| anderson | 23.07.2013 20:06 |
bitte sehr Code:
OTL logfile created on: 23.07.2013 20:43:49 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\anderson\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19443)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
1,93 Gb Total Physical Memory | 0,25 Gb Available Physical Memory | 12,77% Memory free
4,11 Gb Paging File | 1,80 Gb Available in Paging File | 43,89% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 60,01 Gb Total Space | 13,98 Gb Free Space | 23,29% Space Free | Partition Type: NTFS
Drive F: | 163,11 Gb Total Space | 89,51 Gb Free Space | 54,88% Space Free | Partition Type: NTFS
Computer Name: ANDERSON-PC | User Name: anderson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2013.07.23 20:40:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\anderson\Desktop\OTL.exe
PRC - [2013.07.12 20:49:47 | 000,846,288 | ---- | M] (Google Inc.) -- C:\Programme\Google\Chrome\Application\chrome.exe
PRC - [2013.05.25 02:47:30 | 027,776,968 | ---- | M] (Dropbox, Inc.) -- C:\Users\anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2013.03.18 17:00:00 | 000,685,936 | R--- | M] (WinZip Computing, S.L.) -- C:\Programme\WinZip\WZQKPICK32.EXE
PRC - [2013.01.28 22:25:00 | 019,721,728 | ---- | M] (Europe Support Ltd. N.V.) -- C:\Games\Game Alarm\gamealarm.exe
PRC - [2012.11.08 04:26:52 | 000,377,800 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\AgentMonitor.exe
PRC - [2012.10.29 18:46:56 | 000,206,448 | ---- | M] (Kaspersky Lab ZAO) -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
PRC - [2011.10.21 16:23:42 | 000,196,176 | ---- | M] (Microsoft Corporation.) -- C:\Programme\Microsoft\BingBar\BBSvc.EXE
PRC - [2011.10.13 18:21:52 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft\BingBar\SeaPort.EXE
PRC - [2011.08.04 14:33:20 | 018,577,272 | ---- | M] (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at) -- C:\Programme\A1\A1 Webassistent\A1Webassistent.exe
PRC - [2011.07.11 11:46:10 | 000,491,520 | ---- | M] () -- C:\Games\Game Alarm\Updater.exe
PRC - [2010.07.06 16:01:16 | 002,634,048 | ---- | M] (Veoh Networks) -- C:\Programme\Veoh Networks\VeohWebPlayer\veohwebplayer.exe
PRC - [2009.04.10 23:28:04 | 001,233,920 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Sidebar\sidebar.exe
PRC - [2009.04.10 23:27:38 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.03.30 17:28:36 | 001,533,808 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2009.03.30 17:28:36 | 000,183,152 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2009.02.26 18:36:46 | 000,030,040 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\GrooveMonitor.exe
PRC - [2009.02.26 15:24:50 | 000,097,680 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE
PRC - [2008.05.07 17:41:14 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2008.05.07 17:41:12 | 000,178,712 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2008.04.30 19:41:12 | 000,815,104 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Intel\WiFi\bin\EvtEng.exe
PRC - [2008.04.30 19:10:10 | 000,466,944 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe
PRC - [2008.04.17 05:50:00 | 006,111,232 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008.03.18 06:27:12 | 000,013,312 | ---- | M] (Agere Systems) -- C:\Windows\System32\agrsmsvc.exe
PRC - [2008.01.25 15:26:00 | 000,253,976 | ---- | M] (Telekom Austria TA AG) -- C:\Programme\aon\OnlineFestplatte\OnlineFestplatte.exe
PRC - [2008.01.21 04:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2008.01.21 04:25:33 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnscfg.exe
PRC - [2008.01.21 04:24:36 | 000,020,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RacAgent.exe
PRC - [2008.01.21 04:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Defender\MSASCui.exe
PRC - [2002.11.12 11:02:08 | 000,860,672 | ---- | M] (THOMSON multimedia) -- C:\Programme\Alcatel\SpeedTouch USB\dragdiag.exe
========== Modules (No Company Name) ==========
MOD - [2013.07.12 20:49:44 | 000,396,240 | ---- | M] () -- C:\Programme\Google\Chrome\Application\28.0.1500.72\ppgooglenaclpluginchrome.dll
MOD - [2013.07.12 20:49:43 | 013,599,184 | ---- | M] () -- C:\Programme\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll
MOD - [2013.07.12 20:49:42 | 004,052,944 | ---- | M] () -- C:\Programme\Google\Chrome\Application\28.0.1500.72\pdf.dll
MOD - [2013.07.12 20:48:52 | 000,601,552 | ---- | M] () -- C:\Programme\Google\Chrome\Application\28.0.1500.72\libglesv2.dll
MOD - [2013.07.12 20:48:51 | 000,123,344 | ---- | M] () -- C:\Programme\Google\Chrome\Application\28.0.1500.72\libegl.dll
MOD - [2013.07.12 20:48:49 | 001,597,392 | ---- | M] () -- C:\Programme\Google\Chrome\Application\28.0.1500.72\ffmpegsumo.dll
MOD - [2013.03.13 22:48:52 | 024,978,944 | ---- | M] () -- C:\Users\anderson\AppData\Roaming\Dropbox\bin\libcef.dll
MOD - [2013.03.13 21:42:37 | 014,717,144 | ---- | M] () -- C:\Windows\System32\macromed\flash\NPSWF32_11_6_602_180.dll
MOD - [2013.01.28 22:24:47 | 000,159,744 | ---- | M] () -- C:\Games\Game Alarm\rt\jetrt\baseline720.dll
MOD - [2013.01.28 22:24:47 | 000,126,976 | ---- | M] () -- C:\Games\Game Alarm\rt\bin\zip.dll
MOD - [2013.01.28 22:24:45 | 000,069,632 | ---- | M] () -- C:\Games\Game Alarm\rt\bin\java.dll
MOD - [2013.01.28 22:24:45 | 000,020,480 | ---- | M] () -- C:\Games\Game Alarm\rt\bin\jetvm\jvm.dll
MOD - [2012.11.14 01:32:50 | 003,558,400 | ---- | M] () -- C:\Users\anderson\AppData\Roaming\Dropbox\bin\wxmsw28uh_vc.dll
MOD - [2012.11.08 04:26:52 | 000,377,800 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\AgentMonitor.exe
MOD - [2012.08.06 11:54:24 | 009,843,640 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\QtWebKit4.dll
MOD - [2011.11.02 00:26:32 | 000,087,912 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2011.11.02 00:26:12 | 001,242,472 | ---- | M] () -- C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011.07.11 11:46:10 | 000,491,520 | ---- | M] () -- C:\Games\Game Alarm\Updater.exe
MOD - [2011.04.25 00:13:30 | 007,008,656 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\qtgui4.dll
MOD - [2011.04.25 00:13:28 | 000,192,912 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\qtsql4.dll
MOD - [2011.04.25 00:13:26 | 001,270,160 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\qtscript4.dll
MOD - [2011.04.25 00:13:26 | 000,758,160 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\qtnetwork4.dll
MOD - [2011.04.25 00:13:24 | 002,118,032 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\qtcore4.dll
MOD - [2011.04.25 00:13:24 | 002,089,360 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\qtdeclarative4.dll
MOD - [2011.04.20 20:56:28 | 000,025,088 | ---- | M] () -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\imageformats\qgif4.dll
MOD - [2010.11.11 11:24:31 | 000,028,160 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\DACommCenter.dll
MOD - [2010.07.13 15:07:23 | 007,826,432 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\QtGui4.dll
MOD - [2010.07.05 11:19:39 | 000,116,736 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
MOD - [2010.06.28 14:21:42 | 009,905,152 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\QtWebKit4.dll
MOD - [2010.06.28 14:21:42 | 007,793,152 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\QtGui4.dll
MOD - [2010.06.28 14:21:42 | 002,530,304 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\QtXmlPatterns4.dll
MOD - [2010.06.28 14:21:42 | 002,094,592 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\QtCore4.dll
MOD - [2010.06.28 14:21:42 | 001,116,160 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\QtScript4.dll
MOD - [2010.06.28 14:21:42 | 000,915,456 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\QtNetwork4.dll
MOD - [2010.06.28 14:21:42 | 000,232,960 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\phonon4.dll
MOD - [2010.06.28 14:21:42 | 000,120,320 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\imageformats\qjpeg4.dll
MOD - [2010.06.28 14:21:42 | 000,022,016 | ---- | M] () -- C:\Programme\Veoh Networks\VeohWebPlayer\imageformats\qgif4.dll
MOD - [2010.06.24 03:16:19 | 002,150,400 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\QtCore4.dll
MOD - [2010.06.02 07:05:40 | 000,119,808 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\imageformats\qjpeg4.dll
MOD - [2010.06.02 04:56:04 | 000,232,960 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\phonon4.dll
MOD - [2010.06.02 04:54:24 | 002,530,816 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\QtXmlPatterns4.dll
MOD - [2010.06.02 04:29:22 | 000,934,912 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\QtNetwork4.dll
MOD - [2010.06.02 04:28:00 | 000,335,360 | ---- | M] () -- C:\Programme\VTech\DownloadManager\System\QtXml4.dll
MOD - [2006.12.10 21:51:08 | 000,077,824 | R--- | M] () -- C:\Programme\HP\Digital Imaging\bin\crm\xmltok.dll
MOD - [2006.12.10 21:51:08 | 000,065,536 | R--- | M] () -- C:\Programme\HP\Digital Imaging\bin\crm\xmlparse.dll
========== Services (SafeList) ==========
SRV - [2012.10.29 18:46:56 | 000,206,448 | ---- | M] (Kaspersky Lab ZAO) [Auto | Running] -- C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe -- (AVP)
SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011.10.21 16:23:42 | 000,196,176 | ---- | M] (Microsoft Corporation.) [Auto | Stopped] -- C:\Programme\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.10.13 18:21:52 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2011.07.20 05:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2009.08.05 23:48:42 | 000,704,864 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Live\Family Safety\fsssvc.exe -- (fsssvc)
SRV - [2009.03.30 17:28:36 | 001,533,808 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE -- (wlidsvc)
SRV - [2009.02.26 18:36:22 | 000,064,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Microsoft Office\Office12\GrooveAuditService.exe -- (Microsoft Office Groove Audit Service)
SRV - [2008.05.07 17:41:14 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON)
SRV - [2008.04.30 19:41:12 | 000,815,104 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng)
SRV - [2008.04.30 19:10:10 | 000,466,944 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc)
SRV - [2008.03.18 06:27:12 | 000,013,312 | ---- | M] (Agere Systems) [Auto | Running] -- C:\Windows\System32\agrsmsvc.exe -- (AgereModemAudio)
SRV - [2008.01.21 04:25:33 | 000,896,512 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2008.01.21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2006.10.26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - [2012.03.23 21:27:38 | 000,570,160 | ---- | M] (Kaspersky Lab) [File_System | System | Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF)
DRV - [2011.03.10 19:36:18 | 000,023,856 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6)
DRV - [2011.03.04 14:23:20 | 000,011,352 | ---- | M] (Kaspersky Lab ZAO) [Kernel | System | Running] -- C:\Windows\System32\drivers\kl2.sys -- (kl2)
DRV - [2011.03.04 14:23:14 | 000,133,208 | ---- | M] (Kaspersky Lab ZAO) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\kl1.sys -- (KL1)
DRV - [2010.03.04 13:50:14 | 000,261,152 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2009.11.02 21:27:16 | 000,019,984 | ---- | M] (Kaspersky Lab) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt)
DRV - [2009.08.10 21:11:52 | 000,025,280 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2008.06.04 11:54:22 | 000,113,664 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcHdmi.sys -- (IntcHdmiAddService)
DRV - [2008.04.28 06:29:26 | 003,658,752 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32)
DRV - [2008.03.21 06:13:00 | 001,203,776 | ---- | M] (Agere Systems) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AGRSM.sys -- (AgereSoftModem)
DRV - [2007.09.06 16:53:12 | 000,014,848 | ---- | M] (Silicon Laboratories) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\DSI_SiUSBXp_3_1.sys -- (DSI_SiUSBXp_3_1)
DRV - [2002.12.11 14:56:14 | 000,748,544 | ---- | M] (THOMSON multimedia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\alcaudsl.sys -- (alcaudsl)
DRV - [2002.11.12 11:01:44 | 000,053,168 | ---- | M] (THOMSON multimedia) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\alcan5wn.sys -- (alcan5wn)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = www.chiliGREEN.com [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Default_Page_URL = about:newtab
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://at.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-at
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 92 98 07 AC 72 B8 CA 01 [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Bar = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Search Page = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = hxxp://www.google.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Default_Page_URL = about:newtab
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Start Page = about:newtab
IE - HKCU\..\SearchScopes,DefaultScope =
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{7D7CA43A-13C0-48A7-B213-374C7AEF0596}: "URL" = hxxp://search.softonic.com/MOY00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=8223d02d000000000000001de067af75&r=968
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.useDBForOrder: false
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:2.7.2.0
FF - prefs.js..extensions.enabledItems: {e9911ec6-1bcc-40b0-9993-e0eea7f6953f}:2.5.8.6
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:2.7.2.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..extensions.enabledItems: gutscheinmieze@synatix-gmbh.de:1.03
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.11.3.15590
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.4
FF - prefs.js..extensions.enabledItems: virtualKeyboard@kaspersky.ru:12.0.0.389
FF - prefs.js..extensions.enabledItems: KavAntiBanner@Kaspersky.ru:12.0.0.389
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:12.0.0.389
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.startup.homepage:
FF - user.js - File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/MycameraPlugin: C:\Program Files\Canon\MyCamera Download Plugin\NPCIG.dll (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=1.6.0_38: C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@rim.com/npappworld: C:\Program Files\Research In Motion Limited\Browser-Plug-In für BlackBerry App World\npappworld.dll ()
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012.10.29 18:49:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012.10.29 18:49:24 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\KavAntiBanner@Kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012.10.29 18:49:24 | 000,000,000 | ---D | M]
[2010.03.04 22:36:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\anderson\AppData\Roaming\mozilla\Extensions
[2013.07.22 21:43:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\anderson\AppData\Roaming\mozilla\Firefox\Profiles\4ut8ki6f.default\extensions
[2010.08.22 16:47:08 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\anderson\AppData\Roaming\mozilla\Firefox\Profiles\4ut8ki6f.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2012.03.23 22:12:57 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011.12.10 20:09:27 | 000,000,000 | ---D | M] (Controller) -- C:\Programme\Mozilla Firefox\extensions\{B0BBFC8E-6697-4D2B-8FC4-B5AD9B3B1F11}
[2010.05.08 12:31:51 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2011.02.06 08:51:45 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.07.04 17:29:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011.12.13 19:28:21 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
[2011.09.22 23:22:15 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Programme\Mozilla Firefox\extensions\KavAntiBanner@Kaspersky.ru
[2011.08.08 22:00:08 | 000,000,000 | ---D | M] (Anti-Banner) -- C:\Programme\Mozilla Firefox\extensions\KavAntiBanner@kaspersky.ru_bak2
[2011.09.22 23:22:07 | 000,000,000 | ---D | M] (Modul zur Link-Untersuchung) -- C:\Programme\Mozilla Firefox\extensions\linkfilter@kaspersky.ru
[2011.08.08 21:59:55 | 000,000,000 | ---D | M] (Modul zur Link-Untersuchung) -- C:\Programme\Mozilla Firefox\extensions\linkfilter@kaspersky.ru_bak2
[2011.11.10 06:54:13 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.07.28 22:29:36 | 000,000,143 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\foxsearch.src
========== Chrome ==========
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: hxxp://www.google.com/
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.72\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\28.0.1500.72\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\plugin/npUrlAdvisor.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.0.477_0\plugin/npVKPlugin.dll
CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin/npABPlugin.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files\Adobe\Reader 8.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin6.dll
CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = C:\Program Files\QuickTime\plugins\npqtplugin7.dll
CHR - plugin: NPCIG.dll (Enabled) = C:\Program Files\Canon\MyCamera Download Plugin\NPCIG.dll
CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.1.10111.0\npctrl.dll
CHR - plugin: BlackBerry AppWorld (Enabled) = C:\Program Files\Research In Motion Limited\Browser-Plug-In fr BlackBerry App World\npappworld.dll
CHR - plugin: Windows Live Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Windows Presentation Foundation (Enabled) = C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll
CHR - Extension: Angry Birds = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: YouTube = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google-Suche = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Modul zur Link-Untersuchung = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\
CHR - Extension: Google Mail = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: Anti-Banner = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\
CHR - Extension: Angry Birds = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0\
CHR - Extension: YouTube = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0\
CHR - Extension: Google-Suche = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: Modul zur Link-Untersuchung = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.0.477_0\
CHR - Extension: Google Mail = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1\
CHR - Extension: Anti-Banner = C:\Users\anderson\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Windows Live ID-Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O3 - HKLM\..\Toolbar: (Veoh Video Compass) - {52836EB0-631A-47B1-94A6-61F9D9112DAE} - C:\Programme\Veoh Networks\Veoh Video Compass\SearchRecsPlugin.dll (Veoh Networks)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (no name) - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {DFEFCDEE-CF1A-4FC8-88AD-48514E463B27} - No CLSID value found.
O4 - HKLM..\Run: [A1Webassistent] C:\Program Files\A1\A1 Webassistent\A1Webassistent.exe (mquadr.at software engineering and consulting GmbH, web: www.mquadr.at, mail: office@mquadr.at)
O4 - HKLM..\Run: [AgentMonitor] C:\Programme\VTech\DownloadManager\System\AgentMonitor.exe ()
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe (Kaspersky Lab ZAO)
O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [SpeedTouch USB Diagnostics] C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe (THOMSON multimedia)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [MobileDocuments] C:\Program Files\Common Files\Apple\Internet Services\ubd.exe File not found
O4 - HKCU..\Run: [OnlineFestplatte] C:\Program Files\aon\Onlinefestplatte\OnlineFestplatte.exe (Telekom Austria TA AG)
O4 - HKCU..\Run: [VeohPlugin] C:\Program Files\Veoh Networks\VeohWebPlayer\veohwebplayer.exe (Veoh Networks)
O4 - HKCU..\Run: [WMPNSCFG] C:\Programme\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - HKCU..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1151601.exe -Update -1151601 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; Trident/4.0; GTB6.4; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.30729; .NET CLR 3.5.30729; InfoPath.2)" -"hxxp://www.dd-redaktion.de/Aktuelles/index.php" File not found
O4 - Startup: C:\Users\anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\anderson\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O4 - Startup: C:\Users\anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Game Alarm.lnk = C:\Games\Game Alarm\gamealarm.exe (Europe Support Ltd. N.V.)
O4 - Startup: C:\Users\anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Bildschirmausschnitt- und Startprogramm.lnk = C:\Programme\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Low Rights present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 44
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 95
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\anderson\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm File not found
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html File not found
O8 - Extra context menu item: Hinzufügen zu Anti-Banner - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe File not found
O9 - Extra Button: &Virtuelle Tastatur - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Programs\PartyGaming\PartyCasino\RunApp.exe File not found
O9 - Extra 'Tools' menuitem : PartyCasino - {B4B52284-A248-4c51-9F7C-F0A0C67FCC9D} - C:\Programs\PartyGaming\PartyCasino\RunApp.exe File not found
O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe File not found
O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe File not found
O9 - Extra Button: Li&nks untersuchen - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Programme\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: blank ([]about in Lokales Intranet)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Reg Error: Key error.)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab (Windows Genuine Advantage Validation Tool)
O16 - DPF: {2665693B-C4F3-434B-83DB-7574CF50C8B7} hxxp://www.kaspersky.com/downloads/misc/kasperskylicensefinder.cab (Kaspersky License Finder)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38)
O16 - DPF: {C1FDEE68-98D5-4F42-A4DD-D0BECF5077EB} hxxp://tools.ebayimg.com/eps/wl/activex/eBay_Enhanced_Picture_Control_v1-0-29-0.cab (EPUImageControl Class)
O16 - DPF: {CAFEEFAC-0016-0000-0038-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_38-windows-i586.cab (Java Plug-in 1.6.0_38)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{28466F55-01DD-4D2F-A709-41F88682CDD9}: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A80F0041-9ADE-413F-9A59-E8DFBDECF2F0}: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Programme\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\klogon: DllName - (C:\Windows\system32\klogon.dll) - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO)
O24 - Desktop WallPaper: F:\Bilder\2012\rovinj\album\IMG_2668.JPG
O24 - Desktop BackupWallPaper: F:\Bilder\2012\rovinj\album\IMG_2668.JPG
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{7c13dfbb-243a-11df-990c-00238b526607}\Shell\AutoRun\command - "" = E:\Autorun.exe
O33 - MountPoints2\{7c13dfbd-243a-11df-990c-00238b526607}\Shell\AutoRun\command - "" = G:\setupSNK.exe
O33 - MountPoints2\{b1c6c62e-5b43-11de-b062-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{b1c6c62e-5b43-11de-b062-806e6f6e6963}\Shell\AutoRun\command - "" = D:\StartBTB.exe
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\setupSNK.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
========== Files/Folders - Created Within 30 Days ==========
[2013.07.23 20:39:53 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\anderson\Desktop\OTL.exe
[2013.07.22 22:51:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Covus Freemium
[2013.07.22 22:51:30 | 000,000,000 | ---D | C] -- C:\Program Files\Covus Freemium
[2013.07.22 22:17:34 | 000,000,000 | ---D | C] -- C:\Users\anderson\Desktop\trojaner
[2013.07.08 21:08:05 | 000,000,000 | ---D | C] -- C:\ProgramData\BrowserDefender
[2013.07.08 21:07:06 | 000,000,000 | ---D | C] -- C:\Program Files\AudioConverter
[2010.03.04 22:34:49 | 008,159,312 | ---- | C] (Mozilla) -- C:\Users\anderson\Firefox_Setup_3.6.exe
[2009.10.18 20:40:52 | 001,114,536 | ---- | C] (WindSolutions) -- C:\Users\anderson\Install_CopyTrans_Suite.exe
[2009.09.02 21:27:02 | 000,476,352 | ---- | C] (NCH Software) -- C:\Users\anderson\debutsetup.exe
[2009.09.02 20:09:20 | 071,139,816 | ---- | C] (Online Media Technologies Ltd. ) -- C:\Users\anderson\AVSVideoEditor.exe
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2013.07.23 20:52:39 | 000,000,428 | -H-- | M] () -- C:\Windows\tasks\User_Feed_Synchronization-{A1B7BD21-4821-402E-A1B3-308D297CD338}.job
[2013.07.23 20:45:19 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.07.23 20:40:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\anderson\Desktop\OTL.exe
[2013.07.23 20:29:11 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2013.07.23 20:29:09 | 000,003,344 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2013.07.23 20:29:03 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.07.23 20:28:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.07.23 20:28:26 | 2075,340,800 | -HS- | M] () -- C:\hiberfil.sys
[2013.07.23 06:26:31 | 000,000,012 | ---- | M] () -- C:\Windows\bthservsdp.dat
[2013.07.22 22:51:40 | 000,002,535 | ---- | M] () -- C:\Users\Public\Desktop\Free System Utilities.lnk
[2013.07.22 21:43:38 | 000,000,190 | ---- | M] () -- C:\Windows\DeleteOnReboot.bat
[2013.07.18 21:21:59 | 000,621,952 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.07.18 21:21:59 | 000,590,082 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.07.18 21:21:59 | 000,123,852 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.07.18 21:21:59 | 000,102,094 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.07.18 21:14:15 | 000,377,104 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2013.07.13 13:22:34 | 000,213,486 | ---- | M] () -- C:\Users\anderson\Desktop\einfuhrung-in-die-chakrenlehre.pdf
[2013.07.08 22:04:20 | 007,746,624 | ---- | M] () -- C:\Users\anderson\Desktop\Moni sleeps tonight.mp3
[2013.07.08 20:58:03 | 007,742,400 | ---- | M] () -- C:\Users\anderson\Desktop\Moni sleeps tonight - Kopie.mp3
[2013.07.04 20:44:37 | 000,000,999 | ---- | M] () -- C:\Users\anderson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
[2013.07.04 20:44:09 | 000,000,973 | ---- | M] () -- C:\Users\anderson\Desktop\Dropbox.lnk
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]
========== Files Created - No Company Name ==========
[2013.07.22 21:34:58 | 000,000,190 | ---- | C] () -- C:\Windows\DeleteOnReboot.bat
[2013.07.13 13:22:27 | 000,213,486 | ---- | C] () -- C:\Users\anderson\Desktop\einfuhrung-in-die-chakrenlehre.pdf
[2013.07.08 21:03:27 | 007,742,400 | ---- | C] () -- C:\Users\anderson\Desktop\Moni sleeps tonight - Kopie.mp3
[2013.07.08 20:58:02 | 007,746,624 | ---- | C] () -- C:\Users\anderson\Desktop\Moni sleeps tonight.mp3
[2013.05.11 10:28:46 | 000,017,408 | ---- | C] () -- C:\Windows\Launcher.exe
[2013.03.10 10:42:50 | 000,040,448 | ---- | C] () -- C:\Windows\System32\regobj.dll
[2013.01.14 21:14:04 | 000,003,967 | ---- | C] () -- C:\Users\anderson\.recently-used.xbel
[2012.04.08 19:25:10 | 000,000,581 | ---- | C] () -- C:\Users\anderson\AppData\Local\cookies.ini
[2012.03.23 21:34:19 | 000,116,189 | ---- | C] () -- C:\Windows\System32\drivers\klin.dat
[2012.03.23 21:34:18 | 000,098,168 | ---- | C] () -- C:\Windows\System32\drivers\klick.dat
[2011.09.09 09:40:35 | 000,164,255 | ---- | C] () -- C:\Windows\hpoins19.dat
[2011.09.09 09:38:59 | 000,026,952 | ---- | C] () -- C:\Windows\hpomdl19.dat
[2011.08.08 22:18:30 | 000,017,408 | ---- | C] () -- C:\Users\anderson\AppData\Local\WebpageIcons.db
[2011.07.28 21:50:16 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib
[2011.05.07 21:50:51 | 000,635,808 | ---- | C] () -- C:\Users\anderson\AppData\Roaming\mdbu.bin
[2009.12.30 14:21:00 | 000,000,104 | ---- | C] () -- C:\Users\anderson\E-Mail - Verknüpfung.lnk
[2009.11.27 21:13:53 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.10.21 10:20:19 | 000,000,680 | ---- | C] () -- C:\Users\anderson\AppData\Local\d3d9caps.dat
[2009.09.05 08:34:48 | 000,244,066 | ---- | C] () -- C:\Users\anderson\bbgsetup.exe
[2009.06.24 22:43:44 | 000,076,800 | ---- | C] () -- C:\Users\anderson\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
========== ZeroAccess Check ==========
[2006.11.02 14:54:22 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.08 19:47:00 | 011,586,048 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.04.10 23:28:20 | 000,614,912 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.04.10 23:28:26 | 000,347,648 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
========== LOP Check ==========
[2010.09.06 22:10:05 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\CCS64
[2009.08.31 22:52:46 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Crystal Player
[2011.05.09 21:51:48 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\DirektFotoSystem3
[2013.07.23 20:31:54 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Dropbox
[2012.10.11 14:42:41 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\DVDVideoSoft
[2012.12.02 13:36:45 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\EurekaLog
[2013.05.24 18:18:35 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Foxit Software
[2010.01.02 18:53:55 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\GARMIN
[2010.08.27 22:15:10 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\GrabPro
[2013.01.14 21:14:04 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\gtk-2.0
[2013.05.11 09:12:36 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Gutscheinmieze
[2013.01.27 21:01:07 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Image Zone Express
[2013.06.11 20:56:46 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\mp3DirectCut
[2011.04.28 22:54:08 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\MPEG Streamclip
[2009.06.23 20:54:12 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\mquadr.at
[2010.11.13 14:10:52 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Orbit
[2011.09.09 10:10:39 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Printer Info Cache
[2010.08.27 22:23:36 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\ProgSense
[2011.02.20 10:16:45 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\RavensburgerTipToi
[2011.07.28 20:39:47 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\RipIt4Me
[2012.04.16 21:28:53 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Rovio
[2012.12.17 21:24:39 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\Samsung
[2012.10.11 14:46:35 | 000,000,000 | ---D | M] -- C:\Users\anderson\AppData\Roaming\TuneUp Software
========== Purity Check ==========
========== Custom Scans ==========
< dir /a/s/b "C:\Windows\system32\tasks" /c >
C:\WINDOWS\SYSTEM32\TASKS\Apple
C:\WINDOWS\SYSTEM32\TASKS\Browser Updater
C:\WINDOWS\SYSTEM32\TASKS\CreateChoiceProcessTask
C:\WINDOWS\SYSTEM32\TASKS\Freemium1ClickMaint
C:\WINDOWS\SYSTEM32\TASKS\GoogleUpdateTaskMachineCore
C:\WINDOWS\SYSTEM32\TASKS\GoogleUpdateTaskMachineUA
C:\WINDOWS\SYSTEM32\TASKS\Microsoft
C:\WINDOWS\SYSTEM32\TASKS\NSSstub
C:\WINDOWS\SYSTEM32\TASKS\ProtectedSearch
C:\WINDOWS\SYSTEM32\TASKS\QtraxPlayer
C:\WINDOWS\SYSTEM32\TASKS\RunAsStdUser Task for VeohWebPlayer
C:\WINDOWS\SYSTEM32\TASKS\Scheduled Update for Ask Toolbar
C:\WINDOWS\SYSTEM32\TASKS\Software Updater
C:\WINDOWS\SYSTEM32\TASKS\Software Updater Ui
C:\WINDOWS\SYSTEM32\TASKS\User_Feed_Synchronization-{A1B7BD21-4821-402E-A1B3-308D297CD338}
C:\WINDOWS\SYSTEM32\TASKS\WPD
C:\WINDOWS\SYSTEM32\TASKS\{90A47C07-46DF-49E0-98D6-5CB31E000E25}
C:\WINDOWS\SYSTEM32\TASKS\Apple\AppleSoftwareUpdate
C:\WINDOWS\SYSTEM32\TASKS\Browser Updater\Browser Updater
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows Defender
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Active Directory Rights Management Services Client
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Bluetooth
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\CertificateServicesClient
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Customer Experience Improvement Program
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Defrag
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\DiskDiagnostic
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Media Center
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\MobilePC
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\MUI
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Multimedia
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\NetworkAccessProtection
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\PLA
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\RAC
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\RemoteAssistance
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\RemovalTools
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\RestartManager
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Shell
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SideShow
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SyncCenter
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SystemRestore
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Tcpip
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\TextServicesFramework
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\UPnP
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\WDI
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Windows Error Reporting
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\WindowsCalendar
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Wired
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Wireless
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Manual)
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Bluetooth\UninstallDeviceTask
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\CertificateServicesClient\SystemTask
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\CertificateServicesClient\UserTask
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\CertificateServicesClient\UserTask-Roam
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Customer Experience Improvement Program\Consolidator
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Customer Experience Improvement Program\OptinNotification
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Defrag\ScheduledDefrag
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Media Center\ehDRMInit
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Media Center\mcupdate
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Media Center\OCURActivate
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Media Center\OCURDiscovery
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Media Center\UpdateRecordPath
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\MobilePC\HotStart
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\MobilePC\TMM
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\MUI\LPRemove
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Multimedia\SystemSoundsService
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\NetworkAccessProtection\NAPStatus UI
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\PLA\System
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\RAC\RACAgent
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Shell\CrawlStartPages
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SideShow\AutoWake
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SideShow\GadgetManager
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SideShow\SessionAgent
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SideShow\SystemDataProviders
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\SystemRestore\SR
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Tcpip\IpAddressConflict1
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Tcpip\IpAddressConflict2
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Tcpip\WSHReset
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\TextServicesFramework\MsCtfMonitor
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\UPnP\UPnPHostConfig
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\WDI\ResolutionHost
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Windows Error Reporting\QueueReporting
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Wired\GatherWiredInfo
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows\Wireless\GatherWirelessInfo
C:\WINDOWS\SYSTEM32\TASKS\Microsoft\Windows Defender\MP Scheduled Scan
C:\WINDOWS\SYSTEM32\TASKS\ProtectedSearch\Protected Search
C:\WINDOWS\SYSTEM32\TASKS\WPD\SqmUpload_S-1-5-21-2933023405-4244100187-1323857668-1000
< End of report >
Code:
OTL Extras logfile created on: 23.07.2013 20:43:49 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\anderson\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19443)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
1,93 Gb Total Physical Memory | 0,25 Gb Available Physical Memory | 12,77% Memory free
4,11 Gb Paging File | 1,80 Gb Available in Paging File | 43,89% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 60,01 Gb Total Space | 13,98 Gb Free Space | 23,29% Space Free | Partition Type: NTFS
Drive F: | 163,11 Gb Total Space | 89,51 Gb Free Space | 54,88% Space Free | Partition Type: NTFS
Computer Name: ANDERSON-PC | User Name: anderson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [FreemiumAnalyze] -- C:\Program Files\Covus Freemium\Free System Utilities\freemiumContext.exe ANALYSE %1 (Microsoft)
Directory [FreemiumFindEmptyFolders] -- C:\Program Files\Covus Freemium\Free System Utilities\freemiumContext.exe EMPTYFOLDERS %1 (Microsoft)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 1
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\S-1-5-21-2933023405-4244100187-1323857668-500]
"EnableNotifications" = 0
"EnableNotificationsRef" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0BCA19C7-05A1-4BA4-8DA0-37BC22A62F85}" = rport=139 | protocol=6 | dir=out | app=system |
"{1FDBA6BA-330C-4F63-A629-8B77405C1EF4}" = lport=139 | protocol=6 | dir=in | app=system |
"{28982262-5141-4452-84C8-BBE63EE404E6}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{2D7C3BBC-2195-4F79-8777-5691EA633A4D}" = lport=547 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{2E2B4DA6-8F5D-4202-AE22-96FC25BB26B1}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{33EAA76B-4433-4A18-8B39-A1512A944CCE}" = lport=68 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{3A748D22-A508-4F8D-B31A-DA1CD15D9629}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
"{507F12EE-E857-4D92-93D2-930479845587}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office12\outlook.exe |
"{52CB2C4B-178D-4285-AA0C-548E03A0583D}" = lport=137 | protocol=17 | dir=in | app=system |
"{57E65A9D-2A3F-4B1B-8B17-544F1F7E7CF1}" = lport=53 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{5A6E5F13-058A-485B-95AC-B3E3CD563209}" = rport=2869 | protocol=6 | dir=out | app=system |
"{61312E0A-7D99-4FA0-AEF7-2EC9755FF968}" = lport=67 | protocol=17 | dir=in | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{6E5EF383-0901-42EA-9CEE-C8D95468C1E2}" = lport=138 | protocol=17 | dir=in | app=system |
"{7C7651DE-0F51-4E77-A41D-63902C480B58}" = rport=138 | protocol=17 | dir=out | app=system |
"{B5D24E4A-7B47-4538-B1D9-D1C73EF4C2DC}" = lport=445 | protocol=6 | dir=in | app=system |
"{BC3DD36E-FD03-4232-AD2F-7A27E46FD81B}" = lport=2869 | protocol=6 | dir=in | app=system |
"{C0841886-280E-4549-96B4-5FB3247DCC32}" = rport=445 | protocol=6 | dir=out | app=system |
"{D680C084-65A4-4BEE-8A12-6ABAA7851A1C}" = lport=2869 | protocol=6 | dir=in | app=system |
"{E28B2C64-B38C-4447-B38B-254DBEC1E031}" = rport=137 | protocol=17 | dir=out | app=system |
"{E840F757-B22E-4C3B-9811-7CBC19090D38}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{F37110AC-BC85-4401-BB20-F09D3DB2A8BB}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01F19296-339F-4CF9-ADCC-B8F307C6D2A8}" = protocol=17 | dir=in | app=c:\users\anderson\appdata\roaming\dropbox\bin\dropbox.exe |
"{07AEF19E-61F2-444E-A880-125D3AD028C3}" = protocol=17 | dir=in | app=c:\program files\search results toolbar\datamngr\srtool~1\dtuser.exe |
"{0868AF5B-B0E1-46CF-8F3D-549737997399}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{15A2CFF5-EE6D-4C35-9164-30C90183570D}" = protocol=17 | dir=in | app=c:\windows\system32\muzapp.exe |
"{18C159D1-58F9-4289-B729-D0A46EADC0BF}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1breitband.exe |
"{19701401-F12E-419A-B1EA-D258A84D0074}" = protocol=17 | dir=in | app=c:\windows\temp\installer.exe |
"{1CDBF3AC-13F3-4BAC-A619-25E735BC466B}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1breitband.exe |
"{1E5D3D89-03C9-4BF4-86B4-A0DEE17BF70F}" = protocol=17 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe |
"{1E99760F-BE22-41AA-8941-1DA2F51A196A}" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{2166A4A8-E6FB-4DA5-83BC-F0832FB4792B}" = protocol=6 | dir=in | app=c:\program files\aon\aoncontroller\aoncontroller.exe |
"{2358BA8D-BB7C-44D0-A391-4E05EC621FBD}" = protocol=17 | dir=in | app=c:\windows\system32\msiexec.exe |
"{24259A7B-0FC1-4BD6-B57E-137832615C17}" = protocol=6 | dir=in | app=c:\windows\system32\msiexec.exe |
"{288B668B-83DC-4EF6-A7F6-EBFF598696D4}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{2A72580A-9F5C-4774-B6DF-6DA9F53C7DF8}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1wlanassistent.exe |
"{2B23AB8A-83D0-447B-8538-34DDBAC94724}" = protocol=6 | dir=in | app=c:\users\anderson\downloads\setup_a1wlanassistent.exe |
"{2F8326B1-9D1E-4712-AD03-0199056F2C25}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{3AC630A0-A5B6-4C5D-B0A5-C883381B7370}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{40A805BE-FD97-4DBE-A134-C4FBCCCFC522}" = protocol=6 | dir=in | app=c:\program files\sweetim\communicator\sweetpacksupdatemanager.exe |
"{4283DA3D-9AC9-40CE-A45C-0491EA2358CD}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1wlanassistent.exe |
"{4C04E1AF-CA88-412E-AA65-4092CBD19A58}" = protocol=6 | dir=in | app=c:\users\anderson\appdata\roaming\dropbox\bin\dropbox.exe |
"{4D781BD0-4D60-4352-9FA7-88A318993B8A}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{55B15287-2CC3-4A3E-AD9E-134FD11FA684}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{5D7FB2B8-14DE-477E-85F1-4A908C2C04C3}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{60F675BB-6613-4F9A-8188-B4E6C38F7FCA}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{6DCC6364-CB11-4089-9C6C-6AD54FDB93A4}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{713A5C84-7179-4CD9-BCAA-30A61E63534E}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1breitband.exe |
"{77AD8DEA-969D-4F30-8EBE-DD2148C1BD5D}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1breitband.exe |
"{7883E7D8-23BF-4786-B227-F57487A9C5D0}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1modemkonfigurator.exe |
"{7AF6BE59-62E0-4532-A59A-DB5B26CD1682}" = dir=out | app=c:\program files\protected search\protectedsearch.exe |
"{7BAEC01B-A3FD-4C97-8A01-89656D1F924D}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{7EC0E417-0ACA-41E1-937B-93CCA308013E}" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"{82DF86C1-5755-4EDF-99F2-AD3D4AF6D52C}" = dir=out | svc=sharedaccess | app=%systemroot%\system32\svchost.exe |
"{9178F6F6-2AD8-4864-9F35-95EB855AF39D}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"{94DF3D35-4F9F-4B25-89EA-15176F4570BC}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{9FFF6309-05C3-4C6C-A812-52F1CC530CAC}" = protocol=6 | dir=in | app=c:\users\anderson\downloads\setup_a1wlanassistent.exe |
"{A67D9CD7-5448-4108-8914-74492018CF74}" = protocol=17 | dir=in | app=c:\users\anderson\downloads\setup_a1wlanassistent.exe |
"{A90F82B0-FD01-4181-B1CE-5D52F05311FC}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1modemkonfigurator.exe |
"{AA89A06F-4C3A-44F8-8968-7DFFEB1EDF90}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{AC307F4B-6A9C-4385-9B05-6EBD2D3DEE4C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{AC553162-91D7-4A5E-82D6-55195B895F76}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{AC91D633-5CCF-4041-994A-68B2D26A975F}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{AE2BE3E6-2F1C-4031-9CD8-22142EB6875B}" = protocol=6 | dir=in | app=c:\windows\temp\installer.exe |
"{B21B5737-6ABB-4C12-9422-1186B91B5CF1}" = dir=out | app=c:\program files\hometab\tbupdater.dll |
"{B2EC2F7E-D170-4F65-B2FE-C33E149A310A}" = dir=in | app=c:\program files\protected search\protectedsearch.exe |
"{B4CF2CE3-1BD9-4D35-9DD2-D35C9AD418C3}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{C1128318-5238-4EB7-8E5E-4111C7229DCF}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe |
"{C2EEFFC4-DA47-4711-B090-E7C1AE0B75C4}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\groove.exe |
"{C8CD8455-50EC-4207-A758-F653CF742378}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{D16BDB3A-B3D4-46C8-893D-901E1B32280B}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{D5E6072B-6206-4C97-8EF3-371494693B6A}" = protocol=6 | dir=in | app=c:\program files\a1\a1 webassistent\a1webassistent.exe |
"{D70BCACB-C7F9-45A9-964B-A336DA653C92}" = protocol=17 | dir=in | app=c:\program files\a1\a1 webassistent\a1webassistent.exe |
"{DA31AFEE-33C2-49A3-9B80-45B1FD6E9FB1}" = dir=in | app=c:\program files\hometab\tbupdater.dll |
"{DD2EB583-19EF-4961-8D76-BD8BBC02FC6E}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{E733EBEE-A707-4761-ABAC-CF2FC300796F}" = protocol=6 | dir=in | app=c:\program files\search results toolbar\datamngr\srtool~1\dtuser.exe |
"{E7931A50-8AC1-438D-9AE3-9DD3D6769FF8}" = protocol=17 | dir=in | app=c:\users\anderson\downloads\setup_a1wlanassistent.exe |
"{E804EFED-2F88-4398-9051-7559B88F33EF}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{ED5AD13B-4967-4DED-8010-D16BD6B60EF6}" = protocol=6 | dir=in | app=c:\windows\system32\muzapp.exe |
"{EFB77F91-F31B-473E-8C13-E0ED5F3BC4A0}" = protocol=17 | dir=in | app=c:\program files\aon\aoncontroller\aoncontroller.exe |
"{FA03D88B-A59F-42EE-9189-DB8FCC3DE8C3}" = protocol=58 | dir=in | name=@hnetcfg.dll,-148 |
"{FD34A5C0-CE4D-4137-AB75-8D6069177873}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"TCP Query User{15950170-11E1-42CE-BD79-DC62EF87E8FC}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe |
"TCP Query User{D6027427-80AE-4F35-B905-D36A6145A777}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=6 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"UDP Query User{0E684848-8812-4D60-A647-947EAEEA888C}C:\program files\veoh networks\veohwebplayer\veohwebplayer.exe" = protocol=17 | dir=in | app=c:\program files\veoh networks\veohwebplayer\veohwebplayer.exe |
"UDP Query User{91137B4F-2115-4B96-8689-3425C065889E}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0D2E9DCB-9938-475E-B4DD-8851738852FF}" = AIO_Scan
"{10A44844-4465-456E-8C97-80BDD4F68845}" = Windows Live ID-Anmelde-Assistent
"{1746EA69-DCB6-4408-B5A5-E75F55439CDF}" = Scan
"{179C56A4-F57F-4561-8BBF-F911D26EB435}" = WebReg
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1ED31028-6D65-4CFD-AD03-8E484A052FE7}" = aonUpdate
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{268278CF-FB69-4D98-B70E-BFEC1CDCA225}" = iTunes
"{26921B2E-3E62-47F9-A514-1FC4A83BD738}" = Intel(R) PROSet/Wireless WiFi-Software
"{26A24AE4-039D-4CA4-87B4-2F83216038FF}" = Java(TM) 6 Update 38
"{291A06BB-7145-443F-9257-8913A928BD40}" = A1 Webassistent
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{3D1A297B-5565-475A-8455-055E628B39CF}" = Snap.Do
"{3EFEF049-23D4-4B46-8903-4592FEA51018}" = Windows Live Movie Maker
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go 5.0
"{40C4903E-EDFB-4CAE-A611-41FEBA585921}" = VTech Download Agent Library
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Internet Security 2012
"{468D22C0-8080-11E2-B86E-B8AC6F98CCE3}" = Google Earth
"{49F2B650-2D7B-4F59-B33D-346F63776BD3}" = DocProc
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{561AA971-37EB-4D63-9FB9-810B663B5CC7}" = Angry Birds Space
"{598420E8-E9F9-4FAE-9B6C-599FDF2F611A}" = Browser-Plug-In für BlackBerry App World
"{5D09C772-ECB3-442B-9CC6-B4341C78FDC2}" = Apple Application Support
"{5E6D6161-5509-4f55-9372-1E01792F843A}" = F300_Help
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67D3F1A0-A1F2-49b7-B9EE-011277B170CD}" = HPProductAssistant
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{6B7FB3C4-E71B-478D-9E15-5AE97EAD67B8}" = aonFTP
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{710BF966-43C8-4216-A8EC-BC4E169FF7C1}" = MobileMe Control Panel
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{7A7DC702-DEDE-42A8-8722-B3BA724D546F}" = Fax
"{87E2B986-07E8-477a-93DC-AF0B6758B192}" = DocProcQFolder
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek 8169 8168 8101E 8102E Ethernet Driver
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8F2D21F9-F428-4EF2-8111-953EF3299EFB}" = Bob der Baumeister
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel® Matrix Storage Manager
"{925F1DB6-E86E-4378-9091-D1F68B0583C9}" = iCloud
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95D08F4E-DFC2-4ce3-ACB7-8C8E206217E9}" = MarketResearch
"{978C25EE-5777-46e4-8988-732C297CBDBD}" = Status
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{994223F3-A99B-4DDD-9E1D-0190A17C6860}" = Windows Live Family Safety
"{9B1FD9CE-0776-4f0b-A6F5-C6AB7B650CDF}" = Destinations
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A36CD345-625C-4d6c-B3E2-76E1248CB451}" = SolutionCenter
"{A3B7C670-4A1E-4EE2-950E-C875BC1965D0}" = Copy
"{A409B55C-DD9B-4157-86D7-FD6F4F0F2C1A}" = Angry Birds Rio
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AE9EBE85-F0BA-476B-8BC9-B9705918C823}" = Free SystemUtilities
"{AF0CE7C0-A3E4-4D73-988B-B29187EC6E9A}" = QuickTime
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B4089055-D468-45A4-A6BA-5A138DD715FC}" = Bing Bar
"{B7B5A370-3DFF-4F0E-AE11-FD267C4938AA}" = CCS64 V3.8
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BE77A81F-B315-4666-9BF3-AE70C0ADB057}" = BufferChm
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{c5eac06d-16a7-4836-866d-ebf3ecfdcdaa}_is1" = HomeTab 2.9
"{C716522C-3731-4667-8579-40B098294500}" = Toolbox
"{C916D86C-AB76-49c7-B0E4-A946E0FD9BC2}" = HP Photosmart, Officejet, PSC and Deskjet All-In-One Driver Software 8.0.B
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240D8}" = WinZip 17.0
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}" = Alcatel SpeedTouch USB Software
"{D9F4A9F8-92C5-4289-9D04-F0F8F02D580A}" = iPod for Windows 2005-10-12
"{DC24971E-1946-445D-8A82-CE685433FA7D}" = Realtek USB 2.0 Card Reader
"{E06F04B9-45E6-4AC0-8083-85F7515F40F7}" = UnloadSupport
"{E09575B2-498D-4C8B-A9D2-623F78574F29}" = AIO_CDB_Software
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E6FA148F-1E7D-4A42-A9A2-7DFABC2C6A2B}" = SportTracks 2.1
"{E7112940-5F8E-4918-B9FE-251F2F8DC81F}" = AIO_CDB_ProductContext
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1568757-E564-4cb5-8980-9333119A4384}" = F300
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"{F6AC5364-2FB7-437a-811A-D645F22AA6AC}" = F300Trb
"{f8cd9221-848c-45fb-a509-fa75dea3a22f}" = Free System Utilities
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FF075778-6E50-47ed-991D-3B07FD4E3250}" = TrayApp
"5513-1208-7298-9440" = JDownloader 0.9
"A1 Webassistent" = A1 Webassistent
"Agere Systems Soft Modem" = Agere Systems HDA Modem
"aonFTP" = aonFTP
"aonUpdate" = aonUpdate
"Audacity_is1" = Audacity 1.2.6
"AVI Media Player_is1" = AVI Media Player 1.0
"Bridge Builder" = Bridge Builder
"Bridge Building Game" = Bridge Building Game
"Browser Updater_is1" = Browser Updater 1.1
"CameraWindowDC8" = Canon Utilities CameraWindow DC 8
"CameraWindowLauncher" = Canon Utilities CameraWindow Launcher
"CANON iMAGE GATEWAY Task" = CANON iMAGE GATEWAY Task for ZoomBrowser EX
"Canon MOV Decoder" = Canon MOV Decoder
"Canon MOV Encoder" = Canon MOV Encoder
"Cheat Engine 5.6.1_is1" = Cheat Engine 5.6.1
"Debut" = Debut Video Capture Software
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"ENTERPRISE" = Microsoft Office Enterprise 2007
"Foxit Reader_is1" = Foxit Reader
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.8
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.33.1005
"Google Chrome" = Google Chrome
"HappyFoto-Designer_is1" = HappyFoto-Designer 2.7
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HP Imaging Device Functions" = HP Imaging Device Functions 8.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 8.0
"HPExtendedCapabilities" = HP Customer Participation Program 8.0
"HPOCR" = HP OCR Software 8.0
"InstallShield_{D9F4A9F8-92C5-4289-9D04-F0F8F02D580A}" = iPod for Windows 2005-10-12
"InstallWIX_{45E557D6-2271-4F13-8101-C620B4285AB0}" = Kaspersky Internet Security 2012
"LesenLernen" = LesenLernen
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"MovieEditTask" = Canon MovieEdit Task for ZoomBrowser EX
"MovieUploaderForYouTube" = Canon Utilities Movie Uploader for YouTube
"MyCamera" = Canon Utilities MyCamera
"MyCamera Download Plugin" = CANON iMAGE GATEWAY MyCamera Download Plugin
"PhotoStitch" = Canon Utilities PhotoStitch
"PokerStars" = PokerStars
"ProInst" = Intel PROSet Wireless
"Ravensburger tiptoi" = Ravensburger tiptoi
"Snapshot Viewer" = Snapshot Viewer
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"Uninstall_is1" = Uninstall 1.0.0.1
"Veoh Video Compass" = Veoh Video Compass
"Veoh Web Player Beta" = Veoh Web Player
"VLC media player" = VLC media player 1.1.3
"VTechDownloadManager" = Learning Lodge Navigator
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.20 (32-Bit)
"XP Codec Pack" = XP Codec Pack
"ZoomBrowser EX" = Canon Utilities ZoomBrowser EX
"ZoomBrowser EX Memory Card Utility" = Canon ZoomBrowser EX Memory Card Utility
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"gamealarm-DEFAULT" = Game Alarm
"HappyFoto - Bestellassistent" = HappyFoto - Bestellassistent
"MyFreeCodec" = MyFreeCodec
"OnlineFestplatte" = aon Online Festplatte (entfernen)
"sc13-AT_MAIN" = Ski Challenge 13 (AT)
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 23.07.2013 14:28:53 | Computer Name = anderson-PC | Source = WinMgmt | ID = 10
Description =
Error - 23.07.2013 14:33:02 | Computer Name = anderson-PC | Source = Windows Search Service | ID = 3013
Description =
Error - 23.07.2013 14:33:02 | Computer Name = anderson-PC | Source = Windows Search Service | ID = 3013
Description =
Error - 23.07.2013 14:33:02 | Computer Name = anderson-PC | Source = Windows Search Service | ID = 3013
Description =
Error - 23.07.2013 14:33:02 | Computer Name = anderson-PC | Source = Windows Search Service | ID = 3013
Description =
Error - 23.07.2013 14:33:02 | Computer Name = anderson-PC | Source = Windows Search Service | ID = 3013
Description =
Error - 23.07.2013 14:33:02 | Computer Name = anderson-PC | Source = Windows Search Service | ID = 3013
Description =
Error - 23.07.2013 14:33:02 | Computer Name = anderson-PC | Source = Windows Search Service | ID = 3013
Description =
Error - 23.07.2013 14:33:02 | Computer Name = anderson-PC | Source = Windows Search Service | ID = 3013
Description =
Error - 23.07.2013 14:57:22 | Computer Name = anderson-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description =
Error - 23.07.2013 14:57:54 | Computer Name = anderson-PC | Source = .NET Runtime Optimization Service | ID = 1101
Description =
[ OSession Events ]
Error - 15.04.2011 08:40:06 | Computer Name = anderson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.4518.1014, Microsoft Office Version: 12.0.4518.1014. This session lasted 133
seconds with 120 seconds of active time. This session ended with a crash.
Error - 28.01.2013 15:20:03 | Computer Name = anderson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 304
seconds with 240 seconds of active time. This session ended with a crash.
Error - 14.06.2013 17:49:28 | Computer Name = anderson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 616139
seconds with 1500 seconds of active time. This session ended with a crash.
Error - 08.07.2013 15:48:44 | Computer Name = anderson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 109
seconds with 60 seconds of active time. This session ended with a crash.
Error - 08.07.2013 15:49:30 | Computer Name = anderson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 13
seconds with 0 seconds of active time. This session ended with a crash.
Error - 08.07.2013 15:50:20 | Computer Name = anderson-PC | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6668.5000, Microsoft Office Version: 12.0.6612.1000. This session lasted 41
seconds with 0 seconds of active time. This session ended with a crash.
[ System Events ]
Error - 22.07.2013 16:04:33 | Computer Name = anderson-PC | Source = netbt | ID = 4321
Description = Der Name "ANDERSON-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 10.0.0.2 registriert werden. Der Computer mit IP-Adresse 169.254.80.108
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 22.07.2013 16:04:33 | Computer Name = anderson-PC | Source = netbt | ID = 4321
Description = Der Name "ANDERSON-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 10.0.0.2 registriert werden. Der Computer mit IP-Adresse 169.254.80.108
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 22.07.2013 16:04:33 | Computer Name = anderson-PC | Source = netbt | ID = 4321
Description = Der Name "ANDERSON-PC :20" konnte nicht auf der Schnittstelle mit
IP-Adresse 10.0.0.2 registriert werden. Der Computer mit IP-Adresse 169.254.80.108
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 23.07.2013 00:09:45 | Computer Name = anderson-PC | Source = Microsoft-Windows-ResourcePublication | ID = 1002
Description =
Error - 23.07.2013 00:10:18 | Computer Name = anderson-PC | Source = Server | ID = 2505
Description = Aufgrund eines doppelten Netzwerknamens konnte zu der Transportschicht
\Device\NetBT_Tcpip_{A80F0041-9ADE-413F-9A59-E8DFBDECF2F0} vom Serverdienst nicht
gebunden werden. Der Serverdienst konnte nicht gestartet werden.
Error - 23.07.2013 00:10:18 | Computer Name = anderson-PC | Source = netbt | ID = 4321
Description = Der Name "ANDERSON-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 10.0.0.2 registriert werden. Der Computer mit IP-Adresse 169.254.80.108
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 23.07.2013 00:10:18 | Computer Name = anderson-PC | Source = netbt | ID = 4321
Description = Der Name "ANDERSON-PC :0" konnte nicht auf der Schnittstelle mit
IP-Adresse 10.0.0.2 registriert werden. Der Computer mit IP-Adresse 169.254.80.108
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 23.07.2013 00:10:18 | Computer Name = anderson-PC | Source = netbt | ID = 4321
Description = Der Name "ANDERSON-PC :20" konnte nicht auf der Schnittstelle mit
IP-Adresse 10.0.0.2 registriert werden. Der Computer mit IP-Adresse 169.254.80.108
hat nicht zugelassen, dass dieser Computer diesen Namen verwendet.
Error - 23.07.2013 01:46:41 | Computer Name = anderson-PC | Source = Microsoft-Windows-ResourcePublication | ID = 1002
Description =
Error - 23.07.2013 14:28:51 | Computer Name = anderson-PC | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 10.0.0.2 für die Netzwerkkarte mit der Netzwerkadresse
001DE067AF75 wurde durch den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat
eine DHCPNACK-Meldung gesendet).
< End of report >
|
SecurityCheck und:
Aktualität von System und Software
Textbox. 