Upps, iwie habe ich ja den Extra-Log vergessen :headbang:
Hier nochmal ein ganz aktueller Bericht, den oberen bitte nicht beachten ;)
OTL Logfile: Code:
OTL logfile created on: 08.09.2010 21:43:38 - Run 3
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Dokumente und Einstellungen\Ich\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 49,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 72,00% Paging File free
Paging file location(s): C:\pagefile.sys 1024 1024 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 72,65 Gb Total Space | 19,03 Gb Free Space | 26,19% Space Free | Partition Type: FAT32
Drive D: | 73,45 Gb Total Space | 50,81 Gb Free Space | 69,17% Space Free | Partition Type: NTFS
Drive E: | 455,16 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: FINN
Current User Name: Ich
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Thunderbird\thunderbird.exe (Mozilla Messaging)
PRC - D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - D:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.)
PRC - C:\Programme\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
PRC - C:\Programme\Microsoft IntelliType Pro\dpupdchk.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\Macromed\Shockwave 10\PostUpdate.exe ()
PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation)
PRC - C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
PRC - C:\Programme\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\mmc.exe (Microsoft Corporation)
PRC - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
PRC - C:\WINDOWS\system32\dfrgfat.exe (Microsoft Corporation und Executive Software International, Inc.)
PRC - C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)
PRC - D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (T-Online International AG, Marmiko IT-Solutions GmbH)
PRC - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkCalRem.exe (Microsoft® Corporation)
========== Modules (SafeList) ==========
MOD - C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)
MOD - C:\Programme\TuneUp WinStyler\WinStylerThemeHelper.dll ()
========== Win32 Services (SafeList) ==========
SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (cvhsvc) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Virtualization Handler\CVHSVC.EXE (Microsoft Corporation)
SRV - (osppsvc) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE (Microsoft Corporation)
SRV - (sftvsa) -- C:\Programme\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation)
SRV - (sftlist) -- C:\Programme\Microsoft Application Virtualization Client\sftlist.exe (Microsoft Corporation)
SRV - (UserAccess7) SecuROM User Access Service (V7) -- C:\WINDOWS\system32\UAService7.exe (Sony DADC Austria AG.)
SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe (Macrovision Corporation)
SRV - (TUWinStylerThemeSvc) -- C:\Programme\TuneUp WinStyler\WinStylerThemeSvc.exe (TuneUp Software GmbH)
========== Driver Services (SafeList) ==========
DRV - (USBAAPL) -- C:\WINDOWS\System32\Drivers\usbaapl.sys File not found
DRV - (upperdev) -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys File not found
DRV - (SANDRA) -- D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\Sandra.sys File not found
DRV - (Point32) -- C:\WINDOWS\System32\DRIVERS\point32.sys File not found
DRV - (ovt530) -- C:\WINDOWS\System32\Drivers\ov530vid.sys File not found
DRV - (MTOnlPktAlyX) -- D:\PROGRA~1\T-Online\T-ONLI~1\BASIS-~1\Basis1\MTOnlPktAlyX.SYS File not found
DRV - (int15.sys) -- C:\Programme\Acer\eRecovery\int15.sys File not found
DRV - (DMSKSSRh) -- C:\DOKUME~1\Ich\LOKALE~1\Temp\DMSKSSRh.sys File not found
DRV - (catchme) -- C:\cofi\catchme.sys File not found
DRV - (NuidFltr) -- C:\WINDOWS\system32\drivers\nuidfltr.sys (Microsoft Corporation)
DRV - (nmwcd) -- C:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia)
DRV - (Sftredir) -- C:\WINDOWS\system32\drivers\Sftredirxp.sys (Microsoft Corporation)
DRV - (sftvol) -- C:\Programme\Microsoft Application Virtualization Client\drivers\SftVolXP.sys (Microsoft Corporation)
DRV - (sftplay) -- C:\Programme\Microsoft Application Virtualization Client\drivers\sftplayxp.sys (Microsoft Corporation)
DRV - (sftfs) -- C:\Programme\Microsoft Application Virtualization Client\drivers\SftFSXP.sys (Microsoft Corporation)
DRV - (sptd) -- C:\WINDOWS\system32\drivers\sptd.sys (Duplex Secure Ltd.)
DRV - (ssmdrv) -- C:\WINDOWS\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (AtiHdmiService) -- C:\WINDOWS\system32\drivers\AtiHdmi.sys (ATI Research Inc.)
DRV - (pccsmcfd) -- C:\WINDOWS\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (nm) -- C:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)
DRV - (MPE) -- C:\WINDOWS\system32\drivers\mpe.sys (Microsoft Corporation)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\WINDOWS\system32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\Hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (amdide) -- C:\WINDOWS\system32\DRIVERS\amdide.sys (Advanced Micro Devices)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (MIINPazX) -- C:\Programme\Gemeinsame Dateien\Marmiko Shared\MInfraIS\MIINPazx.sys (T-Online International AG, Marmiko IT-Solutions GmbH)
DRV - (AVerA700) -- C:\WINDOWS\system32\drivers\AVerBDA3x.sys (AVerMedia TECHNOLOGIES, Inc.)
DRV - (sfvfs02) StarForce Protection VFS Driver (version 2.x) -- C:\WINDOWS\System32\drivers\sfvfs02.sys (Protection Technology)
DRV - (NTIDrvr) -- C:\WINDOWS\system32\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV - (yukonwxp) -- C:\WINDOWS\system32\drivers\yk51x86.sys (Marvell)
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)
DRV - (SI3112r) -- C:\WINDOWS\system32\DRIVERS\SI3112r.sys (Silicon Image, Inc.)
DRV - (SiFilter) -- C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys (Silicon Image, Inc.)
DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtlnicxp.sys (Realtek Semiconductor Corporation )
DRV - (Afc) -- C:\WINDOWS\system32\drivers\afc.sys (Arcsoft, Inc.)
DRV - (HdAudAddService) -- C:\WINDOWS\system32\drivers\Hdaudio.sys (Windows (R) Server 2003 DDK provider)
DRV - (UBHelper) -- C:\WINDOWS\System32\drivers\UBHelper.sys ()
DRV - (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)
DRV - (SaiH0464) -- C:\WINDOWS\system32\drivers\SaiH0464.sys (Saitek)
DRV - (SaiNtBus) -- C:\WINDOWS\system32\drivers\SaiNtBus.sys (Saitek)
DRV - (SaiMini) -- C:\WINDOWS\system32\drivers\SaiMini.sys (Saitek)
DRV - (pfc) -- C:\WINDOWS\system32\drivers\pfc.sys (Padus, Inc.)
DRV - (viaagp1) -- C:\WINDOWS\system32\DRIVERS\viaagp1.sys (VIA Technologies, Inc.)
DRV - (BrPar) -- C:\WINDOWS\System32\drivers\BrPar.sys (Brother Industries Ltd.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = hxxp://www.google.com/ie
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://fullarticles.net
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP =
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "schueler.cc|travian.at|youtube.com"
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.1
FF - prefs.js..extensions.enabledItems: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}:7.3.3.42
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {35106bca-6c78-48c7-ac28-56df30b51d2a}:1.3.8
FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2010.09.01 03:44:34 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.12\extensions\\Components: D:\Programme\Mozilla Firefox\components [2010.09.08 18:34:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.5.12\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2010.09.08 18:34:04 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2007.05.01 16:30:44 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins [2008.09.05 15:05:18 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Programme\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2010.09.01 03:44:32 | 000,000,000 | ---D | M]
[2010.04.13 14:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions
[2010.09.08 18:35:44 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2010.04.13 14:06:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions
[2010.04.13 14:35:58 | 000,000,000 | ---D | M] (Linkification) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}
[2010.09.06 16:07:58 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.08.19 23:50:02 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.09.01 04:39:28 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010.04.18 14:08:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\7wx31l7l.default\extensions\youtube2mp3@mondayx.de
[2010.09.08 16:16:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\9ochijs3.001\extensions
[2010.01.14 23:08:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions
[2010.04.11 18:03:30 | 000,000,000 | ---D | M] (Linkification) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}
[2010.09.06 16:07:58 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.04.11 15:12:12 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.03.17 14:48:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mozilla\Firefox\Profiles\cg7plwxo.default\extensions\Foxdie@tanjihay.com
O1 HOSTS File: ([2010.09.07 23:38:22 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AskBar BHO) - {201f27d4-3704-41d6-89c1-aa35e39143ed} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O2 - BHO: (SSVHelper Class) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (Skype Plug-In) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Programme\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - C:\Programme\AskBarDis\bar\bin\askBar.dll (Ask.com)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - No CLSID value found.
O4 - HKLM..\Run: [BluetoothAuthenticationAgent] C:\WINDOWS\System32\bthprops.cpl (Microsoft Corporation)
O4 - HKLM..\Run: [High Definition Audio Property Page Shortcut] C:\WINDOWS\System32\HdAShCut.exe (Windows (R) Server 2003 DDK provider)
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [itype] C:\Programme\Microsoft IntelliType Pro\itype.exe (Microsoft Corporation)
O4 - HKLM..\Run: [LaunchApp] C:\WINDOWS\Alaunch.exe (Acer Inc.)
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [ToADiMon.exe] D:\Programme\T-Online\T-Online_Software_6\Basis-Software\Basis1\ToADiMon.exe (T-Online International AG, Marmiko IT-Solutions GmbH)
O4 - HKCU..\Run: [ICQ] D:\Programme\ICQ7.0\ICQ.exe (ICQ, LLC.)
O4 - HKCU..\Run: [Steam] d:\programme\steam\steam.exe (Valve Corporation)
O4 - HKCU..\Run: [swg] C:\Programme\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O4 - HKCU..\RunOnce: [SWHelper] C:\WINDOWS\System32\Macromed\Shockwave 10\PostUpdate.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\Ich\Startmenü\Programme\Zubehör\Autostart\WKCALREM.LNK = C:\Programme\Gemeinsame Dateien\Microsoft Shared\Works Shared\WkCalRem.exe (Microsoft® Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9 - Extra 'Tools' menuitem : Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre6\bin\npjpi160_21.dll (Sun Microsystems, Inc.)
O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe File not found
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} hxxp://go.microsoft.com/fwlink/?linkid=39204 (Windows Genuine Advantage Validation Tool)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1135673099383 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_10-windows-i586.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\Explorer.EXE (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.10.22 07:38:32 | 000,000,050 | ---- | M] () - C:\AUTOEXEC.BAT -- [ FAT32 ]
O32 - AutoRun File - [2009.11.01 14:36:42 | 000,000,098 | R--- | M] () - E:\autorun.inf -- [ CDFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010.09.08 19:04:19 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe
[2010.09.08 18:15:05 | 000,926,032 | ---- | C] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\Norton_Removal_Tool.exe
[2010.09.08 17:14:52 | 014,668,664 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\IPx86_1031_8.0.225.0.exe
[2010.09.08 16:34:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Desktop\Microsoft IntelliPoint
[2010.09.08 16:32:15 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft IntelliType Pro
[2010.09.08 16:29:34 | 014,880,640 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\ITPx86_1031_8.0.225.0.exe
[2010.09.08 06:46:17 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Skype
[2010.09.08 06:46:12 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Skype
[2010.09.08 06:45:30 | 000,958,856 | ---- | C] (Skype Technologies S.A.) -- C:\Dokumente und Einstellungen\Ich\Desktop\SkypeSetup-Beta.exe
[2010.09.08 01:05:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\InstallShield
[2010.09.08 00:54:39 | 000,000,000 | -HSD | C] -- C:\Recycled
[2010.09.07 23:25:31 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2010.09.07 23:21:19 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2010.09.07 23:21:19 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2010.09.07 23:21:19 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2010.09.07 23:21:19 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2010.09.07 23:20:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010.09.07 23:16:35 | 000,000,000 | ---D | C] -- C:\Qoobox
[2010.09.07 23:04:36 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Ich\Recent
[2010.09.07 22:57:09 | 003,427,248 | ---- | C] (Piriform Ltd) -- C:\Dokumente und Einstellungen\Ich\Desktop\ccsetup235.exe
[2010.09.07 21:12:19 | 000,000,000 | ---D | C] -- C:\Programme\trend micro
[2010.09.07 21:11:23 | 000,000,000 | ---D | C] -- C:\rsit
[2010.09.07 18:28:14 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\helpsvc.exe
[2010.09.07 17:06:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Adobe
[2010.09.07 17:06:22 | 004,747,136 | ---- | C] (Adobe Systems Inc.) -- C:\Dokumente und Einstellungen\Ich\Desktop\Shockwave_Installer_Slim.exe
[2010.09.07 16:59:37 | 000,000,000 | ---D | C] -- C:\Programme\Windows Sidebar
[2010.09.07 16:59:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton
[2010.09.07 16:56:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NortonInstaller
[2010.09.07 16:54:13 | 132,049,776 | ---- | C] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\TT_159_SYMTB_TMD.exe
[2010.09.06 23:29:18 | 000,000,000 | ---D | C] -- C:\_OTL
[2010.09.06 22:16:47 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Malwarebytes
[2010.09.06 22:16:28 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.09.06 22:16:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.09.06 22:16:21 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010.09.06 22:15:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\MFTools
[2010.09.06 16:35:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mp3tag
[2010.09.06 16:07:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DVDVideoSoftIEHelpers
[2010.09.06 07:27:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\Neuer Ordner
[2010.09.01 21:27:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia Ovi Suite
[2010.09.01 04:05:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\NokiaAccount
[2010.09.01 03:50:49 | 000,000,000 | ---D | C] -- C:\WINDOWS\Globalization
[2010.09.01 03:50:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic
[2010.09.01 03:50:06 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Nokia
[2010.09.01 03:44:21 | 000,018,816 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\pccsmcfd.sys
[2010.09.01 03:44:11 | 000,000,000 | ---D | C] -- C:\Programme\PC Connectivity Solution
[2010.09.01 03:43:22 | 001,461,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wdfcoinstaller01009.dll
[2010.09.01 03:43:22 | 000,662,016 | ---- | C] (Nokia) -- C:\WINDOWS\System32\nmwcdcocls.dll
[2010.09.01 03:43:22 | 000,018,176 | ---- | C] (Nokia) -- C:\WINDOWS\System32\drivers\ccdcmb.sys
[2010.09.01 03:40:39 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache
[2010.08.21 18:33:32 | 000,000,000 | ---D | C] -- C:\FOUND.069
[2010.08.20 03:55:24 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe
[2010.08.20 03:55:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe
[2010.08.20 03:55:24 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe
[2010.08.11 04:42:15 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard Entertainment
[2010.08.11 04:41:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Blizzard
[2010.08.11 04:41:01 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\Blizzard Entertainment
[2010.08.10 05:25:54 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Ich\Desktop\Lil Wayne - The Blue Martian [Deluxe Edition] - Mixtape Evolution
[2007.05.31 19:23:56 | 001,673,576 | ---- | C] (Microsoft Corporation) -- C:\Programme\dsetup32.dll
[2007.05.31 19:23:56 | 000,503,144 | ---- | C] (Microsoft Corporation) -- C:\Programme\DXSETUP.exe
[2007.05.31 19:23:56 | 000,077,160 | ---- | C] (Microsoft Corporation) -- C:\Programme\DSETUP.dll
[3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.09.08 19:04:20 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Ich\Desktop\OTL.exe
[2010.09.08 18:50:22 | 000,012,718 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010.09.08 18:50:16 | 000,121,808 | ---- | M] () -- C:\WINDOWS\System32\ativvaxx.cap
[2010.09.08 18:47:56 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010.09.08 18:47:46 | 1609,093,120 | -HS- | M] () -- C:\hiberfil.sys
[2010.09.08 18:47:46 | 000,274,168 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010.09.08 18:46:32 | 000,004,661 | ---- | M] () -- C:\WINDOWS\bthservsdp.dat
[2010.09.08 18:46:28 | 015,466,496 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\ntuser.dat
[2010.09.08 18:46:28 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\Ich\ntuser.ini
[2010.09.08 18:22:10 | 000,071,688 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\GDIPFONTCACHEV1.DAT
[2010.09.08 18:15:06 | 000,926,032 | ---- | M] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\Norton_Removal_Tool.exe
[2010.09.08 18:14:12 | 000,897,643 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\registrycleaner_de.zip
[2010.09.08 17:15:04 | 014,668,664 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\IPx86_1031_8.0.225.0.exe
[2010.09.08 16:33:44 | 000,000,280 | ---- | M] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job
[2010.09.08 16:32:54 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01009.Wdf
[2010.09.08 16:29:46 | 014,880,640 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\ITPx86_1031_8.0.225.0.exe
[2010.09.08 06:46:20 | 000,001,872 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2010.09.08 06:45:32 | 000,958,856 | ---- | M] (Skype Technologies S.A.) -- C:\Dokumente und Einstellungen\Ich\Desktop\SkypeSetup-Beta.exe
[2010.09.08 03:34:32 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2010.09.08 03:30:18 | 000,505,776 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2010.09.08 03:30:18 | 000,481,956 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010.09.08 03:30:18 | 000,088,156 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010.09.08 03:30:16 | 001,151,674 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI
[2010.09.08 03:30:16 | 000,104,852 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2010.09.08 02:35:12 | 000,002,261 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Google Chrome.lnk
[2010.09.08 01:11:14 | 000,000,844 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Meine freigegebenen Ordner.lnk
[2010.09.08 01:05:16 | 000,000,226 | ---- | M] () -- C:\WINDOWS\Brownie.ini
[2010.09.08 01:05:16 | 000,000,023 | ---- | M] () -- C:\WINDOWS\BRDIAG.INI
[2010.09.08 01:05:16 | 000,000,011 | ---- | M] () -- C:\WINDOWS\BRVIDEO.INI
[2010.09.07 23:40:32 | 000,000,827 | ---- | M] () -- C:\WINDOWS\system.ini
[2010.09.07 23:25:38 | 000,000,339 | RHS- | M] () -- C:\boot.ini
[2010.09.07 22:58:46 | 000,000,562 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\CCleaner.lnk
[2010.09.07 22:57:14 | 003,427,248 | ---- | M] (Piriform Ltd) -- C:\Dokumente und Einstellungen\Ich\Desktop\ccsetup235.exe
[2010.09.07 22:55:06 | 003,840,033 | R--- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\cofi.exe
[2010.09.07 21:10:56 | 000,339,991 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe
[2010.09.07 18:02:34 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt10.sqm
[2010.09.07 18:02:34 | 000,000,232 | -H-- | M] () -- C:\sqmdata10.sqm
[2010.09.07 17:48:54 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt09.sqm
[2010.09.07 17:48:54 | 000,000,232 | -H-- | M] () -- C:\sqmdata09.sqm
[2010.09.07 17:35:32 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt08.sqm
[2010.09.07 17:35:32 | 000,000,232 | -H-- | M] () -- C:\sqmdata08.sqm
[2010.09.07 17:22:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt07.sqm
[2010.09.07 17:22:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata07.sqm
[2010.09.07 17:13:46 | 000,000,692 | ---- | M] () -- C:\WINDOWS\win.ini
[2010.09.07 17:13:46 | 000,000,222 | ---- | M] () -- C:\Boot.bak
[2010.09.07 17:08:46 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt06.sqm
[2010.09.07 17:08:46 | 000,000,232 | -H-- | M] () -- C:\sqmdata06.sqm
[2010.09.07 17:06:26 | 004,747,136 | ---- | M] (Adobe Systems Inc.) -- C:\Dokumente und Einstellungen\Ich\Desktop\Shockwave_Installer_Slim.exe
[2010.09.07 17:06:00 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt05.sqm
[2010.09.07 17:06:00 | 000,000,232 | -H-- | M] () -- C:\sqmdata05.sqm
[2010.09.07 17:00:38 | 000,000,232 | -H-- | M] () -- C:\sqmdata04.sqm
[2010.09.07 17:00:36 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt04.sqm
[2010.09.07 16:56:08 | 132,049,776 | ---- | M] (Symantec Corporation) -- C:\Dokumente und Einstellungen\Ich\Desktop\TT_159_SYMTB_TMD.exe
[2010.09.07 16:55:40 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt03.sqm
[2010.09.07 16:55:40 | 000,000,232 | -H-- | M] () -- C:\sqmdata03.sqm
[2010.09.07 16:42:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt02.sqm
[2010.09.07 16:42:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata02.sqm
[2010.09.07 16:28:42 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt01.sqm
[2010.09.07 16:28:42 | 000,000,232 | -H-- | M] () -- C:\sqmdata01.sqm
[2010.09.07 16:28:18 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt00.sqm
[2010.09.07 16:28:18 | 000,000,232 | -H-- | M] () -- C:\sqmdata00.sqm
[2010.09.07 08:27:10 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt19.sqm
[2010.09.07 08:27:10 | 000,000,232 | -H-- | M] () -- C:\sqmdata19.sqm
[2010.09.07 08:13:50 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt18.sqm
[2010.09.07 08:13:50 | 000,000,232 | -H-- | M] () -- C:\sqmdata18.sqm
[2010.09.07 08:00:30 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt17.sqm
[2010.09.07 08:00:30 | 000,000,232 | -H-- | M] () -- C:\sqmdata17.sqm
[2010.09.07 07:47:12 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt16.sqm
[2010.09.07 07:47:12 | 000,000,232 | -H-- | M] () -- C:\sqmdata16.sqm
[2010.09.07 07:33:58 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt15.sqm
[2010.09.07 07:33:58 | 000,000,232 | -H-- | M] () -- C:\sqmdata15.sqm
[2010.09.07 07:20:40 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt14.sqm
[2010.09.07 07:20:40 | 000,000,232 | -H-- | M] () -- C:\sqmdata14.sqm
[2010.09.07 07:07:06 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt13.sqm
[2010.09.07 07:07:06 | 000,000,232 | -H-- | M] () -- C:\sqmdata13.sqm
[2010.09.07 07:06:54 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt12.sqm
[2010.09.07 07:06:54 | 000,000,232 | -H-- | M] () -- C:\sqmdata12.sqm
[2010.09.07 02:13:26 | 000,000,244 | -H-- | M] () -- C:\sqmnoopt11.sqm
[2010.09.07 02:13:26 | 000,000,232 | -H-- | M] () -- C:\sqmdata11.sqm
[2010.09.06 22:16:34 | 000,000,556 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.09.06 22:15:32 | 000,050,477 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\defogger.exe
[2010.09.06 22:15:28 | 000,284,915 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Gmer.zip
[2010.09.06 22:14:50 | 000,388,197 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Load.exe
[2010.09.06 16:34:58 | 000,000,542 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mp3tag.lnk
[2010.09.06 16:07:44 | 000,000,819 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\DVDVideoSoft Free Studio.lnk
[2010.09.01 04:13:04 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
[2010.09.01 04:12:58 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_user_01_09_00.Wdf
[2010.09.01 04:07:14 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2010.09.01 04:07:14 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2010.09.01 03:50:42 | 000,001,880 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Player.lnk
[2010.09.01 03:49:10 | 000,001,673 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Suite.lnk
[2010.08.22 17:30:56 | 000,031,001 | ---- | M] () -- C:\Dokumente und Einstellungen\Ich\Desktop\JAck the Ripper.odt
[3 C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp files -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.09.08 18:14:15 | 000,897,643 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\registrycleaner_de.zip
[2010.09.08 16:33:42 | 000,000,280 | ---- | C] () -- C:\WINDOWS\tasks\Microsoft_Hardware_Launch_IType_exe.job
[2010.09.08 16:32:53 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_NuidFltr_01009.Wdf
[2010.09.08 06:46:19 | 000,001,872 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2010.09.08 03:02:59 | 000,001,355 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010.09.08 01:11:13 | 000,000,844 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Eigene Dateien\Meine freigegebenen Ordner.lnk
[2010.09.07 23:25:36 | 000,000,222 | ---- | C] () -- C:\Boot.bak
[2010.09.07 23:25:34 | 000,262,448 | RHS- | C] () -- C:\cmldr
[2010.09.07 23:21:19 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2010.09.07 23:21:19 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2010.09.07 23:21:19 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2010.09.07 23:21:19 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2010.09.07 23:21:19 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2010.09.07 22:58:45 | 000,000,562 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\CCleaner.lnk
[2010.09.07 22:55:05 | 003,840,033 | R--- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\cofi.exe
[2010.09.07 21:11:00 | 000,339,991 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\RSIT.exe
[2010.09.06 23:38:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt19.sqm
[2010.09.06 23:38:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata19.sqm
[2010.09.06 23:19:51 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt18.sqm
[2010.09.06 23:19:51 | 000,000,232 | -H-- | C] () -- C:\sqmdata18.sqm
[2010.09.06 23:15:54 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt17.sqm
[2010.09.06 23:15:54 | 000,000,232 | -H-- | C] () -- C:\sqmdata17.sqm
[2010.09.06 23:06:38 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt16.sqm
[2010.09.06 23:06:38 | 000,000,232 | -H-- | C] () -- C:\sqmdata16.sqm
[2010.09.06 22:53:08 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt15.sqm
[2010.09.06 22:53:08 | 000,000,232 | -H-- | C] () -- C:\sqmdata15.sqm
[2010.09.06 22:45:34 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt14.sqm
[2010.09.06 22:45:34 | 000,000,232 | -H-- | C] () -- C:\sqmdata14.sqm
[2010.09.06 22:16:32 | 000,000,556 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.09.06 22:15:31 | 000,050,477 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\defogger.exe
[2010.09.06 22:15:26 | 000,284,915 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Gmer.zip
[2010.09.06 22:14:50 | 000,388,197 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\Load.exe
[2010.09.06 22:13:26 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt13.sqm
[2010.09.06 22:13:26 | 000,000,232 | -H-- | C] () -- C:\sqmdata13.sqm
[2010.09.06 21:46:25 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt12.sqm
[2010.09.06 21:46:25 | 000,000,232 | -H-- | C] () -- C:\sqmdata12.sqm
[2010.09.06 21:33:02 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt11.sqm
[2010.09.06 21:33:02 | 000,000,232 | -H-- | C] () -- C:\sqmdata11.sqm
[2010.09.06 21:19:43 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt10.sqm
[2010.09.06 21:19:43 | 000,000,232 | -H-- | C] () -- C:\sqmdata10.sqm
[2010.09.06 21:06:24 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt09.sqm
[2010.09.06 21:06:24 | 000,000,232 | -H-- | C] () -- C:\sqmdata09.sqm
[2010.09.06 20:53:01 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt08.sqm
[2010.09.06 20:53:01 | 000,000,232 | -H-- | C] () -- C:\sqmdata08.sqm
[2010.09.06 20:41:28 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt07.sqm
[2010.09.06 20:41:28 | 000,000,232 | -H-- | C] () -- C:\sqmdata07.sqm
[2010.09.06 20:26:22 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt06.sqm
[2010.09.06 20:26:22 | 000,000,232 | -H-- | C] () -- C:\sqmdata06.sqm
[2010.09.06 20:13:15 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt05.sqm
[2010.09.06 20:13:15 | 000,000,232 | -H-- | C] () -- C:\sqmdata05.sqm
[2010.09.06 19:59:50 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt04.sqm
[2010.09.06 19:59:50 | 000,000,232 | -H-- | C] () -- C:\sqmdata04.sqm
[2010.09.06 19:48:39 | 000,000,244 | -H-- | C] () -- C:\sqmnoopt03.sqm
[2010.09.06 19:48:39 | 000,000,232 | -H-- | C] () -- C:\sqmdata03.sqm
[2010.09.06 16:34:57 | 000,000,542 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mp3tag.lnk
[2010.09.02 20:30:40 | 000,159,072 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2010.09.01 04:13:03 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_User_PCCSWpdDriver_01_09_00.Wdf
[2010.09.01 04:12:56 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_user_01_09_00.Wdf
[2010.09.01 04:07:13 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\Msft_Kernel_ccdcmb_01009.Wdf
[2010.09.01 04:07:12 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2010.09.01 03:50:40 | 000,001,880 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Player.lnk
[2010.09.01 03:49:08 | 000,001,673 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Nokia Ovi Suite.lnk
[2010.08.22 16:34:49 | 000,031,001 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Desktop\JAck the Ripper.odt
[2009.12.30 14:27:46 | 000,000,000 | ---- | C] () -- C:\WINDOWS\brmx2001.ini
[2009.12.30 14:27:41 | 000,000,114 | ---- | C] () -- C:\WINDOWS\System32\brlmw03a.ini
[2009.11.05 21:09:57 | 000,000,064 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sandra.ldb
[2009.06.15 11:30:37 | 000,002,876 | ---- | C] () -- C:\WINDOWS\ATICIM.INI
[2008.12.26 21:27:55 | 000,383,238 | ---- | C] () -- C:\WINDOWS\System32\libmp3lame-0.dll
[2008.06.30 19:50:08 | 000,000,012 | ---- | C] () -- C:\WINDOWS\dirsaver.ini
[2008.01.13 16:48:55 | 000,000,110 | ---- | C] () -- C:\WINDOWS\AVerText.ini
[2007.12.24 17:27:41 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd.dll
[2007.12.24 17:27:41 | 000,363,520 | ---- | C] () -- C:\WINDOWS\System32\PsisDecd(2).dll
[2007.12.24 17:27:35 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\34CoInstaller.dll
[2007.08.01 17:29:04 | 000,000,025 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2007.05.31 19:43:44 | 000,703,258 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x64.cab
[2007.05.31 19:43:42 | 001,611,772 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x64.cab
[2007.05.31 19:43:42 | 000,701,218 | ---- | C] () -- C:\Programme\JUN2007_d3dx10_34_x86.cab
[2007.05.31 19:43:40 | 001,610,203 | ---- | C] () -- C:\Programme\JUN2007_d3dx9_34_x86.cab
[2007.05.31 19:43:40 | 000,200,646 | ---- | C] () -- C:\Programme\JUN2007_XACT_x64.cab
[2007.05.31 19:43:40 | 000,155,892 | ---- | C] () -- C:\Programme\JUN2007_XACT_x86.cab
[2007.05.31 19:43:38 | 000,044,687 | ---- | C] () -- C:\Programme\dxdllreg_x86.cab
[2007.05.31 19:23:58 | 000,086,401 | ---- | C] () -- C:\Programme\dxupdate.cab
[2007.05.31 19:23:56 | 001,413,862 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x64.cab
[2007.05.31 19:23:56 | 001,336,890 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x64.cab
[2007.05.31 19:23:56 | 001,128,177 | ---- | C] () -- C:\Programme\OCT2006_d3dx9_31_x86.cab
[2007.05.31 19:23:56 | 001,065,813 | ---- | C] () -- C:\Programme\Jun2005_d3dx9_26_x86.cab
[2007.05.31 19:23:56 | 000,183,321 | ---- | C] () -- C:\Programme\OCT2006_XACT_x64.cab
[2007.05.31 19:23:56 | 000,181,745 | ---- | C] () -- C:\Programme\JUN2006_XACT_x64.cab
[2007.05.31 19:23:56 | 000,138,977 | ---- | C] () -- C:\Programme\OCT2006_XACT_x86.cab
[2007.05.31 19:23:56 | 000,134,631 | ---- | C] () -- C:\Programme\JUN2006_XACT_x86.cab
[2007.05.31 19:23:56 | 000,086,925 | ---- | C] () -- C:\Programme\Oct2005_xinput_x64.cab
[2007.05.31 19:23:56 | 000,046,247 | ---- | C] () -- C:\Programme\Oct2005_xinput_x86.cab
[2007.05.31 19:23:54 | 001,610,958 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x64.cab
[2007.05.31 19:23:54 | 001,609,639 | ---- | C] () -- C:\Programme\APR2007_d3dx9_33_x86.cab
[2007.05.31 19:23:54 | 001,575,336 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x86.cab
[2007.05.31 19:23:54 | 001,572,114 | ---- | C] () -- C:\Programme\DEC2006_d3dx9_32_x64.cab
[2007.05.31 19:23:54 | 001,363,684 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x64.cab
[2007.05.31 19:23:54 | 001,358,864 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x64.cab
[2007.05.31 19:23:54 | 001,351,430 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x64.cab
[2007.05.31 19:23:54 | 001,248,387 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x64.cab
[2007.05.31 19:23:54 | 001,085,608 | ---- | C] () -- C:\Programme\Feb2006_d3dx9_29_x86.cab
[2007.05.31 19:23:54 | 001,080,344 | ---- | C] () -- C:\Programme\Dec2005_d3dx9_28_x86.cab
[2007.05.31 19:23:54 | 001,078,532 | ---- | C] () -- C:\Programme\Aug2005_d3dx9_27_x86.cab
[2007.05.31 19:23:54 | 001,014,113 | ---- | C] () -- C:\Programme\Feb2005_d3dx9_24_x86.cab
[2007.05.31 19:23:54 | 000,699,465 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x86.cab
[2007.05.31 19:23:54 | 000,213,767 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x64.cab
[2007.05.31 19:23:54 | 000,199,366 | ---- | C] () -- C:\Programme\APR2007_XACT_x64.cab
[2007.05.31 19:23:54 | 000,198,275 | ---- | C] () -- C:\Programme\FEB2007_XACT_x64.cab
[2007.05.31 19:23:54 | 000,193,435 | ---- | C] () -- C:\Programme\DEC2006_XACT_x64.cab
[2007.05.31 19:23:54 | 000,192,680 | ---- | C] () -- C:\Programme\DEC2006_d3dx10_00_x86.cab
[2007.05.31 19:23:54 | 000,183,863 | ---- | C] () -- C:\Programme\AUG2006_XACT_x64.cab
[2007.05.31 19:23:54 | 000,179,247 | ---- | C] () -- C:\Programme\Feb2006_XACT_x64.cab
[2007.05.31 19:23:54 | 000,154,825 | ---- | C] () -- C:\Programme\APR2007_XACT_x86.cab
[2007.05.31 19:23:54 | 000,151,583 | ---- | C] () -- C:\Programme\FEB2007_XACT_x86.cab
[2007.05.31 19:23:54 | 000,146,559 | ---- | C] () -- C:\Programme\DEC2006_XACT_x86.cab
[2007.05.31 19:23:54 | 000,138,195 | ---- | C] () -- C:\Programme\AUG2006_XACT_x86.cab
[2007.05.31 19:23:54 | 000,133,297 | ---- | C] () -- C:\Programme\Feb2006_XACT_x86.cab
[2007.05.31 19:23:54 | 000,100,417 | ---- | C] () -- C:\Programme\APR2007_xinput_x64.cab
[2007.05.31 19:23:54 | 000,088,102 | ---- | C] () -- C:\Programme\AUG2006_xinput_x64.cab
[2007.05.31 19:23:54 | 000,056,902 | ---- | C] () -- C:\Programme\APR2007_xinput_x86.cab
[2007.05.31 19:23:54 | 000,047,018 | ---- | C] () -- C:\Programme\AUG2006_xinput_x86.cab
[2007.05.31 19:23:52 | 013,265,040 | ---- | C] () -- C:\Programme\dxnt.cab
[2007.05.31 19:23:52 | 004,163,518 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86_Archive.cab
[2007.05.31 19:23:52 | 001,398,718 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x64.cab
[2007.05.31 19:23:52 | 001,348,242 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x64.cab
[2007.05.31 19:23:52 | 001,156,363 | ---- | C] () -- C:\Programme\BDANT.cab
[2007.05.31 19:23:52 | 001,116,109 | ---- | C] () -- C:\Programme\Apr2006_d3dx9_30_x86.cab
[2007.05.31 19:23:52 | 001,079,850 | ---- | C] () -- C:\Programme\Apr2005_d3dx9_25_x86.cab
[2007.05.31 19:23:52 | 000,976,020 | ---- | C] () -- C:\Programme\BDAXP.cab
[2007.05.31 19:23:52 | 000,917,318 | ---- | C] () -- C:\Programme\Apr2006_MDX1_x86.cab
[2007.05.31 19:23:52 | 000,702,212 | ---- | C] () -- C:\Programme\APR2007_d3dx10_33_x64.cab
[2007.05.31 19:23:52 | 000,180,021 | ---- | C] () -- C:\Programme\Apr2006_XACT_x64.cab
[2007.05.31 19:23:52 | 000,133,991 | ---- | C] () -- C:\Programme\Apr2006_XACT_x86.cab
[2007.05.31 19:23:52 | 000,087,989 | ---- | C] () -- C:\Programme\Apr2006_xinput_x64.cab
[2007.05.31 19:23:52 | 000,046,898 | ---- | C] () -- C:\Programme\Apr2006_xinput_x86.cab
[2007.03.04 21:35:48 | 000,000,084 | ---- | C] () -- C:\WINDOWS\StyleBuilder.INI
[2007.02.03 23:04:37 | 000,000,214 | -H-- | C] () -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\xpy.ini
[2007.02.02 15:48:37 | 000,003,972 | ---- | C] () -- C:\WINDOWS\System32\drivers\PciBus.sys
[2007.01.29 16:48:00 | 000,229,888 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2007.01.26 16:50:31 | 000,025,054 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\wklnhst.dat
[2007.01.26 16:46:15 | 000,000,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2006.12.24 18:19:50 | 000,299,008 | ---- | C] () -- C:\WINDOWS\System32\LAME_MP3.dll
[2006.12.24 18:18:44 | 000,921,600 | ---- | C] () -- C:\WINDOWS\System32\vorbisenc.dll
[2006.12.24 18:18:44 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\OggDS.dll
[2006.12.24 18:18:44 | 000,188,416 | ---- | C] () -- C:\WINDOWS\System32\vorbis.dll
[2006.12.24 18:18:44 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\ogg.dll
[2006.08.29 16:59:33 | 000,000,226 | ---- | C] () -- C:\WINDOWS\Brownie.ini
[2006.08.29 16:59:33 | 000,000,023 | ---- | C] () -- C:\WINDOWS\BRDIAG.INI
[2006.08.29 16:59:33 | 000,000,011 | ---- | C] () -- C:\WINDOWS\BRVIDEO.INI
[2006.08.29 16:59:06 | 000,000,432 | ---- | C] () -- C:\WINDOWS\BRWMARK.INI
[2006.08.24 15:50:28 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2006.08.24 15:50:28 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2006.08.19 12:45:25 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2006.08.15 21:24:23 | 000,002,927 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QTSBandwidthCache
[2006.08.11 19:57:47 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2006.08.08 18:34:56 | 000,294,912 | ---- | C] () -- C:\WINDOWS\System32\mbr_sqlite.dll
[2006.08.04 23:58:35 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2006.07.29 16:52:06 | 000,000,122 | ---- | C] () -- C:\WINDOWS\SecurityandPrivacy2.ini
[2006.07.26 16:39:14 | 000,000,000 | ---- | C] () -- C:\WINDOWS\MSDraw.ini
[2006.05.17 21:31:20 | 000,000,025 | ---- | C] () -- C:\WINDOWS\CDEC64Euro.ini
[2006.04.13 14:38:33 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\SAICFG.dll
[2006.02.14 17:03:55 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2006.02.12 14:27:40 | 000,000,053 | ---- | C] () -- C:\WINDOWS\Fahrenheit_Screen.ini
[2005.12.27 10:10:49 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2005.12.27 08:05:05 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\eRLog.ini
[2005.10.28 19:32:17 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini
[2005.10.22 07:38:52 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIBUN4.dll
[2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMPEG2.dll
[2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIMP3.dll
[2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTIFCD3.dll
[2005.10.22 07:38:03 | 000,001,024 | RH-- | C] () -- C:\WINDOWS\System32\NTICDMK7.dll
[2005.10.22 07:34:05 | 000,000,164 | ---- | C] () -- C:\WINDOWS\avrack.ini
[2005.10.22 07:34:02 | 000,156,672 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2005.10.22 07:29:22 | 000,008,073 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2005.10.22 07:23:00 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini
[2005.10.22 07:13:21 | 000,014,336 | ---- | C] () -- C:\WINDOWS\System32\msdmo(2).dll
[2005.04.28 05:22:34 | 000,831,488 | ---- | C] () -- C:\WINDOWS\System32\libeay32.dll
[2005.04.28 05:22:34 | 000,159,744 | ---- | C] () -- C:\WINDOWS\System32\ssleay32.dll
[2004.12.20 11:08:28 | 000,155,648 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2004.12.20 11:03:26 | 000,765,952 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2004.12.17 17:14:44 | 000,013,952 | ---- | C] () -- C:\WINDOWS\System32\drivers\UBHelper.sys
[2001.12.26 16:12:30 | 000,065,536 | R--- | C] () -- C:\WINDOWS\System32\multiplex_vcd.dll
[2001.09.03 23:46:38 | 000,110,592 | R--- | C] () -- C:\WINDOWS\System32\Hmpg12.dll
[2001.07.30 16:33:56 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC.dll
[2001.07.23 22:04:36 | 000,118,784 | R--- | C] () -- C:\WINDOWS\System32\HMPV2_ENC_MMX.dll
[1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\WINDOWS\System32\iyvu9_32.dll
[1980.01.01 00:00:00 | 000,000,083 | ---- | C] () -- C:\WINDOWS\ALaunch.ini
========== LOP Check ==========
[2006.02.14 17:02:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\eConsole
[2006.06.15 18:10:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2006.07.31 14:33:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online
[2006.07.31 14:36:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online DSL-Manager
[2008.04.17 14:58:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Software4u
[2008.08.12 13:45:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Installations
[2008.08.12 13:49:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2009.01.11 02:56:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Nokia
[2009.07.28 15:06:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Azureus
[2009.12.24 19:54:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{755AC846-7372-4AC8-8550-C52491DAA8BD}
[2010.02.22 21:03:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
[2010.03.17 00:58:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\VirtualizedApplications
[2010.05.25 21:05:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PMB Files
[2010.09.01 03:40:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaInstallerCache
[2010.09.01 03:50:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NokiaMusic
[2007.01.26 16:46:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQLite
[2007.01.26 16:50:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Template
[2007.01.26 16:51:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\MSNInstaller
[2007.02.02 16:02:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ Toolbar
[2007.02.06 21:38:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\T-Online
[2007.02.13 15:41:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Petroglyph
[2007.05.01 16:30:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Thunderbird
[2007.10.03 20:10:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\LimeWire
[2008.03.20 20:42:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\FileZilla
[2008.04.17 14:58:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Software4u
[2008.08.12 13:48:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\PC Suite
[2008.08.12 13:48:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia
[2008.11.18 16:03:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\SendSpace Wizard
[2009.03.25 14:57:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TeamViewer
[2009.06.15 22:23:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DAEMON Tools
[2009.06.17 20:29:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\NewsLeecher
[2009.07.28 14:59:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Azureus
[2009.09.27 14:50:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Radmin
[2009.10.14 20:13:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TweakNow RegCleaner
[2009.10.14 20:22:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ(2)
[2009.10.17 21:49:36 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ(3)
[2009.10.17 23:01:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\ICQ
[2010.03.16 22:44:08 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\TP
[2010.03.16 22:47:10 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\SoftGrid Client
[2010.03.16 22:47:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\NVD
[2010.05.25 15:25:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\LolClient
[2010.09.01 21:27:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Nokia Ovi Suite
[2010.09.06 16:07:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\DVDVideoSoftIEHelpers
[2010.09.06 16:35:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Ich\Anwendungsdaten\Mp3tag
========== Purity Check ==========
< End of report > --- --- ---
OTL Logfile: Code:
OTL Extras logfile created on: 08.09.2010 21:43:38 - Run 3
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Dokumente und Einstellungen\Ich\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 49,00% Memory free
2,00 Gb Paging File | 2,00 Gb Available in Paging File | 72,00% Paging File free
Paging file location(s): C:\pagefile.sys 1024 1024 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 72,65 Gb Total Space | 19,03 Gb Free Space | 26,19% Space Free | Partition Type: FAT32
Drive D: | 73,45 Gb Total Space | 50,81 Gb Free Space | 69,17% Space Free | Partition Type: NTFS
Drive E: | 455,16 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: FINN
Current User Name: Ich
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = Reg Error: Value error.] -- Reg Error: Key error. File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation)
https [open] -- "D:\Programme\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusOverride" = 0
"FirewallOverride" = 0
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"58096:TCP" = 58096:TCP:*:Enabled:Pando Media Booster
"58096:UDP" = 58096:UDP:*:Enabled:Pando Media Booster
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3724:TCP" = 3724:TCP:*:Enabled:Blizzard Downloader: 3724
"8394:TCP" = 8394:TCP:*:Enabled:League of Legends Launcher
"8394:UDP" = 8394:UDP:*:Enabled:League of Legends Launcher
"58096:TCP" = 58096:TCP:*:Enabled:Pando Media Booster
"58096:UDP" = 58096:UDP:*:Enabled:Pando Media Booster
"6965:TCP" = 6965:TCP:*:Enabled:League of Legends Launcher
"6965:UDP" = 6965:UDP:*:Enabled:League of Legends Launcher
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"D:\Programme\ICQ7.0\ICQ.exe" = D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"D:\Programme\ICQ7.0\aolload.exe" = D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"C:\Programme\Pando Networks\Media Booster\PMB.exe" = C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"C:\Programme\MSN Messenger\msnmsgr.exe" = C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- File not found
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"D:\Programme\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe" = D:\Programme\LucasArts\Star Wars Battlefront II\GameData\BattlefrontII.exe:*:Enabled:BattlefrontII -- ()
"C:\WINDOWS\System32\dplaysvr.exe" = C:\WINDOWS\System32\dplaysvr.exe:*:Disabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"D:\Programme\T-Online\T-Online_Software_6\Browser\browser.exe" = D:\Programme\T-Online\T-Online_Software_6\Browser\browser.exe:*:Disabled:T-Online Browser 6.0 -- (T-Online International AG)
"C:\Programme\TeamViewer\Version4\TeamViewer.exe" = C:\Programme\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application -- (TeamViewer GmbH)
"C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe" = C:\Programme\Nokia\Nokia Software Updater\nsu_ui_client.exe:*:Enabled:Nokia Software Updater -- (Nokia Corporation)
"C:\Programme\Java\jre6\bin\java.exe" = C:\Programme\Java\jre6\bin\java.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"D:\Programme\Counter-Strike 1.6\hl.exe" = D:\Programme\Counter-Strike 1.6\hl.exe:*:Enabled:Half-Life Launcher -- File not found
"D:\Programme\Azureus\Azureus.exe" = D:\Programme\Azureus\Azureus.exe:*:Enabled:Azureus -- File not found
"C:\Programme\Microsoft Games\Rise Of Legends\legends.exe" = C:\Programme\Microsoft Games\Rise Of Legends\legends.exe:*:Enabled:Rise Of Legends -- (Big Huge Games, Inc.)
"D:\Programme\ICQ6.5\ICQ.exe" = D:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\RpcSandraSrv.exe" = D:\Programme\SiSoftware\SiSoftware Sandra Lite 2009.SP3c\WNt500x86\RpcSandraSrv.exe:*:Enabled:SiSoftware Sandra Agent Service -- File not found
"C:\Programme\TMbot\TM.EXE" = C:\Programme\TMbot\TM.EXE:*:Enabled:TMbot -- File not found
"D:\Programme\Anno 1701\Anno1701.exe" = D:\Programme\Anno 1701\Anno1701.exe:*:Enabled:Anno 1701 -- File not found
"D:\Programme\ICQ7.0\ICQ.exe" = D:\Programme\ICQ7.0\ICQ.exe:*:Enabled:ICQ7 -- (ICQ, LLC.)
"D:\Programme\ICQ7.0\aolload.exe" = D:\Programme\ICQ7.0\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"D:\Programme\Steam\Steam.exe" = D:\Programme\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"C:\Dokumente und Einstellungen\Ich\Desktop\Counter-Strike Source\hl2.exe" = C:\Dokumente und Einstellungen\Ich\Desktop\Counter-Strike Source\hl2.exe:*:Disabled:hl2 -- ()
"D:\Programme\League of Legends\Air\LolClient.exe" = D:\Programme\League of Legends\Air\LolClient.exe:*:Enabled:League of Legends Lobby -- File not found
"D:\Programme\League of Legends\Game\League of Legends.exe" = D:\Programme\League of Legends\Game\League of Legends.exe:*:Enabled:League of Legends Game Client -- File not found
"C:\Programme\Pando Networks\Media Booster\PMB.exe" = C:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
"D:\Programme\Steam\SteamApps\weithoff007\counter-strike source\hl2.exe" = D:\Programme\Steam\SteamApps\weithoff007\counter-strike source\hl2.exe:*:Enabled:Counter-Strike: Source -- ()
"C:\Programme\MSN Messenger\msnmsgr.exe" = C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- File not found
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- File not found
"C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Temp\7zS1B3.tmp\SymNRT.exe" = C:\Dokumente und Einstellungen\Ich\Lokale Einstellungen\Temp\7zS1B3.tmp\SymNRT.exe:*:Enabled:Norton Removal Tool -- File not found
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
"{03ADCA1C-BCF0-4B12-AFCF-8EBF2CB3AB07}" = SST Programming Software
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0863885D-E64B-9E5A-9747-03321A2D2A49}" = CCC Help Korean
"{0C40E716-2558-01E2-4797-484E4CCB2500}" = Catalyst Control Center Localization All
"{10FDD69C-2428-0FFB-12A2-2A6907D6282F}" = CCC Help Japanese
"{1373559F-6DC6-44EA-9079-6ABDCCE8CDAD}" = OviMPlatform
"{139DEC1F-D380-EB76-B0DF-88BC99B3B7BB}" = Catalyst Control Center Graphics Light
"{1451DE6B-ABE1-4F62-BE9A-B363A17588A2}" = QuickTime
"{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker
"{20140000-006D-0407-0000-0000000FF1CE}" = Microsoft Office Click-to-Run 2010 (Beta)
"{20140062-0062-0407-0000-0000000FF1CE}" = Microsoft Office Home and Business 2010 (Beta) - Deutsch
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{2347E903-6299-A99F-C46C-05EB55912539}" = CCC Help Chinese Traditional
"{2638924D-DC58-4C40-BB1C-48C2B24B7B1B}" = T-Online Router Web-IF Management
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java(TM) 6 Update 21
"{29F563F4-8807-4496-8463-441EAA0E96AB}" = PC Connectivity Solution
"{2B3A996D-CCBF-3D62-B0AD-EA05553D3CEE}" = CCC Help Chinese Standard
"{2D10FC46-1D96-44C4-8855-85F21B9B011E}" = Ovi Desktop Sync Engine
"{300D2ECE-DA75-1623-871F-935A205FC450}" = CCC Help German
"{3248F0A8-6813-11D6-A77B-00B0D0150100}" = J2SE Runtime Environment 5.0 Update 10
"{33D7EA48-0E99-4C45-A4D2-27D5DB9AF50F}" = Pacz
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{36CDA33B-909B-4719-97D1-C4B99309BDC7}" = ATI Parental Control & Encoder
"{385979FE-DC4F-4140-8EAD-A59625000D72}" = NTI Backup NOW! 4
"{3EA9D975-BFDC-4E8E-B88B-0446FBC8CA66}" = ATI HYDRAVISION
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4BF8A8A5-B3EA-6073-0457-669CC1E929C8}" = CCC Help Hungarian
"{501C0FDB-DCA5-E211-956C-26ADC4C54B66}" = Catalyst Control Center Core Implementation
"{50D25574-2C48-4AEC-8FFC-32AEAD2EAEFF}" = Nokia Ovi Player
"{57F85CF9-B9EF-6C77-8095-A2CF95738099}" = CCC Help Danish
"{5DA6F06A-B389-407B-BF8C-1548767914D8}" = ATI Problem Report Wizard
"{5DE1B7CF-7429-40CA-987F-6BEE09B63787}" = Prime95
"{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}" = Windows Genuine Advantage v1.3.0254.0
"{63A17691-ABC0-E86F-5D7A-A2F7EE36145E}" = CCC Help Dutch
"{6501E9B8-77C7-7D81-7F1A-4C2D7E36B403}" = CCC Help Italian
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{6FE7F94E-7AF8-421F-9A19-04681A099AE3}" = TuneUp WinStyler
"{70B31335-50EE-4834-8431-27412CDE62BD}" = Nokia_Multimedia_Common_Components_2_5
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{72A5824D-08E9-9A96-2104-19E4FE86E5FA}" = CCC Help Spanish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7907CAB0-6C4F-C554-34EA-93EAC98B42F9}" = CCC Help Turkish
"{8070452B-15D6-4169-B9B9-FCC3B54588AD}" = Nokia Ovi Suite
"{82982D26-D60E-27D8-361F-F14A8F6440E7}" = Catalyst Control Center HydraVision Full
"{87934EAD-CE6F-16C6-6004-73E092AA15A6}" = Catalyst Control Center Graphics Previews Common
"{88EB38EF-4D2C-436D-ABD3-56B232674062}" = ICQ7
"{89B80F72-CCD0-95C3-21CB-89BA03D98155}" = CCC Help Finnish
"{89DE67AD-08B8-4699-A55D-CA5C0AF82BF3}" = ATI AVIVO Codecs
"{90120407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Standard
"{906D95BA-4515-59A5-F2E4-072B1E73BB75}" = CCC Help English
"{92DF2F1B-F63C-4D9A-B3E1-B2D11AE29790}" = Windows Presentation Foundation Language Pack (DEU)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9D8BE52A-2C9A-91F2-310E-560CCE4FD247}" = CCC Help Russian
"{A0D62771-4353-8D52-44B8-0FCFF07D5FF1}" = ccc-core-preinstall
"{A0D65C73-F2C5-432F-8788-90F8A2E99B98}" = Nokia Ovi Suite Software Updater
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3AE78AD-093F-57F1-280D-A31B0C1C1425}" = CCC Help Greek
"{A41A9C99-0029-783E-40C3-3AA0D1A6535D}" = CCC Help Polish
"{A680CE58-7B2C-9A45-D05F-5AC22DFA2F76}" = CCC Help Portuguese
"{A97B911E-8B1F-3B0F-F3D1-63B04084CC0F}" = Skins
"{AD3AE2EE-E0DB-7818-3F05-7E8B2FB22C49}" = CCC Help Norwegian
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B1275E23-717A-4D52-997A-1AD1E24BC7F3}" = T-Online 6.0
"{B26E3B0D-C2FA-4370-B068-7C476766F029}" = Microsoft Works
"{B414174C-97E4-9E8B-018E-AC77055D0107}" = CCC Help Thai
"{B6D0AACC-1F01-A901-5348-FF3599EFE70D}" = CCC Help French
"{B98604A2-5229-CBE6-98A4-A6D7C63B7458}" = ccc-utility
"{BAF78226-3200-4DB4-BE33-4D922A799840}" = Windows Presentation Foundation
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C19BE821-89B1-4A96-AC7C-873810C0CB5F}" = ContentSAFER for Wizmax
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{CADDE354-C78C-46CB-A006-E2B178EFC271}" = Rise Of Legends
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CBD1A47D-691E-56C2-AC6A-1B3F80E3EC14}" = CCC Help Swedish
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D34313F7-B5E2-D3AF-FBB1-EF3ED1DEF5AB}" = CCC Help Czech
"{D3B1C799-CB73-42DE-BA0F-2344793A095C}" = Catalyst Control Center - Branding
"{D4CFC5F3-481C-40AA-9944-E7E4E732136C}" = Microsoft IntelliType Pro 8.0
"{E3A6437F-DE5B-6F3E-7BB3-39185D0BBDCE}" = ccc-core-static
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.0
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{EB1446FB-A3EF-D04D-C224-EEC74F11805F}" = Catalyst Control Center Graphics Full New
"{EF4F620F-F295-41D7-92C0-6B635709C850}" = Nokia Software Updater
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1FDAA01-988C-423F-AC12-0D8F333943FD}" = Nokia Connectivity Cable Driver
"{F27483DD-A574-441E-AC55-69625B58D562}" = Brother HL-2035
"{F2A7F421-1679-48D5-B918-96999014ED53}" = Microsoft .NET Framework 3.0 German Language Pack
"{FB08F381-6533-4108-B7DD-039E11FBC27E}" = Realtek AC'97 Audio
"{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}" = HighMAT-Erweiterung für den Microsoft Windows XP-Assistenten zum Schreiben von CDs
"{FE931AAE-B6D9-8A02-60C7-EF4862306F58}" = Catalyst Control Center Graphics Full Existing
"0C5EDC3653FED5B121F464339EAC12534D253B25" = Windows-Treiberpaket - Nokia Modem (02/15/2007 3.1)
"3B18191663CDFABAA2A93D4267E54D683153FF60" = Windows-Treiberpaket - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
"504244733D18C8F63FF584AEB290E3904E791693" = Windows-Treiberpaket - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Windows-Treiberpaket - Nokia Modem (05/22/2008 7.00.0.1)
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"All ATI Software" = ATI - Dienstprogramm zur Deinstallation der Software
"Ask Toolbar_is1" = Ask Toolbar
"ATI Display Driver" = ATI Display Driver
"B726756F5B5A5AA9D798B399386FC6205A45F19E" = Windows-Treiberpaket - Nokia Modem (02/15/2007 3.1)
"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Windows-Treiberpaket - Nokia Modem (05/22/2008 3.8)
"CBF192A85B624E32B8D19ADEEF2DCFC5BC3AA73A" = Windows-Treiberpaket - Nokia Modem (03/05/2008 3.7)
"CCleaner" = CCleaner
"CD8424B9400BFF7D34AA18F816C71322AC4BDAA7" = Windows-Treiberpaket - Nokia Modem (05/24/2007 6.84.0.1)
"Cossacks : Back To War" = Cossacks - Back To War
"E092B2EBF2FFE83E896F8F7F829A7B5D7D1B2F9D" = Windows-Treiberpaket - Nokia Modem (03/13/2008 6.86.0.1)
"Fraps" = Fraps
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie7" = Windows Internet Explorer 7
"InstallShield_{CADDE354-C78C-46CB-A006-E2B178EFC271}" = Rise Of Legends
"Lame MP3 Codec (for the ACM)" = Lame ACM MP3 Codec
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.0 German Language Pack" = Microsoft .NET Framework 3.0 German Language Pack
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.5.12)" = Mozilla Firefox (3.5.12)
"Mozilla Thunderbird (3.1.2)" = Mozilla Thunderbird (3.1.2)
"Mp3tag" = Mp3tag v2.46a
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Nokia Ovi Suite" = Nokia Ovi Suite
"Office14.Click2Run" = Microsoft Office Click-to-Run 2010 (Beta)
"Steam App 240" = Counter-Strike: Source
"SystemRequirementsLab" = System Requirements Lab
"TeamViewer 4" = TeamViewer 4
"Uninstall_is1" = Uninstall 1.0.0.1
"VP3 Codec Version 3.2.6.1" = VP3 Codec Version 3.2.6.1
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Wdf01007" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Wudf01009" = Microsoft User-Mode Driver Framework Feature Pack 1.9
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
"XviD_is1" = XviD MPEG-4 Video Codec
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 06.09.2010 14:28:39 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:01 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:03 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 06.09.2010 14:45:03 | Computer Name = FINN | Source = OviSuite | ID = 1
Description =
Error - 07.09.2010 14:41:07 | Computer Name = FINN | Source = crypt32 | ID = 131083
Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich
nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel
in der signierten Datei. .
Error - 07.09.2010 14:41:07 | Computer Name = FINN | Source = crypt32 | ID = 131083
Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen
Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich
nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel
in der signierten Datei. .
Error - 07.09.2010 17:31:29 | Computer Name = FINN | Source = CVHSVC | ID = 100
Description = Nur zur Information. (Patch task for {20140062-0062-0407-0000-0000000FF1CE}):
DownloadLatest Failed:
Error - 07.09.2010 18:50:42 | Computer Name = FINN | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung javara.exe, Version 1.16.1.1763, fehlgeschlagenes
Modul ntdll.dll, Version 5.1.2600.5755, Fehleradresse 0x0000100b.
Error - 08.09.2010 10:48:11 | Computer Name = FINN | Source = MsiInstaller | ID = 11706
Description = Produkt: Microsoft Office XP Standard -- Fehler 1706. Setup kann die
benötigten Dateien nicht finden. Überprüfen Sie Ihre Verbindung mit dem Netzwerk
oder dem CD-ROM-Laufwerk. Um mehr über mögliche Lösungen für dieses Problem zu
erfahren, sehen sie bitte nach in C:\Programme\Microsoft Office\Office10\1031\SETUP.HLP.
Error - 08.09.2010 10:48:12 | Computer Name = FINN | Source = MsiInstaller | ID = 1024
Description = Produkt: Microsoft Office XP Standard - Update "{4757E865-0292-4E04-940D-9C51052A5DD6}"
konnte nicht installiert werden. Fehlercode 1603. Windows Installer kann Protokolle
erstellen, um bei der Problembehandlung betreffend der Installation von Softwarepaketen
behilflich zu sein. Verwenden Sie folgenden Link, um Anweisungen zur Aktivierung
der Protokollierungsunterstützung zu erhalten: hxxp://go.microsoft.com/fwlink/?LinkId=23127
[ System Events ]
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:10 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:25:11 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Anwendungsverwaltung" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:49:02 | Computer Name = FINN | Source = Service Control Manager | ID = 7000
Description = Der Dienst "int15.sys" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error - 08.09.2010 12:49:02 | Computer Name = FINN | Source = Service Control Manager | ID = 7023
Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:
%%126
Error - 08.09.2010 12:49:24 | Computer Name = FINN | Source = Service Control Manager | ID = 7034
Description = Dienst "TuneUp WinStyler Theme Service" wurde unerwartet beendet.
Dies ist bereits 1 Mal passiert.
< End of report > --- --- --- |