Vielen dank für die schnelle Antwort
>>>>>>>>>>
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Datenbank Version: 4435
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512
16.08.2010 12:30:32
mbam-log-2010-08-16 (12-30-32).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|G:\|I:\|J:\|N:\|)
Durchsuchte Objekte: 350087
Laufzeit: 2 Stunde(n), 41 Minute(n), 30 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 3
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
C:\System Volume Information\_restore{FEFAB42C-1D2E-4509-A456-FE8DD7A02A15}\RP176\A0141034.exe (Trojan.Zapchast) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{FEFAB42C-1D2E-4509-A456-FE8DD7A02A15}\RP176\A0141042.exe (Trojan.Zapchast) -> Quarantined and deleted successfully.
C:\System Volume Information\_restore{FEFAB42C-1D2E-4509-A456-FE8DD7A02A15}\RP176\A0141069.exe (Trojan.Zapchast) -> Quarantined and deleted successfully.
<<<<<<<<<<
OTL Logfile: Code:
OTL logfile created on: 16.08.2010 12:47:05 - Run 1
OTL by OldTimer - Version 3.2.10.0 Folder = C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.023,00 Mb Total Physical Memory | 523,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 82,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 111,80 Gb Total Space | 5,53 Gb Free Space | 4,95% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Unable to calculate disk information.
I: Drive not present or media not loaded
Computer Name: MOHITV
Current User Name: Mohi
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\WINDOWS\system32\poweroff.exe (Jorgen Bosman)
PRC - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
PRC - C:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin)
PRC - C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software)
PRC - C:\Programme\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe (Pinnacle Systems)
PRC - C:\Programme\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe (Pinnacle Systems GmbH.)
PRC - C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
========== Modules (SafeList) ==========
MOD - C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\Downloads\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (appdrvrem01) Application Driver Auto Removal Service (01) -- C:\WINDOWS\System32\appdrvrem01.exe (Protection Technology)
SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (Adobe LM Service) -- C:\Programme\Gemeinsame Dateien\Adobe Systems Shared\Service\Adobelmsvc.exe (Adobe Systems)
SRV - (Poweroff) -- C:\WINDOWS\System32\poweroff.exe (Jorgen Bosman)
SRV - (AVM WLAN Connection Service) -- C:\Programme\avmwlanstick\WLanNetService.exe (AVM Berlin)
SRV - (odserv) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (pr2akt6c) Cycling Manager 2007 Drivers Auto Removal (pr2akt6c) -- C:\WINDOWS\System32\pr2akt6c.exe (Cyanide)
SRV - (StarWindServiceAE) -- C:\Programme\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe (Rocket Division Software)
SRV - (UPnPService) -- C:\Programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe (Magix AG)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (FirebirdServerMAGIXInstance) -- C:\Programme\MAGIX\Common\Database\bin\fbserver.exe (MAGIX®)
========== Driver Services (SafeList) ==========
DRV - (appdrv01) Application Driver (01) -- C:\WINDOWS\system32\drivers\appdrv01.sys (Protection Technology)
DRV - (MBAMProtector) -- C:\WINDOWS\system32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (FWLANUSB) -- C:\WINDOWS\system32\drivers\fwlanusb.sys (AVM GmbH)
DRV - (avmeject) -- C:\WINDOWS\system32\drivers\avmeject.sys (AVM Berlin)
DRV - (GcKernel) -- C:\WINDOWS\system32\drivers\gckernel.sys (Microsoft Corporation)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (pe3akt6c) Cycling Manager 2007 Environment Driver (pe3akt6c) -- C:\WINDOWS\system32\drivers\pe3akt6c.sys (Cyanide)
DRV - (pf2akt6c) Cycling Manager 2007 File System Driver (pf2akt6c) -- C:\WINDOWS\system32\drivers\pf2akt6c.sys (Cyanide)
DRV - (ps7akt6c) Cycling Manager 2007 Synchronization Driver (ps7akt6c) -- C:\WINDOWS\system32\drivers\ps7akt6c.sys (Cyanide)
DRV - (ps6akt6c) Cycling Manager 2007 Synchronization Driver (ps6akt6c) -- C:\WINDOWS\system32\drivers\ps6akt6c.sys (Cyanide)
DRV - (vobiw) -- C:\WINDOWS\System32\drivers\vobIW.sys (Pinnacle Systems GmbH)
DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell)
DRV - (cdrdrv) -- C:\WINDOWS\system32\drivers\Cdrdrv.sys (Pinnacle Systems GmbH)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (ALCXSENS) -- C:\WINDOWS\system32\drivers\ALCXSENS.SYS (Sensaura)
DRV - (ASAPIW2K) -- C:\WINDOWS\system32\drivers\asapiW2k.sys (Pinnacle Systems GmbH)
DRV - (fasttx2k) -- C:\WINDOWS\system32\DRIVERS\fasttx2k.sys (Promise Technology, Inc.)
DRV - (VOBID) -- C:\WINDOWS\system32\DRIVERS\vobid.sys (Pinnacle Systems)
DRV - (tandpl) -- C:\WINDOWS\system32\drivers\tandpl.sys ()
DRV - (enodpl) -- C:\WINDOWS\system32\drivers\enodpl.sys ()
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (SWUSBFLT) -- C:\WINDOWS\system32\drivers\SWUSBFLT.SYS (Microsoft Corporation)
DRV - (HIDSwvd) -- C:\WINDOWS\system32\drivers\HIDSwvd.sys (Microsoft Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.inhaltsverzeichnis24.de
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:5643
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.inhaltsverzeichnis24.de"
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.08.07 23:13:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.11\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.08.08 11:30:34 | 000,000,000 | ---D | M]
[2009.12.03 00:26:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Mozilla\Extensions
[2010.08.16 12:03:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Mozilla\Firefox\Profiles\77cg6fkp.default\extensions
[2010.04.11 12:17:38 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Mozilla\Firefox\Profiles\77cg6fkp.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.01.31 22:17:39 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Mozilla\Firefox\Profiles\77cg6fkp.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2010.07.30 17:13:48 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Mozilla\Firefox\Profiles\77cg6fkp.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.03.18 21:15:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Mozilla\Firefox\Profiles\77cg6fkp.default\extensions\piclens@cooliris.com
[2009.12.10 18:50:51 | 000,002,252 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Mozilla\Firefox\Profiles\77cg6fkp.default\searchplugins\askcom.xml
[2010.08.16 12:03:51 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2010.07.26 18:44:17 | 000,000,000 | ---D | M] (Adobe Flash Plugin) -- C:\Programme\Mozilla Firefox\extensions\{1CE11043-9A15-4207-A565-0C94C42D590D}
[2009.11.03 04:14:39 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2009.11.03 04:14:39 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2009.11.03 04:14:39 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2009.11.03 04:14:39 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2009.11.03 04:14:39 | 000,000,801 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2010.08.07 15:40:42 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (FG2CatchUrl) - {1F364306-AA45-47B5-9F9D-39A8B94E7EF1} - C:\Programme\FlashGet Network\FlashGet universal\ComDlls\bhoCATCH.dll (FlashGet)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask.com)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AVMWlanClient] C:\Programme\avmwlanstick\WLanGUI.exe (AVM Berlin)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe (Microsoft Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.DLL (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe ()
O4 - HKLM..\Run: [Ptipbmf] C:\WINDOWS\System32\ptipbmf.dll (Promise Technology, Inc.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TrayServer] C:\Programme\MAGIX\Video_deluxe_15_Plus\Trayserver.exe (MAGIX AG)
O4 - HKCU..\Run: [AlcoholAutomount] C:\Programme\Alcohol Soft\Alcohol 120\axcmd.exe (Alcohol Soft Development Team)
O4 - HKCU..\Run: [InstantTray] C:\Programme\Pinnacle\Shared Files\InstantCDDVD\PCLETray.exe (Pinnacle Systems)
O4 - HKCU..\Run: [IW_Drop_Icon] C:\Programme\Pinnacle\InstantCDDVD\InstantWrite\iwctrl.exe (Pinnacle Systems GmbH.)
O4 - HKCU..\Run: [Steam] c:\programme\steam\steam.exe (Valve Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutorun = 0
O8 - Extra context menu item: &Download All by FlashGet - C:\Programme\FlashGet Network\FlashGet universal\ComDlls\Bhoall.htm ()
O8 - Extra context menu item: &Download by FlashGet - C:\Programme\FlashGet Network\FlashGet universal\ComDlls\Bholink.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Programme\WinHTTrack\WinHTTrackIEBar.dll ()
O9 - Extra 'Tools' menuitem : Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\Programme\WinHTTrack\WinHTTrackIEBar.dll ()
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-0016-0000-0018-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_18-windows-i586.cab (Java Plug-in 1.6.0_18)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.12.03 23:46:47 | 000,000,030 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{1c628488-261c-11df-9dfc-0011d88d9a4e}\Shell\AutoRun\command - "" = L:\Get_Started_for_Win.exe -- File not found
O33 - MountPoints2\{7df5d9c0-4017-11df-9e1d-0011d88d9a4e}\Shell - "" = AutoRun
O33 - MountPoints2\{7df5d9c0-4017-11df-9e1d-0011d88d9a4e}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{7df5d9c0-4017-11df-9e1d-0011d88d9a4e}\Shell\AutoRun\command - "" = N:\LaunchU3.exe -- File not found
O33 - MountPoints2\N\Shell - "" = AutoRun
O33 - MountPoints2\N\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\N\Shell\AutoRun\command - "" = N:\LaunchU3.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010.08.16 00:05:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\G DATA
[2010.08.15 23:53:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Desktop\Virus Log
[2010.08.15 23:49:12 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Mohi\Recent
[2010.08.15 23:46:46 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner
[2010.08.15 17:40:23 | 000,000,000 | ---D | C] -- C:\!KillBox
[2010.08.12 19:46:02 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010.08.12 19:36:29 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\AskToolbar
[2010.08.08 22:54:25 | 011,508,680 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Mohi\Desktop\windowstool.exe
[2010.08.08 11:25:45 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll
[2010.08.07 23:16:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Macromedia
[2010.08.07 23:13:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\Mozilla
[2010.08.07 23:13:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Mozilla
[2010.08.07 18:36:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Avira
[2010.08.07 18:33:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010.08.07 18:29:16 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2010.08.07 18:29:11 | 000,124,784 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2010.08.07 18:29:11 | 000,045,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntdd.sys
[2010.08.07 18:29:11 | 000,022,360 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntmgr.sys
[2010.08.07 18:29:10 | 000,000,000 | ---D | C] -- C:\Programme\Avira
[2010.08.07 18:29:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2010.08.07 17:19:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\AdobeStockPhotos
[2010.08.07 16:50:41 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010.08.07 16:28:00 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2010.08.07 16:27:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\de
[2010.08.07 16:27:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2010.08.07 16:23:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2010.08.07 16:18:38 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2010.08.07 16:11:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\Meine empfangenen Dateien
[2010.07.30 18:03:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\WMTools Downloaded Files
[2010.07.30 17:16:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\Eigen Musik
[2010.07.30 17:13:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\DVDVideoSoftIEHelpers
[2010.07.30 17:13:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\DVDVideoSoft
[2010.07.30 17:12:32 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DVDVideoSoft
[2010.07.30 17:12:31 | 000,000,000 | ---D | C] -- C:\Programme\DVDVideoSoft
[2010.07.26 19:52:23 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.07.26 19:52:20 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.07.26 19:52:20 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2010.07.26 19:51:47 | 006,153,352 | ---- | C] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\Mohi\Desktop\mbam146-setup.exe
[2010.07.26 18:44:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\xfmbpirvt
[2010.07.26 18:44:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\8447BF5053605387DCCA9E8071F58735
[2010.07.26 13:19:12 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\WINDOWS\System32\devil.dll
[2010.07.26 13:19:12 | 000,369,152 | ---- | C] (The Public) -- C:\WINDOWS\System32\avisynth.dll
[2010.07.26 13:19:12 | 000,369,152 | ---- | C] (The Public) -- C:\WINDOWS\System32\avisynth.dll
[2010.07.26 13:19:01 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\yv12vfw.dll
[2010.07.26 13:19:01 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\i420vfw.dll
[2010.07.26 13:19:01 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\WINDOWS\System32\i420vfw.dll
[2010.07.26 13:18:57 | 000,000,000 | ---D | C] -- C:\Programme\AviSynth 2.5
[2010.07.26 13:18:37 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll
[2010.07.26 13:18:37 | 000,186,880 | RHS- | C] (RadLight) -- C:\WINDOWS\System32\RLOgg.ax
[2010.07.26 13:18:37 | 000,161,792 | RHS- | C] (Gabest) -- C:\WINDOWS\System32\RealMediaDX.ax
[2010.07.26 13:18:37 | 000,092,672 | RHS- | C] (RadLight) -- C:\WINDOWS\System32\RLVorbisDec.ax
[2010.07.26 13:18:37 | 000,090,112 | RHS- | C] (-) -- C:\WINDOWS\System32\TTADSSplitter.ax
[2010.07.26 13:18:37 | 000,090,112 | RHS- | C] (-) -- C:\WINDOWS\System32\TTADSDecoder.ax
[2010.07.26 13:18:37 | 000,067,584 | RHS- | C] (RadLight, LLC) -- C:\WINDOWS\System32\RLTheoraDec.ax
[2010.07.26 13:18:36 | 000,216,064 | RHS- | C] (MONOGRAM Multimedia, s.r.o.) -- C:\WINDOWS\System32\nbDX.dll
[2010.07.26 13:18:36 | 000,169,472 | RHS- | C] (Gabest) -- C:\WINDOWS\System32\MatroskaDX.ax
[2010.07.26 13:18:36 | 000,163,328 | RHS- | C] (Gabest) -- C:\WINDOWS\System32\flvDX.dll
[2010.07.26 13:18:36 | 000,031,232 | RHS- | C] (Hans Mayerl) -- C:\WINDOWS\System32\msfDX.dll
[2010.07.26 13:18:35 | 000,179,200 | RHS- | C] (Gabest) -- C:\WINDOWS\System32\DiracSplitter.ax
[2010.07.26 13:18:35 | 000,123,904 | RHS- | C] (CoreCodec) -- C:\WINDOWS\System32\AVCDX.ax
[2010.07.26 13:17:59 | 000,000,000 | ---D | C] -- C:\Programme\eRightSoft
[2010.07.26 12:47:38 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Apple Computer
[2010.07.26 12:38:27 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime
[2010.07.26 12:38:25 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple Computer
[2010.07.26 12:37:50 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Apple
[2010.07.26 12:37:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\Apple
[2010.07.26 12:37:24 | 000,000,000 | ---D | C] -- C:\Programme\Apple Software Update
[2010.07.26 12:37:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Apple
[2010.07.26 12:37:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\Apple Computer
[2010.07.17 16:48:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\Pro Cycling Manager 2007
[2010.07.17 16:48:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Pro Cycling Manager 2007
[2010.07.17 14:28:54 | 002,915,944 | ---- | C] (Protection Technology) -- C:\WINDOWS\System32\drivers\appdrv01.sys
[2010.07.17 14:28:54 | 000,304,528 | ---- | C] (Protection Technology) -- C:\WINDOWS\System32\appdrvrem01.exe
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.08.16 12:56:29 | 000,768,000 | ---- | M] () -- C:\WINDOWS\System32\drivers\xhofoq.sys
[2010.08.16 12:32:36 | 000,013,646 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.08.16 12:32:21 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT
[2010.08.16 12:32:17 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.08.16 12:30:57 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Mohi\ntuser.ini
[2010.08.16 12:30:56 | 004,456,448 | -H-- | M] () -- C:\Dokumente und Einstellungen\Mohi\NTUSER.DAT
[2010.08.16 12:01:06 | 000,000,224 | ---- | M] () -- C:\WINDOWS\tasks\Scheduled Update for Ask Toolbar.job
[2010.08.15 23:46:49 | 000,000,654 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\CCleaner.lnk
[2010.08.15 18:38:35 | 000,000,801 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.08.15 18:38:35 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.08.15 18:38:35 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2010.08.15 17:34:02 | 001,039,764 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.08.15 17:34:02 | 000,448,470 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2010.08.15 17:34:02 | 000,432,356 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.08.15 17:34:02 | 000,079,910 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2010.08.15 17:34:02 | 000,067,312 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.08.12 20:03:34 | 000,262,232 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.08.07 23:31:11 | 011,508,680 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Mohi\Desktop\windowstool.exe
[2010.08.07 18:29:51 | 000,001,671 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk
[2010.08.07 17:06:05 | 000,082,416 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
[2010.08.07 16:53:07 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010.08.07 16:22:50 | 000,251,712 | -HS- | M] () -- C:\ntldr
[2010.08.07 15:45:34 | 000,000,668 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\Verknüpfung mit mbam.lnk
[2010.07.30 18:01:06 | 000,026,624 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.07.30 17:13:42 | 000,000,906 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\DVDVideoSoft Free Studio.lnk
[2010.07.27 08:29:42 | 008,503,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll
[2010.07.26 19:52:25 | 000,000,676 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.26 19:51:52 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Dokumente und Einstellungen\Mohi\Desktop\mbam146-setup.exe
[2010.07.26 19:47:38 | 000,363,520 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\xplore2.exe
[2010.07.26 19:01:33 | 000,001,027 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\Pro Cycling Manager 2007.lnk
[2010.07.26 18:49:22 | 000,363,520 | ---- | M] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\tem.com
[2010.07.26 13:18:39 | 000,001,653 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SUPER © Uninstall.lnk
[2010.07.26 13:18:39 | 000,001,629 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SUPER ©.lnk
[2010.07.26 12:39:01 | 000,001,584 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\QuickTime Player.lnk
[2010.07.17 14:28:54 | 002,915,944 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\drivers\appdrv01.sys
[2010.07.17 14:28:54 | 000,304,528 | ---- | M] (Protection Technology) -- C:\WINDOWS\System32\appdrvrem01.exe
[8 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.08.15 23:46:48 | 000,000,654 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\CCleaner.lnk
[2010.08.15 18:10:36 | 000,731,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\avenger.exe
[2010.08.07 18:29:51 | 000,001,671 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira AntiVir Control Center.lnk
[2010.08.07 15:45:34 | 000,000,668 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\Verknüpfung mit mbam.lnk
[2010.07.30 17:13:37 | 000,000,906 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\DVDVideoSoft Free Studio.lnk
[2010.07.26 19:52:25 | 000,000,676 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.07.26 19:47:38 | 000,363,520 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\xplore2.exe
[2010.07.26 19:01:33 | 000,001,027 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\Pro Cycling Manager 2007.lnk
[2010.07.26 18:49:22 | 000,363,520 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Desktop\tem.com
[2010.07.26 18:47:14 | 000,768,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\xhofoq.sys
[2010.07.26 18:33:23 | 000,012,359 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\hs_err_pid3248.log
[2010.07.26 13:19:01 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\AVSredirect.dll
[2010.07.26 13:18:39 | 000,001,653 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SUPER © Uninstall.lnk
[2010.07.26 13:18:39 | 000,001,629 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\SUPER ©.lnk
[2010.07.26 13:18:37 | 000,107,520 | RHS- | C] () -- C:\WINDOWS\System32\RLMPCDec.ax
[2010.07.26 13:18:37 | 000,070,656 | RHS- | C] () -- C:\WINDOWS\System32\RLAPEDec.ax
[2010.07.26 13:18:37 | 000,051,712 | RHS- | C] () -- C:\WINDOWS\System32\RLSpeexDec.ax
[2010.07.26 13:18:36 | 000,120,832 | RHS- | C] () -- C:\WINDOWS\System32\MPCDx.ax
[2010.07.26 13:18:36 | 000,097,280 | RHS- | C] () -- C:\WINDOWS\System32\FLACDX.ax
[2010.07.26 13:18:35 | 000,227,328 | RHS- | C] () -- C:\WINDOWS\System32\ac3DX.ax
[2010.07.26 13:18:35 | 000,175,104 | RHS- | C] () -- C:\WINDOWS\System32\CoreAAC.ax
[2010.07.26 13:18:35 | 000,081,920 | RHS- | C] () -- C:\WINDOWS\System32\aac_parser.ax
[2010.07.26 12:39:01 | 000,001,584 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\QuickTime Player.lnk
[2010.05.17 17:48:52 | 000,120,200 | ---- | C] () -- C:\WINDOWS\System32\DLLDEV32i.dll
[2010.05.17 17:48:27 | 000,007,119 | ---- | C] () -- C:\WINDOWS\mgxoschk.ini
[2010.05.16 21:42:05 | 000,063,684 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\wshlm.dll
[2010.04.11 13:11:58 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2010.04.04 20:53:22 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2010.04.04 20:53:13 | 000,022,328 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\PnkBstrK.sys
[2010.04.04 20:39:39 | 000,000,311 | ---- | C] () -- C:\WINDOWS\game.ini
[2010.03.26 02:22:43 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2010.03.17 22:40:41 | 000,000,029 | ---- | C] () -- C:\WINDOWS\CAI.INI
[2010.03.02 20:25:03 | 000,000,478 | ---- | C] () -- C:\WINDOWS\uninstall_scenery_germany_1.ini
[2010.02.13 18:02:28 | 000,007,552 | ---- | C] () -- C:\WINDOWS\System32\drivers\enodpl.sys
[2010.02.13 18:02:28 | 000,004,736 | ---- | C] () -- C:\WINDOWS\System32\drivers\tandpl.sys
[2010.02.02 19:28:44 | 000,010,752 | ---- | C] () -- C:\WINDOWS\System32\BASSMOD.dll
[2010.01.17 00:00:04 | 000,000,029 | ---- | C] () -- C:\WINDOWS\Battle.ini
[2009.12.25 21:24:53 | 000,000,082 | ---- | C] () -- C:\WINDOWS\MTB.INI
[2009.12.10 22:14:39 | 000,026,624 | ---- | C] () -- C:\Dokumente und Einstellungen\Mohi\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.12.03 00:16:25 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2009.12.03 00:16:22 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2009.12.03 00:16:14 | 000,000,452 | ---- | C] () -- C:\WINDOWS\alsndmgr.ini
[2009.12.03 00:15:12 | 000,005,278 | ---- | C] () -- C:\WINDOWS\Ascd_tmp.ini
[2009.12.03 00:15:11 | 000,005,824 | ---- | C] () -- C:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2007.12.05 09:11:00 | 001,703,936 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2007.12.05 09:11:00 | 001,474,560 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2007.12.05 09:11:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2007.12.05 09:11:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2007.12.05 09:11:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2002.02.27 18:28:16 | 000,138,752 | ---- | C] () -- C:\WINDOWS\System32\MASE32.DLL
[2002.02.27 18:28:16 | 000,057,856 | ---- | C] () -- C:\WINDOWS\System32\MASD32.DLL
[2002.02.27 18:28:14 | 000,196,096 | ---- | C] () -- C:\WINDOWS\System32\MACD32.DLL
[2002.02.27 18:28:14 | 000,136,192 | ---- | C] () -- C:\WINDOWS\System32\MAMC32.DLL
[2002.02.27 18:28:14 | 000,027,648 | ---- | C] () -- C:\WINDOWS\System32\MA32.DLL
[2002.01.01 01:54:31 | 000,722,416 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[1999.01.21 12:14:16 | 000,000,064 | ---- | C] () -- C:\WINDOWS\System32\wsbasyw.dll
========== LOP Check ==========
[2009.12.14 20:50:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Pro
[2010.05.18 16:47:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2010.07.26 18:44:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\8447BF5053605387DCCA9E8071F58735
[2010.07.17 16:15:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\BITS
[2010.07.17 12:26:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\BitTorrent
[2002.01.01 01:54:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\DAEMON Tools Pro
[2010.07.30 17:13:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\DVDVideoSoftIEHelpers
[2010.07.01 18:50:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\gtk-2.0
[2010.08.16 12:43:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\ICQ
[2010.05.18 16:49:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\MAGIX
[2010.01.02 13:09:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Meine Die Schlacht um Mittelerde™ II-Dateien
[2010.07.14 15:24:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\PowerChallenge
[2010.07.26 20:52:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Pro Cycling Manager 2007
[2010.07.17 13:28:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Pro Cycling Manager 2008 - Demo
[2010.03.26 02:28:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\Sierra
[2009.12.30 12:17:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\SPORE
[2010.04.22 19:27:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\TS3Client
[2010.08.16 12:01:06 | 000,000,224 | ---- | M] () -- C:\WINDOWS\Tasks\Scheduled Update for Ask Toolbar.job
========== Purity Check ==========
< End of report >
--- --- ---
OTL Logfile: Code:
OTL Extras logfile created on: 16.08.2010 12:47:05 - Run 1
OTL by OldTimer - Version 3.2.10.0 Folder = C:\Dokumente und Einstellungen\Mohi\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.023,00 Mb Total Physical Memory | 523,00 Mb Available Physical Memory | 51,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 82,00% Paging File free
Paging file location(s): C:\pagefile.sys 1536 3072 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 111,80 Gb Total Space | 5,53 Gb Free Space | 4,95% Space Free | Partition Type: NTFS
D: Drive not present or media not loaded
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
Unable to calculate disk information.
I: Drive not present or media not loaded
Computer Name: MOHITV
Current User Name: Mohi
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Programme\Microsoft Office\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\ICQ6.5\ICQ.exe" = C:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"C:\Programme\BitTorrent\bittorrent.exe" = C:\Programme\BitTorrent\bittorrent.exe:*:Enabled:BitTorrent -- (BitTorrent, Inc.)
"C:\Programme\bomberclone\bomberclone.exe" = C:\Programme\bomberclone\bomberclone.exe:*:Enabled:bomberclone -- ()
"C:\Programme\FlashGet Network\FlashGet universal\FlashGet.exe" = C:\Programme\FlashGet Network\FlashGet universal\FlashGet.exe:*:Enabled:Flashget2 -- (FLASHGET)
"C:\Programme\FlashGet Network\FlashGet universal\LiveUpdate.exe" = C:\Programme\FlashGet Network\FlashGet universal\LiveUpdate.exe:*:Enabled:FGLiveUpdate -- File not found
"C:\Programme\FlashGet Network\FlashGet universal\LiveUpdateEx.exe" = C:\Programme\FlashGet Network\FlashGet universal\LiveUpdateEx.exe:*:Enabled:FGLiveUpdateEx -- File not found
"C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat" = C:\Programme\Electronic Arts\Die Schlacht um Mittelerde II\game.dat:*:Enabled:Die Schlacht um Mittelerde™ II -- (Electronic Arts Inc.)
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Programme\Battlefield 1942\BF1942_w32ded.exe" = C:\Programme\Battlefield 1942\BF1942_w32ded.exe:*:Enabled:BF1942_w32ded -- ()
"C:\Programme\Microsoft Office\Office12\ONENOTE.EXE" = C:\Programme\Microsoft Office\Office12\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote -- (Microsoft Corporation)
"C:\Programme\Ubisoft\XIII\system\XIII.exe" = C:\Programme\Ubisoft\XIII\system\XIII.exe:*:Enabled:XIII -- ()
"C:\Programme\Ubisoft\Demo\James Cameron's AVATAR - DAS SPIEL (Demo)\bin\AvatarDemo.exe" = C:\Programme\Ubisoft\Demo\James Cameron's AVATAR - DAS SPIEL (Demo)\bin\AvatarDemo.exe:*:Enabled:James Cameron's AVATAR(tm): DAS SPIEL (Demo) -- (Ubisoft Entertainment)
"C:\Programme\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe" = C:\Programme\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe:*:Enabled:Call of Duty(R) 4 - Modern Warfare(TM) -- ()
"C:\Programme\Microsoft Games\Flight Simulator 9\fs9.exe" = C:\Programme\Microsoft Games\Flight Simulator 9\fs9.exe:*:Enabled:Microsoft Flight Simulator -- (Microsoft Corporation)
"C:\WINDOWS\system32\dpnsvr.exe" = C:\WINDOWS\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8-Server -- (Microsoft Corporation)
"C:\Programme\FSFDT\FWInn\FWINN.exe" = C:\Programme\FSFDT\FWInn\FWINN.exe:*:Enabled:FSInn Application -- ()
"C:\Programme\FSFDT\Control Panel\FSFDTCP.exe" = C:\Programme\FSFDT\Control Panel\FSFDTCP.exe:*:Enabled:FSFDT Control Panel -- (FS - French Dev Team)
"C:\Programme\Steam\Steam.exe" = C:\Programme\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Programme\Steam\steamapps\darkplot\counter-strike source\hl2.exe" = C:\Programme\Steam\steamapps\darkplot\counter-strike source\hl2.exe:*:Enabled:hl2 -- ()
"C:\Programme\Steam\steamapps\darkplot\source sdk base\hl2.exe" = C:\Programme\Steam\steamapps\darkplot\source sdk base\hl2.exe:*:Enabled:hl2 -- ()
"C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\PowerChallenge\PowerSoccer\PowerSoccer.exe" = C:\Dokumente und Einstellungen\Mohi\Anwendungsdaten\PowerChallenge\PowerSoccer\PowerSoccer.exe:*:Enabled:PowerSoccer -- ()
"C:\Programme\Cyanide\[Demo] Tour de France saison 2008 - Der Offizielle Radsport Manager\Autorun\Exe\Autorun.exe" = C:\Programme\Cyanide\[Demo] Tour de France saison 2008 - Der Offizielle Radsport Manager\Autorun\Exe\Autorun.exe:*:Enabled:[Demo] Tour de France saison 2008 - Der Offizielle Radsport Manager - AutoRun -- ()
"C:\Programme\Cyanide\[Demo] Tour de France saison 2008 - Der Offizielle Radsport Manager\PCMDemo.exe" = C:\Programme\Cyanide\[Demo] Tour de France saison 2008 - Der Offizielle Radsport Manager\PCMDemo.exe:*:Enabled:pcm -- (Cyanide)
"C:\Programme\Cyanide\Pro Cycling Manager 2007\PCM.exe" = C:\Programme\Cyanide\Pro Cycling Manager 2007\PCM.exe:*:Enabled:Pro Cycling Manager 2007 -- (Cyanide)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{05D4E06A-15A5-4050-A756-CB3BE6E73B03}" = Just Flight 777 Professional v1.00
"{0AB76F69-E761-4CFA-B9B0-A1906B4E9E4B}" = WD Diagnostics
"{13F3917B56CD4C25848BDC69916971BB}" = DivX Converter
"{1545207E-C6F3-31D7-9918-BDBB65075FBF}" = Microsoft .NET Framework 3.5 Language Pack - deu
"{164360E5-0AAD-48AD-8A36-3F8A859FAB6F}" = PMDG747_400F
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{195FD5CB-5678-4394-B4FF-92FC0CE73913}" = aerosoft's - Piper Super Cub
"{1DC4E424-5D92-4C92-B1E1-4BE4318E7136}" = James Cameron's AVATAR(tm): DAS SPIEL (Demo)
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"{26A24AE4-039D-4CA4-87B4-2F83216018FF}" = Java(TM) 6 Update 18
"{2758F387-D016-4725-9D03-AB039364DF3D}" = PMDG_747-400_Sound_Update
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}" = Die Schlacht um Mittelerde™ II
"{2B295003-2B0C-48E7-84CC-8762E7301CF7}" = RealAir Simulations SF.260
"{304DAE83-906F-4005-BA09-2870349ABD14}" = PMDG 747-400 FS9 Update V1R12 (Unifies to FSX)
"{34BDC9DA-9320-491C-AA40-B0D98A0EBA9C}" = aerosoft's - Mega Airport Frankfurt - FS2004
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3FC7CBBC4C1E11DCA1A752EA55D89593}" = DivX Version Checker
"{42BC0474-6E50-464A-8183-5E3D32E41B1B}" = XIII
"{469E49E7-E1C4-4B4B-AD9D-4A613F309306}" = PMDGMD11_FS9_PW_JL
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{541DEAC0-5F3D-45E6-B7CB-94ECF3B96748}" = Skype web features
"{553255F3-78FD-40F1-A6F8-6882140265FE}" = Apple Application Support
"{5AE1B733-291D-41A6-8399-EDA07155C12F}" = Biathlon Champion
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6DED41BC-C9EF-4330-B4E5-46CB2C5C6E2D}" = No23 Recorder
"{6F405865-2269-40E7-9D45-7832DB75CE29}" = PMDGMD11_FS9_GE_LH
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{786C5747-1033-0000-B58E-000000000001}" = Adobe Stock Photos 1.0
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"{8A387122-7890-4A4F-8484-F3295D2373B5}-FS2004" = aerosoft's - Scenery Germany 1 - FS2004
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8BA8CE06-0C92-4A44-9924-2614DCD77F20}" = PMDG MD-11 (FS9 version of COMBO)
"{8EDBA74D-0686-4C99-BFDD-F894678E5B39}" = Adobe Common File Installer
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (German) 12
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{901C0407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Access 2003 Runtime
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{9309DD7E-EBFE-3C95-8B47-30D3A012F606}" = Microsoft .NET Framework 2.0 Service Pack 1 Language Pack - DEU
"{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"{97679567-0095-464E-B5F2-E218A1CF3421}" = PMDG747_400 Queen of the Skies
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™
"{A01872BE-2123-4F1B-B295-E3D1774DC0C9}" = Pinnacle InstantCD/DVD Suite
"{A1071AEB-B0EF-3F5F-BC84-83A270EBE496}" = Microsoft .NET Framework 3.0 Service Pack 1 Language Pack - DEU
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A96E97134CA649888820BCDE5E300BBD}" = H.264 Decoder
"{AAC389499AEF40428987B3D30CFC76C9}" = MKV Splitter
"{AC11D085-DD5D-4A0B-BFCF-A8D7C5B5C50B}" = PMDGMD11_FS9_PW_DL1
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3 - Deutsch
"{AEF9DC35ADDF4825B049ACBFD1C6EB37}" = AAC Decoder
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B4322AED-A14D-4CC5-95A1-3FCEBC12BE8C}" = PL-Fragenkataloge
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Plus Web Player
"{B74D4E10-1033-0000-0000-000000000001}" = Adobe Bridge 1.0
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C388D147-CCBA-411C-B9FC-2CC1B4EFB240}" = Pirates of the Caribbean
"{C950420B-4182-49EA-850A-A6A2ABF06C6B}" = Marvell Miniport Driver
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D0E5A0A5-9C8C-4389-893E-B9ED05AE98E0}" = aerosoft's - Manhattan - FS2004
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D4FB2856-E6EB-4864-A241-4587ED21A11B}" = aerosoft's - Brussels 2007
"{D9E29D1E-6852-4A44-B044-6F8EF187A7EA}" = Biathlon 2004
"{DF315348-721C-40B8-BAE2-58C6C7D935A2}" = Empire Earth II
"{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"{E9787678-1033-0000-8E67-000000000001}" = Adobe Help Center 1.0
"{FA805C9A-03D4-4063-8725-7BB5D28751C7}" = PMDGMD11_FS9_GE_AA
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"4Captains" = 4Captains
"A346 Livery Pack" = A346 Livery Pack
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Photoshop CS2 - {236BB7C4-4419-42FD-0409-1E257A25E34D}" = Adobe Photoshop CS2
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Airbus Series Vol.1 Deluxe (FS2004)" = Airbus Series Vol.1 Deluxe (FS2004)
"Audacity_is1" = Audacity 1.2.6
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"AVMWLANCLI" = AVM FRITZ!WLAN
"AVS100E" = Digital Camera Manager (E)
"BitTorrent" = BitTorrent
"Blitz2DDemo" = Blitz2DDemo
"Boeing 757 Professional 20061.0" = Boeing 757 Professional 2006
"Bomberclone" = Bomberclone
"Carenado C 152 II" = Carenado C 152 II
"Carenado Mooney M20J" = Carenado Mooney M20J
"CCleaner" = CCleaner
"Condor: The Competition Soaring Simulator" = Condor: The Competition Soaring Simulator 1.0.4
"Direct MIDI to MP3 Converter_is1" = Direct MIDI to MP3 Converter Version 6.1.2.43
"DivX Plus DirectShow Filters" = DivX Plus DirectShow Filters
"Firebird SQL Server D" = Firebird SQL Server - MAGIX Edition
"FlashGet 2.0" = FlashGet 2.0
"Flight Simulator 9.0" = Microsoft Flight Simulator 2004 - Das Jahrhundert der Luftfahrt
"FMS" = FMS
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.7
"FSFDT FSCopilot" = FSFDT FSCopilot
"FSFDT FSInn" = FSFDT FSInn
"GeoGebra" = GeoGebra
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{8A15B7D9-908A-4EF9-BA84-5AEDE61743EE}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch
"InstallShield_{931C37FC-594D-43A9-B10F-A2F2B1F03498}" = Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch
"InstallShield_{E48469CC-635E-4FD5-A122-1497C286D217}" = Call of Duty(R) 4 - Modern Warfare(TM)
"MAGIX 3D Maker D" = MAGIX 3D Maker (embeded)
"MAGIX Screenshare D" = MAGIX Screenshare 4.3.6.1987 (D)
"MAGIX Video deluxe 15 Plus D" = MAGIX Video deluxe 15 Plus 8.0.0.62 (D)
"MAGIX Xtreme Foto Designer 6 D" = MAGIX Xtreme Foto Designer 6 6.0.25.0 (D)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 Language Pack - deu" = Microsoft .NET Framework 3.5 Language Pack - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.11)" = Mozilla Firefox (3.5.11)
"MP3-DJ_is1" = MP3-DJ 11.2.0
"Mufin MusicFinder Base D" = Mufin MusicFinder Base 1.5.3.255 (D)
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Pro Cycling Manager 2007" = Pro Cycling Manager 2007
"Pro Cycling Manager 2007_is1" = Pro Cycling Manager 2007
"Pro Cycling Manager 2008 - Demo_is1" = [Demo] Tour de France saison 2008 - Der Offizielle Radsport Man
"Repaint Package" = Repaint Package
"Rise And Fall" = Rise And Fall (remove only)
"Slim USB2 Scanner" = Slim USB2 Scanner
"Steam App 215" = Source SDK Base
"Steam App 240" = Counter-Strike: Source
"Steam App 400" = Portal
"StrePla 5" = StrePla 5
"SUPER ©" = SUPER © Version 2010.bld.38 (May 2, 2010)
"SystemRequirementsLab" = System Requirements Lab
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Uninstall_is1" = Uninstall 1.0.0.1
"Vehicle Simulator_is1" = Vehicle Simulator
"Virtual Sailor_is1" = Virtual Sailor 7
"WIC" = Windows Imaging Component
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.6.9
"Wings of Power: Focke-Wulf 190 "Butcher Bird"" = Wings of Power: Focke-Wulf 190 "Butcher Bird"
"WinHTTrack Website Copier_is1" = WinHTTrack Website Copier 3.43-9C
"WinRAR archiver" = WinRAR
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Airbus Series Vol.2 (FS2004)" = Airbus Series Vol.2 (FS2004)
"Java TopTask" = Java TopTask
"Power Loader" = Power Challenge Game Plugin
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 06.03.2010 10:16:37 | Computer Name = MOHITV | Source = Microsoft Flight Simulator 9.0 | ID = 1000
Description =
Error - 08.03.2010 12:37:36 | Computer Name = MOHITV | Source = crypt32 | ID = 131080
Description = Der automatische Aktualisierungsabruf der Drittanbieterstammlisten-Sequenznummer
von <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
ist fehlgeschlagen mit dem Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung
zurückgegeben. .
Error - 14.03.2010 16:20:59 | Computer Name = MOHITV | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung fs9.exe, Version 9.1.0.40901, fehlgeschlagenes
Modul terrain.dll, Version 9.1.0.40901, Fehleradresse 0x000276d1.
Error - 21.03.2010 13:13:55 | Computer Name = MOHITV | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 1.9.1.3685, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.03.2010 13:14:04 | Computer Name = MOHITV | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung ICQ.exe, Version 6.5.0.2024, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 21.03.2010 13:14:05 | Computer Name = MOHITV | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung ICQ.exe, Version 6.5.0.2024, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 08.04.2010 14:44:27 | Computer Name = MOHITV | Source = Microsoft Flight Simulator 9.0 | ID = 1000
Description =
========== Last 10 Event Log Errors ==========
Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt!
< End of report >
--- --- --- |
