe |
"UDP Query User{70FD23BB-EF08-4C5C-A4AF-AF3289CE7140}C:\carat\carat.exe" = protocol=17 | dir=in | app=c:\carat\carat.exe |
"UDP Query User{996AEC49-756F-4ACB-BBA4-D2F92C7D43AD}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"UDP Query User{F0B93AD4-5AE0-4FC4-8A56-AB0A51A2022E}C:\program files\tvuplayer\tvuplayer.exe" = protocol=17 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}" = PDFCreator
"{004C5DA2-2051-4D25-94BA-51CF810C91EB}" = LightScribe System Software 1.12.37.1
"{00AF10C1-44BD-4862-9D7F-24E6BA3E87FD}" = imagine digital freedom - Samsung
"{02570AE0-BEE0-4A6C-BE3F-D806E9F2EA17}" = ScanSoft PaperPort 11
"{0289B35E-DC07-4c7a-9710-BBD686EA4B7D}" = Status
"{03D1988F-469F-4843-8E6E-E5FE9D17889D}" = WIDCOMM Bluetooth Software 6.0.1.6300
"{04830D0F-F980-4EC0-89F1-594F2FD2A1B5}" = ElsterFormular 2008/2009
"{04983D37-2202-4295-94A2-8B547C66133F}" = Atheros WLAN Client
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{07629207-FAA0-4F1A-8092-BF5085BE511F}" = Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch)
"{0DD140D3-9563-481E-AA75-BA457CBDAEF2}" = PC Inspector File Recovery
"{0E549A13-2B3D-4633-BA41-DC88C2D6F9A3}" = ProductContext
"{0F7C2E47-089E-4d23-B9F7-39BE00100776}" = Toolbox
"{1147FF9A-D576-4cb5-B5E7-FCA21D1E7D26}" = J4680
"{13CE6A18-2936-49E5-B10C-148A12C035DD}" = Buchhaltung 2009
"{145DE957-0679-4A2A-BB5C-1D3E9808FAB2}" = Samsung Recovery Solution III
"{17283B95-21A8-4996-97DA-547A48DB266F}" = Easy Display Manager
"{18669FF9-C8FE-407a-9F70-E674896B1DB4}" = GPBaseService
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{232DB76D-4751-41A9-9EC2-CDC0DAC1FAB6}" = WD SmartWare
"{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ 4.0
"{2614F54E-A828-49FA-93BA-45A3F756BFAA}" = 32 Bit HP CIO Components Installer
"{26A24AE4-039D-4CA4-87B4-2F83216011FF}" = Java(TM) 6 Update 24
"{2934DCB0-F8EE-11E0-A4A5-B8AC6F97B88E}" = Google Earth Plug-in
"{29ED20C9-5E15-4969-9279-25BF3727A3DA}" = iTunes
"{2AFEAA03-2DFE-4519-A629-EDAB6541ABE9}" = HPSSupply
"{2BC2781A-F7F6-452E-95EB-018A522F1B2C}" = PaperPort Image Printer
"{2DFB5485-A3EF-4298-9280-4AF80C9F4BE9}" = Microsoft SQL Server VSS Writer
"{2EA870FA-585F-4187-903D-CB9FFD21E2E0}" = DHTML Editing Component
"{2FAAECD0-1929-11DA-6784-006853A418BE}" = Arbeitszeugnis, Version 2.95
"{3248F0A8-6813-11D6-A77B-00B0D0160040}" = Java(TM) 6 Update 4
"{3248F0A8-6813-11D6-A77B-00B0D0160070}" = Java(TM) 6 Update 7
"{32D6A58F-9659-446C-BBFC-E6F2B41F24DC}" = Samsung Magic Doctor
"{34BFB099-07B2-4E95-A673-7362D60866A2}" = PSSWCORE
"{36BEAD11-8577-49AD-9250-E06A50AE87B0}" = Microsoft SOAP Toolkit 2.0 SP2
"{36FDBE6E-6684-462b-AE98-9A39A1B200CC}" = HPProductAssistant
"{3825B383-7880-48C8-AADD-49B0D764B151}" = 4660_4680_Help
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{40030378-9EB9-482A-AC10-195097CA624D}" = t@x 2009 Standard
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{43602F34-1AA3-44FB-AEB2-D08C2C73743F}" = Paint.NET v3.36
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A3D0CF8-60FF-4CEF-91A4-A1F001424602}" = DocProc
"{4B66BA95-9C4E-4C1C-BD01-E3A66113F0D5}" = Motorola Software Update
"{50120000-1105-0000-0000-0000000FF1CE}" = Microsoft Office 2007 Primary Interop Assemblies
"{50802F8E-03B4-479D-A643-16DE5A3586CB}" = BPDSoftware_Ini
"{5109C064-813E-4e87-B0DE-C8AF7B5BC02B}" = SmartWebPrintingOC
"{52B693EE-6C46-4B3F-8B0E-6BD8CA5B3E93}" = WebCam-Control-Center
"{547DCEC7-DD2A-47E9-82C7-5CF1EAB526DA}" = Microsoft SQL Server Native Client
"{5B9C7C4F-A1CB-11E0-9E40-0013D3D69929}" = Vegas Pro 10.0
"{5BB4D7C1-52F2-4BFD-9E40-0D419E2E3021}" = bpd_scan
"{5D9B17E4-5C34-45B2-9C95-8B9DB4CF7AF3}" = HP_Network_UserGuide
"{5DF7AA5E-A1CB-11E0-A7D6-0013D3D69929}" = MSVCRT Redists
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67335AB1-6341-4f87-A5B4-7FA92CEB77A4}" = HP Officejet All-In-One Series
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{685707A4-911C-468D-BFC4-64A50E5E3A0C}" = Samsung Update Plus
"{687FEF8A-8597-40b4-832C-297EA3F35817}" = BufferChm
"{6B9B0C6F-E5FA-4633-A640-AB98A272ECCA}" = Safari
"{6BF66AED-3EA4-4106-B240-5CE96C9B76B0}" = Brother MFL-Pro Suite MFC-255CW
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{6F730513-8688-4C3C-90A3-6B9792CE2EF3}" = Easy Battery Manager
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71A51B09-E7D3-11DB-A386-005056C00008}" = Vimicro UVC Camera
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7395D650-AE5D-4D68-B8FE-D3FA6B51467F}" = Driver Detective
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7B63B2922B174135AFC0E1377DD81EC2}" =
"{7DA034A8-5963-4F24-9F8C-B50B0A3BBF24}" = ritePen
"{7FD8B0C1-CDDA-4B4D-A577-B2E3570EA3A3}_is1" = iPhone Explorer 0.961
"{804F1285-8CBF-408D-8CDC-D4D40003B2E4}" = PlayCamera
"{80533B67-C407-485D-8B5D-63BB8ED9D878}" = Scan
"{818ABC3C-635C-4651-8183-D0E9640B7DD1}" = HP Update
"{846B5DED-DC8C-4E1A-B5B4-9F5B39A0CACE}" = HPDiagnosticAlert
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8927E07C-97F7-4A54-88FB-D976F50DD46E}" = Turbo Lister 2
"{8C2690CF-5B74-4F93-8139-7B5644CD6A3B}" = MobileMe Control Panel
"{8F32C384-D237-4516-9F2B-223E8963A2FB}" = Lager
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{90A40407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office 2003 Web Components
"{98736A65-3C79-49EC-B7E9-A3C77774B0E6}" = Google SketchUp 6
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C2D4047-0E40-499a-AC7A-C4B9BB12FE03}" = TrayApp
"{A00B9A50-3090-4CFF-9CDA-82DA0BEDAA21}" = Apple Mobile Device Support
"{A5AB9D5E-52E2-440e-A3ED-9512E253C81A}" = SolutionCenter
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A939D341-5A04-4E0A-BB55-3E65B386432D}" = Microsoft Office Small Business Connectivity Components
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.1 - Deutsch
"{B3D8B2F8-3C2C-45BC-933E-8B60E78F6684}" = Google SketchUp 6
"{B4E96960-5F6B-48B9-A5BD-6A5A9BB4F027}" = Avery Wizard 3.1
"{B7A0CE06-068E-11D6-97FD-0050BACBF861}" = PowerProducer
"{B8EF780F-126C-4CF0-AAB2-1B68BF06BA1C}" = Motorola Driver Installation 3.7.0
"{BA5F3E0E-8F3E-47BD-88E4-AD3EB5225F51}" = Intel(R) PROSet/Wireless WiFi-Software
"{BAD0FA60-09CF-4411-AE6A-C2844C8812FA}" = HP Photosmart Essential 2.5
"{BAE68339-B0F6-4D33-9554-5A3DB2DFF5DA}" = User Guide
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = LabelPrint
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector
"{CCB9B81A-167F-4832-B305-D2A0430840B3}" = WebReg
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D142FE39-3386-4d82-9AD3-36D4A92AC3C2}" = DocMgr
"{D2E0F0CC-6BE0-490b-B08B-9267083E34C9}" = MarketResearch
"{D3737952-FF6E-4E72-BDEE-B0DC1C69F80B}" = BPD_HPSU
"{D99A8E3A-AE5A-4692-8B19-6F16D454E240}" = Destination Component
"{DF5A2206-69AB-4962-8B1F-1F7A1E8B6F29}" = planTEK
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = AusLogics Disk Defrag
"{E08DC77E-D09A-4e36-8067-D6DBBCC5F8DC}" = VideoToolkit01
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9-Reihe
"{E7004147-2CCA-431C-AA05-2AB166B9785D}" = QuickTime
"{EDFE2142-CFB3-44AB-A961-DE85F6408A28}" = Sentinel Protection Installer 7.3.2
"{EE0557C2-A039-42CC-9655-FC09B152A13A}" = ArCon
"{EEEB604C-C1A7-4f8c-B03F-56F9C1C9C45F}" = Fax
"{EF1ADA5A-0B1A-4662-8C55-7475A61D8B65}" = DeviceDiscovery
"{EF367AA4-070B-493C-9575-85BE59D789C9}" = Easy SpeedUp Manager
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F4EAEBEA-3E46-43b8-A63C-AD180AE86918}" = BPDSoftware
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F95F178B-56AD-4fab-87F8-FA81E66C7D68}" = Network
"AC3Filter" = AC3Filter (remove only)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Agere Systems Soft Modem" = Agere Systems HDA Modem
"ArConOpen" = ArConOpen
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AVS Screen Capture_is1" = AVS Screen Capture version 2.0.1
"AVS Update Manager_is1" = AVS Update Manager 1.0
"AVS Video Recorder_is1" = AVS Video Recorder 2.4
"AVS Video ReMaker_is1" = AVS Video ReMaker 4.0.6.136
"AVS4YOU Software Navigator_is1" = AVS4YOU Software Navigator 1.4
"AVS4YOU Video Converter 7_is1" = AVS Video Converter 7
"conduitEngine" = Conduit Engine
"DivX Setup.divx.com" = DivX-Setup
"EasyCash&Tax_is1" = EasyCash&Tax 1.35
"ENTERPRISE" = Microsoft Office Enterprise 2007
"FaceSwapper_is1" = FaceSwapper v1.0
"Flatcast_is1" = Flatcast 5.0
"Free 3D Photo Maker_is1" = Free 3D Photo Maker version 2.0.12.920
"Free DVD Video Burner_is1" = Free DVD Video Burner version 1.2
"Free Studio_is1" = Free Studio version 4.9.13
"Free Video to DVD Converter_is1" = Free Video to DVD Converter version 1.2
"Free Video to iPhone Converter_is1" = Free Video to iPhone Converter version 2.1
"Free YouTube to iPhone Converter_is1" = Free YouTube to iPhone Converter version 2.11.11.923
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.11.923
"Google Updater" = Google Updater
"Hamster Free Video Converter_is1" = HamsterFreeVideoConverter
"Hardcopy(C__Program Files_Hardcopy)" = Hardcopy (C:\Program Files\Hardcopy)
"HP Document Manager" = HP Document Manager 1.0
"HP Imaging Device Functions" = HP Imaging Device Functions 10.0
"HP Photosmart Essential" = HP Photosmart Essential 2.5
"HP Smart Web Printing" = HP Smart Web Printing
"HP Solution Center & Imaging Support Tools" = HP Solution Center 10.0
"HPExtendedCapabilities" = HP Customer Participation Program 10.0
"HPOCR" = OCR Software by I.R.I.S. 10.0
"InfoRapid KnowledgeMap" = InfoRapid KnowledgeMap
"InstallShield_{685707A4-911C-468D-BFC4-64A50E5E3A0C}" = Samsung Update Plus
"InstallShield_{7395D650-AE5D-4D68-B8FE-D3FA6B51467F}" = Driver Detective
"KaraFun_is1" = KaraFun 1.18
"LetsTrade" = LetsTrade Komponenten
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.2.1300
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox (3.6.18)" = Mozilla Firefox (3.6.18)
"Mozilla Sunbird (0.9)" = Mozilla Sunbird (0.9)
"Mozilla Thunderbird (2.0.0.24)" = Mozilla Thunderbird (2.0.0.24)
"NVIDIA Drivers" = NVIDIA Drivers
"PDFCreator Toolbar" = PDFCreator Toolbar
"PDF-XChange 3_is1" = PDF-XChange 3
"planTEK Professional V.10 Licensed Version" = planTEK Professional V.10 Licensed Version
"ProInst" = Intel PROSet Wireless
"PS3 Video 9" = PS3 Video 9 2.25
"ratDVD" = ratDVD 0.78.1444
"Shop for HP Supplies" = Shop for HP Supplies
"softonic-Germany Toolbar" = softonic-Germany Toolbar
"Surf & E-Mail-Stick" = Surf & E-Mail-Stick
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TVUPlayer" = TVUPlayer 2.4.1.0
"Ultra Video Joiner_is1" = Ultra Video Joiner 6.2.0411
"Uninstall_is1" = Uninstall 1.0.0.1
"Windows Media Encoder 9" = Windows Media Encoder 9-Reihe
"WinGimp-2.0_is1" = GIMP 2.6.11
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 23.11.2011 16:23:12 | Computer Name = SaschaPohl-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 11560
Error - 23.11.2011 16:23:12 | Computer Name = SaschaPohl-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 11560
Error - 23.11.2011 16:23:13 | Computer Name = SaschaPohl-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 23.11.2011 16:23:13 | Computer Name = SaschaPohl-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 12559
Error - 23.11.2011 16:23:13 | Computer Name = SaschaPohl-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 12559
Error - 23.11.2011 16:23:14 | Computer Name = SaschaPohl-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 23.11.2011 16:23:14 | Computer Name = SaschaPohl-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 13557
Error - 23.11.2011 16:23:14 | Computer Name = SaschaPohl-PC | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 13557
Error - 24.11.2011 07:14:43 | Computer Name = SaschaPohl-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
Error - 24.11.2011 07:15:54 | Computer Name = SaschaPohl-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description =
[ Media Center Events ]
Error - 08.11.2008 16:17:20 | Computer Name = SaschaPohl-PC | Source = MCUpdate | ID = 0
Description = Es konnte nicht auf den MCUpdate-Mutex gewartet werden. Ausnahme:
'Der Wartezustand wurde aufgrund eines abgebrochenen Mutex beendet.'.
Error - 28.10.2009 05:29:36 | Computer Name = SaschaPohl-PC | Source = MCUpdate | ID = 0
Description = Es konnte nicht auf den MCUpdate-Mutex gewartet werden. Ausnahme:
'Der Wartezustand wurde aufgrund eines abgebrochenen Mutex beendet.'.
[ OSession Events ]
Error - 06.02.2010 13:41:33 | Computer Name = SaschaPohl-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 178
seconds with 120 seconds of active time. This session ended with a crash.
Error - 06.02.2010 13:54:19 | Computer Name = SaschaPohl-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 82
seconds with 60 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 23.11.2011 03:44:21 | Computer Name = SaschaPohl-PC | Source = bowser | ID = 8003
Description =
Error - 23.11.2011 04:00:50 | Computer Name = SaschaPohl-PC | Source = ipnathlp | ID = 31004
Description = 0 Bytes Speicher konnten durch den DNS-Proxy-Agenten nicht zugeordnet
werden. Möglicherweise ist nicht genügend Speicher vorhanden oder ein interner
Fehler ist im Speicher-Manager aufgetreten.
Error - 23.11.2011 04:00:53 | Computer Name = SaschaPohl-PC | Source = ipnathlp | ID = 30013
Description = Die DHCP-Zuweisung wurde für IP-Adresse 192.168.2.102 deaktiviert,
da die IP-Adresse außerhalb des Bereichs 192.168.0.0/255.255.255.0 liegt, von der
die Adressen DHCP-Clients zu gewiesen werden. Ändern Sie den Bereich, sodass die
IP-Adresse mit einbezogen wird, oder ändern Sie die IP-Adresse, sodass sie innerhalb
dieses Bereichs liegt, um die DHCP-Zuweisung zu aktivieren.
Error - 23.11.2011 04:02:03 | Computer Name = SaschaPohl-PC | Source = ipnathlp | ID = 30013
Description = Die DHCP-Zuweisung wurde für IP-Adresse 192.168.2.102 deaktiviert,
da die IP-Adresse außerhalb des Bereichs 192.168.0.0/255.255.255.0 liegt, von der
die Adressen DHCP-Clients zu gewiesen werden. Ändern Sie den Bereich, sodass die
IP-Adresse mit einbezogen wird, oder ändern Sie die IP-Adresse, sodass sie innerhalb
dieses Bereichs liegt, um die DHCP-Zuweisung zu aktivieren.
Error - 23.11.2011 05:00:15 | Computer Name = SaschaPohl-PC | Source = ipnathlp | ID = 30013
Description = Die DHCP-Zuweisung wurde für IP-Adresse 192.168.2.102 deaktiviert,
da die IP-Adresse außerhalb des Bereichs 192.168.0.0/255.255.255.0 liegt, von der
die Adressen DHCP-Clients zu gewiesen werden. Ändern Sie den Bereich, sodass die
IP-Adresse mit einbezogen wird, oder ändern Sie die IP-Adresse, sodass sie innerhalb
dieses Bereichs liegt, um die DHCP-Zuweisung zu aktivieren.
Error - 23.11.2011 05:01:15 | Computer Name = SaschaPohl-PC | Source = ipnathlp | ID = 30013
Description = Die DHCP-Zuweisung wurde für IP-Adresse 192.168.2.102 deaktiviert,
da die IP-Adresse außerhalb des Bereichs 192.168.0.0/255.255.255.0 liegt, von der
die Adressen DHCP-Clients zu gewiesen werden. Ändern Sie den Bereich, sodass die
IP-Adresse mit einbezogen wird, oder ändern Sie die IP-Adresse, sodass sie innerhalb
dieses Bereichs liegt, um die DHCP-Zuweisung zu aktivieren.
Error - 23.11.2011 12:02:10 | Computer Name = SaschaPohl-PC | Source = ipnathlp | ID = 30013
Description = Die DHCP-Zuweisung wurde für IP-Adresse 192.168.2.102 deaktiviert,
da die IP-Adresse außerhalb des Bereichs 192.168.0.0/255.255.255.0 liegt, von der
die Adressen DHCP-Clients zu gewiesen werden. Ändern Sie den Bereich, sodass die
IP-Adresse mit einbezogen wird, oder ändern Sie die IP-Adresse, sodass sie innerhalb
dieses Bereichs liegt, um die DHCP-Zuweisung zu aktivieren.
Error - 24.11.2011 04:12:38 | Computer Name = SaschaPohl-PC | Source = bowser | ID = 8003
Description =
Error - 24.11.2011 08:56:07 | Computer Name = SaschaPohl-PC | Source = ipnathlp | ID = 30013
Description = Die DHCP-Zuweisung wurde für IP-Adresse 192.168.2.102 deaktiviert,
da die IP-Adresse außerhalb des Bereichs 192.168.0.0/255.255.255.0 liegt, von der
die Adressen DHCP-Clients zu gewiesen werden. Ändern Sie den Bereich, sodass die
IP-Adresse mit einbezogen wird, oder ändern Sie die IP-Adresse, sodass sie innerhalb
dieses Bereichs liegt, um die DHCP-Zuweisung zu aktivieren.
Error - 24.11.2011 08:56:41 | Computer Name = SaschaPohl-PC | Source = bowser | ID = 8003
Description =
< End of report >
--- --- --- |
