| Daniel77 | 28.12.2010 17:09 |
Danke das Du meinen Hilferuf wahrgenommen hast. Hier die zwei Berichte. Ich hoffe es hilft weiter.:daumenhocOTL Logfile: Code:
OTL Extras logfile created on: 28.12.2010 16:25:09 - Run 1
OTL by OldTimer - Version 3.2.18.0 Folder = E:\Dokumente und Einstellungen\Besitzer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.023,00 Mb Total Physical Memory | 206,00 Mb Available Physical Memory | 20,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Programme
Drive C: | 78,14 Gb Total Space | 41,39 Gb Free Space | 52,97% Space Free | Partition Type: NTFS
Drive E: | 64,44 Gb Total Space | 9,94 Gb Free Space | 15,43% Space Free | Partition Type: NTFS
Drive G: | 321,85 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: YOUR-ZTK3A1X6EL | User Name: Besitzer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.scr [@ = scrfile] -- "%1" /S "%3"
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htafile [open] -- "%1" %*
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S "%3"
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"E:\Programme\Winamp Remote\bin\Orb.exe" = E:\Programme\Winamp Remote\bin\Orb.exe:*:Enabled:Orb -- File not found
"E:\Programme\Winamp Remote\bin\OrbTray.exe" = E:\Programme\Winamp Remote\bin\OrbTray.exe:*:Enabled:OrbTray -- File not found
"E:\Programme\Winamp Remote\bin\OrbStreamerClient.exe" = E:\Programme\Winamp Remote\bin\OrbStreamerClient.exe:*:Enabled:Orb Stream Client -- File not found
"E:\Programme\HP\Digital Imaging\bin\hpqcopy.exe" = E:\Programme\HP\Digital Imaging\bin\hpqcopy.exe:*:Enabled:hpqcopy.exe -- File not found
"E:\Programme\HP\Digital Imaging\bin\hpfccopy.exe" = E:\Programme\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- File not found
"G:\setup\HPZnet01.exe" = G:\setup\HPZnet01.exe:*:Enabled:hpznet01.exe -- File not found
"G:\setup\hponicifs01.exe" = G:\setup\hponicifs01.exe:*:Enabled:hponicifs01.exe -- File not found
"E:\Programme\HP\Digital Imaging\bin\hpofxm08.exe" = E:\Programme\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Development Company, L.P.)
"E:\Programme\HP\Digital Imaging\bin\hposfx08.exe" = E:\Programme\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Development Company, L.P.)
"E:\Programme\HP\Digital Imaging\bin\hposid01.exe" = E:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Development Company, L.P.)
"E:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe" = E:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Development Company, L.P.)
"E:\Programme\HP\Digital Imaging\Unload\HpqPhUnl.exe" = E:\Programme\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- (Hewlett-Packard)
"E:\Programme\HP\Digital Imaging\Unload\HpqDIA.exe" = E:\Programme\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )
"E:\WINDOWS\system32\muzapp.exe" = E:\WINDOWS\system32\muzapp.exe:*:Enabled:MUZ AOD APP player -- (Musiccity Co.Ltd.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{036AA4D4-6D32-11D4-9875-00105ACE7734}" = Logitech iTouch Software
"{05440044-64A6-4248-A026-9745C1E9E159}" = Microsoft Encarta Enzyklopädie 2005
"{0A55CDBB-0566-4AA2-A15B-24C7F27C6FF4}" = BPD_Scan
"{138BD312-3557-40F8-BC5E-6DFF00A6880D}" = BPDSoftware_Ini
"{16E217EA-C3E0-402D-8D4F-6189DB74497A}" = Studio 9.4 Patch
"{171E6C1E-B5FC-11DF-B115-005056C00008}" = Google Earth Plug-in
"{17E81C48-407E-499f-A105-1B49ACDB9BA4}" = ProductContext
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2376813B-2E5A-4641-B7B3-A0D5ADB55229}" = HPPhotoSmartExpress
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{363790D2-DA98-41DD-9C9F-69FA36B169DE}" = PanoStandAlone
"{3F262ADC-5AD2-48E5-A586-44315E04A9E2}" = Microsoft Picture It!-Bibliothek 10
"{42756145-9997-4D28-809B-8756BFD00106}" = Microsoft Picture It! Foto Premium 10
"{43602F34-1AA3-44FB-AEB2-D08C2C73743F}" = Paint.NET v3.36
"{45B8A76B-57EC-4242-B019-066400CD8428}" = BufferChm
"{49D59D86-7A0D-4217-979A-3D43F1F45CC8}" = BUHL-Lizenzmanagement-Software
"{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"{4AE80E7B-6633-4046-9C15-D3B281C4F73D}" = BPDSoftware
"{4C643986-DE3C-4737-8472-CCEC36CCC267}" = Studio Content CD
"{4EA684E9-5C81-4033-A696-3019EC57AC3A}" = HPProductAssistant
"{5809E7CF-4DCF-11D4-9875-00105ACE7734}" = Logitech MouseWare 9.79
"{5BFE01FF-189F-4b75-8FA8-9B7CD7F9C529}" = L7500
"{66910000-8B30-4973-A159-6371345AFFA5}" = WebReg
"{66E6CE0C-5A1E-430C-B40A-0C90FF1804A8}" = eSupportQFolder
"{67E4EE98-59F4-4220-89A6-A20AF5BEC689}" = Microsoft AutoRoute 2005
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{6909F917-5499-482e-9AA1-FAD06A99F231}" = Toolbox
"{6994491D-D491-48F1-AE1F-E179C1FFFC2F}" = HP Photosmart Essential
"{6DE9751D-3FFE-400E-8761-26A92DB734DE}" = BPD_HPSU
"{6F5E2F4A-377D-4700-B0E3-8F7F7507EA15}" = CustomerResearchQFolder
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7729A02E-D1AD-4830-8FC5-11853500D90D}" = HP Officejet Pro All-In-One Series
"{8331C3EA-0C91-43AA-A4D4-27221C631139}" = Status
"{868D7896-99D4-4513-BC62-2B3AD3E24926}" = TuneUp Utilities 2006
"{8A4CE7FD-9657-4B06-9943-E1819F3D5D67}" = DocProc
"{8C045626-4496-4238-B3B8-394CC6D46427}" = 7500_7600_7700_Help
"{8CE4E6E9-9D55-43FB-9DDB-688C976BFC05}" = Unload
"{90260407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Web Components
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{911B0407-6000-11D3-8CFE-0050048383C9}" = Microsoft Word 2002
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9E491AB7-4589-48CA-9CBB-874CB2788391}" = Studio 9
"{9F7FC79B-3059-4264-9450-39EB368E3225}" = Microsoft Digital Image Library 9 - Blocker
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5D51AE-EBC3-438D-872C-705C7C2084B0}" = DeviceManagementQFolder
"{AC76BA86-7AD7-1031-7B44-A81300000003}" = Adobe Reader 8.1.6 - Deutsch
"{AC76BA86-7AD7-2448-0000-800000000003}" = Chinese Traditional Fonts Support For Adobe Reader 8
"{B0069CFA-5BB9-4C03-B1C6-89CE290E5AFE}" = HP Update
"{B26E3B0D-C2FA-4370-B068-7C476766F029}" = Microsoft Works
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B67624DE-75CE-4FAD-9F29-5C115773CE61}" = Studio Content DVD
"{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}" = Nokia Connectivity Cable Driver
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C20CE592-B0F8-4D20-BF31-0151CA6331A6}" = Samsung Media Studio
"{C438DF2B-C5DF-4783-9CA5-9B89E501FA62}" = Works Update
"{C6A12D9B-D86A-4ee6-B980-95E4B26A2E13}" = Microsoft Works Suite-Add-Ins für Microsoft Word
"{C7340571-7773-4A8C-9EBC-4E4243B38C76}" = Microsoft XML Parser
"{C7B8E06E-EBBC-4210-93AB-DFC8760E3FC9}" = Works Suite-Betriebssystem-Pack
"{C7F54CF8-D6FB-4E0A-93A3-E68AE0D6C476}" = SolutionCenter
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = BPDfax
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D48AD533-BAD5-469B-A9AA-272C6D80E70B}" = MPM
"{DBC20735-34E6-4E97-A9E5-2066B66B243D}" = TrayApp
"{DCD786A9-31EF-4D35-B7CC-EFB8F548AEE2}" = O&O SafeErase
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = AusLogics Disk Defrag
"{E0091C29-DEE8-4B24-BF65-8C35B5940D77}" = Letstrade
"{E1B80DEE-A795-4258-8445-074C06AE3AB8}" = MarketResearch
"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack
"{E9E4BB29-FA98-401B-9EDE-9906906E33DE}" = Paragon Festplattenmanager 2007
"{F101C58C-15CC-42B3-83D1-536CFB960634}" = Ulead PhotoImpact 8
"{F157460F-720E-482f-8625-AD7843891E5F}" = InstantShareDevicesMFC
"{F2260E94-80F2-4CB1-B6B1-6043D9BFFA47}" = Works-Synchronisierung
"{F3760724-B29D-465B-BC53-E5D72095BCC4}" = Scan
"{F801A958-2160-4ED0-8955-A202110275DE}_is1" = Mein Büro
"{FB15E224-67C3-491F-9F5C-F257BC418412}" = Destinations
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"ASAPI Update" = ASAPI Update
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Clean 4.01" = Clean 4.01
"CutePDF Writer Installation" = CutePDF Writer 2.7
"DFÜ-Optimierer" = DFÜ-Optimierer 1.30
"Hollywood FX 5" = Pinnacle Hollywood FX 5
"HP Imaging Device Functions" = HP Imaging Device Functions 7.0
"HP Solution Center & Imaging Support Tools" = HP Solution Center 7.0
"HPExtendedCapabilities" = HP Customer Participation Program 7.0
"HPOCR" = OCR Software by I.R.I.S 7.0
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}" = SmartSound Quicktracks Plugin
"InstallShield_{F101C58C-15CC-42B3-83D1-536CFB960634}" = Ulead PhotoImpact 8
"MAGIX MP3 Maker 12 D" = MAGIX MP3 Maker 12 (D)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.6.3)" = Mozilla Firefox (3.6.3)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"N360" = Norton 360
"Nero - Burning Rom!UninstallKey" = Nero 6
"NeroMultiInstaller!UninstallKey" = Nero Suite
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA" = NVIDIA Windows 2000/XP Display Drivers
"NVIDIAnForce" = NVIDIA nForce Treiber für Windows 2000/XP
"PictureItPrem_v10" = Microsoft Picture It! Foto Premium 10
"QuickTime" = QuickTime
"Shockwave" = Shockwave
"SSUtils" = NVIDIA nForce Utilities
"True Internet Color" = True Internet Color
"UnderCoverXP_is1" = UnderCoverXP 1.16
"Wdf01005" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.5
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"Works2005Setup" = Setup-Start von Microsoft Works 2005
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"XP Codec Pack" = XP Codec Pack
"XviD_is1" = XviD MPEG-4 Video Codec
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 27.12.2010 13:40:05 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpqste08.exe, Version 70.0.283.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00a64890.
Error - 27.12.2010 13:52:08 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpqste08.exe, Version 70.0.283.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00a5cc9a.
Error - 27.12.2010 15:04:45 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpqste08.exe, Version 70.0.283.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00a5cd2a.
Error - 27.12.2010 15:18:27 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung 1831687.exe, Version 952.0.0.0, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 27.12.2010 15:24:33 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpqste08.exe, Version 70.0.283.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00a5ccaa.
Error - 28.12.2010 07:37:37 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpqste08.exe, Version 70.0.283.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x00a5ba61.
Error - 28.12.2010 08:36:32 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpqste08.exe, Version 70.0.283.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0xfcbb4d98.
Error - 28.12.2010 09:13:43 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung mbam.exe, Version 1.50.1.3, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 28.12.2010 09:14:26 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung mbam.exe, Version 1.50.1.3, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 28.12.2010 09:25:01 | Computer Name = YOUR-ZTK3A1X6EL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hpqste08.exe, Version 70.0.283.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x7cba4d98.
[ System Events ]
Error - 27.12.2010 11:34:42 | Computer Name = YOUR-ZTK3A1X6EL | Source = Wechselmediendienst | ID = 262159
Description = Der Wechselmediendienst kann die Bibliothek CdRom0 nicht verwalten.
Die Datenbank ist beschädigt.
Error - 27.12.2010 12:30:47 | Computer Name = YOUR-ZTK3A1X6EL | Source = Wechselmediendienst | ID = 262159
Description = Der Wechselmediendienst kann die Bibliothek CdRom0 nicht verwalten.
Die Datenbank ist beschädigt.
Error - 27.12.2010 13:55:07 | Computer Name = YOUR-ZTK3A1X6EL | Source = BROWSER | ID = 8032
Description = Das Einlesen der Sicherungsliste durch den Suchdienst schlug auf Transport
"\Device\NetBT_Tcpip_{F77B3E19-3935-4B55-A8D9-4ACCEE951AFA}" zu oft fehl. Der Sicherungssuchdienst
wird beendet.
Error - 27.12.2010 15:03:05 | Computer Name = YOUR-ZTK3A1X6EL | Source = MRxSmb | ID = 8003
Description = Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "DANIEL",
der
der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{F77B3E19-3935-4B55-A8-Transport
zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error - 27.12.2010 15:25:16 | Computer Name = YOUR-ZTK3A1X6EL | Source = MRxSmb | ID = 8003
Description = Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "DANIEL",
der
der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{F77B3E19-3935-4B55-A8-Transport
zu sein scheint. Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
Error - 28.12.2010 08:32:59 | Computer Name = YOUR-ZTK3A1X6EL | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
nvidesm
Error - 28.12.2010 08:33:02 | Computer Name = YOUR-ZTK3A1X6EL | Source = sr | ID = 1
Description = Beim Verarbeiten der Datei "" auf Volume "HarddiskVolume2" ist im
Wiederherstellungsfilter der unerwartete Fehler "0xC0000001" aufgetreten. Die Volumeüberwachung
wurde angehalten.
Error - 28.12.2010 10:20:18 | Computer Name = YOUR-ZTK3A1X6EL | Source = FWLANUSB | ID = 5002
Description = AVM FRITZ!WLAN USB Stick v1.1 : Fehlfunktion des Adapters wurde ermittelt.
Error - 28.12.2010 10:20:26 | Computer Name = YOUR-ZTK3A1X6EL | Source = FWLANUSB | ID = 5002
Description = AVM FRITZ!WLAN USB Stick v1.1 : Fehlfunktion des Adapters wurde ermittelt.
Error - 28.12.2010 10:20:54 | Computer Name = YOUR-ZTK3A1X6EL | Source = FWLANUSB | ID = 5002
Description = AVM FRITZ!WLAN USB Stick v1.1 : Fehlfunktion des Adapters wurde ermittelt.
< End of report >
--- --- ---
OTL Logfile: Code:
OTL logfile created on: 28.12.2010 16:25:09 - Run 1
OTL by OldTimer - Version 3.2.18.0 Folder = E:\Dokumente und Einstellungen\Besitzer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1.023,00 Mb Total Physical Memory | 206,00 Mb Available Physical Memory | 20,00% Memory free
4,00 Gb Paging File | 4,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): [Binary data over 100 bytes]
%SystemDrive% = E: | %SystemRoot% = E:\WINDOWS | %ProgramFiles% = E:\Programme
Drive C: | 78,14 Gb Total Space | 41,39 Gb Free Space | 52,97% Space Free | Partition Type: NTFS
Drive E: | 64,44 Gb Total Space | 9,94 Gb Free Space | 15,43% Space Free | Partition Type: NTFS
Drive G: | 321,85 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: YOUR-ZTK3A1X6EL | User Name: Besitzer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - E:\Dokumente und Einstellungen\Besitzer\Desktop\OTL.exe (OldTimer Tools)
PRC - E:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - E:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - E:\Programme\Norton 360\Engine\4.2.0.12\ccsvchst.exe (Symantec Corporation)
PRC - E:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - E:\Programme\Gemeinsame Dateien\Adobe\Updater5\AdobeUpdater.exe (Adobe Systems Incorporated)
PRC - E:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - E:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
PRC - E:\Programme\Samsung\Samsung Media Studio 5\SMSTray.exe (SAMSUNG ELECTRONICS)
PRC - E:\Programme\avmwlanstick\FRITZWLANMini.exe (AVM Berlin)
PRC - E:\Programme\MarkAny\ContentSafer\MaAgent.exe ((주)마크애니)
PRC - E:\Programme\Microsoft Works\WkDStore.exe (Microsoft® Corporation)
========== Modules (SafeList) ==========
MOD - E:\Dokumente und Einstellungen\Besitzer\Desktop\OTL.exe (OldTimer Tools)
MOD - E:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
MOD - E:\Programme\Norton 360\Engine\4.2.0.12\asoehook.dll (Symantec Corporation)
MOD - E:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll (Microsoft Corporation)
MOD - E:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll (Microsoft Corporation)
MOD - E:\Programme\MarkAny\ContentSafer\MaCSProHook.dll (MarkAny Co., Ltd.)
========== Win32 Services (SafeList) ==========
SRV - (HidServ) -- E:\WINDOWS\System32\hidserv.dll File not found
SRV - (AppMgmt) -- E:\WINDOWS\System32\appmgmts.dll File not found
SRV - (AntiVirService) -- E:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- E:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (N360) -- E:\Programme\Norton 360\Engine\4.2.0.12\ccSvcHst.exe (Symantec Corporation)
SRV - (UPnPService) -- E:\Programme\Gemeinsame Dateien\MAGIX Shared\UPnPService\UPnPService.exe (Magix AG)
SRV - (UxTuneUp) -- E:\WINDOWS\system32\uxtuneup.dll (TuneUp Software GmbH)
========== Driver Services (SafeList) ==========
DRV - (AVFSFilter) -- E:\WINDOWS\System32\DRIVERS\avfsfilter.sys File not found
DRV - (NAVEX15) -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20101227.034\NAVEX15.SYS (Symantec Corporation)
DRV - (NAVENG) -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20101227.034\NAVENG.SYS (Symantec Corporation)
DRV - (EraserUtilRebootDrv) -- E:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
DRV - (eeCtrl) -- E:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
DRV - (SymEvent) -- E:\WINDOWS\system32\drivers\SYMEVENT.SYS (Symantec Corporation)
DRV - (avipbb) -- E:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (MBAMSwissArmy) -- E:\WINDOWS\system32\drivers\mbamswissarmy.sys (Malwarebytes Corporation)
DRV - (IDSxpx86) -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\IPSDefs\20101227.001\IDSXpx86.sys (Symantec Corporation)
DRV - (avgntflt) -- E:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (BHDrvx86) -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\BASHDefs\20101123.003\BHDrvx86.sys (Symantec Corporation)
DRV - (SYMTDI) -- E:\WINDOWS\System32\Drivers\N360\0402000.00C\SYMTDI.SYS (Symantec Corporation)
DRV - (SymIRON) -- E:\WINDOWS\system32\drivers\N360\0402000.00C\Ironx86.SYS (Symantec Corporation)
DRV - (SymEFA) -- E:\WINDOWS\system32\drivers\N360\0402000.00C\SYMEFA.SYS (Symantec Corporation)
DRV - (SRTSP) -- E:\WINDOWS\System32\Drivers\N360\0402000.00C\SRTSP.SYS (Symantec Corporation)
DRV - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- E:\WINDOWS\system32\drivers\N360\0402000.00C\SRTSPX.SYS (Symantec Corporation)
DRV - (ccHP) -- E:\WINDOWS\system32\drivers\N360\0402000.00C\ccHPx86.sys (Symantec Corporation)
DRV - (SymDS) -- E:\WINDOWS\system32\drivers\N360\0402000.00C\SYMDS.SYS (Symantec Corporation)
DRV - (avgio) -- E:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (nmwcd) -- E:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia)
DRV - (nm) -- E:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)
DRV - (61883) -- E:\WINDOWS\system32\drivers\61883.sys (Microsoft Corporation)
DRV - (Avc) -- E:\WINDOWS\system32\drivers\avc.sys (Microsoft Corporation)
DRV - (MSDV) -- E:\WINDOWS\system32\drivers\msdv.sys (Microsoft Corporation)
DRV - (gameenum) -- E:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (s716bus) Sony Ericsson Device 716 driver (WDM) -- E:\WINDOWS\system32\drivers\s716bus.sys (MCCI Corporation)
DRV - (FWLANUSB) -- E:\WINDOWS\system32\drivers\fwlanusb.sys (AVM GmbH)
DRV - (avmeject) -- E:\WINDOWS\system32\drivers\avmeject.sys (AVM Berlin)
DRV - (hotcore2) -- E:\WINDOWS\system32\drivers\hotcore2.sys (Paragon Software Group)
DRV - (SVKP) -- E:\WINDOWS\system32\SVKP.sys (AntiCracking)
DRV - (ASAPIW2k) -- E:\WINDOWS\system32\drivers\asapiW2k.sys (Pinnacle Systems GmbH)
DRV - (itchfltr) -- E:\WINDOWS\system32\drivers\itchfltr.sys (Logitech, Inc.)
DRV - (LMouFlt2) -- E:\WINDOWS\system32\drivers\LMouFlt2.Sys (Logitech, Inc.)
DRV - (L8042pr2) -- E:\WINDOWS\system32\drivers\L8042pr2.Sys (Logitech, Inc.)
DRV - (nv) -- E:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (nvnforce) Service for NVIDIA(R) nForce(TM) -- E:\WINDOWS\system32\drivers\nvapu.sys (NVIDIA Corporation)
DRV - (nvax) Service for NVIDIA(R) nForce(TM) -- E:\WINDOWS\system32\drivers\nvax.sys (NVIDIA Corporation)
DRV - (nvidesm) -- E:\WINDOWS\system32\drivers\nvidesm.sys (NVIDIA Corporation)
DRV - (NVENET) -- E:\WINDOWS\system32\drivers\NVENET.sys (NVIDIA Corporation)
DRV - (nv_agp) -- E:\WINDOWS\System32\DRIVERS\nv_agp.sys (NVIDIA Corporation)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKLM\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - Reg Error: Key error. File not found
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1614895754-746137067-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\S-1-5-21-1614895754-746137067-839522115-1003\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKU\S-1-5-21-1614895754-746137067-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\IPSFFPlgn\ [2010.12.27 22:39:14 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\coFFPlgn\ [2010.12.27 20:30:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Components: E:\Programme\Mozilla Firefox\components [2010.05.01 17:48:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.3\extensions\\Plugins: E:\Programme\Mozilla Firefox\plugins [2010.05.01 17:46:55 | 000,000,000 | ---D | M]
[2010.05.01 17:48:41 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Extensions
[2010.05.01 17:49:58 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\vqovam8b.default\extensions
[2010.05.01 17:49:58 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\vqovam8b.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.05.01 17:46:56 | 000,000,000 | ---D | M] -- E:\Programme\Mozilla Firefox\extensions
[2010.04.01 17:54:38 | 000,001,392 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.04.01 17:54:38 | 000,002,344 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.04.01 17:54:38 | 000,006,805 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.04.01 17:54:38 | 000,001,178 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.04.01 17:54:38 | 000,001,105 | ---- | M] () -- E:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2007.12.31 16:41:54 | 000,221,783 | ---- | M]) - E:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 1001-search.info
O1 - Hosts: 127.0.0.1 www.1001-search.info
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 123topsearch.com
O1 - Hosts: 127.0.0.1 www.123topsearch.com
O1 - Hosts: 127.0.0.1 132.com
O1 - Hosts: 127.0.0.1 www.132.com
O1 - Hosts: 127.0.0.1 136136.net
O1 - Hosts: 127.0.0.1 www.136136.net
O1 - Hosts: 7784 more lines...
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - E:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - E:\Programme\Norton 360\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - E:\Programme\Norton 360\Engine\4.2.0.12\ipsbho.dll (Symantec Corporation)
O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - E:\Programme\Norton 360\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O3 - HKU\S-1-5-21-1614895754-746137067-839522115-1003\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - E:\Programme\Norton 360\Engine\4.2.0.12\coieplg.dll (Symantec Corporation)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] E:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] E:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [AVMWlanClient] E:\Programme\avmwlanstick\FRITZWLANMini.exe (AVM Berlin)
O4 - HKLM..\Run: [MAAgent] E:\Programme\MarkAny\ContentSafer\MaAgent.exe ((주)마크애니)
O4 - HKLM..\Run: [SMSTray] E:\Programme\Samsung\Samsung Media Studio 5\SMSTray.exe (SAMSUNG ELECTRONICS)
O4 - HKU\S-1-5-21-1614895754-746137067-839522115-1003..\Run: [SpybotSD TeaTimer] E:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1614895754-746137067-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O16 - DPF: DirectAnimation Java Classes file://E:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://E:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - E:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - E:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - E:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - E:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - E:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UIHost - (E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe) - E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software\TuneUp Utilities\WinStyler\tu_logonui.exe (Microsoft Corporation)
O24 - Desktop Components:0 () - file:///E:/DOKUME~1/Besitzer/LOKALE~1/Temp/msohtml1/01/clip_image001.jpg
O24 - Desktop Components:1 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: E:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: E:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {88485281-8b4b-4f8d-9ede-82e29a064277} - E:\Programme\MarkAny\ContentSafer\MACSMANAGER.dll (MarkAny Cooperation.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2005.02.21 10:48:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2009.10.23 08:57:25 | 000,000,106 | R--- | M] () - G:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{ce599579-b741-11d9-9234-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{ce599579-b741-11d9-9234-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{ce599579-b741-11d9-9234-806d6172696f}\Shell\AutoRun\command - "" = F:\start.exe -- File not found
O33 - MountPoints2\{ce59957a-b741-11d9-9234-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{ce59957a-b741-11d9-9234-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{ce59957a-b741-11d9-9234-806d6172696f}\Shell\AutoRun\command - "" = G:\splash.exe -- [2009.11.23 14:03:48 | 001,472,880 | R--- | M] ()
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\setup.exe -- File not found
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - E:\WINDOWS\System32\appmgmts.dll File not found
NetSvcs: HidServ - E:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: UxTuneUp - E:\WINDOWS\system32\uxtuneup.dll (TuneUp Software GmbH)
NetSvcs: WmdmPmSp - File not found
SafeBootMin: AppMgmt - E:\WINDOWS\System32\appmgmts.dll File not found
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vds - Service
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: AppMgmt - E:\WINDOWS\System32\appmgmts.dll File not found
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: nm - E:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)
SafeBootNet: nm.sys - E:\WINDOWS\system32\drivers\nmnt.sys (Microsoft Corporation)
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: UploadMgr - Service
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Microsoft VM
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608555} - Internet Explorer Classes for Java
ActiveX: {0fde1f56-0d59-4fd7-9624-e3df6b419d0f} - IEEX
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 8.5.1
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 8.5.1
ActiveX: {2A3320D6-C805-4280-B423-B665BDE33D8F} - Microsoft .NET Framework 1.1 Security Update (KB979906)
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {2F6EFCE6-10DF-49F9-9E64-9AE3775B2588} - Microsoft .NET Framework 1.1 Security Update (KB2416447)
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {411EDCF7-755D-414E-A74B-3DCD6583F589} - Microsoft .NET Framework 1.1 Service Pack 1 (KB867460)
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection E:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015C} - Microsoft DirectX
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.8
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection E:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7131646D-CD3C-40F4-97B9-CD9E4E6262EF} - .NET Framework
ActiveX: {73FA19D0-2D75-11D2-995D-00C04F98BBC9} - Webordner
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - E:\WINDOWS\system32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - E:\WINDOWS\system32\Rundll32.exe E:\WINDOWS\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} - .NET Framework
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E78BFA60-5393-4C38-82AB-E8019E464EB4} - .NET Framework
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: <{12d0ed0d-0ee0-4f90-8827-78cefb8f4988} - E:\WINDOWS\system32\ieudinit.exe
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - E:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - E:\WINDOWS\system32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "E:\WINDOWS\system32\rundll32.exe" "E:\WINDOWS\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
Drivers32: msacm.ac3filter - E:\WINDOWS\System32\ac3filter.acm ()
Drivers32: msacm.l3acm - E:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - E:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - E:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - E:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - E:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.ffds - E:\WINDOWS\System32\ffdshow.ax ()
Drivers32: vidc.iv31 - E:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - E:\WINDOWS\System32\ir32_32.dll ()
Drivers32: VIDC.MJPG - E:\WINDOWS\System32\pvmjpg21.dll (Pegasus Imaging Corporation)
Drivers32: VIDC.PIM1 - E:\WINDOWS\System32\pclepim1.dll (Pinnacle Systems)
Drivers32: vidc.XVID - E:\WINDOWS\System32\xvidvfw.dll ()
Drivers32: wave1 - E:\WINDOWS\System32\serwvdrv.dll (Microsoft Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902109354000384)
========== Files/Folders - Created Within 30 Days ==========
[2010.12.28 16:20:22 | 000,602,624 | ---- | C] (OldTimer Tools) -- E:\Dokumente und Einstellungen\Besitzer\Desktop\OTL.exe
[2010.12.28 13:13:08 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Malwarebytes
[2010.12.28 13:12:58 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- E:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.12.28 13:12:56 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2010.12.28 13:12:52 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- E:\WINDOWS\System32\drivers\mbam.sys
[2010.12.28 13:12:51 | 000,000,000 | ---D | C] -- E:\Programme\Malwarebytes' Anti-Malware
[2010.12.28 13:11:46 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Desktop\MFtools
[2010.12.28 09:05:32 | 000,339,504 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symtdiv.sys
[2010.12.28 09:05:31 | 000,361,904 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symtdi.sys
[2010.12.28 09:05:31 | 000,328,752 | R--- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symds.sys
[2010.12.28 09:05:31 | 000,173,104 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symefa.sys
[2010.12.28 09:05:30 | 000,325,680 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\N360\0402000.00C\srtsp.sys
[2010.12.28 09:05:30 | 000,043,696 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\N360\0402000.00C\srtspx.sys
[2010.12.28 09:05:29 | 000,501,888 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\N360\0402000.00C\cchpx86.sys
[2010.12.28 09:05:29 | 000,116,784 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\N360\0402000.00C\ironx86.sys
[2010.12.28 09:04:04 | 000,000,000 | ---D | C] -- E:\WINDOWS\System32\drivers\N360\0402000.00C
[2010.12.27 20:35:20 | 000,000,000 | ---D | C] -- E:\N360_BACKUP
[2010.12.27 20:30:54 | 000,107,368 | R--- | C] (GEAR Software Inc.) -- E:\WINDOWS\System32\GEARAspi.dll
[2010.12.27 20:30:21 | 000,124,976 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2010.12.27 20:30:21 | 000,060,808 | ---- | C] (Symantec Corporation) -- E:\WINDOWS\System32\S32EVNT1.DLL
[2010.12.27 20:30:20 | 000,000,000 | ---D | C] -- E:\Programme\Gemeinsame Dateien\Symantec Shared
[2010.12.27 20:30:20 | 000,000,000 | ---D | C] -- E:\Programme\Symantec
[2010.12.27 20:29:19 | 000,000,000 | ---D | C] -- E:\WINDOWS\System32\drivers\N360
[2010.12.27 20:29:16 | 000,000,000 | ---D | C] -- E:\Programme\Norton 360
[2010.12.27 20:29:15 | 000,000,000 | ---D | C] -- E:\Programme\Windows Sidebar
[2010.12.27 20:29:14 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Norton
[2010.12.27 20:25:06 | 000,000,000 | ---D | C] -- E:\Programme\NortonInstaller
[2010.12.27 20:20:09 | 109,768,960 | ---- | C] (Symantec Corporation) -- E:\Dokumente und Einstellungen\Besitzer\Desktop\N360-TW-17-6-0-32-GE.exe
[2010.12.27 20:13:08 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\NortonInstaller
[2010.12.27 18:44:42 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\clp
[2010.12.27 18:44:14 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Toolkit Suite
[2010.12.27 18:44:06 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Fighters
[2010.12.27 18:43:03 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Fighters
[2010.12.27 18:43:01 | 000,000,000 | ---D | C] -- E:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\PackageAware
[2010.12.27 14:45:35 | 000,000,000 | ---D | C] -- E:\Programme\GridinSoft Trojan Killer
[2010.12.15 13:19:51 | 000,045,568 | ---- | C] (Microsoft Corporation) -- E:\WINDOWS\System32\dllcache\wab.exe
[2010.12.15 13:17:32 | 000,040,960 | ---- | C] (Microsoft Corporation) -- E:\WINDOWS\System32\dllcache\ndproxy.sys
[2004.11.24 20:25:52 | 000,335,872 | ---- | C] ( ) -- E:\WINDOWS\System32\drvc.dll
[5 E:\WINDOWS\System32\*.tmp files -> E:\WINDOWS\System32\*.tmp -> ]
[1 E:\WINDOWS\*.tmp files -> E:\WINDOWS\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.12.28 16:20:29 | 000,602,624 | ---- | M] (OldTimer Tools) -- E:\Dokumente und Einstellungen\Besitzer\Desktop\OTL.exe
[2010.12.28 16:20:01 | 000,001,088 | ---- | M] () -- E:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2010.12.28 14:16:11 | 000,001,084 | ---- | M] () -- E:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2010.12.28 14:15:59 | 000,002,048 | --S- | M] () -- E:\WINDOWS\bootstat.dat
[2010.12.28 13:13:00 | 000,000,761 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.12.28 13:11:50 | 000,050,477 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\defogger.exe
[2010.12.28 13:11:49 | 000,296,448 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\12asdb33.exe
[2010.12.28 12:35:05 | 000,001,869 | ---- | M] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Norton 360.LNK
[2010.12.28 12:34:32 | 000,793,760 | ---- | M] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\Cat.DB
[2010.12.27 20:30:21 | 000,124,976 | ---- | M] (Symantec Corporation) -- E:\WINDOWS\System32\drivers\SYMEVENT.SYS
[2010.12.27 20:30:21 | 000,007,443 | ---- | M] () -- E:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2010.12.27 20:30:21 | 000,000,805 | ---- | M] () -- E:\WINDOWS\System32\drivers\SYMEVENT.INF
[2010.12.27 20:30:20 | 000,060,808 | ---- | M] (Symantec Corporation) -- E:\WINDOWS\System32\S32EVNT1.DLL
[2010.12.27 20:20:21 | 109,768,960 | ---- | M] (Symantec Corporation) -- E:\Dokumente und Einstellungen\Besitzer\Desktop\N360-TW-17-6-0-32-GE.exe
[2010.12.27 18:05:28 | 000,286,112 | ---- | M] () -- E:\WINDOWS\System32\FNTCACHE.DAT
[2010.12.27 17:55:45 | 000,000,116 | ---- | M] () -- E:\WINDOWS\NeroDigital.ini
[2010.12.27 17:55:44 | 000,042,496 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.12.27 16:17:55 | 000,055,132 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\wklnhst.dat
[2010.12.27 10:00:27 | 000,264,403 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\Audi_R8.jpg
[2010.12.27 09:58:31 | 000,135,096 | ---- | M] (Avira GmbH) -- E:\WINDOWS\System32\drivers\avipbb.sys
[2010.12.27 08:28:49 | 000,054,156 | -H-- | M] () -- E:\WINDOWS\QTFont.qfn
[2010.12.27 08:07:53 | 000,001,158 | ---- | M] () -- E:\WINDOWS\System32\wpa.dbl
[2010.12.20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- E:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010.12.20 18:08:40 | 000,020,952 | ---- | M] (Malwarebytes Corporation) -- E:\WINDOWS\System32\drivers\mbam.sys
[2010.12.19 21:26:16 | 000,459,170 | ---- | M] () -- E:\WINDOWS\System32\perfh007.dat
[2010.12.19 21:26:16 | 000,441,432 | ---- | M] () -- E:\WINDOWS\System32\perfh009.dat
[2010.12.19 21:26:16 | 000,084,446 | ---- | M] () -- E:\WINDOWS\System32\perfc007.dat
[2010.12.19 21:26:16 | 000,071,176 | ---- | M] () -- E:\WINDOWS\System32\perfc009.dat
[2010.12.17 19:03:51 | 000,001,688 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\Mein Büro.lnk
[2010.12.15 18:21:07 | 000,034,304 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\Offene Kundenposten.xls
[2010.12.15 16:29:25 | 000,001,393 | ---- | M] () -- E:\WINDOWS\imsins.BAK
[2010.12.15 08:56:33 | 000,025,088 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\Sichere Bauprojekte.xls
[2010.12.04 14:41:25 | 000,006,017 | ---- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Favorisiertes Design.theme
[5 E:\WINDOWS\System32\*.tmp files -> E:\WINDOWS\System32\*.tmp -> ]
[1 E:\WINDOWS\*.tmp files -> E:\WINDOWS\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.12.28 13:12:59 | 000,000,761 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.12.28 13:11:50 | 000,050,477 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\defogger.exe
[2010.12.28 13:11:48 | 000,296,448 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\12asdb33.exe
[2010.12.28 12:31:05 | 000,793,760 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\Cat.DB
[2010.12.28 09:05:31 | 000,007,873 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symefa.cat
[2010.12.28 09:05:31 | 000,007,787 | R--- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symnetv.cat
[2010.12.28 09:05:31 | 000,007,368 | R--- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symnet.cat
[2010.12.28 09:05:31 | 000,003,373 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symefa.inf
[2010.12.28 09:05:31 | 000,001,473 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symnetv.inf
[2010.12.28 09:05:31 | 000,001,445 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symnet.inf
[2010.12.28 09:05:30 | 000,007,442 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\srtspx.cat
[2010.12.28 09:05:30 | 000,007,425 | R--- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symds.cat
[2010.12.28 09:05:30 | 000,002,793 | R--- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\symds.inf
[2010.12.28 09:05:30 | 000,001,388 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\srtspx.inf
[2010.12.28 09:05:29 | 000,007,438 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\srtsp.cat
[2010.12.28 09:05:29 | 000,007,438 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\iron.cat
[2010.12.28 09:05:29 | 000,007,396 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\cchpx86.cat
[2010.12.28 09:05:29 | 000,001,754 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\cchpx86.inf
[2010.12.28 09:05:29 | 000,001,382 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\srtsp.inf
[2010.12.28 09:05:29 | 000,000,741 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\iron.inf
[2010.12.28 09:04:04 | 000,000,172 | ---- | C] () -- E:\WINDOWS\System32\drivers\N360\0402000.00C\isolate.ini
[2010.12.27 20:30:21 | 000,007,443 | ---- | C] () -- E:\WINDOWS\System32\drivers\SYMEVENT.CAT
[2010.12.27 20:30:21 | 000,000,805 | ---- | C] () -- E:\WINDOWS\System32\drivers\SYMEVENT.INF
[2010.12.27 20:30:08 | 000,001,869 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Desktop\Norton 360.LNK
[2010.12.27 10:00:34 | 000,264,403 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\Audi_R8.jpg
[2010.12.17 19:03:51 | 000,001,688 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Desktop\Mein Büro.lnk
[2010.12.04 14:41:25 | 000,006,017 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Favorisiertes Design.theme
[2010.05.09 13:43:59 | 000,921,600 | ---- | C] () -- E:\WINDOWS\System32\vorbisenc.dll
[2010.05.09 13:43:59 | 000,188,416 | ---- | C] () -- E:\WINDOWS\System32\vorbis.dll
[2010.05.09 13:43:58 | 000,237,568 | ---- | C] () -- E:\WINDOWS\System32\OggDS.dll
[2010.05.09 13:43:57 | 000,045,056 | ---- | C] () -- E:\WINDOWS\System32\Ogg.dll
[2009.07.24 18:15:00 | 000,000,528 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\.civclientrc
[2009.06.09 09:34:05 | 000,087,552 | ---- | C] () -- E:\WINDOWS\System32\cpwmon2k.dll
[2009.04.16 20:14:51 | 000,000,159 | ---- | C] () -- E:\WINDOWS\System32\AddPort.ini
[2009.04.16 20:11:13 | 000,000,760 | ---- | C] () -- E:\WINDOWS\hpntwksetup.ini
[2007.12.08 15:33:52 | 000,019,968 | ---- | C] () -- E:\WINDOWS\System32\Cpuinf32.dll
[2007.12.03 06:00:01 | 000,120,200 | ---- | C] () -- E:\WINDOWS\System32\DLLDEV32i.dll
[2007.11.28 09:48:12 | 000,055,132 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\wklnhst.dat
[2007.11.25 18:59:17 | 004,239,360 | ---- | C] () -- E:\WINDOWS\System32\qtp-mt334.dll
[2007.10.13 22:06:16 | 000,000,305 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2007.10.13 19:39:12 | 000,000,141 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat
[2007.10.13 19:06:54 | 000,022,151 | ---- | C] () -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log
[2007.07.01 12:12:14 | 003,145,728 | ---- | C] () -- E:\WINDOWS\System32\libavcodec.dll
[2007.07.01 11:59:22 | 000,517,632 | ---- | C] () -- E:\WINDOWS\System32\ff_x264.dll
[2007.06.17 12:43:56 | 000,405,504 | ---- | C] () -- E:\WINDOWS\System32\libmplayer.dll
[2007.06.12 12:21:26 | 000,208,896 | ---- | C] () -- E:\WINDOWS\System32\ff_theora.dll
[2007.01.09 18:05:50 | 000,026,112 | ---- | C] () -- E:\WINDOWS\System32\ff_wmv9.dll
[2005.10.12 03:20:10 | 000,077,824 | ---- | C] () -- E:\WINDOWS\System32\hpzids01.dll
[2005.05.14 12:52:30 | 000,000,116 | ---- | C] () -- E:\WINDOWS\NeroDigital.ini
[2005.05.14 12:50:43 | 000,006,768 | ---- | C] () -- E:\WINDOWS\mgxoschk.ini
[2005.05.14 12:50:43 | 000,000,024 | ---- | C] () -- E:\WINDOWS\magix.ini
[2005.05.12 08:53:39 | 000,042,496 | ---- | C] () -- E:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2005.05.11 20:22:19 | 000,000,518 | ---- | C] () -- E:\WINDOWS\ODBC.INI
[2005.05.11 09:21:05 | 000,363,520 | ---- | C] () -- E:\WINDOWS\System32\psisdecd.dll
[2005.05.11 09:13:45 | 000,007,680 | ---- | C] () -- E:\WINDOWS\System32\CNMVS66.DLL
[2005.05.11 09:07:19 | 000,000,051 | ---- | C] () -- E:\WINDOWS\iTouch.ini
[2005.05.11 08:55:43 | 000,003,274 | ---- | C] () -- E:\WINDOWS\Ascd_tmp.ini
[2005.05.11 08:55:42 | 000,005,824 | ---- | C] () -- E:\WINDOWS\System32\drivers\ASUSHWIO.SYS
[2005.04.27 17:38:06 | 000,004,335 | ---- | C] () -- E:\WINDOWS\ODBCINST.INI
[2004.12.20 10:08:28 | 000,155,648 | ---- | C] () -- E:\WINDOWS\System32\xvidvfw.dll
[2004.12.20 10:03:26 | 000,679,936 | ---- | C] () -- E:\WINDOWS\System32\xvidcore.dll
[2004.10.03 18:50:54 | 000,129,024 | ---- | C] () -- E:\WINDOWS\System32\ff_mpeg2enc.dll
[2003.12.22 14:40:06 | 001,663,068 | ---- | C] () -- E:\WINDOWS\System32\libmmd.dll
[2002.01.01 00:50:00 | 000,018,253 | ---- | C] () -- E:\WINDOWS\System32\ssnvfx.ini
[2001.07.07 03:00:00 | 000,003,254 | ---- | C] () -- E:\WINDOWS\System32\HPTCPMON.INI
========== LOP Check ==========
[2009.05.09 07:42:15 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Buhl Data Service GmbH
[2010.12.27 19:14:49 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\clp
[2010.12.27 18:44:14 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Common Toolkit Suite
[2010.12.27 20:17:32 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Fighters
[2007.10.22 18:44:22 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\FREEDB
[2010.04.01 22:14:12 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
[2007.10.22 18:13:50 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\MAGIX
[2007.12.03 06:51:32 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Pinnacle
[2007.12.03 06:48:43 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SmartSound Software Inc
[2007.10.13 22:39:18 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-DSL SpeedManager
[2007.10.13 22:17:25 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online
[2001.12.31 23:21:02 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\T-Online DSL-Manager
[2002.01.01 00:15:27 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TuneUp Software
[2005.05.14 12:38:31 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ulead Systems
[2009.05.09 07:42:31 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Buhl Data Service
[2010.05.09 13:44:20 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\DataCast
[2010.12.27 20:16:21 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Fighters
[2010.08.03 19:19:07 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Image Zone Express
[2007.12.16 19:02:46 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\JLC's Software
[2007.10.22 18:16:35 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\MAGIX
[2007.12.12 21:17:50 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Steinberg
[2007.10.13 22:38:46 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\T-DSL SpeedManager
[2007.10.13 22:17:45 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\T-Online
[2007.12.13 16:53:03 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Teleca
[2002.01.01 00:12:49 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\TuneUp Software
[2005.05.14 12:38:58 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Ulead Systems
[2010.11.19 17:16:42 | 000,000,402 | ---- | M] () -- E:\WINDOWS\Tasks\1-Klick-Wartung.job
========== Purity Check ==========
========== Custom Scans ==========
< %ALLUSERSPROFILE%\Application Data\*. >
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
< %APPDATA%\*. >
[2009.09.18 08:12:39 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Adobe
[2007.12.07 19:27:16 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Ahead
[2010.11.10 13:03:43 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Avira
[2009.05.09 07:42:31 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Buhl Data Service
[2005.05.13 12:37:35 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\CyberLink
[2010.05.09 13:44:20 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\DataCast
[2010.12.27 20:16:21 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Fighters
[2007.11.30 13:17:14 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Google
[2009.04.05 12:42:37 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\HP
[2010.08.06 05:49:42 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\HpUpdate
[2005.05.11 07:37:21 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Identities
[2010.08.03 19:19:07 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Image Zone Express
[2010.05.09 13:42:36 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\InstallShield
[2007.12.16 19:02:46 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\JLC's Software
[2007.10.13 22:15:18 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Macromedia
[2007.10.22 18:16:35 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\MAGIX
[2010.12.28 13:13:08 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Malwarebytes
[2009.07.27 21:03:07 | 000,000,000 | --SD | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Microsoft
[2005.05.11 20:20:17 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Microsoft Web Folders
[2010.05.01 17:48:41 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla
[2009.04.19 12:06:05 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\MSN6
[2005.05.11 12:22:54 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\NeroVision
[2007.12.13 16:11:57 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Sony Ericsson
[2007.12.12 21:17:50 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Steinberg
[2007.10.13 22:38:46 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\T-DSL SpeedManager
[2007.10.13 22:17:45 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\T-Online
[2007.12.13 16:53:03 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Teleca
[2002.01.01 00:12:49 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\TuneUp Software
[2005.05.14 12:38:58 | 000,000,000 | ---D | M] -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Ulead Systems
< %APPDATA%\*.exe /s >
[2009.09.18 08:12:32 | 001,961,720 | ---- | M] (Adobe Systems Incorporated) -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Macromedia\Flash Player\www.macromedia.com\bin\fpupdateax\fpupdateax.exe
[2009.05.09 07:38:12 | 000,010,134 | R--- | M] () -- E:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Microsoft\Installer\{49D59D86-7A0D-4217-979A-3D43F1F45CC8}\ARPPRODUCTICON.exe
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2004.08.04 01:10:00 | 018,782,319 | ---- | M] () .cab file -- E:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2009.04.17 17:32:22 | 023,898,261 | ---- | M] () .cab file -- E:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2004.08.04 01:10:00 | 018,782,319 | ---- | M] () .cab file -- E:\WINDOWS\ServicePackFiles\i386\sp2.cab:AGP440.sys
[2009.04.17 17:32:22 | 023,898,261 | ---- | M] () .cab file -- E:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- E:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008.04.13 19:36:38 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- E:\WINDOWS\system32\drivers\agp440.sys
[2004.08.03 23:07:42 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=2C428FA0C3E3A01ED93C9B2A27D8D4BB -- E:\WINDOWS\$NtServicePackUninstall$\agp440.sys
< MD5 for: ATAPI.SYS >
[2002.08.29 13:00:00 | 010,180,476 | ---- | M] () .cab file -- E:\WINDOWS\Driver Cache\i386\sp1.cab:atapi.sys
[2004.08.04 01:10:00 | 018,782,319 | ---- | M] () .cab file -- E:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2009.04.17 17:32:22 | 023,898,261 | ---- | M] () .cab file -- E:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2004.08.04 01:10:00 | 018,782,319 | ---- | M] () .cab file -- E:\WINDOWS\ServicePackFiles\i386\sp2.cab:atapi.sys
[2009.04.17 17:32:22 | 023,898,261 | ---- | M] () .cab file -- E:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2002.08.29 00:27:50 | 000,086,912 | ---- | M] (Microsoft Corporation) MD5=95B858761A00E1D4F81F79A0DA019ACA -- E:\WINDOWS\system32\ReinstallBackups\0009\DriverFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- E:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008.04.13 19:40:30 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- E:\WINDOWS\system32\drivers\atapi.sys
[2004.08.03 22:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- E:\WINDOWS\$NtServicePackUninstall$\atapi.sys
< MD5 for: EVENTLOG.DLL >
[2008.04.14 03:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- E:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008.04.14 03:22:10 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- E:\WINDOWS\system32\eventlog.dll
[2004.08.04 00:57:20 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=B932C077D5A65B71B4512544AC404CB4 -- E:\WINDOWS\$NtServicePackUninstall$\eventlog.dll
< MD5 for: EXPLORER.EXE >
[2004.08.04 00:57:54 | 001,035,264 | ---- | M] (Microsoft Corporation) MD5=22FE1BE02EADDE1632E478E4125639E0 -- E:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007.06.13 14:10:08 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=331ED93570BAF3CFE30340298762CD56 -- E:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2008.04.14 03:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- E:\WINDOWS\explorer.exe
[2008.04.14 03:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- E:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2007.06.13 14:21:45 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=64D320C0E301EEDC5A4ADBBDC5024F7F -- E:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: NETLOGON.DLL >
[2008.04.14 03:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- E:\WINDOWS\ServicePackFiles\i386\netlogon.dll
[2008.04.14 03:22:19 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- E:\WINDOWS\system32\netlogon.dll
[2004.08.04 00:57:32 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=D27395EDCD3416AFD125A9370DCB585C -- E:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
< MD5 for: SCECLI.DLL >
[2008.04.14 03:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- E:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008.04.14 03:22:23 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- E:\WINDOWS\system32\scecli.dll
[2004.08.04 00:57:34 | 000,186,880 | ---- | M] (Microsoft Corporation) MD5=64DC26B3CF7BCCAD431CE360A4C625D5 -- E:\WINDOWS\$NtServicePackUninstall$\scecli.dll
< MD5 for: USER32.DLL >
[2005.03.02 19:09:46 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=3751D7CF0E0A113D84414992146BCE6A -- E:\WINDOWS\$NtUninstallKB925902$\user32.dll
[2007.03.08 16:36:30 | 000,579,072 | ---- | M] (Microsoft Corporation) MD5=492E166CFD26A50FB9160DB536FF7D2B -- E:\WINDOWS\$NtServicePackUninstall$\user32.dll
[2005.03.02 19:19:56 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=4C90159A69A5FD3EB39C71411F28FCFF -- E:\WINDOWS\$hf_mig$\KB890859\SP2QFE\user32.dll
[2004.08.04 00:57:38 | 000,578,560 | ---- | M] (Microsoft Corporation) MD5=56785FD5236D7B22CF471A6DA9DB46D8 -- E:\WINDOWS\$NtUninstallKB890859$\user32.dll
[2007.03.08 16:48:39 | 000,579,584 | ---- | M] (Microsoft Corporation) MD5=78785EFF8CB90CEC1862A4CCFD9A3C3A -- E:\WINDOWS\$hf_mig$\KB925902\SP2QFE\user32.dll
[2008.04.14 03:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- E:\WINDOWS\ServicePackFiles\i386\user32.dll
[2008.04.14 03:22:31 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- E:\WINDOWS\system32\user32.dll
< MD5 for: USERINIT.EXE >
[2008.04.14 03:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- E:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 03:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- E:\WINDOWS\system32\userinit.exe
[2004.08.04 00:58:18 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- E:\WINDOWS\$NtServicePackUninstall$\userinit.exe
< MD5 for: WINLOGON.EXE >
[2004.08.04 00:58:20 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- E:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 03:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- E:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 03:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- E:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2002.08.29 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- E:\WINDOWS\system32\dllcache\ws2ifsl.sys
[2002.08.29 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- E:\WINDOWS\system32\drivers\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2005.04.27 18:32:03 | 000,094,208 | ---- | M] () -- E:\WINDOWS\system32\config\default.sav
[2005.04.27 18:32:03 | 000,606,208 | ---- | M] () -- E:\WINDOWS\system32\config\software.sav
[2005.04.27 18:32:03 | 000,425,984 | ---- | M] () -- E:\WINDOWS\system32\config\system.sav
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[2008.04.14 03:22:07 | 000,060,416 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- E:\WINDOWS\system32\cabinet.dll
[2009.03.08 03:31:44 | 000,348,160 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- E:\WINDOWS\system32\dxtmsft.dll
[2009.03.08 03:31:38 | 000,216,064 | ---- | M] (Microsoft Corporation) Unable to obtain MD5 -- E:\WINDOWS\system32\dxtrans.dll
[5 E:\WINDOWS\system32\*.tmp files -> E:\WINDOWS\system32\*.tmp -> ]
< End of report >
--- --- --- |
