Hier sind die Logfiles: :dankeschoen: Code:
OTL logfile created on: 9/18/2012 12:52:10 PM - Run 1
OTL by OldTimer - Version 3.2.63.0 Folder = C:\Dokumente und Einstellungen\SISE\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: Vereinigte Staaten von Amerika | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 1.07 Gb Available Physical Memory | 53.66% Memory free
3.84 Gb Paging File | 2.98 Gb Available in Paging File | 77.53% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 62.23 Gb Total Space | 31.06 Gb Free Space | 49.92% Space Free | Partition Type: NTFS
Computer Name: SIS-EE1711482F3 | User Name: SISE | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\SISE\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe ()
PRC - C:\Programme\AVG Secure Search\vprot.exe ()
PRC - C:\Programme\AVG\AVG2012\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programme\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programme\AVG\AVG2012\avgrsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe (Oracle Corporation)
PRC - C:\Programme\AVG\AVG2012\avgnsx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programme\National Instruments\Shared\DataFinderDesktop\bin\DataFinder.exe (National Instruments Corporation)
PRC - C:\Programme\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation)
PRC - C:\WINDOWS\system32\lktsrv.exe (National Instruments Corporation)
PRC - C:\WINDOWS\system32\lkads.exe (National Instruments Corporation)
PRC - C:\Programme\FileOpen\Services\FileOpenManagerSvc32.exe (FileOpen Systems Inc.)
PRC - C:\Programme\FileOpen\Services\FileOpenBroker32.exe (FileOpen Systems Inc.)
PRC - C:\Programme\AVG\AVG2012\avgemcx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programme\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation)
PRC - C:\Programme\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation)
PRC - C:\Programme\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programme\AVG\AVG2012\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Programme\National Instruments\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation)
PRC - C:\Programme\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation)
PRC - C:\WINDOWS\system32\lkcitdl.exe (National Instruments, Inc.)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Intel\Wireless\Bin\ZCfgSvc.exe (Intel Corporation)
PRC - C:\Programme\Intel\Wireless\Bin\iFrmewrk.exe (Intel Corporation)
PRC - C:\Programme\Intel\Wireless\Bin\Dot1XCfg.exe (Intel Corporation)
PRC - C:\Programme\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
========== Modules (No Company Name) ==========
MOD - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Programme\Gemeinsame Dateien\AVG Secure Search\DNTInstaller\12.2.6\avgdttbx.dll ()
MOD - C:\Programme\Gemeinsame Dateien\AVG Secure Search\SiteSafetyInstaller\12.2.6\SiteSafety.dll ()
MOD - C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe ()
MOD - C:\Programme\AVG Secure Search\vprot.exe ()
MOD - C:\Programme\National Instruments\Shared\DataFinderDesktop\bin\susiFTSLucene.dll ()
MOD - C:\Programme\National Instruments\Shared\License Manager\Bin\xerces-depdom_2_6.dll ()
MOD - C:\Programme\National Instruments\Shared\NI Error Reporting\niwsrp.dll ()
MOD - C:\Programme\Intel\Wireless\Bin\iWMSProv.dll ()
MOD - C:\Programme\Sony\VAIO Event Service\VESBasePS.dll ()
MOD - C:\Programme\Intel\Wireless\Bin\acAuth.dll ()
========== Services (SafeList) ==========
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (vToolbarUpdater12.2.6) -- C:\Programme\Gemeinsame Dateien\AVG Secure Search\vToolbarUpdater\12.2.6\ToolbarUpdater.exe ()
SRV - (AVGIDSAgent) -- C:\Programme\AVG\AVG2012\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
SRV - (JavaQuickStarterService) -- C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe (Oracle Corporation)
SRV - (NIDomainService) -- C:\Programme\National Instruments\Shared\Security\nidmsrv.exe (National Instruments Corporation)
SRV - (lkTimeSync) -- C:\WINDOWS\system32\lktsrv.exe (National Instruments Corporation)
SRV - (lkClassAds) -- C:\WINDOWS\system32\lkads.exe (National Instruments Corporation)
SRV - (FileOpenManagerSvc) -- C:\Programme\FileOpen\Services\FileOpenManagerSvc32.exe (FileOpen Systems Inc.)
SRV - (niSvcLoc) -- C:\Programme\National Instruments\Shared\NI WebServer\SystemWebServer.exe (National Instruments Corporation)
SRV - (NIApplicationWebServer) -- C:\Programme\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe (National Instruments Corporation)
SRV - (avgwd) -- C:\Programme\AVG\AVG2012\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (nimDNSResponder) -- C:\Programme\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe (National Instruments Corporation)
SRV - (LkCitadelServer) -- C:\WINDOWS\system32\lkcitdl.exe (National Instruments, Inc.)
SRV - (NILM License Manager) -- C:\Programme\National Instruments\Shared\License Manager\Bin\lmgrd.exe (Macrovision Corporation)
SRV - (OpcEnum) -- C:\WINDOWS\system32\Opcenum.exe (OPC Foundation)
SRV - (VAIO Event Service) -- C:\Programme\Sony\VAIO Event Service\VESMgr.exe (Sony Corporation)
SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found
DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (avgtp) -- C:\WINDOWS\system32\drivers\avgtpx86.sys (AVG Technologies)
DRV - (Avgtdix) -- C:\WINDOWS\system32\drivers\avgtdix.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgldx86) -- C:\WINDOWS\system32\drivers\avgldx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (XAudio) -- C:\WINDOWS\system32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (IntcAzAudAddService) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (AVGIDSHX) -- C:\WINDOWS\system32\drivers\avgidshx.sys (AVG Technologies CZ, s.r.o. )
DRV - (RTLE8023xp) -- C:\WINDOWS\system32\drivers\Rtenicxp.sys (Realtek Semiconductor Corporation )
DRV - (Avgrkx86) -- C:\WINDOWS\system32\drivers\avgrkx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (Avgmfx86) -- C:\WINDOWS\system32\drivers\avgmfx86.sys (AVG Technologies CZ, s.r.o.)
DRV - (AVGIDSShim) -- C:\WINDOWS\system32\drivers\avgidsshimx.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSFilter) -- C:\WINDOWS\system32\drivers\avgidsfilterx.sys (AVG Technologies CZ, s.r.o. )
DRV - (AVGIDSDriver) -- C:\WINDOWS\system32\drivers\avgidsdriverx.sys (AVG Technologies CZ, s.r.o. )
DRV - (GfSDev) -- C:\Programme\National Instruments\DIAdem 2011\GfSDev.sys (National Instruments Corporation)
DRV - (cvintdrv) -- C:\WINDOWS\System32\drivers\cvintdrv.sys ()
DRV - (FTDIBUS) -- C:\WINDOWS\system32\drivers\ftdibus.sys (FTDI Ltd.)
DRV - (FTSER2K) -- C:\WINDOWS\system32\drivers\ftser2k.sys (FTDI Ltd.)
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (NETw5x32) -- C:\WINDOWS\system32\drivers\NETw5x32.sys (Intel Corporation)
DRV - (NETw4x32) -- C:\WINDOWS\system32\drivers\NETw4x32.sys (Intel Corporation)
DRV - (s24trans) -- C:\WINDOWS\system32\drivers\s24trans.sys (Intel Corporation)
DRV - (ti21sony) -- C:\WINDOWS\system32\drivers\ti21sony.sys (Texas Instruments)
DRV - (SNC) -- C:\WINDOWS\system32\drivers\SonyNC.sys (Sony Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com/?crg=3.1010000&st=18&barid={EECE7DA1-FD70-11E1-B278-001A803E9F2B}
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = hxxp://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={EECE7DA1-FD70-11E1-B278-001A803E9F2B}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\..\URLSearchHook: {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgHelper.dll (SweetIM Technologies Ltd.)
IE - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = https://isearch.avg.com/search?cid={F990B1C5-3C04-49C0-9A70-7004F167080E}&mid=b8d2e9a4c30d47d091bcd15aae36e0a4-3eb2aaa06167370800d36158173c0d161046997c&lang=en&ds=AVG&pr=fr&d=2012-07-13 16:26:49&v=12.2.5.32&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\..\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}: "URL" = hxxp://search.sweetim.com/search.asp?src=6&crg=3.1010000&st=18&q={searchTerms}&barid={EECE7DA1-FD70-11E1-B278-001A803E9F2B}
IE - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "SweetIM Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.selectedEngine: "AVG Secure Search"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..keyword.URL: "hxxp://search.sweetim.com/search.asp?src=2&barid={EECE7DA1-FD70-11E1-B278-001A803E9F2B}&q="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_4_402_278.dll ()
FF - HKLM\Software\MozillaPlugins\@avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin: C:\Programme\Gemeinsame Dateien\AVG Secure Search\SiteSafetyInstaller\12.2.6\\npsitesafety.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.2: C:\Programme\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\avg@toolbar: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG Secure Search\12.2.5.32\ [2012/08/30 16:55:00 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2012/07/27 10:45:34 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012/09/08 10:33:54 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2012/09/08 10:33:32 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Programme\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2012/07/27 10:45:34 | 000,000,000 | ---D | M]
[2012/07/15 12:15:46 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\Mozilla\Extensions
[2012/09/13 11:55:50 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\Mozilla\Firefox\Profiles\be7fel8e.default\extensions
[2012/09/13 17:14:48 | 000,004,002 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\Mozilla\Firefox\Profiles\be7fel8e.default\searchplugins\sweetim.xml
[2012/09/08 10:33:28 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012/09/08 10:33:53 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011/08/29 15:49:56 | 000,025,088 | ---- | M] (National Instruments) -- C:\Programme\mozilla firefox\plugins\nplv2010win32.dll
[2012/03/23 10:50:32 | 000,026,112 | ---- | M] (National Instruments) -- C:\Programme\mozilla firefox\plugins\nplv2011win32.dll
[2012/06/15 00:46:57 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012/08/30 16:54:42 | 000,003,769 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/08/30 21:56:38 | 000,002,465 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012/06/15 00:46:57 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012/06/15 00:46:57 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012/06/15 00:46:57 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012/06/15 00:46:56 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2008/04/14 14:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (SweetPacks Browser Helper) - {EEE6C35C-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKLM\..\Toolbar: (AVG Security Toolbar) - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Programme\AVG Secure Search\12.2.5.32\AVG Secure Search_toolbar.dll ()
O3 - HKLM\..\Toolbar: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O3 - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O3 - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\..\Toolbar\WebBrowser: (SweetPacks Toolbar for Internet Explorer) - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Programme\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll (SweetIM Technologies Ltd.)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AVG_TRAY] C:\Programme\AVG\AVG2012\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [DataFinder] C:\Programme\National Instruments\Shared\DataFinderDesktop\bin\DataFinder.exe (National Instruments Corporation)
O4 - HKLM..\Run: [FileOpenBroker] C:\Programme\FileOpen\Services\FileOpenBroker32.exe (FileOpen Systems Inc.)
O4 - HKLM..\Run: [IntelWireless] C:\Programme\Intel\Wireless\Bin\ifrmewrk.exe (Intel Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Programme\Intel\Wireless\bin\ZCfgSvc.exe (Intel Corporation)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [NI Update Service] C:\Programme\National Instruments\Shared\Update Service\NIUpdateService.exe (National Instruments)
O4 - HKLM..\Run: [ROC_ROC_JULY_P1] C:\Programme\AVG Secure Search\ROC_ROC_JULY_P1.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [vProt] C:\Programme\AVG Secure Search\vprot.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\NI Error Reporting.lnk = C:\Programme\National Instruments\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1645522239-1214440339-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll (National Instruments Corporation)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C7381E3E-117A-438E-8EED-A5E89FB8893C}: DhcpNameServer = 192.168.1.1 193.189.244.194 193.189.244.202
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{EB401F3C-DCD4-48CF-903B-6A1F3B35E534}: DhcpNameServer = 10.0.0.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Programme\AVG\AVG2012\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\viprotocol {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Programme\Gemeinsame Dateien\AVG Secure Search\ViProtocolInstaller\12.2.6\ViProtocol.dll ()
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\VESWinlogon: DllName - (VESWinlogon.dll) - C:\WINDOWS\System32\VESWinlogon.dll (Sony Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop Components:1 () - hxxp://www.google.com/
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Grüne Idylle.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/05/22 20:08:09 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O34 - HKLM BootExecute: (C:\PROGRA~1\AVG\AVG2012\avgrsx.exe /sync /restart)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2012/09/18 12:42:40 | 000,600,576 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\SISE\Desktop\OTL.exe
[2012/09/18 12:06:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\Malwarebytes
[2012/09/18 12:05:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2012/09/18 12:05:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2012/09/18 12:05:43 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012/09/18 12:05:43 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2012/09/17 21:14:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\Cellphone videos
[2012/09/13 22:05:48 | 000,000,000 | ---D | C] -- C:\Kaspersky Rescue Disk 10.0
[2012/09/13 17:19:04 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2012/09/13 09:13:44 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Pazera Free MP4 to AVI Converter
[2012/09/13 09:13:43 | 000,000,000 | ---D | C] -- C:\Programme\pazera-software
[2012/09/13 09:01:58 | 000,000,000 | ---D | C] -- C:\Programme\SweetIM
[2012/09/13 09:01:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM
[2012/09/11 09:46:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\AVG
[2012/09/08 10:33:27 | 000,000,000 | ---D | C] -- C:\Programme\Mozilla Firefox
[2012/09/08 10:14:41 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthmodem.sys
[2012/09/08 10:11:54 | 000,101,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthpan.sys
[2012/09/08 10:11:43 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irftp.exe
[2012/09/08 10:11:43 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irftp.exe
[2012/09/08 10:11:43 | 000,059,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rfcomm.sys
[2012/09/08 10:11:43 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\irmon.dll
[2012/09/08 10:11:43 | 000,017,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthenum.sys
[2012/09/08 10:11:42 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wshirda.dll
[2012/09/08 10:11:42 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wshirda.dll
[2012/09/08 10:11:34 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthusb.sys
[2012/09/06 08:48:45 | 000,018,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\sermouse.sys
[2012/09/05 10:17:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\SISE\Startmenü\Programme\x-io Technologies
[2012/09/05 10:17:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\SISE\Lokale Einstellungen\Anwendungsdaten\Deployment
[2012/09/05 10:16:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\X_IMU
[2012/09/05 10:09:06 | 000,073,032 | ---- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\drivers\ftser2k.sys
[2012/09/05 10:09:06 | 000,067,400 | ---- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\ftcserco.dll
[2012/09/05 10:09:06 | 000,052,552 | ---- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\ftserui2.dll
[2012/09/05 10:09:05 | 000,198,464 | ---- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\ftd2xx.dll
[2012/09/05 10:09:05 | 000,197,952 | ---- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\FTLang.dll
[2012/09/05 10:09:05 | 000,105,288 | ---- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\ftbusui.dll
[2012/09/05 10:09:05 | 000,060,104 | ---- | C] (FTDI Ltd.) -- C:\WINDOWS\System32\drivers\ftdibus.sys
[2012/08/30 16:54:49 | 000,027,496 | ---- | C] (AVG Technologies) -- C:\WINDOWS\System32\drivers\avgtpx86.sys
[2012/08/26 10:19:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\SISE\Startmenü\Programme\Profili
[2012/08/26 10:19:09 | 000,000,000 | ---D | C] -- C:\Programme\ProfiliV2
[2012/08/25 18:20:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\XFLR5
[2012/08/25 18:20:32 | 000,000,000 | ---D | C] -- C:\Programme\XFLR5
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012/09/18 12:42:44 | 000,600,576 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\SISE\Desktop\OTL.exe
[2012/09/18 12:33:41 | 000,000,830 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/18 12:33:40 | 000,696,240 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/09/18 12:33:40 | 000,073,136 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/09/18 12:22:49 | 000,002,422 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/09/18 12:22:32 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/09/18 12:05:46 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/09/17 20:02:28 | 095,049,870 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\incavi.avm
[2012/09/17 19:59:39 | 000,000,322 | ---- | M] () -- C:\WINDOWS\tasks\NIUpdateServiceRetryCheckTask.job
[2012/09/13 19:27:01 | 083,023,306 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\dsgsdgdsgdsgw.pad
[2012/09/13 12:34:47 | 016,347,016 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Desktop\GOPR0043.mpg
[2012/09/13 12:32:27 | 050,626,016 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Desktop\GOPR0042.mpg
[2012/09/13 12:25:13 | 227,091,984 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Desktop\GOPR0041.mpg
[2012/09/13 11:49:11 | 000,006,144 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/09/13 11:48:59 | 001,020,236 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Desktop\GOPR0040.mpg
[2012/09/13 09:13:46 | 000,000,896 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Pazera Free MP4 to AVI Converter.lnk
[2012/09/11 09:46:49 | 000,000,682 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\AVG 2012.lnk
[2012/09/08 12:21:46 | 000,017,983 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Lokale Einstellungen\Anwendungsdaten\recently-used.xbel
[2012/09/08 10:52:10 | 000,116,528 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Desktop\Morane different radii2.emf
[2012/09/07 17:04:46 | 000,022,856 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012/09/07 15:51:43 | 001,024,415 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_CalInertialAndMag.csv
[2012/09/07 15:51:43 | 000,556,938 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_RotationMatrix.csv
[2012/09/07 15:51:43 | 000,271,305 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_Quaternion.csv
[2012/09/07 15:51:43 | 000,192,336 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_EulerAngles.csv
[2012/09/07 15:51:43 | 000,006,935 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_DigitalIO.csv
[2012/09/07 15:51:43 | 000,004,260 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_CalBattAndTherm.csv
[2012/09/07 15:51:43 | 000,001,999 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_DateTime.csv
[2012/09/07 14:49:35 | 000,000,912 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\NI Error Reporting.lnk
[2012/09/05 10:17:27 | 000,000,490 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Desktop\x-IMU GUI.appref-ms
[2012/09/03 09:43:00 | 000,029,975 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\XFLR5.ini
[2012/09/01 18:57:35 | 000,057,371 | ---- | M] () -- C:\WINDOWS\System32\drivers\AVG\iavichjg.avm
[2012/08/30 16:54:49 | 000,027,496 | ---- | M] (AVG Technologies) -- C:\WINDOWS\System32\drivers\avgtpx86.sys
[2012/08/29 12:15:17 | 000,061,286 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Desktop\MoraneMS893.wpa
[2012/08/26 14:13:55 | 000,000,322 | ---- | M] () -- C:\WINDOWS\tasks\NIUpdateServiceCheckTask.job
[2012/08/25 18:20:33 | 000,000,610 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Desktop\XFLR5.lnk
[2012/08/24 15:43:18 | 000,301,920 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\System32\drivers\avgtdix.sys
[2012/08/22 15:43:54 | 000,563,981 | ---- | M] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\liIonCharger.pdf
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012/09/18 12:33:41 | 000,000,830 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/09/18 12:05:46 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes Anti-Malware.lnk
[2012/09/13 17:32:08 | 083,023,306 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\dsgsdgdsgdsgw.pad
[2012/09/13 12:32:31 | 016,347,016 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Desktop\GOPR0043.mpg
[2012/09/13 12:25:19 | 050,626,016 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Desktop\GOPR0042.mpg
[2012/09/13 11:50:35 | 227,091,984 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Desktop\GOPR0041.mpg
[2012/09/13 11:48:52 | 001,020,236 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Desktop\GOPR0040.mpg
[2012/09/13 09:13:46 | 000,000,896 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Pazera Free MP4 to AVI Converter.lnk
[2012/09/09 20:54:07 | 000,000,322 | ---- | C] () -- C:\WINDOWS\tasks\NIUpdateServiceRetryCheckTask.job
[2012/09/08 12:21:46 | 000,017,983 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Lokale Einstellungen\Anwendungsdaten\recently-used.xbel
[2012/09/08 10:52:10 | 000,116,528 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Desktop\Morane different radii2.emf
[2012/09/07 15:50:59 | 001,024,415 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_CalInertialAndMag.csv
[2012/09/07 15:50:59 | 000,556,938 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_RotationMatrix.csv
[2012/09/07 15:50:59 | 000,271,305 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_Quaternion.csv
[2012/09/07 15:50:59 | 000,192,336 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_EulerAngles.csv
[2012/09/07 15:50:59 | 000,006,935 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_DigitalIO.csv
[2012/09/07 15:50:59 | 000,004,260 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_CalBattAndTherm.csv
[2012/09/07 15:50:59 | 000,001,999 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\LoggedData_DateTime.csv
[2012/09/07 14:49:35 | 000,000,912 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\NI Error Reporting.lnk
[2012/09/05 10:17:27 | 000,000,490 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Desktop\x-IMU GUI.appref-ms
[2012/08/29 12:15:17 | 000,061,286 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Desktop\MoraneMS893.wpa
[2012/08/25 18:28:09 | 000,029,975 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\XFLR5.ini
[2012/08/25 18:20:33 | 000,000,610 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Desktop\XFLR5.lnk
[2012/08/22 15:43:53 | 000,563,981 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Eigene Dateien\liIonCharger.pdf
[2012/07/31 17:23:06 | 000,006,144 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012/07/29 13:04:38 | 000,000,380 | ---- | C] () -- C:\Dokumente und Einstellungen\SISE\ipe.properties
[2012/07/29 12:46:50 | 004,389,441 | ---- | C] () -- C:\WINDOWS\System32\USBAccessLink.dll
[2012/07/29 12:46:50 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\SerialAccessLink.dll
[2012/07/27 10:17:26 | 000,150,727 | ---- | C] () -- C:\WINDOWS\hpoins30.dat
[2012/07/27 10:17:26 | 000,000,547 | ---- | C] () -- C:\WINDOWS\hpomdl30.dat
[2012/07/18 10:58:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\uesviewer.INI
[2012/07/15 12:15:00 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012/07/13 14:03:13 | 000,356,352 | ---- | C] () -- C:\WINDOWS\System32\AegisI5Installer.exe
[2012/07/13 13:15:40 | 000,025,548 | ---- | C] () -- C:\WINDOWS\System32\drivers\RTAIODAT.DAT
[2012/07/13 12:59:48 | 001,498,560 | ---- | C] () -- C:\WINDOWS\System32\igkrng400.bin
[2012/05/22 20:55:28 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012/05/22 20:53:19 | 000,266,208 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012/05/22 20:10:37 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012/05/22 20:04:57 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012/04/19 12:58:58 | 000,364,544 | ---- | C] () -- C:\WINDOWS\System32\mpPathan.dll
[2012/04/16 09:34:22 | 000,081,920 | ---- | C] () -- C:\WINDOWS\System32\MPMapTrace.dll
[2011/11/04 20:34:56 | 000,019,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\cvintdrv.sys
========== ZeroAccess Check ==========
[2012/08/30 16:55:00 | 000,000,000 | ---D | M] -- C:\WINDOWS\Temp\avg@toolbar
[2012/08/30 16:55:00 | 000,000,000 | ---D | M] -- C:\WINDOWS\Temp\avg@toolbar\chrome
[2012/08/30 16:55:00 | 000,000,000 | ---D | M] -- C:\WINDOWS\Temp\avg@toolbar\components
[2012/08/30 16:55:00 | 000,000,000 | ---D | M] -- C:\WINDOWS\Temp\avg@toolbar\locale
[2012/08/30 16:55:00 | 000,000,000 | ---D | M] -- C:\WINDOWS\Temp\avg@toolbar\modules
[2012/07/15 14:00:42 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini
========== LOP Check ==========
[2012/08/30 16:55:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG Secure Search
[2012/07/13 16:29:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVG2012
[2012/07/13 16:24:15 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Files
[2012/08/07 07:51:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FileOpen
[2012/09/17 20:57:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MFAData
[2012/09/07 14:54:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\National Instruments
[2012/09/13 17:20:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SweetIM
[2012/07/18 10:58:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ulead Systems
[2012/07/29 13:08:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\.mplab_ide
[2012/07/13 16:26:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\AVG Secure Search
[2012/07/13 16:28:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\AVG2012
[2012/08/07 07:51:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\FileOpen
[2012/08/07 09:47:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\ImgBurn
[2012/08/14 13:37:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\inkscape
[2012/08/05 14:45:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\Mael
[2012/07/29 13:05:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\MCHP
[2012/08/02 08:43:50 | 000,000,000 | RH-D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\Microchip
[2012/07/29 13:33:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\Oracle
[2012/07/29 20:51:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\SISE\Anwendungsdaten\PICC
[2012/08/26 14:13:55 | 000,000,322 | ---- | M] () -- C:\WINDOWS\Tasks\NIUpdateServiceCheckTask.job
[2012/09/17 19:59:39 | 000,000,322 | ---- | M] () -- C:\WINDOWS\Tasks\NIUpdateServiceRetryCheckTask.job
========== Purity Check ==========
< End of report >
Code:
OTL Extras logfile created on: 9/18/2012 12:52:10 PM - Run 1
OTL by OldTimer - Version 3.2.63.0 Folder = C:\Dokumente und Einstellungen\SISE\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000409 | Country: Vereinigte Staaten von Amerika | Language: ENU | Date Format: M/d/yyyy
1.99 Gb Total Physical Memory | 1.07 Gb Available Physical Memory | 53.66% Memory free
3.84 Gb Paging File | 2.98 Gb Available in Paging File | 77.53% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 62.23 Gb Total Space | 31.06 Gb Free Space | 49.92% Space Free | Partition Type: NTFS
Computer Name: SIS-EE1711482F3 | User Name: SISE | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
[HKEY_USERS\S-1-5-21-1645522239-1214440339-1801674531-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"427:TCP" = 427:TCP:LocalSubNet:Enabled:SLP_Port(427)_TCP
"427:UDP" = 427:UDP:LocalSubNet:Enabled:SLP_Port(427)_UDP
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\setup\hpznui01.exe" = D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Programme\HP\Digital Imaging\bin\hpoews01.exe" = C:\Programme\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"C:\Programme\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Programme\HP\Digital Imaging\bin\hpqcopy2.exe" = C:\Programme\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpqpse.exe" = C:\Programme\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Programme\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Programme\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\AVG\AVG2012\avgnsx.exe" = C:\Programme\AVG\AVG2012\avgnsx.exe:*:Enabled:Online Shield -- (AVG Technologies CZ, s.r.o.)
"C:\Programme\AVG\AVG2012\avgdiagex.exe" = C:\Programme\AVG\AVG2012\avgdiagex.exe:*:Enabled:AVG Diagnostics 2012 -- (AVG Technologies CZ, s.r.o.)
"C:\Programme\AVG\AVG2012\avgmfapx.exe" = C:\Programme\AVG\AVG2012\avgmfapx.exe:*:Enabled:AVG Installer -- (AVG Technologies CZ, s.r.o.)
"C:\Programme\AVG\AVG2012\avgemcx.exe" = C:\Programme\AVG\AVG2012\avgemcx.exe:*:Enabled:Personal E-mail Scanner -- (AVG Technologies CZ, s.r.o.)
"C:\Programme\National Instruments\Shared\DataFinderDesktop\bin\DataFinder.exe" = C:\Programme\National Instruments\Shared\DataFinderDesktop\bin\DataFinder.exe:*:Enabled:DataFinder -- (National Instruments Corporation)
"C:\Programme\National Instruments\DIAdem 2011\DIAdem.exe" = C:\Programme\National Instruments\DIAdem 2011\DIAdem.exe:*:Enabled:DIAdem 2011 -- (National Instruments Corporation)
"D:\setup\hpznui01.exe" = D:\setup\hpznui01.exe:*:Enabled:hpznui01.exe
"C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfcCopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)
"C:\Programme\HP\Digital Imaging\bin\hpoews01.exe" = C:\Programme\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpiscnapp.exe:*:Enabled:hpiscnapp.exe -- (Hewlett-Packard)
"C:\Programme\HP\Digital Imaging\bin\hpqpsapp.exe" = C:\Programme\HP\Digital Imaging\bin\hpqpsapp.exe:*:Enabled:hpqpsapp.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Programme\HP\Digital Imaging\bin\hpqcopy2.exe" = C:\Programme\HP\Digital Imaging\bin\hpqcopy2.exe:*:Enabled:hpqcopy2.exe -- (Hewlett-Packard Co.)
"C:\Programme\HP\Digital Imaging\bin\hpqpse.exe" = C:\Programme\HP\Digital Imaging\bin\hpqpse.exe:*:Enabled:hpqpse.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Programme\HP\Digital Imaging\bin\hpqsudi.exe" = C:\Programme\HP\Digital Imaging\bin\hpqsudi.exe:*:Enabled:hpqsudi.exe -- (Hewlett-Packard Development Co. L.P.)
"C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe" = C:\Programme\HP\Digital Imaging\bin\hpqgplgtupl.exe:*:Enabled:hpqgplgtupl.exe -- (Hewlett-Packard Co.)
"C:\Programme\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe" = C:\Programme\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe:*:Enabled:NI Application Web Server -- (National Instruments Corporation)
"C:\Programme\National Instruments\Shared\NI WebServer\SystemWebServer.exe" = C:\Programme\National Instruments\Shared\NI WebServer\SystemWebServer.exe:*:Enabled:NI System WebServer -- (National Instruments Corporation)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{03A7C57A-B2C8-409b-92E5-524A0DFD0DD3}" = Status
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{087A66B8-1F0F-4a8d-A649-0CFE276AA7C0}" = WebReg
"{09245655-5497-418A-8610-512589215B71}" = NI Uninstaller
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0BC1A5B2-79A1-4716-B3E5-4071E9AB6F43}" = HP Photosmart C4500 All-In-One Driver Software12.0 Rel .4
"{0E2B0B41-7E08-4F9F-B21F-41C4133F43B7}" = mLogView
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{1442BF6F-3534-43DC-9139-722359496F1C}" = NI DIAdem 2012
"{1478F207-677B-443B-B305-E924A6289F1B}" = NI LabVIEW Runtime Engine 2010 SP1
"{1C70BE80-35E0-46DA-B81D-5BF5652F8D80}" = AV Mode Button Utility
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{231D0E11-0313-49FD-95CE-1D0264C7F1F5}" = NI Math Kernel Libraries
"{23FB368F-1399-4EAC-817C-4B83ECBE3D83}" = mProSafe
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{28EB3641-275B-4CB7-989F-1745F8574A3D}" = NI Logos 5.4
"{2A329FB6-389D-4396-A974-29656D6864AE}" = MarketResearch
"{2ADC660A-77C9-4A6C-9D4B-5E48A27BCA10}" = NI Help Assistant
"{2B1D39F8-477A-4B40-B062-F5E0C4D42B9B}" = NI LabWindows/CVI 2010 SP1 Low-Level Driver (Original)
"{2BC9B2CE-D569-4ADC-A8A0-170F2FD57139}" = NI LabVIEW 2010 Real-Time NBFifo
"{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}" = BufferChm
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{38300A40-AB90-444D-A823-17EB95A5C731}" = NI Unterstützung für nicht englische Versionen der Runtime-Engine von LabVIEW 2011 SP1
"{39CB30DB-27F8-4dd4-A294-CB4AE3B584FD}" = Copy
"{3B1AA7EC-6F11-4EA2-82AC-346CACD0E2DE}" = NI Audio DataPlugin 1.1.3
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E9D596A-61D4-4239-BD19-2DB984D2A16F}" = mIWA
"{403E07CF-040C-4653-85C6-1053B992CA53}" = C4580
"{42442BC6-5A92-4BC2-9E0C-3D359D548A21}_is1" = Pazera Free MP4 to AVI Converter 1.6
"{44EDE2DD-81E6-4417-945B-61B699670035}" = NI DIAdem 2011
"{4655A04E-ACAA-4B97-ABB9-48246BF9642E}" = NI Error Reporting 2011 SP1
"{47ECCB1F-2811-49C0-B6A7-26778639ABA0}" = 32 Bit HP CIO Components Installer
"{48D0B1A3-11AC-4A87-AFB2-2002CCB88B34}" = PS_AIO_04_C4580_Software_Min
"{49F05354-04F7-4AE4-8434-9E7B5462C727}" = NI DN 2.0 SP1 installer
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B667860-5632-4501-A9FC-81B0650E059A}" = NI Web Application Server 11.5
"{4B877FC6-F44C-4B39-B0B6-CE15ADC63997}" = NI VC2005MSMs x86
"{4D304678-738E-42a0-931A-2B022F49DEB8}" = TrayApp
"{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}" = UnloadSupport
"{52252F5C-58CD-48ED-8C88-9AAD6FE887B4}" = NI Trace Engine
"{554C90EB-19B6-45F8-B6E4-6F050B3700A1}" = NI LabVIEW Run-Time Engine Interop 2011
"{555B2ADE-B3CB-4C95-A789-8A7C03A004B7}" = NI LabVIEW 2011 Deployment Framework
"{55885D6D-16A3-4278-B6A3-FE008D3F8BAF}" = NI .NET Framework 3.5 SP1
"{56146518-7C24-43CB-AA6B-1648EE45E174}" = NI DN 2.0 x64 SP1 installer
"{58BB37E3-AAC0-413C-9031-7F7AE0509B6D}" = NI Curl 11.5
"{59452470-A902-477F-9338-9B88101681BD}" = Setting Utility Series
"{5ECC8FF1-BCAD-4197-9C95-4E94E2A6AB6D}" = NI LabVIEW Run-Time Engine 2011 SP1
"{66CCACD4-2452-4DC9-87A2-1D67B522AF52}" = NI MetaSuite Installer
"{681B698F-C997-42C3-B184-B489C6CA24C9}" = HPPhotoSmartDiscLabelContent1
"{6BAB004D-92BB-4E39-B1DE-1F4E21E3AA42}" = NI MDF Support
"{6D12EC75-E7D3-4EAD-AB10-E1F3AFF94AA6}" = AVG 2012
"{6D2576EC-A0E9-418A-A09A-409933A3B6F4}" = VAIO Camera Capture Utility
"{6EED4269-588D-45b8-A80C-26A9CA62EE4E}" = HPSSupply
"{6FFB1B16-0930-421B-9F2C-E4CB91E3B22D}" = NI VC2010MSMs x86
"{7059BDA7-E1DB-442C-B7A1-6144596720A4}" = HP Update
"{74DBB98D-B4A7-4DD9-9E13-C51FDB1105D0}" = NI LabWindows/CVI 2010 SP1 Low-Level Driver (Updated)
"{75FFDF8C-3751-4891-BB4A-AADA0D5EB91A}" = NI DataFinder Client 3.1
"{76A64A33-D197-4525-85EE-255D6E5F3604}" = FileOpen Client
"{772B3B77-D180-4CAF-8E31-A5CF8A9D4CB2}" = NI License Manager
"{7B0847D8-05E8-4D34-8A1C-F7F0DCCED07C}" = NI AOP5 DataPlugin 2.0
"{7C29CC57-4F4C-4B35-A4F3-8D9C85DE2ABF}" = NI System Web Server 11.5
"{7C6869BF-6CBE-4CB0-8869-2743B419343C}" = NI LabVIEW 2011 Real-Time NBFifo
"{800E784D-53E3-4948-B491-9E7FA5EACBDC}" = SmartWebPrinting
"{80DEA5E6-0223-42D3-8090-6C03E14DC4FC}" = NI-Update-Dienst 2.1
"{8175A348-B636-4348-8E38-0231A19D00EE}" = NI DataFinder Desktop 3.1
"{829CD169-E692-48E8-9BDE-A3E8D8B65538}" = mSCfg
"{85FA6537-DE89-4054-907A-69F387C2DA03}" = NI DIAdem 2011 (Core)
"{86ABBC19-1CBB-411F-B600-F9CE0B20B34D}" = NI DIAdem 2012 (Core)
"{87A9A9A9-FAB7-4224-9328-0FA2058C0FD5}" = Network
"{8B928BA1-EDEC-4227-A2DA-DD83026C36F5}" = mPfMgr
"{8C6BB412-D3A8-4AAE-A01B-35B681789D68}" = mHelp
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-00A1-0409-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (English) 2007
"{90120000-00BA-0409-0000-0000000FF1CE}" = Microsoft Office Groove MUI (English) 2007
"{90120000-0114-0409-0000-0000000FF1CE}" = Microsoft Office Groove Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90B0D222-8C21-4B35-9262-53B042F18AF9}" = mPfWiz
"{94658027-9F16-4509-BBD7-A59FE57C3023}" = mZConfig
"{94AEBDCC-159F-4CBB-ABDE-B16483D2CF6C}" = NI LabWindows/CVI 2010 SP1 Analysis Library
"{9603DE6D-4567-4b78-B941-849322373DE2}" = SolutionCenter
"{96255FDC-DF16-4837-BFE3-567DB156ED62}" = NI DIAdem 2012 Dokumentation (Classic)
"{9ADCDBD3-7E9D-4D5B-939B-682379D25C71}" = NI DIAdem 2011 Dokumentation (Classic)
"{9CCCFD9C-248F-47FE-9496-1680E3E5C163}" = Scan
"{9D1B99B7-DAD8-440d-B4FB-1915332FBCC2}" = HPProductAssistant
"{9FD901EF-E9E0-42AD-B957-C691E020DD6A}" = NI Authentication 2011 SP1
"{A0F925BF-5C55-44C2-A4E7-5A4C59791C29}" = mDriver
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A363C314-2242-4BBE-9ADE-B427AF646EFF}" = NI mDNS Responder 1.6.0
"{A5355F15-F98B-4704-9BAE-E53B9FE48F48}" = SDFormatter
"{AB55A100-AAC9-43EA-845E-2DCDC0D4D2B8}" = NI Math Kernel Libraries
"{AC13BA3A-336B-45a4-B3FE-2D3058A7B533}" = Toolbox
"{AC716C55-63F4-4432-BC28-1C505443E2AE}" = NI EulaDepot
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{AD012056-F425-42EF-B9BF-F7821C48E0AE}" = NI .NET Framework 4.0
"{AEB9948B-4FF2-47C9-990E-47014492A0FE}" = MSXML 6.0 Parser
"{B69C390B-826F-473C-86EB-7AD4950818C3}" = AVG 2012
"{BBECB870-C252-4540-ACE0-E8968EE99651}" = NI USI 2.0.0
"{BCC373FE-227D-46D9-827F-05BA296E2602}" = NI LabVIEW Web Server for Run-Time Engine
"{BF90642A-1C32-4EDF-9155-0B8CE49D8F7E}" = NI LabVIEW Web Server for Run-Time Engine
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C1457A9E-3745-4026-BF81-4332AA695644}" = NI System Web Server Base 11.5
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{C3E85EE9-5892-4142-B537-BCEB3DAC4C3D}" = Internet Explorer Toolbar 4.6 by SweetPacks
"{C9BED750-1211-4480-B1A5-718A3BE15525}" = REALTEK GbE & FE Ethernet PCI-E NIC Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D600BC46-CB71-4172-9B29-849AA42E1DF7}" = NI TDM Excel Add-In 3.4
"{D7340DF0-E111-4115-AD27-B6D0EF63BD96}" = NI Logos XT Support
"{D79113E7-274C-470B-BD46-01B10219DF6A}" = HPPhotosmartEssential
"{E2BF8795-4501-42AC-90D3-007EA496B650}" = NI TDM Streaming 2.4
"{E81667C6-2856-46D6-ABEA-6A2F42166779}" = mCore
"{E84997A1-4D6F-4C0B-B60D-F85B360D2666}" = NI VC2008MSMs x86
"{E9030CD3-1707-4149-B3CA-794582116E23}" = NI SSL Support
"{EA37AB72-EC8C-432C-A1C6-186850FB0559}" = NI System State Publisher
"{EF3D45BB-2260-4008-88EA-492E7744A9DF}" = Sony Utilities DLL
"{EF9E56EE-0243-4BAD-88F4-5E7508AA7D96}" = Destination Component
"{F0BFC7EF-9CF8-44EE-91B0-158884CD87C5}" = mMHouse
"{F0D85ADD-DD61-4B43-87A0-6DA52A211A8B}" = VAIO Event Service
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6090A17-0967-4A8A-B3C3-422A1B514D49}" = mDrWiFi
"{F648FD09-7CEA-4257-BC68-A8389189FD51}" = GPBaseService2
"{F6C682B6-7714-41CC-80B6-3288364910AF}" = NI GMP Windows 32-bit Installer 11.0.0
"{F769B78E-FF0E-4db5-95E2-9F4C8D6352FE}" = DeviceDiscovery
"{FCA651F3-5BDA-4DDA-9E4A-5D87D6914CC4}" = mWlsSafe
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AVG" = AVG 2012
"CCS C Compiler Plug-In for MPLAB" = CCS C Compiler Plug-In for MPLAB
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_104D0200" = HDAUDIO SoftV92 Data Fax Modem with SmartCP
"ENTERPRISE" = Microsoft Office Enterprise 2007
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HP Imaging Device Functions" = HP Imaging Device Functions 12.0
"HP Photosmart Essential" = HP Photosmart Essential 3.5
"HP Smart Web Printing" = HP Smart Web Printing
"HP Solution Center & Imaging Support Tools" = HP Solution Center 12.0
"HPExtendedCapabilities" = HP Customer Participation Program 12.0
"HxD Hex Editor_is1" = HxD Hex Editor Version 1.7.7.0
"ie8" = Windows Internet Explorer 8
"ImgBurn" = ImgBurn
"Inkscape" = Inkscape 0.48.3.1
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.65.0.1400
"Microchip Application Libraries v2012-07-18 v2012-07-18" = Microchip Application Libraries v2012-07-18
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"MiKTeX 2.9" = MiKTeX 2.9
"Mozilla Firefox 15.0.1 (x86 de)" = Mozilla Firefox 15.0.1 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MPLAB C for PIC18 MCUs v3.40" = MPLAB C for PIC18 MCUs
"MPLAB X IDE v1.30 v1.30" = MPLAB X IDE v1.30
"NI Uninstaller" = National Instruments Software
"PCWHD" = PCWHD
"PICC-18 9.52PL0" = HI-TECH PICC-18 STD V9.52PL0
"Profili 2" = Profili 2
"ProInst" = Intel(R) PROSet/Wireless Software
"Shop for HP Supplies" = Shop for HP Supplies
"TeXnicCenter_is1" = TeXnicCenter Version 1.0 Stable RC1
"VLC media player" = VLC media player 2.0.2
"XFLR5_is1" = XFLR5 v6.07
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1645522239-1214440339-1801674531-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"89a3c7bfaeaa39b6" = x-IMU GUI
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 7/16/2012 5:25:52 AM | Computer Name = SIS-EE1711482F3 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung basic-miktex-2.9.4521.exe, Version 2.9.4503.0,
fehlgeschlagenes Modul basic-miktex-2.9.4521.exe, Version 2.9.4503.0, Fehleradresse
0x0001d900.
Error - 7/27/2012 4:39:33 AM | Computer Name = SIS-EE1711482F3 | Source = MsiInstaller | ID = 11904
Description = Product: SolutionCenter -- Error 1904. Module C:\WINDOWS\system32\Macromed\Flash\Flash9f.ocx
failed to register. HRESULT -2147220473. Contact your support personnel.
Error - 8/2/2012 2:49:04 AM | Computer Name = SIS-EE1711482F3 | Source = MsiInstaller | ID = 11905
Description = Product: MPLAB Tools v8.85 -- Error 1905.Module C:\Programme\Microchip\MPLAB
IDE\PICkit 2\PICkit2.dll failed to unregister. HRESULT -2147220472. Contact your
support personnel.
Error - 8/2/2012 2:49:04 AM | Computer Name = SIS-EE1711482F3 | Source = MsiInstaller | ID = 11905
Description = Product: MPLAB Tools v8.85 -- Error 1905.Module C:\Programme\Microchip\MPLAB
IDE\Core\MPDisplay2.dll failed to unregister. HRESULT -2147220472. Contact your
support personnel.
Error - 8/27/2012 6:53:03 AM | Computer Name = SIS-EE1711482F3 | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung xflr5.exe, Version 0.0.0.0, fehlgeschlagenes
Modul xflr5.exe, Version 0.0.0.0, Fehleradresse 0x001ba365.
Error - 9/5/2012 1:44:08 PM | Computer Name = SIS-EE1711482F3 | Source = Microsoft Office 12 | ID = 1000
Description = Faulting application winword.exe, version 12.0.4518.1014, stamp 45428028,
faulting module msvcr80.dll, version 8.0.50727.5592, stamp 4d2be7f2, debug? 0,
fault address 0x00015108.
Error - 9/5/2012 1:44:21 PM | Computer Name = SIS-EE1711482F3 | Source = Microsoft Office 12 | ID = 1000
Description = Faulting application winword.exe, version 12.0.4518.1014, stamp 45428028,
faulting module msvcr80.dll, version 8.0.50727.5592, stamp 4d2be7f2, debug? 0,
fault address 0x00015108.
Error - 9/5/2012 1:45:14 PM | Computer Name = SIS-EE1711482F3 | Source = Microsoft Office 12 | ID = 1000
Description = Faulting application winword.exe, version 12.0.4518.1014, stamp 45428028,
faulting module msvcr80.dll, version 8.0.50727.5592, stamp 4d2be7f2, debug? 0,
fault address 0x00015108.
Error - 9/6/2012 2:48:18 AM | Computer Name = SIS-EE1711482F3 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 x-imu gui.exe, P2 12.3.4589.24428, P3 500ff5d9,
P4 system, P5 2.0.0.0, P6 4ef6c407, P7 3c6b, P8 bb, P9 system.objectdisposedexception,
P10 NIL.
Error - 9/6/2012 6:31:58 AM | Computer Name = SIS-EE1711482F3 | Source = .NET Runtime 2.0 Error Reporting | ID = 5000
Description = EventType clr20r3, P1 x-imu gui.exe, P2 12.3.4589.24428, P3 500ff5d9,
P4 system, P5 2.0.0.0, P6 4ef6c407, P7 3bc1, P8 7a, P9 system.unauthorizedaccess,
P10 NIL.
[ OSession Events ]
Error - 9/5/2012 1:44:03 PM | Computer Name = SIS-EE1711482F3 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 27850
seconds with 9300 seconds of active time. This session ended with a crash.
Error - 9/5/2012 1:44:20 PM | Computer Name = SIS-EE1711482F3 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 2
seconds with 0 seconds of active time. This session ended with a crash.
Error - 9/5/2012 1:45:13 PM | Computer Name = SIS-EE1711482F3 | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 35
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 9/14/2012 2:30:02 AM | Computer Name = SIS-EE1711482F3 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "XAudioService" wurde aufgrund folgenden Fehlers nicht
gestartet: %%193
Error - 9/14/2012 3:39:12 AM | Computer Name = SIS-EE1711482F3 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "XAudioService" wurde aufgrund folgenden Fehlers nicht
gestartet: %%193
Error - 9/14/2012 4:35:43 AM | Computer Name = SIS-EE1711482F3 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "XAudioService" wurde aufgrund folgenden Fehlers nicht
gestartet: %%193
Error - 9/17/2012 2:00:09 PM | Computer Name = SIS-EE1711482F3 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "XAudioService" wurde aufgrund folgenden Fehlers nicht
gestartet: %%193
Error - 9/17/2012 2:53:25 PM | Computer Name = SIS-EE1711482F3 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "XAudioService" wurde aufgrund folgenden Fehlers nicht
gestartet: %%193
Error - 9/17/2012 3:03:33 PM | Computer Name = SIS-EE1711482F3 | Source = BTHUSB | ID = 327696
Description = Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Funkgerät
und einem Gerät mit der Bluetooth-Funkgerätadresse (00:15:b9:d3:94:15) ist fehlgeschlagen.
Error - 9/17/2012 3:04:29 PM | Computer Name = SIS-EE1711482F3 | Source = BTHUSB | ID = 327696
Description = Die beiderseitige Authentifizierung zwischen dem lokalen Bluetooth-Funkgerät
und einem Gerät mit der Bluetooth-Funkgerätadresse (00:15:b9:d3:94:15) ist fehlgeschlagen.
Error - 9/18/2012 5:20:32 AM | Computer Name = SIS-EE1711482F3 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "XAudioService" wurde aufgrund folgenden Fehlers nicht
gestartet: %%193
Error - 9/18/2012 6:22:34 AM | Computer Name = SIS-EE1711482F3 | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "" auf Volume "HarddiskVolume1" ist im
Wiederherstellungsfilter der unerwartete Fehler "0xC0000001" aufgetreten. Die Volumeüberwachung
wurde angehalten.
Error - 9/18/2012 6:24:04 AM | Computer Name = SIS-EE1711482F3 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "XAudioService" wurde aufgrund folgenden Fehlers nicht
gestartet: %%193
< End of report >
und noch die MBAM Code:
Malwarebytes Anti-Malware (Test) 1.65.0.1400
www.malwarebytes.org
Datenbank Version: v2012.09.18.02
Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
SISE :: SIS-EE1711482F3 [Administrator]
Schutz: Aktiviert
9/18/2012 12:08:37 PM
mbam-log-2012-09-18 (12-08-37).txt
Art des Suchlaufs: Quick-Scan
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 201383
Laufzeit: 7 Minute(n), 33 Sekunde(n)
Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)
Infizierte Dateien: 2
C:\Dokumente und Einstellungen\SISE\Eigene Dateien\Downloads\VLCVideoConverterSetup.exe (PUP.BundleInstaller.BI) -> Erfolgreich gelöscht und in Quarantäne gestellt.
C:\Dokumente und Einstellungen\SISE\Startmenü\Programme\Autostart\ctfmon.lnk (Trojan.Ransom.Gen) -> Erfolgreich gelöscht und in Quarantäne gestellt.
(Ende)
|
