So hab noch mal einen OTL scan gemacht!! Code:
OTL logfile created on: 18.01.2013 10:58:25 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\M.... ...e\Downloads
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,93 Gb Total Physical Memory | 0,66 Gb Available Physical Memory | 34,33% Memory free
3,87 Gb Paging File | 2,00 Gb Available in Paging File | 51,63% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 391,54 Gb Total Space | 264,47 Gb Free Space | 67,55% Space Free | Partition Type: NTFS
Drive D: | 488,28 Gb Total Space | 478,95 Gb Free Space | 98,09% Space Free | Partition Type: NTFS
Computer Name: M.......E-PC | User Name: M.... ...e | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\M.... ...e\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\spool\drivers\w32x86\3\E_TATIHSE.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\Digital Dynamic\Advanced Backup Manager\backupsvc.exe (Digital Dynamic)
PRC - C:\Program Files\Mozilla Firefox 4.0 Beta 10\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files\Mozilla Firefox 4.0 Beta 10\plugin-container.exe (Mozilla Corporation)
PRC - C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe (Adobe Systems, Inc.)
PRC - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
PRC - C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
PRC - C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
PRC - C:\Program Files\Epson Software\Download Navigator\EPSDNAVI.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Users\M.... ...e\AppData\Local\Temp\EPSON\Download Navigator\20130118105308\EPSON Remote Print\Remote_Print_Driver_x86_161\WINX86\SETUP\SETUP.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\Epson Software\Download Navigator\EPSDNRUD.EXE (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\CPUCooL\CPUCooL.exe ()
PRC - C:\Program Files\CPUCooL\CooLSrv.exe ()
PRC - C:\Program Files\Nero\Update\NASvc.exe (Nero AG)
PRC - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe (TuneUp Software)
PRC - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:\Program Files\EPSON Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\EPSON Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Program Files\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe (Fujitsu Technology Solutions)
PRC - C:\Program Files\EPSON Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
PRC - C:\Program Files\TwonkyMedia\twonkymediaserverwatchdog.exe (PacketVideo)
PRC - C:\Program Files\TwonkyMedia\TwonkyMediaServer.exe ()
PRC - C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
PRC - C:\Windows\System32\drvinst.exe (Microsoft Corporation)
PRC - C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
========== Modules (No Company Name) ==========
MOD - C:\Program Files\Mozilla Firefox 4.0 Beta 10\mozjs.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\log4net\199e1121526944a4d9dc77e5867fc774\log4net.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\DeskUpdateNotifier\3802e86c54c8a435573e3f78c6632fa0\DeskUpdateNotifier.ni.exe ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\865d2bf19a7af7fab8660a42d92550fe\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\eead6629e384a5b69f9ae35284b7eeed\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\f687c43e9fdec031988b33ae722c4613\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\195a77fcc6206f8bb35d419ff2cf0d72\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\369f8bdca364e2b4936d18dea582912c\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\7150b9136fad5b79e88f6c7f9d3d2c39\mscorlib.ni.dll ()
MOD - c:\progra~2\saveas\sprote~1.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2013\txmlutil.dll ()
MOD - C:\Program Files\Bitdefender\Bitdefender 2013\bdmetrics.dll ()
MOD - C:\Program Files\CPUCooL\CPUCooL.exe ()
MOD - C:\Program Files\WinRAR\rarext.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
========== Services (SafeList) ==========
SRV - (EPSON_PM_RPCV4_05) -- C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_JT50RP.EXE (SEIKO EPSON CORPORATION)
SRV - (backupsvc) -- C:\Program Files\Digital Dynamic\Advanced Backup Manager\backupsvc.exe (Digital Dynamic)
SRV - (updatesvca) -- C:\Windows\System32\updatesvca.dll (Digital Dynamic)
SRV - (MozillaMaintenance) -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (MBAMService) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (VSSERV) -- C:\Program Files\Bitdefender\Bitdefender 2013\vsserv.exe (Bitdefender)
SRV - (BdDesktopParental) -- C:\Program Files\Bitdefender\Bitdefender 2013\bdparentalservice.exe (Bitdefender)
SRV - (UPDATESRV) -- C:\Program Files\Bitdefender\Bitdefender 2013\updatesrv.exe (Bitdefender)
SRV - (SkypeUpdate) -- C:\Program Files\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
SRV - (CPUCooLServer) -- C:\Program Files\CPUCooL\CooLSrv.exe ()
SRV - (NAUpdate) -- C:\Program Files\Nero\Update\NASvc.exe (Nero AG)
SRV - (TuneUp.Defrag) -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\System32\uxtuneup.dll (TuneUp Software)
SRV - (TwonkyMedia) -- C:\Program Files\TwonkyMedia\twonkymediaserverwatchdog.exe (PacketVideo)
SRV - (Fabs) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe (MAGIX AG)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SRV - (SandraAgentSrv) -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP4\RpcAgentSrv.exe (SiSoftware)
SRV - (AAV UpdateService) -- C:\Program Files\Akademische Arbeitsgemeinschaft\AAVUpdateManager\aavus.exe ()
SRV - (FirebirdServerMAGIXInstance) -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe (MAGIX®)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (VirtualImDisk) -- C:\Windows\System32\drivers\virtualimdisk.sys (Olof Lagerkvist)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (avchv) -- C:\Windows\System32\drivers\avchv.sys (BitDefender)
DRV - (trufos) -- C:\Windows\System32\drivers\trufos.sys (BitDefender S.R.L.)
DRV - (avckf) -- C:\Windows\System32\drivers\avckf.sys (BitDefender)
DRV - (avc3) -- C:\Windows\System32\drivers\avc3.sys (BitDefender)
DRV - (bdselfpr) -- C:\Program Files\Bitdefender\Bitdefender 2013\bdselfpr.sys (BitDefender LLC)
DRV - (BDSandBox) -- C:\Windows\System32\drivers\bdsandbox.sys (BitDefender SRL)
DRV - (gzflt) -- C:\Windows\System32\drivers\gzflt.sys (BitDefender LLC)
DRV - (BdfNdisf) -- c:\program files\common files\bitdefender\bitdefender firewall\bdfndisf6.sys (BitDefender LLC)
DRV - (bdfwfpf) -- C:\Program Files\Common Files\Bitdefender\Bitdefender Firewall\bdfwfpf.sys (BitDefender LLC)
DRV - (epmntdrv) -- C:\Windows\System32\epmntdrv.sys ()
DRV - (EuGdiDrv) -- C:\Windows\System32\EuGdiDrv.sys ()
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (WINUSB) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (ntiopnp) -- C:\Windows\System32\drivers\ntiopnp.sys ()
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (SANDRA) -- C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP4\WNt500x86\Sandra.sys (SiSoftware)
DRV - (WSDPrintDevice) -- C:\Windows\System32\drivers\WSDPrint.sys (Microsoft Corporation)
DRV - (WSDScan) -- C:\Windows\System32\drivers\WSDScan.sys (Microsoft Corporation)
DRV - (vwifimp) -- C:\Windows\System32\drivers\vwifimp.sys (Microsoft Corporation)
DRV - (SiSGbeLH) -- C:\Windows\System32\drivers\SiSGB6.sys (Silicon Integrated Systems Corp.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant =
IE - HKLM\..\SearchScopes,DefaultScope = {EEE6C360-6118-11DC-9C72-001320C79847}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 68 FD 96 47 12 59 CC 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.defaultenginename,S: S", ""
FF - prefs.js..browser.search.defaultthis.engineName: ""
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.openintab: true
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.order.1,S: S", ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.selectedEngine,S: S", ""
FF - prefs.js..extensions.enabledAddons: %7Bdc572301-7619-498c-a57d-39143191b318%7D:0.4.0.4
FF - prefs.js..extensions.enabledAddons: %7B1280606b-2510-4fe0-97ef-9b5a22eafe30%7D:0.7.9.4
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: ""
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: ""
FF - prefs.js..keyword.URL: ""
FF - prefs.js..browser.startup.homepage: ""
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Player Plugin,version=1.0.0: C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll (DivX, Inc)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Program Files\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\e-webprint@epson.com: C:\Program Files\Epson Software\E-Web Print\Firefox Add-on [2013.01.18 11:02:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Components: C:\Program Files\Mozilla Firefox 4.0 Beta 10\components [2013.01.15 11:29:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox 4.0 Beta 10\plugins
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 10.0.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2012.03.26 19:57:47 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\bdThunderbird@bitdefender.com: C:\Program Files\Bitdefender\Bitdefender 2013\bdtbext [2013.01.15 11:46:41 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\extension@preispilot.com: C:\Users\M.... ...e\AppData\Roaming\Mozilla\Firefox\Profiles\7c32lzmq.default\extensions\extension@preispilot.com
[2011.08.12 18:25:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Extensions
[2013.01.16 20:18:49 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\Firefox\Profiles\0g2z3pyo.default-1358363421822\extensions
[2013.01.16 20:18:49 | 000,516,839 | ---- | M] () (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\0g2z3pyo.default-1358363421822\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe30}.xpi
[2013.01.16 20:18:25 | 000,804,627 | ---- | M] () (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\0g2z3pyo.default-1358363421822\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013.01.16 20:18:49 | 000,713,793 | ---- | M] () (No name found) -- C:\Users\M.... ...e\AppData\Roaming\mozilla\firefox\profiles\0g2z3pyo.default-1358363421822\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi
[2011.08.13 18:38:18 | 000,002,048 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml
========== Chrome ==========
CHR - Extension: SaveAs = C:\Users\M.... ...e\AppData\Local\Google\Chrome\User Data\Default\Extensions\hikdcibhllfknebanabljllcnkmjloac\1\
CHR - Extension: SaveAs = C:\Users\M.... ...e\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkdgaennipccbapackpoleglfofpacdd\1\
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (E-Web Print) - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
O2 - BHO: (SaveAs) - {81BE7674-E58B-74A8-5D89-0C67E2261A38} - C:\ProgramData\SaveAs\50f1b79fac0bb.dll ()
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (E-Web Print) - {201CF130-E29C-4E5C-A73F-CD197DEFA6AE} - C:\Program Files\Epson Software\E-Web Print\ewps_tb.dll (SEIKO EPSON CORPORATION)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - No CLSID value found.
O4 - HKLM..\Run: [Bdagent] C:\Program Files\Bitdefender\Bitdefender 2013\bdagent.exe (Bitdefender)
O4 - HKLM..\Run: [DeskUpdateNotifier] C:\Program Files\Fujitsu\DeskUpdate\DeskUpdateNotifier.exe (Fujitsu Technology Solutions)
O4 - HKLM..\Run: [EEventManager] C:\Program Files\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [FUFAXRCV] C:\Program Files\Epson Software\FAX Utility\FUFAXRCV.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [FUFAXSTM] C:\Program Files\Epson Software\FAX Utility\FUFAXSTM.exe (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [EPLTarget\P0000000000000000] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_TATIHSE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [EPLTarget\P0000000000000001] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_TATIHSE.EXE (SEIKO EPSON CORPORATION)
O4 - HKCU..\Run: [EPLTarget\P0000000000000002] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_TATIHSE.EXE (SEIKO EPSON CORPORATION)
O4 - Startup: C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPUCooL.lnk = C:\Program Files\CPUCooL\CPUCooL.exe ()
O4 - Startup: C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Vodafone Media Manager.lnk = C:\Program Files\TwonkyMedia\MediaManager\TwonkyMediaManager.exe (PacketVideo )
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLinkedConnections = 1
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~3\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000 File not found
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.5.1)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 10.5.1)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{0921659C-F994-4ECB-9F3E-DD89537F1F46}: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{B1EAD508-83B9-4FE9-8E1E-A5411B620ADE}: DhcpNameServer = 192.168.2.1 192.168.5.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F2D47EBD-9378-4D70-A0CB-E1B2A352771B}: NameServer = 192.168.5.1,192.168.5.3
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - AppInit_DLLs: (c:\progra~2\saveas\sprote~1.dll) - c:\progra~2\saveas\sprote~1.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013.01.18 10:50:52 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EPSON Software
[2013.01.17 17:47:53 | 000,008,192 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\System32\E_DCINST.DLL
[2013.01.17 17:47:47 | 000,095,232 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\E_TLBHSE.DLL
[2013.01.17 17:47:43 | 000,081,408 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\E_TD4BHSE.DLL
[2013.01.17 11:22:55 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\EPSON
[2013.01.17 09:38:44 | 000,000,000 | ---D | C] -- C:\ProgramData\UDL
[2013.01.17 09:33:42 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Epson
[2013.01.17 09:33:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software
[2013.01.17 09:32:22 | 000,475,410 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\ensppmon.dll
[2013.01.17 09:32:22 | 000,458,129 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\ensppui.dll
[2013.01.17 09:32:22 | 000,249,344 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\enspres.dll
[2013.01.17 09:32:22 | 000,249,344 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\enpres.dll
[2013.01.17 09:32:21 | 000,475,410 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\enppmon.dll
[2013.01.17 09:32:21 | 000,458,129 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\enppui.dll
[2013.01.17 09:32:20 | 000,000,000 | ---D | C] -- C:\Program Files\EpsonNet
[2013.01.17 09:31:38 | 000,000,000 | ---D | C] -- C:\Program Files\EPSON Software
[2013.01.17 09:30:14 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON
[2013.01.17 09:29:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON
[2013.01.17 09:29:50 | 000,341,504 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\esw2ud.dll
[2013.01.17 09:29:50 | 000,132,560 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\esdevapp.exe
[2013.01.17 09:29:50 | 000,012,800 | ---- | C] (Seiko Epson Corporation) -- C:\Windows\System32\escdev.dll
[2013.01.17 09:29:46 | 000,000,000 | ---D | C] -- C:\Program Files\epson
[2013.01.17 09:24:21 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\.oit
[2013.01.17 09:24:16 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\Documents\My PageManager
[2013.01.17 09:24:14 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Local\NewSoft
[2013.01.17 09:23:38 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\NewSoft
[2013.01.17 09:20:26 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\NewSoft
[2013.01.16 20:10:26 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\Desktop\Alte Firefox-Daten
[2013.01.16 18:46:31 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2013.01.16 16:00:55 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CPUCooL
[2013.01.16 16:00:02 | 000,000,000 | ---D | C] -- C:\Program Files\CPUCooL
[2013.01.16 15:10:53 | 000,000,000 | ---D | C] -- C:\Windows\System32\IO
[2013.01.16 14:54:55 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Opera
[2013.01.16 14:53:58 | 000,493,056 | ---- | C] ( datenhaus GmbH) -- C:\Windows\System32\dhRichClient3.dll
[2013.01.16 14:53:53 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\OCS
[2013.01.16 14:53:37 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\DesktopIconForAmazon
[2013.01.16 11:14:28 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\Documents\LocaleMetaData
[2013.01.15 13:47:26 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Malwarebytes
[2013.01.15 13:47:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.01.15 13:47:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.01.15 13:47:12 | 000,021,104 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.01.15 13:47:12 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.01.15 13:46:59 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Local\Programs
[2013.01.15 13:05:00 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Digital Dynamic
[2013.01.15 13:04:50 | 000,034,448 | ---- | C] (Olof Lagerkvist) -- C:\Windows\System32\drivers\virtualimdisk.sys
[2013.01.15 13:04:49 | 000,177,664 | ---- | C] (Digital Dynamic) -- C:\Windows\System32\updatesvca.dll
[2013.01.15 13:04:48 | 000,000,000 | ---D | C] -- C:\Program Files\Digital Dynamic
[2013.01.15 13:02:13 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\Desktop\Logfiles
[2013.01.15 12:41:42 | 000,072,704 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.01.15 11:48:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender 2013
[2013.01.15 11:47:00 | 000,000,000 | ---D | C] -- C:\ProgramData\BDLogging
[2013.01.15 11:46:37 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\capicom.dll
[2013.01.15 11:46:37 | 000,077,192 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\BdfNdisf6.sys
[2013.01.15 11:46:37 | 000,066,392 | ---- | C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys
[2013.01.15 11:46:33 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WdfCoInstaller01009.dll
[2013.01.15 11:46:23 | 000,242,504 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avchv.sys
[2013.01.15 11:46:22 | 000,481,464 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys
[2013.01.15 11:46:21 | 000,622,616 | ---- | C] (BitDefender) -- C:\Windows\System32\drivers\avc3.sys
[2013.01.15 11:45:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Bitdefender
[2013.01.15 11:39:28 | 000,161,312 | ---- | C] (BitDefender LLC) -- C:\Windows\System32\drivers\gzflt.sys
[2013.01.15 11:39:13 | 000,343,456 | ---- | C] (BitDefender S.R.L.) -- C:\Windows\System32\drivers\trufos.sys
[2013.01.15 11:39:13 | 000,000,000 | ---D | C] -- C:\Program Files\Bitdefender
[2013.01.15 11:17:49 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Roaming\BitDefender
[2013.01.12 20:19:51 | 000,000,000 | ---D | C] -- C:\ProgramData\TEMP
[2013.01.12 20:06:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Cloud Software LTD
[2013.01.12 20:05:52 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Local\SwvUpdater
[2013.01.12 20:03:45 | 000,000,000 | ---D | C] -- C:\Program Files\SaveAs
[2013.01.12 19:59:36 | 000,000,000 | ---D | C] -- C:\ProgramData\SaveAs
[2013.01.12 19:59:36 | 000,000,000 | ---D | C] -- C:\Users\M.... ...e\AppData\Local\Google
[2013.01.12 19:58:36 | 000,000,000 | ---D | C] -- C:\ProgramData\InstallMate
[2013.01.11 07:26:17 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox 4.0 Beta 10
[2013.01.09 18:15:09 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2013.01.09 18:15:09 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2013.01.09 18:15:08 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2013.01.09 18:15:08 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2013.01.09 18:15:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2013.01.09 18:15:08 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2013.01.09 18:15:08 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2013.01.09 18:15:07 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2013.01.09 18:15:07 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2013.01.09 18:15:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2013.01.09 18:15:07 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2013.01.09 18:15:07 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2013.01.09 18:15:06 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2013.01.09 18:15:06 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2013.01.09 18:12:28 | 002,345,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2013.01.09 18:08:00 | 000,046,592 | ---- | C] (Microsoft) -- C:\Windows\System32\fpb.rs
[2013.01.09 18:08:00 | 000,045,568 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc-nz.rs
[2013.01.09 18:08:00 | 000,044,544 | ---- | C] (Microsoft) -- C:\Windows\System32\pegibbfc.rs
[2013.01.09 18:08:00 | 000,043,520 | ---- | C] (Microsoft) -- C:\Windows\System32\csrr.rs
[2013.01.09 18:08:00 | 000,040,960 | ---- | C] (Microsoft) -- C:\Windows\System32\cob-au.rs
[2013.01.09 18:08:00 | 000,015,360 | ---- | C] (Microsoft) -- C:\Windows\System32\djctq.rs
[2013.01.09 18:07:59 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2013.01.09 18:07:59 | 000,030,720 | ---- | C] (Microsoft) -- C:\Windows\System32\usk.rs
[2013.01.09 18:07:59 | 000,021,504 | ---- | C] (Microsoft) -- C:\Windows\System32\grb.rs
[2013.01.09 18:07:59 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-pt.rs
[2013.01.09 18:07:59 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi.rs
[2013.01.09 18:07:58 | 000,308,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Wpc.dll
[2013.01.09 18:07:56 | 000,051,712 | ---- | C] (Microsoft) -- C:\Windows\System32\esrb.rs
[2013.01.09 18:07:56 | 000,020,480 | ---- | C] (Microsoft) -- C:\Windows\System32\pegi-fi.rs
[2013.01.09 18:07:55 | 000,055,296 | ---- | C] (Microsoft) -- C:\Windows\System32\cero.rs
[2013.01.09 18:07:55 | 000,023,552 | ---- | C] (Microsoft) -- C:\Windows\System32\oflc.rs
[2013.01.09 18:07:23 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2013.01.09 18:02:36 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2012.12.22 03:03:34 | 000,295,424 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2012.12.22 03:03:33 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2012.12.19 21:10:30 | 000,000,000 | -HSD | C] -- C:\found.002
[2011.09.28 07:53:06 | 002,750,912 | ---- | C] (J3S GmbH) -- C:\Users\M.... ...e\COMPUTERBILD App-Center-Installation.exe
========== Files - Modified Within 30 Days ==========
[2013.01.18 10:57:46 | 000,001,459 | ---- | M] () -- C:\Users\M.... ...e\Desktop\OTL.exe - Verknüpfung.lnk
[2013.01.18 10:21:02 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013.01.18 08:53:57 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.01.18 08:53:56 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.01.18 08:43:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.01.18 08:43:50 | 1558,056,960 | -HS- | M] () -- C:\hiberfil.sys
[2013.01.17 17:45:34 | 000,008,192 | ---- | M] (SEIKO EPSON CORP.) -- C:\Windows\System32\E_DCINST.DLL
[2013.01.17 17:45:33 | 000,081,408 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\E_TD4BHSE.DLL
[2013.01.17 17:45:32 | 000,095,232 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\E_TLBHSE.DLL
[2013.01.17 10:18:18 | 000,000,934 | ---- | M] () -- C:\Users\Public\Desktop\EPSON Scan.lnk
[2013.01.17 09:38:47 | 000,002,117 | ---- | M] () -- C:\Users\Public\Desktop\Epson Easy Photo Print.lnk
[2013.01.17 09:37:22 | 000,000,308 | ---- | M] () -- C:\Windows\setup.iss
[2013.01.16 18:46:37 | 000,000,969 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.01.16 16:01:02 | 000,000,993 | ---- | M] () -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPUCooL.lnk
[2013.01.16 16:00:59 | 000,000,953 | ---- | M] () -- C:\Users\M.... ...e\Desktop\CPUCooL.lnk
[2013.01.16 15:11:58 | 000,654,166 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.01.16 15:11:58 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.01.16 15:11:58 | 000,130,006 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.01.16 15:11:58 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.01.16 14:52:04 | 000,001,645 | ---- | M] () -- C:\Users\M.... ...e\Desktop\licensecrawler_v0125298.exe - Verknüpfung.lnk
[2013.01.16 11:52:20 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.01.16 11:14:27 | 001,118,208 | ---- | M] () -- C:\Users\M.... ...e\Documents\Bootzeitprotokoll.evtx
[2013.01.15 13:04:50 | 000,034,448 | ---- | M] (Olof Lagerkvist) -- C:\Windows\System32\drivers\virtualimdisk.sys
[2013.01.15 13:04:49 | 000,177,664 | ---- | M] (Digital Dynamic) -- C:\Windows\System32\updatesvca.dll
[2013.01.15 13:03:42 | 000,001,528 | ---- | M] () -- C:\Users\M.... ...e\Desktop\HijackThis - Verknüpfung.lnk
[2013.01.15 12:41:42 | 000,072,704 | ---- | M] (BitDefender) -- C:\Windows\System32\drivers\bdvedisk.sys
[2013.01.15 11:52:23 | 000,728,742 | ---- | M] () -- C:\ProgramData\1358246342.bdinstall.bin
[2013.01.15 11:49:04 | 000,253,404 | -H-- | M] () -- C:\bdr-ld01
[2013.01.15 11:49:04 | 000,009,216 | -H-- | M] () -- C:\bdr-ld01.mbr
[2013.01.15 11:49:04 | 000,000,308 | -H-- | M] () -- C:\bdr-cf01
[2013.01.15 11:48:00 | 000,002,126 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.01.15 11:48:00 | 000,002,078 | ---- | M] () -- C:\Users\Public\Desktop\Bitdefender Safepay.lnk
[2013.01.15 11:47:58 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2013.01.15 11:29:24 | 000,000,000 | ---- | M] () -- C:\END
[2013.01.15 11:14:40 | 000,077,731 | ---- | M] () -- C:\ProgramData\bdinstall.bin
[2013.01.10 06:21:27 | 000,464,608 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.01.09 18:22:25 | 000,697,864 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2013.01.09 18:22:24 | 000,074,248 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2013.01.08 10:13:18 | 000,029,969 | ---- | M] () -- C:\Users\M.... ...e\Documents\tatt0_1---tmai12d722cf2a306f5e;jsessionid=84AF92A22C38FCCAF1A6D8B327B78D6F-n1.pdf
========== Files Created - No Company Name ==========
[2013.01.18 10:55:33 | 000,001,459 | ---- | C] () -- C:\Users\M.... ...e\Desktop\OTL.exe - Verknüpfung.lnk
[2013.01.17 09:38:47 | 000,002,117 | ---- | C] () -- C:\Users\Public\Desktop\Epson Easy Photo Print.lnk
[2013.01.17 09:29:51 | 000,000,934 | ---- | C] () -- C:\Users\Public\Desktop\EPSON Scan.lnk
[2013.01.17 09:22:33 | 000,000,308 | ---- | C] () -- C:\Windows\setup.iss
[2013.01.16 18:46:37 | 000,000,969 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2013.01.16 16:01:02 | 000,000,993 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CPUCooL.lnk
[2013.01.16 16:00:59 | 000,000,953 | ---- | C] () -- C:\Users\M.... ...e\Desktop\CPUCooL.lnk
[2013.01.16 14:53:59 | 000,338,432 | ---- | C] () -- C:\Windows\System32\sqlite36_engine.dll
[2013.01.16 14:52:04 | 000,001,645 | ---- | C] () -- C:\Users\M.... ...e\Desktop\licensecrawler_v0125298.exe - Verknüpfung.lnk
[2013.01.16 11:14:14 | 001,118,208 | ---- | C] () -- C:\Users\M.... ...e\Documents\Bootzeitprotokoll.evtx
[2013.01.15 13:47:18 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.01.15 13:03:42 | 000,001,528 | ---- | C] () -- C:\Users\M.... ...e\Desktop\HijackThis - Verknüpfung.lnk
[2013.01.15 11:52:23 | 000,728,742 | ---- | C] () -- C:\ProgramData\1358246342.bdinstall.bin
[2013.01.15 11:49:04 | 000,000,308 | -H-- | C] () -- C:\bdr-cf01
[2013.01.15 11:48:00 | 000,002,126 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Internet Security 2013.lnk
[2013.01.15 11:48:00 | 000,002,078 | ---- | C] () -- C:\Users\Public\Desktop\Bitdefender Safepay.lnk
[2013.01.15 11:47:58 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_Kernel_avchv_01009.Wdf
[2013.01.15 11:45:30 | 035,184,777 | -H-- | C] () -- C:\bdr-im01.gz
[2013.01.15 11:45:30 | 002,294,848 | -H-- | C] () -- C:\bdr-bz01
[2013.01.15 11:45:30 | 000,253,404 | -H-- | C] () -- C:\bdr-ld01
[2013.01.15 11:45:30 | 000,009,216 | -H-- | C] () -- C:\bdr-ld01.mbr
[2013.01.12 20:04:49 | 000,000,000 | ---- | C] () -- C:\END
[2013.01.08 10:13:17 | 000,029,969 | ---- | C] () -- C:\Users\M.... ...e\Documents\tatt0_1---tmai12d722cf2a306f5e;jsessionid=84AF92A22C38FCCAF1A6D8B327B78D6F-n1.pdf
[2012.06.22 05:23:31 | 000,000,011 | ---- | C] () -- C:\ProgramData\.tv6
[2012.06.10 11:33:37 | 000,000,126 | ---- | C] () -- C:\ProgramData\search_result.xml
[2012.02.12 10:37:38 | 000,033,134 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\UserTile.png
[2011.09.25 17:30:07 | 011,137,024 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\Sandra.mdb
[2011.09.25 17:30:07 | 000,000,064 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\Sandra.ldb
[2011.09.25 15:59:35 | 000,000,123 | ---- | C] () -- C:\Windows\System32\QVPMON.INI
[2011.09.07 19:31:00 | 000,000,094 | ---- | C] () -- C:\Users\M.... ...e\AppData\Roaming\sversion.ini
[2011.09.07 19:26:05 | 000,069,632 | ---- | C] () -- C:\Windows\uinst001.exe
[2011.08.14 18:25:50 | 002,469,248 | ---- | C] () -- C:\Windows\System32\BootMan.exe
[2011.08.14 18:25:50 | 000,019,840 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll
[2011.08.14 18:25:49 | 000,086,408 | ---- | C] () -- C:\Windows\System32\setupempdrv03.exe
[2011.08.14 18:25:49 | 000,014,216 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys
[2011.08.14 18:25:49 | 000,008,456 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys
[2011.08.13 12:29:04 | 000,000,016 | ---- | C] () -- C:\Windows\System32\asdict.dat
[2011.08.13 10:48:17 | 000,077,731 | ---- | C] () -- C:\ProgramData\bdinstall.bin
[2011.07.06 13:21:42 | 000,311,296 | ---- | C] () -- C:\Windows\System32\EMRegSys.dll
========== ZeroAccess Check ==========
[2009.07.14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 13:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2013.01.18 10:21:22 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\.oit
[2011.10.03 08:38:26 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Ashampoo
[2011.08.31 21:11:59 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Babylon
[2013.01.15 11:17:49 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\BitDefender
[2011.09.21 21:31:15 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Canneverbe Limited
[2013.01.16 15:11:32 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\DesktopIconForAmazon
[2011.09.25 17:15:47 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Engelmann Media
[2013.01.18 10:49:19 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Epson
[2011.08.13 12:46:34 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\GHISLER
[2011.08.13 20:33:35 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\GoPal Assistant
[2011.09.22 03:54:29 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\ImgBurn
[2011.10.05 07:04:36 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Lexware
[2011.09.07 19:46:38 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Lingo4u
[2011.09.06 21:04:25 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\MAGIX
[2013.01.17 09:23:38 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\NewSoft
[2013.01.16 14:53:53 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\OCS
[2011.09.01 04:08:55 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\OpenOffice.org
[2013.01.16 14:54:55 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Opera
[2011.08.13 10:50:37 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\QuickScan
[2012.03.19 12:42:50 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\SMA
[2011.08.13 11:49:02 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\Thunderbird
[2011.09.26 05:43:04 | 000,000,000 | ---D | M] -- C:\Users\M.... ...e\AppData\Roaming\TuneUp Software
========== Purity Check ==========
========== Files - Unicode (All) ==========
[2013.01.15 11:14:42 | 000,000,000 | ---- | M] ()(C:\Windows\System32\?????) -- C:\Windows\System32\獷楬汢捯污
[2013.01.15 11:02:47 | 000,000,000 | ---- | C] ()(C:\Windows\System32\?????) -- C:\Windows\System32\獷楬汢捯污
< End of report >
Code:
OTL Extras logfile created on: 18.01.2013 10:58:25 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\M.... ...e\Downloads
Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,93 Gb Total Physical Memory | 0,66 Gb Available Physical Memory | 34,33% Memory free
3,87 Gb Paging File | 2,00 Gb Available in Paging File | 51,63% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 391,54 Gb Total Space | 264,47 Gb Free Space | 67,55% Space Free | Partition Type: NTFS
Drive D: | 488,28 Gb Total Space | 478,95 Gb Free Space | 98,09% Space Free | Partition Type: NTFS
Computer Name: M.......E-PC | User Name: M.... ...e | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox 4.0 Beta 10\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [CEWE FOTOSCHAU] -- "C:\Program Files\dm\dm-Fotowelt\CEWE FOTOSCHAU.exe" -d "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [dm-Fotowelt] -- "C:\Program Files\dm\dm-Fotowelt\dm-Fotowelt.exe" "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{08529B7C-2C94-4CAE-8E14-2BE5E3072419}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{1B320040-86E4-40E8-A1B0-38DF2B1A6D59}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1D95EADD-B029-44FA-8490-42204A3AF742}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{261CFA7C-B84D-4DC9-AFC0-328C59B5C6C2}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{29DF1F4E-588B-460B-A809-BBA112DED2D0}" = lport=137 | protocol=17 | dir=in | app=system |
"{2FAAB46B-F423-4A72-8CAB-8524CCDFCF41}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{41C010E0-4FBE-40CF-847A-CCC4DF3509BB}" = rport=10243 | protocol=6 | dir=out | app=system |
"{4BE5B26C-AA4B-4454-AAE3-90BDF36BD2FB}" = lport=2869 | protocol=6 | dir=in | app=system |
"{4DADCAB2-810A-46CD-AB77-156A4A17F0E3}" = lport=139 | protocol=6 | dir=in | app=system |
"{4DC99BA0-51A1-4C94-9B9F-27F58EB42931}" = lport=138 | protocol=17 | dir=in | app=system |
"{501DA518-C280-4730-8844-668E236BC65B}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{50D844A4-819A-45CA-8988-E5F7555D2818}" = rport=445 | protocol=6 | dir=out | app=system |
"{55AC0117-9088-42B8-9086-C1142C79260F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{74D26412-365A-46E9-8881-1232337ACBF9}" = rport=137 | protocol=17 | dir=out | app=system |
"{7B47BC90-9EBF-4849-90EA-253AD1BD63D6}" = lport=10243 | protocol=6 | dir=in | app=system |
"{8607B1B9-4B3E-440C-947B-F1752BD61C58}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{86704BBE-1B5C-4503-9316-38BC58A46E5F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{9C80775D-1E70-4AE8-8FD0-9FBDE451F9E6}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{A3AFB6BF-39AB-4256-B093-F0FF3E373BA2}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{A938DC17-E6D3-46AB-91B6-37286D9E31F1}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{B20C2D2C-5DE7-406D-9125-791DE9C36D66}" = rport=138 | protocol=17 | dir=out | app=system |
"{B9AA961A-00A7-466A-ABB5-69E07C611B33}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C4F79AFF-2DF3-4B4F-BCCE-98B9758A7C23}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{C552CD6D-9BFE-4C91-B996-9D2E8C2DAB7B}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{C6C0C7FB-FAE8-4D30-932B-FB93BDB74F9F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{C7CF0D6D-0236-48E3-8187-A802ADAD9D2D}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{CBB88293-B72E-4913-B879-79BB2C59591F}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{DBD321C6-CDA0-4BE6-BBA7-ACA092661FB4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{E72ECE46-B7C1-425A-93B0-75731BA03CE2}" = lport=445 | protocol=6 | dir=in | app=system |
"{E95FF4FD-57CD-49F1-8726-2CF9FF8B677F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EF418BA2-2326-429E-8EF8-B433AD8434C4}" = rport=139 | protocol=6 | dir=out | app=system |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0C08BC1C-8351-4D43-B5FC-7A5FD6EB34FD}" = protocol=6 | dir=in | app=c:\program files\twonkymedia\mediamanager\twonkymediamanager.exe |
"{1023C354-E285-4128-8BC1-7292B9A929F8}" = protocol=6 | dir=out | app=system |
"{18B7BC16-AD97-4D88-9EE8-17F0B145437B}" = protocol=6 | dir=in | app=c:\users\M.... ...e\appdata\local\temp\ocs\downloads\d340164aef134ca45f5d3a3a8b8d1b79\38a9a2bd481c318de68b1ad291d5302f\swe-et-imbundle.exe |
"{1A1F7661-508B-403D-A4F7-2732DA4403F9}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{2070D387-FB85-4B86-80D5-95B970C504F1}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{26E3555F-5A48-4A76-9501-0D06C5DC6A07}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{2EDE90A3-982B-4EEE-A019-6723FBFC3785}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{3C213457-BD71-41DB-A56A-A0228ED68AD1}" = protocol=17 | dir=in | app=c:\program files\twonkymedia\mediamanager\twonkymediamanager.exe |
"{3D48CF02-F234-4C05-9F3B-21CD71CDBBEB}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{40F0801D-F573-408D-B6E4-F6AFFA47AC36}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{482E78CC-400A-49E0-A889-8EA8BDE4FE95}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{541B7309-3858-4805-B4F1-E251430551DC}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{66997374-8520-4A03-B940-E13D50B13150}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{7365D1E5-35FA-4C98-ACC8-16F8E18F1595}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{7505388E-13A2-4507-BE0F-2137273108C2}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{79084F94-897B-400D-8F16-D9311CAB567C}" = protocol=6 | dir=in | app=c:\program files\twonkymedia\twonkymediaserverwatchdog.exe |
"{7952A8E9-C122-43CC-B2EC-C0969E508410}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{8C1E3F3C-03EA-4B1B-BB85-E4F57FB7A4B9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{8F1E7309-6A35-4978-83D3-167A929CC084}" = protocol=17 | dir=in | app=c:\users\M.... ...e\appdata\local\temp\ocs\downloads\d340164aef134ca45f5d3a3a8b8d1b79\38a9a2bd481c318de68b1ad291d5302f\swe-et-imbundle.exe |
"{A5F2F87D-158A-4A31-B4C5-2690113B34A4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{B8EB4683-C49B-4051-9509-FC549D691C83}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{C3FB6768-B8E2-4BC2-8C0E-FAF82DEFBE67}" = protocol=17 | dir=in | app=c:\program files\twonkymedia\twonkymediaserverwatchdog.exe |
"{D0B8E409-5C64-4D44-8294-A17FBBF103AD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{D84D6E77-E0C6-4372-8AA4-764CC90E725D}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe |
"{DCC6F537-5B8F-46AC-9EC5-94D2D4FC01BE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{DFF595F3-9041-43F0-B67C-F4F8F065C5AC}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E0D9FA18-A568-4E98-92C4-51AAA684DDAC}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe |
"{E43C9284-2C35-48C8-BD07-8C1B8B56C712}" = protocol=6 | dir=in | app=c:\program files\twonkymedia\twonkymediaserver.exe |
"{E4A0A988-F482-42A0-9399-A0FD5DB32D0E}" = protocol=17 | dir=in | app=c:\program files\twonkymedia\twonkymediaserver.exe |
"{EDEB431E-F67D-4101-88E3-4A985669A11A}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{F1361263-AE1C-4AE5-A8B5-2908DA5AA8C9}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"TCP Query User{0476AB7D-2424-4A8F-B8D9-4F15BA7662CF}C:\program files\sma\sunny explorer\sunnyexplorer.exe" = protocol=6 | dir=in | app=c:\program files\sma\sunny explorer\sunnyexplorer.exe |
"TCP Query User{8FACD662-8819-48BA-AB36-73E1054BB324}C:\program files\sma\sunny explorer\sunnyexplorer.exe" = protocol=6 | dir=in | app=c:\program files\sma\sunny explorer\sunnyexplorer.exe |
"TCP Query User{9960DB24-7F28-4C94-B5B3-B826207A8E3D}C:\program files\twonkymedia\mediamanager\twonkymediamanager.exe" = protocol=6 | dir=in | app=c:\program files\twonkymedia\mediamanager\twonkymediamanager.exe |
"UDP Query User{3B71A044-2090-48BB-84CF-328692089924}C:\program files\twonkymedia\mediamanager\twonkymediamanager.exe" = protocol=17 | dir=in | app=c:\program files\twonkymedia\mediamanager\twonkymediamanager.exe |
"UDP Query User{5DEB3248-1647-424C-8A04-AA4E70156C52}C:\program files\sma\sunny explorer\sunnyexplorer.exe" = protocol=17 | dir=in | app=c:\program files\sma\sunny explorer\sunnyexplorer.exe |
"UDP Query User{D74BDDFE-7764-46D9-987E-D854D6FE1F40}C:\program files\sma\sunny explorer\sunnyexplorer.exe" = protocol=17 | dir=in | app=c:\program files\sma\sunny explorer\sunnyexplorer.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{011E92F1-AF76-4983-8707-79F8F1956439}" = Nero Prerequisite Installer 1.0
"{01E9B2FF-DAF4-4529-9CC9-2101625517C7}" = nero.prerequisites.msi
"{02FCAA8F-59D3-4198-822E-135C61EE4F0B}" = NeroKwikMedia Help (CHM)
"{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}" = Epson FAX Utility
"{0D8E6567-7082-48DB-A305-293873AC8B39}_is1" = Preispilot für Firefox
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{15B2BC56-D179-4450-84B9-7A8D7F4CE1B9}" = Lexware Info Service
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F7D9F37-C39C-486C-BDF8-8F440FFB3352}" = Nero Kwik Media
"{2436F2A8-4B7E-4B6C-AE4E-604C84AA6A4F}" = Nero Core Components 10
"{26A24AE4-039D-4CA4-87B4-2F83216022F0}" = Java(TM) 6 Update 22
"{26A24AE4-039D-4CA4-87B4-2F83217005FF}" = Java(TM) 7 Update 5
"{34EB6245-C8D0-4D8A-B8D8-EEBFF7A91485}" = Firebird SQL Server - MAGIX Edition
"{39FCD08F-E311-4959-84B9-1012023724B9}" = Sunny Explorer
"{3A3A3B34-6EA2-4031-8580-D66D29533E89}" = Download Navigator
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3E31400D-274E-4647-916C-2CACC3741799}" = EpsonNet Print
"{402ED4A1-8F5B-387A-8688-997ABF58B8F2}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{43FBAB46-5969-4200-9958-1FF81FEE506F}" = Nero 10 Kwik Themes 1
"{494420A9-5F25-457B-9BBF-228E6A73B94B}" = MAGIX Speed burnR (MSI)
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{58CB9A9A-1EFB-4EA8-B50C-3097E754AC21}" = High-Definition Video Playback
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX
"{7CC673E7-5271-409D-B196-BB76DA60300B}" = TwonkyMedia Windows Components
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{864BE784-3642-4F2C-A995-E4223CA8899B}" = COMPUTERBILD App-Center
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile-Gerätecenter
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F5FD796-86F0-4360-85F8-D54C0F5411EB}" = Steuer-Spar-Erklärung 2011
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.5) - Deutsch
"{B2D55EB8-32C5-4B43-9006-9E97DECBA178}" = Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser)
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}" = EPSON Printer Finder
"{C3113E55-7BCB-4de3-8EBF-60E6CE6B2296}_is1" = SiSoftware Sandra Lite 2011.SP4
"{C3580AC4-C827-4332-B935-9A282ED5BB97}" = Nero Audio Pack 1
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}" = Epson Connect Printer Setup
"{D9B5AE52-FEF9-4E5C-A63E-06A6638B2935}" = Nero Kwik Media
"{DAD6325D-55CF-4D30-9DB9-2ADFE02D0777}" = MAGIX Screenshare
"{DC4071FC-A3FF-4F6B-0001-CCB79085A90A}" = Formatwandler 4 SE
"{E3CDAAD3-F806-4F2A-BACF-487AD2E5B3EB}" = QuickSteuer 2011
"{E8C23EBE-EE3C-4299-9DB9-601AB3751454}" = AAVUpdateManager
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{EB86D0C1-E6AA-48DA-A8ED-AFD7A0AACC0A}" = HE@D PC_Program
"{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}" = PL-2303 USB-to-Serial
"{EE3A0915-E8E5-4F1C-A048-592B7BD374D7}" = MAGIX Video deluxe 17 Download-Version
"{EEC010D0-1252-4E1D-BAD9-F1B8F414535C}" = PL-2303 Vista Driver Installer
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F5CB822F-B365-43D1-BCC0-4FDA1A2017A7}" = Nero 10 Movie ThemePack Basic
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FA9D303D-0FB2-49C7-9397-8E6B11EA892D}" = Epson Event Manager
"{FB897D16-F0A7-4674-96F1-1C26963BA244}" = Epson E-Web Print
"{FFF841F3-9A15-4F61-BD16-C19F132E5A27}" = Epson Easy Photo Print 2
"1489-3350-5074-6281" = JDownloader 0.9
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Advanced Backup Manager" = Advanced Backup Manager
"Ashampoo Burning Studio 6 FREE_is1" = Ashampoo Burning Studio 6 FREE v.6.80
"Assistant" = Assistant 5.05.013
"Bitdefender" = Bitdefender Internet Security 2013
"CCleaner" = CCleaner
"CHIP Powertool_is1" = CHIP Powertool 1.3.4
"CPUCooL" = CPUCooL (remove only)
"DeskUpdate_is1" = DeskUpdate 4.11
"dm-Fotowelt" = dm-Fotowelt
"EPSON BX935FWD Series" = EPSON BX935FWD Series Printer Uninstall
"EPSON BX935FWD Series Netg" = Netzwerkhandbuch EPSON BX935FWD Series
"EPSON BX935FWD Series Useg" = Benutzerhandbuch EPSON BX935FWD Series
"EPSON PC-FAX Driver 2" = Epson PC-FAX Driver
"EPSON Remote Print" = Druckerdeinstallation für EPSON Remote Print
"EPSON Scanner" = EPSON Scan
"ImgBurn" = ImgBurn
"LingoDict_is1" = LingoDict 2.1
"MAGIX_MSI_Videodeluxe17" = MAGIX Video deluxe 17 Download-Version
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.70.0.1100
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Thunderbird 10.0.2 (x86 de)" = Mozilla Thunderbird 10.0.2 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NeroVision!UninstallKey" = Nero Digital
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"Sunny Data Control" = Sunny Data Control
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Totalcmd" = Total Commander (Remove or Repair)
"TuneUp Utilities" = TuneUp Utilities
"VLC media player" = VLC media player 1.1.11
"Vodafone Media Manager" = Vodafone Media Manager
"WinRAR archiver" = WinRAR 4.01 (32-Bit)
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"StarOffice 7" = StarOffice 7
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 17.01.2013 06:29:01 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: dm-Fotowelt.exe, Version: 0.0.0.0,
Zeitstempel: 0x50bf9f94 Name des fehlerhaften Moduls: CWFoto0.dll, Version: 0.1.0.0,
Zeitstempel: 0x50bf9d8e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00029f4b ID des fehlerhaften
Prozesses: 0x174c Startzeit der fehlerhaften Anwendung: 0x01cdf49d6410caa9 Pfad der
fehlerhaften Anwendung: C:\Program Files\dm\dm-Fotowelt\dm-Fotowelt.exe Pfad des
fehlerhaften Moduls: C:\Program Files\dm\dm-Fotowelt\CWFoto0.dll Berichtskennung:
b564817d-6090-11e2-9be3-00a0d1ccd4ce
Error - 17.01.2013 10:00:50 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: E_TARNHSE.EXE, Version: 7.0.0.0,
Zeitstempel: 0x4d9e5ce9 Name des fehlerhaften Moduls: E_TERSHSE.DLL, Version: 1.0.2.9,
Zeitstempel: 0x4d6f442e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00067eee ID des fehlerhaften
Prozesses: 0xc30 Startzeit der fehlerhaften Anwendung: 0x01cdf4b4d06c254c Pfad der
fehlerhaften Anwendung: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TARNHSE.EXE
Pfad
des fehlerhaften Moduls: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TERSHSE.DLL
Berichtskennung:
4c2720cf-60ae-11e2-9be3-00a0d1ccd4ce
Error - 17.01.2013 10:00:59 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: E_TATIHSE.EXE, Version: 7.0.1.0,
Zeitstempel: 0x4d9e5d0f Name des fehlerhaften Moduls: E_TERSHSE.DLL, Version: 1.0.2.9,
Zeitstempel: 0x4d6f442e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00067eee ID des fehlerhaften
Prozesses: 0x1360 Startzeit der fehlerhaften Anwendung: 0x01cdf4bae63280b8 Pfad der
fehlerhaften Anwendung: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TATIHSE.EXE
Pfad
des fehlerhaften Moduls: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TERSHSE.DLL
Berichtskennung:
5166e4dc-60ae-11e2-9be3-00a0d1ccd4ce
Error - 17.01.2013 10:03:01 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: E_TARNHSE.EXE, Version: 7.0.0.0,
Zeitstempel: 0x4d9e5ce9 Name des fehlerhaften Moduls: E_TERSHSE.DLL, Version: 1.0.2.9,
Zeitstempel: 0x4d6f442e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00067eee ID des fehlerhaften
Prozesses: 0x1500 Startzeit der fehlerhaften Anwendung: 0x01cdf4bb5598859a Pfad der
fehlerhaften Anwendung: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TARNHSE.EXE
Pfad
des fehlerhaften Moduls: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TERSHSE.DLL
Berichtskennung:
9a981487-60ae-11e2-9be3-00a0d1ccd4ce
Error - 17.01.2013 12:01:22 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: E_TARNHSE.EXE, Version: 7.0.0.0,
Zeitstempel: 0x4d9e5ce9 Name des fehlerhaften Moduls: E_TERSHSE.DLL, Version: 1.0.2.9,
Zeitstempel: 0x4d6f442e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00067eee ID des fehlerhaften
Prozesses: 0x17ac Startzeit der fehlerhaften Anwendung: 0x01cdf4cbdb45bf8a Pfad der
fehlerhaften Anwendung: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TARNHSE.EXE
Pfad
des fehlerhaften Moduls: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TERSHSE.DLL
Berichtskennung:
22e2bf75-60bf-11e2-9bea-00a0d1ccd4ce
Error - 17.01.2013 12:02:47 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: E_TARNHSE.EXE, Version: 7.0.0.0,
Zeitstempel: 0x4d9e5ce9 Name des fehlerhaften Moduls: E_TERSHSE.DLL, Version: 1.0.2.9,
Zeitstempel: 0x4d6f442e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00067eee ID des fehlerhaften
Prozesses: 0x13a8 Startzeit der fehlerhaften Anwendung: 0x01cdf4cc110b562a Pfad der
fehlerhaften Anwendung: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TARNHSE.EXE
Pfad
des fehlerhaften Moduls: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TERSHSE.DLL
Berichtskennung:
556aab1e-60bf-11e2-9bea-00a0d1ccd4ce
Error - 17.01.2013 12:03:34 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: E_TARNHSE.EXE, Version: 7.0.0.0,
Zeitstempel: 0x4d9e5ce9 Name des fehlerhaften Moduls: E_TERSHSE.DLL, Version: 1.0.2.9,
Zeitstempel: 0x4d6f442e Ausnahmecode: 0xc0000005 Fehleroffset: 0x00067eee ID des fehlerhaften
Prozesses: 0xb2c Startzeit der fehlerhaften Anwendung: 0x01cdf4cc2700d7ea Pfad der
fehlerhaften Anwendung: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TARNHSE.EXE
Pfad
des fehlerhaften Moduls: C:\Windows\system32\spool\DRIVERS\W32X86\3\E_TERSHSE.DLL
Berichtskennung:
716e6781-60bf-11e2-9bea-00a0d1ccd4ce
Error - 17.01.2013 12:47:06 | Computer Name = M........e-PC | Source = RpcNs | ID = 2
Description =
Error - 17.01.2013 15:56:21 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: CEWE FOTOSCHAU.exe, Version: 0.0.0.0,
Zeitstempel: 0x50bf9d3d Name des fehlerhaften Moduls: CEWE FOTOSCHAU.exe, Version:
0.0.0.0, Zeitstempel: 0x50bf9d3d Ausnahmecode: 0xc0000005 Fehleroffset: 0x0001c806
ID
des fehlerhaften Prozesses: 0xf1c Startzeit der fehlerhaften Anwendung: 0x01cdf4ec7f02a110
Pfad
der fehlerhaften Anwendung: C:\Program Files\dm\dm-Fotowelt\CEWE FOTOSCHAU.exe Pfad
des fehlerhaften Moduls: C:\Program Files\dm\dm-Fotowelt\CEWE FOTOSCHAU.exe Berichtskennung:
f67a8b0c-60df-11e2-9bea-00a0d1ccd4ce
Error - 17.01.2013 19:10:39 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: TwonkyMediaManager.exe, Version:
3.0.0.0, Zeitstempel: 0x4ab2437a Name des fehlerhaften Moduls: controlpoint.dll,
Version: 2.0.1.11, Zeitstempel: 0x4c3788cc Ausnahmecode: 0xc000000d Fehleroffset:
0x00043ec5 ID des fehlerhaften Prozesses: 0x118c Startzeit der fehlerhaften Anwendung:
0x01cdf4ca31e5ce84 Pfad der fehlerhaften Anwendung: C:\Program Files\TwonkyMedia\MediaManager\TwonkyMediaManager.exe
Pfad
des fehlerhaften Moduls: C:\Program Files\TwonkyMedia\MediaManager\controlpoint.dll
Berichtskennung:
1b7f08af-60fb-11e2-9bea-00a0d1ccd4ce
Error - 18.01.2013 05:53:51 | Computer Name = M........e-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: _is934B.exe, Version: 12.0.0.58849,
Zeitstempel: 0x45b1a378 Name des fehlerhaften Moduls: ISSetup.dll, Version: 12.0.0.58855,
Zeitstempel: 0x46eef1f1 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00096f3b ID des fehlerhaften
Prozesses: 0x17a4 Startzeit der fehlerhaften Anwendung: 0x01cdf56198f8b823 Pfad der
fehlerhaften Anwendung: C:\Users\MARIOT~1\AppData\Local\Temp\_is934B.exe Pfad des
fehlerhaften Moduls: C:\Users\MARIOT~1\AppData\Local\Temp\{EC2F6CE3-FC55-4C63-A09E-20C55FF79CAE}\ISSetup.dll
Berichtskennung:
f5eb3191-6154-11e2-9b11-00a0d1ccd4ce
[ Media Center Events ]
Error - 21.09.2011 03:19:37 | Computer Name = M........e-PC | Source = MCUpdate | ID = 0
Description = 09:19:37 - Fehler beim Herstellen der Internetverbindung. 09:19:37
- Serververbindung konnte nicht hergestellt werden..
Error - 21.09.2011 03:19:49 | Computer Name = M........e-PC | Source = MCUpdate | ID = 0
Description = 09:19:42 - Fehler beim Herstellen der Internetverbindung. 09:19:42
- Serververbindung konnte nicht hergestellt werden..
Error - 18.12.2012 02:20:27 | Computer Name = M........e-PC | Source = MCUpdate | ID = 0
Description = 07:20:25 - Directory konnte nicht abgerufen werden (Fehler: Die Verbindung
mit dem Remoteserver kann nicht hergestellt werden.)
Error - 18.12.2012 02:21:41 | Computer Name = M........e-PC | Source = MCUpdate | ID = 0
Description = 07:20:35 - Fehler beim Herstellen der Internetverbindung. 07:20:35
- Serververbindung konnte nicht hergestellt werden..
[ System Events ]
Error - 17.01.2013 04:38:28 | Computer Name = M........e-PC | Source = Disk | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error - 17.01.2013 04:38:33 | Computer Name = M........e-PC | Source = Disk | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
Error - 17.01.2013 07:51:17 | Computer Name = M........e-PC | Source = NetBT | ID = 4321
Description = Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit
IP-Adresse 192.168.2.107 registriert werden. Der Computer mit IP-Adresse 192.168.2.1
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 17.01.2013 11:44:19 | Computer Name = M........e-PC | Source = Service Control Manager | ID = 7043
Description = Der Dienst Gruppenrichtlinienclient konnte nach dem Empfang eines
Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
Error - 17.01.2013 11:47:40 | Computer Name = M........e-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Backup service" wurde unerwartet beendet. Dies ist bereits
1 Mal passiert.
Error - 17.01.2013 11:50:38 | Computer Name = M........e-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "CPUCooLServer Service" wurde unerwartet beendet. Dies ist
bereits 1 Mal passiert.
Error - 17.01.2013 16:27:47 | Computer Name = M........e-PC | Source = DCOM | ID = 10010
Description =
Error - 18.01.2013 03:44:27 | Computer Name = M........e-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?18.?01.?2013 um 08:36:36 unerwartet heruntergefahren.
Error - 18.01.2013 05:04:21 | Computer Name = M........e-PC | Source = bowser | ID = 8003
Description =
Error - 18.01.2013 05:28:23 | Computer Name = M........e-PC | Source = bowser | ID = 8003
Description =
< End of report >
brauche ich einen nneuen script?
und wie bekomme ich die sweetim .toolbar weg? |
