| Schnupsi | 26.01.2011 21:17 |
Zuerst malwarebytes: Code:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Datenbank Version: 5610
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
26.01.2011 20:52:22
mbam-log-2011-01-26 (20-52-22).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 246905
Laufzeit: 30 Minute(n), 1 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 2
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\XML (Trojan.FakeAlert) -> Quarantined and deleted successfully.
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
c:\Windows\System32\0.exe (Backdoor.Bot) -> Quarantined and deleted successfully.
Und OTL Code:
OTL logfile created on: 26.01.2011 21:03:29 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Spirit\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 73,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 29,29 Gb Total Space | 12,49 Gb Free Space | 42,65% Space Free | Partition Type: NTFS
Drive D: | 119,75 Gb Total Space | 67,67 Gb Free Space | 56,51% Space Free | Partition Type: NTFS
Computer Name: SPIRIT-PC | User Name: Spirit | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Spirit\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - D:\Programme\ESET Smart Security\ekrn.exe (ESET)
PRC - D:\Programme\ESET Smart Security\egui.exe (ESET)
PRC - D:\Programme\Winstep\WorkShelf.exe (Winstep Software Technologies)
PRC - D:\Programme\Winstep\Nextstart.exe (Winstep Software Technologies)
PRC - C:\Windows\System32\dgdersvc.exe (Devguru Co., Ltd.)
PRC - C:\Windows\System32\FsUsbExService.Exe (Teruten)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - D:\Programme\Winstep\WsxService.exe (Winstep Software Technologies)
========== Modules (SafeList) ==========
MOD - C:\Users\Spirit\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sspicli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\sechost.dll (Microsoft Corporation)
MOD - C:\Windows\System32\samcli.dll (Microsoft Corporation)
MOD - C:\Windows\System32\profapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\netutils.dll (Microsoft Corporation)
MOD - C:\Windows\System32\KernelBase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\dwmapi.dll (Microsoft Corporation)
MOD - C:\Windows\System32\devobj.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cryptbase.dll (Microsoft Corporation)
MOD - C:\Windows\System32\cfgmgr32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (Ati External Event Utility) -- File not found
SRV - (Akamai) -- c:\Programme\Common Files\Akamai\netsession_win_dbc0250.dll ()
SRV - (TeamViewer6) -- C:\Programme\TeamViewer\Version6\TeamViewer_Service.exe (TeamViewer GmbH)
SRV - (EhttpSrv) -- D:\Programme\ESET Smart Security\EHttpSrv.exe (ESET)
SRV - (ekrn) -- D:\Programme\ESET Smart Security\ekrn.exe (ESET)
SRV - (dgdersvc) -- C:\Windows\System32\dgdersvc.exe (Devguru Co., Ltd.)
SRV - (FsUsbExService) -- C:\Windows\System32\FsUsbExService.Exe (Teruten)
SRV - (npggsvc) -- C:\Windows\System32\GameMon.des (INCA Internet Co., Ltd.)
SRV - (WwanSvc) -- C:\Windows\System32\wwansvc.dll (Microsoft Corporation)
SRV - (WbioSrvc) -- C:\Windows\System32\wbiosrvc.dll (Microsoft Corporation)
SRV - (Power) -- C:\Windows\System32\umpo.dll (Microsoft Corporation)
SRV - (Themes) -- C:\Windows\System32\themeservice.dll (Microsoft Corporation)
SRV - (sppuinotify) -- C:\Windows\System32\sppuinotify.dll (Microsoft Corporation)
SRV - (RpcEptMapper) -- C:\Windows\System32\RpcEpMap.dll (Microsoft Corporation)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (PNRPsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (p2pimsvc) -- C:\Windows\System32\pnrpsvc.dll (Microsoft Corporation)
SRV - (HomeGroupProvider) -- C:\Windows\System32\provsvc.dll (Microsoft Corporation)
SRV - (PNRPAutoReg) -- C:\Windows\System32\pnrpauto.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (HomeGroupListener) -- C:\Windows\System32\ListSvc.dll (Microsoft Corporation)
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (Dhcp) -- C:\Windows\System32\dhcpcore.dll (Microsoft Corporation)
SRV - (defragsvc) -- C:\Windows\System32\defragsvc.dll (Microsoft Corporation)
SRV - (BDESVC) -- C:\Windows\System32\bdesvc.dll (Microsoft Corporation)
SRV - (AxInstSV) ActiveX-Installer (AxInstSV) -- C:\Windows\System32\AxInstSv.dll (Microsoft Corporation)
SRV - (AppIDSvc) -- C:\Windows\System32\appidsvc.dll (Microsoft Corporation)
SRV - (sppsvc) -- C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
SRV - (Winstep Xtreme Service) -- D:\Programme\Winstep\WsxService.exe (Winstep Software Technologies)
SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation)
SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (aswSnx) -- C:\Windows\System32\drivers\aswSnx.sys (AVAST Software)
DRV - (dgderdrv) -- C:\Windows\System32\drivers\dgderdrv.sys (Devguru Co., Ltd)
DRV - (FsUsbExDisk) -- C:\Windows\System32\FsUsbExDisk.Sys ()
DRV - (eamonm) -- C:\Windows\System32\drivers\eamonm.sys (ESET)
DRV - (epfw) -- C:\Windows\System32\drivers\epfw.sys (ESET)
DRV - (ehdrv) -- C:\Windows\System32\drivers\ehdrv.sys (ESET)
DRV - (epfwwfp) -- C:\Windows\System32\drivers\epfwwfp.sys (ESET)
DRV - (Epfwndis) -- C:\Windows\System32\drivers\epfwndis.sys (ESET)
DRV - (sscemdm) -- C:\Windows\System32\drivers\sscemdm.sys (MCCI Corporation)
DRV - (sscebus) SAMSUNG USB Composite Device V2 driver (WDM) -- C:\Windows\System32\drivers\sscebus.sys (MCCI Corporation)
DRV - (sscemdfl) -- C:\Windows\System32\drivers\sscemdfl.sys (MCCI Corporation)
DRV - (VX1000) -- C:\Windows\System32\drivers\VX1000.sys (Microsoft Corporation)
DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (KSecPkg) -- C:\Windows\System32\Drivers\ksecpkg.sys (Microsoft Corporation)
DRV - (cmdide) -- C:\Windows\system32\DRIVERS\cmdide.sys (CMD Technology, Inc.)
DRV - (adpahci) -- C:\Windows\system32\DRIVERS\adpahci.sys (Adaptec, Inc.)
DRV - (adp94xx) -- C:\Windows\system32\DRIVERS\adp94xx.sys (Adaptec, Inc.)
DRV - (amdsbs) -- C:\Windows\system32\DRIVERS\amdsbs.sys (AMD Technologies Inc.)
DRV - (adpu320) -- C:\Windows\system32\DRIVERS\adpu320.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\DRIVERS\arcsas.sys (Adaptec, Inc.)
DRV - (amdsata) -- C:\Windows\system32\DRIVERS\amdsata.sys (Advanced Micro Devices)
DRV - (arc) -- C:\Windows\system32\DRIVERS\arc.sys (Adaptec, Inc.)
DRV - (amdxata) -- C:\Windows\system32\DRIVERS\amdxata.sys (Advanced Micro Devices)
DRV - (aliide) -- C:\Windows\system32\DRIVERS\aliide.sys (Acer Laboratories Inc.)
DRV - (nvstor) -- C:\Windows\system32\DRIVERS\nvstor.sys (NVIDIA Corporation)
DRV - (nvraid) -- C:\Windows\system32\DRIVERS\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\DRIVERS\nfrd960.sys (IBM Corporation)
DRV - (LSI_SAS) -- C:\Windows\system32\DRIVERS\lsi_sas.sys (LSI Corporation)
DRV - (iaStorV) -- C:\Windows\system32\DRIVERS\iaStorV.sys (Intel Corporation)
DRV - (MegaSR) -- C:\Windows\system32\DRIVERS\MegaSR.sys (LSI Corporation, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\DRIVERS\lsi_scsi.sys (LSI Corporation)
DRV - (LSI_FC) -- C:\Windows\system32\DRIVERS\lsi_fc.sys (LSI Corporation)
DRV - (LSI_SAS2) -- C:\Windows\system32\DRIVERS\lsi_sas2.sys (LSI Corporation)
DRV - (iirsp) -- C:\Windows\system32\DRIVERS\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (megasas) -- C:\Windows\system32\DRIVERS\megasas.sys (LSI Corporation)
DRV - (hwpolicy) -- C:\Windows\System32\drivers\hwpolicy.sys (Microsoft Corporation)
DRV - (elxstor) -- C:\Windows\system32\DRIVERS\elxstor.sys (Emulex)
DRV - (aic78xx) -- C:\Windows\system32\DRIVERS\djsvs.sys (Adaptec, Inc.)
DRV - (HpSAMD) -- C:\Windows\system32\DRIVERS\HpSAMD.sys (Hewlett-Packard Company)
DRV - (FsDepends) -- C:\Windows\System32\drivers\fsdepends.sys (Microsoft Corporation)
DRV - (vsmraid) -- C:\Windows\system32\DRIVERS\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (vmbus) -- C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation)
DRV - (vhdmp) -- C:\Windows\system32\DRIVERS\vhdmp.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation)
DRV - (vdrvroot) -- C:\Windows\system32\DRIVERS\vdrvroot.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation)
DRV - (WIMMount) -- C:\Windows\System32\drivers\wimmount.sys (Microsoft Corporation)
DRV - (viaide) -- C:\Windows\system32\DRIVERS\viaide.sys (VIA Technologies, Inc.)
DRV - (ql2300) -- C:\Windows\system32\DRIVERS\ql2300.sys (QLogic Corporation)
DRV - (rdyboost) -- C:\Windows\System32\drivers\rdyboost.sys (Microsoft Corporation)
DRV - (ql40xx) -- C:\Windows\system32\DRIVERS\ql40xx.sys (QLogic Corporation)
DRV - (SiSRaid4) -- C:\Windows\system32\DRIVERS\sisraid4.sys (Silicon Integrated Systems)
DRV - (pcw) -- C:\Windows\System32\drivers\pcw.sys (Microsoft Corporation)
DRV - (SiSRaid2) -- C:\Windows\system32\DRIVERS\SiSRaid2.sys (Silicon Integrated Systems Corp.)
DRV - (stexstor) -- C:\Windows\system32\DRIVERS\stexstor.sys (Promise Technology)
DRV - (CNG) -- C:\Windows\System32\Drivers\cng.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC-Seriellschnittstellentreiber (WDM) -- C:\Windows\System32\Drivers\Brserid.sys (Brother Industries Ltd.)
DRV - (rdpbus) -- C:\Windows\System32\drivers\rdpbus.sys (Microsoft Corporation)
DRV - (RDPREFMP) -- C:\Windows\System32\drivers\RDPREFMP.sys (Microsoft Corporation)
DRV - (RasAgileVpn) WAN Miniport (IKEv2) -- C:\Windows\System32\drivers\agilevpn.sys (Microsoft Corporation)
DRV - (WfpLwf) -- C:\Windows\System32\drivers\wfplwf.sys (Microsoft Corporation)
DRV - (NdisCap) -- C:\Windows\System32\drivers\ndiscap.sys (Microsoft Corporation)
DRV - (vwifibus) -- C:\Windows\System32\drivers\vwifibus.sys (Microsoft Corporation)
DRV - (1394ohci) -- C:\Windows\system32\DRIVERS\1394ohci.sys (Microsoft Corporation)
DRV - (UmPass) -- C:\Windows\System32\drivers\umpass.sys (Microsoft Corporation)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (mshidkmdf) -- C:\Windows\System32\drivers\mshidkmdf.sys (Microsoft Corporation)
DRV - (MTConfig) -- C:\Windows\system32\DRIVERS\MTConfig.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\Windows\System32\drivers\CompositeBus.sys (Microsoft Corporation)
DRV - (AppID) -- C:\Windows\system32\drivers\appid.sys (Microsoft Corporation)
DRV - (scfilter) -- C:\Windows\System32\drivers\scfilter.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation)
DRV - (discache) -- C:\Windows\System32\drivers\discache.sys (Microsoft Corporation)
DRV - (AcpiPmi) -- C:\Windows\system32\DRIVERS\acpipmi.sys (Microsoft Corporation)
DRV - (AmdPPM) -- C:\Windows\system32\DRIVERS\amdppm.sys (Microsoft Corporation)
DRV - (hcw85cir) -- C:\Windows\system32\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (BrUsbMdm) Brother MFC-nur-Fax-Modem (USB) -- C:\Windows\System32\Drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) Brother MFC-WDM-Treiber (USB,seriell) -- C:\Windows\System32\Drivers\BrUsbSer.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) Brother WDM-Treiber (seriell) -- C:\Windows\System32\Drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\DRIVERS\BrFiltLo.sys (Brother Industries, Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\DRIVERS\BrFiltUp.sys (Brother Industries, Ltd.)
DRV - (RTL8167) -- C:\Windows\System32\drivers\Rt86win7.sys (Realtek Corporation )
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (b57nd60x) -- C:\Windows\System32\drivers\b57nd60x.sys (Broadcom Corporation)
DRV - (ebdrv) -- C:\Windows\system32\DRIVERS\evbdx.sys (Broadcom Corporation)
DRV - (b06bdrv) -- C:\Windows\system32\DRIVERS\bxvbdx.sys (Broadcom Corporation)
DRV - (KMWDFILTERx86) -- C:\Windows\System32\drivers\KMWDFILTER.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (epmntdrv) -- C:\Windows\System32\epmntdrv.sys ()
DRV - (EuGdiDrv) -- C:\Windows\System32\EuGdiDrv.sys ()
DRV - (ovt519) -- C:\Windows\System32\drivers\ov519vid.sys (OmniVision Technologies, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 14 8D C7 BE C8 2F CB 01 [binary data]
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.defaultthis.engineName: "Bigpoint Games DE Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2843456&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "hxxp://www.google.de/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: noia2_option@kk.noia:3.76
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.2
FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.0.900
FF - prefs.js..extensions.enabledItems: {6904342A-8307-11DF-A508-4AE2DFD72085}:2.1.0.900
FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:5.0.31.0
FF - prefs.js..extensions.enabledItems: {9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}:3.76
FF - prefs.js..extensions.enabledItems: {5c876f30-10ce-11dd-bd0b-0800200c9a66}:3.6.7
FF - prefs.js..extensions.enabledItems: {8225d6f0-dfca-11df-85ca-0800200c9a66}:1.0.4.5
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.6&q="
FF - HKLM\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\html5video [2011.01.01 20:21:31 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Firefox\Extensions\\{6904342A-8307-11DF-A508-4AE2DFD72085}: C:\Program Files\DivX\DivX Plus Web Player\firefox\wpa [2011.01.01 20:21:31 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.12.10 13:56:42 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.01.01 20:21:31 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: D:\Programme\ESET Smart Security\Mozilla Thunderbird [2011.01.24 19:36:14 | 000,000,000 | ---D | M]
[2009.12.10 16:23:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Extensions
[2011.01.26 14:36:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions
[2011.01.26 00:23:47 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\{12bc3590-67a6-11de-8a39-0800200c9a66}
[2011.01.26 00:22:51 | 000,000,000 | ---D | M] (Aero Fox Silver XL) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\{5c876f30-10ce-11dd-bd0b-0800200c9a66}
[2011.01.26 00:23:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\{7694c49c-9fbd-11dc-8314-0800200c9a66}
[2011.01.26 00:39:31 | 000,000,000 | ---D | M] (Bloomind FT Graphite) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\{8225d6f0-dfca-11df-85ca-0800200c9a66}
[2010.02.23 08:04:21 | 000,000,000 | ---D | M] (Noia 2.0 (eXtreme)) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\{9f08cb5a-76b1-4bcf-aff9-90e1a5d60b1e}
[2010.12.24 21:45:14 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.01.07 17:59:59 | 000,000,000 | ---D | M] (Battlefield Heroes Updater) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\battlefieldheroespatcher@ea.com
[2010.12.01 18:09:34 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2010.02.23 08:04:21 | 000,000,000 | ---D | M] (Noia 2.0 eXtreme OPT) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\noia2_option@kk.noia
[2011.01.26 00:22:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\extensions\{5c876f30-10ce-11dd-bd0b-0800200c9a66}\chrome\win\mozapps\extensions
[2010.12.30 20:15:42 | 000,000,937 | ---- | M] () -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\searchplugins\conduit.xml
[2011.01.24 13:57:40 | 000,001,056 | ---- | M] () -- C:\Users\Spirit\AppData\Roaming\Mozilla\Firefox\Profiles\6k6sjex9.default\searchplugins\icqplugin.xml
[2011.01.10 23:03:15 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011.01.11 14:06:24 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2010.06.08 10:28:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.08.16 09:41:53 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.11.15 10:31:23 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011.01.01 20:21:31 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 <video>) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\HTML5VIDEO
[2011.01.01 20:21:31 | 000,000,000 | ---D | M] (DivX HiQ) -- C:\PROGRAM FILES\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\WPA
[2009.12.10 18:00:54 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA}
[2010.06.08 10:28:06 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.08.16 09:41:53 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.11.15 10:31:23 | 000,000,000 | ---D | M] (Java Console) -- C:\PROGRAM FILES\MOZILLA FIREFOX\EXTENSIONS\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2010.09.15 04:50:38 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.09.09 17:56:06 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.09.09 17:56:06 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.09.09 17:56:06 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.09.09 17:56:06 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.09.09 17:56:06 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2010.10.10 12:26:23 | 000,001,295 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 blazeserver.blazeemu.org
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (DivX HiQ) - {593DDEC6-7468-4cdd-90E1-42DADAA222E9} - C:\Programme\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O4 - HKLM..\Run: [egui] D:\Programme\ESET Smart Security\egui.exe (ESET)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] D:\Programme\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [NextSTART] D:\Programme\Winstep\nextstart.exe (Winstep Software Technologies)
O4 - HKCU..\Run: [Workshelf] D:\Programme\Winstep\workshelf.exe (Winstep Software Technologies)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O22 - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\System32\DreamScene.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011.01.26 20:30:36 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\Spirit\Desktop\OTL.exe
[2011.01.26 20:14:55 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Roaming\Malwarebytes
[2011.01.26 20:14:50 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.01.26 20:14:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.01.26 20:14:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.01.26 20:14:46 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.01.25 21:18:52 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2011.01.25 21:18:52 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2011.01.25 21:18:52 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2011.01.25 21:12:29 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browserchoice.exe
[2011.01.25 21:11:15 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2011.01.25 21:11:04 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011.01.25 21:11:04 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.01.25 21:11:02 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.01.25 21:11:02 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.01.25 21:11:02 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.01.25 21:11:02 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.01.25 21:11:01 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.01.25 21:11:01 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.01.25 21:11:01 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.01.25 21:11:01 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.01.25 21:11:01 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.01.25 21:10:53 | 001,037,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsasrv.dll
[2011.01.25 21:10:53 | 000,133,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ksecpkg.sys
[2011.01.25 21:10:52 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011.01.25 21:10:50 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.01.25 21:10:46 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2011.01.25 21:10:35 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2011.01.25 21:10:27 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2011.01.25 21:10:27 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2011.01.25 21:10:26 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2011.01.25 21:10:26 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2011.01.25 21:10:22 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2011.01.25 21:10:22 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2011.01.25 21:10:16 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2011.01.25 21:10:15 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2011.01.25 21:10:15 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2011.01.25 21:10:15 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2011.01.25 21:10:14 | 000,197,632 | ---- | C] (Intel(R) Corporation) -- C:\Windows\System32\ir32_32.dll
[2011.01.25 21:10:14 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2011.01.25 21:10:13 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2011.01.25 21:10:13 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\avifil32.dll
[2011.01.25 21:10:13 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2011.01.25 21:10:12 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2011.01.25 21:10:11 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript.dll
[2011.01.25 21:10:00 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2011.01.25 21:09:47 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\StructuredQuery.dll
[2011.01.25 21:09:44 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2011.01.25 21:09:44 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2011.01.25 21:09:24 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbscript.dll
[2011.01.25 21:09:23 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2011.01.25 21:09:21 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2011.01.25 21:07:00 | 002,327,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.01.25 17:24:43 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live Safety Center
[2011.01.25 14:48:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winstep
[2011.01.25 14:48:25 | 000,798,208 | ---- | C] (Winstep Software Technologies) -- C:\Windows\System32\NextControls.ocx
[2011.01.25 14:48:25 | 000,608,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\comctl32.ocx
[2011.01.24 19:37:06 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Roaming\ESET
[2011.01.24 19:37:06 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Local\ESET
[2011.01.24 19:36:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2011.01.24 19:36:14 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2011.01.24 15:59:04 | 000,098,392 | ---- | C] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys
[2011.01.24 15:56:02 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Local\Sunbelt Software
[2011.01.24 15:54:04 | 000,000,000 | ---D | C] -- C:\Programme\Lavasoft
[2011.01.24 14:28:54 | 000,357,968 | ---- | C] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011.01.23 19:45:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2011.01.23 18:19:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2011.01.23 18:19:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2011.01.23 15:48:28 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Winstep
[2011.01.22 18:49:57 | 001,347,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msvbvm50.dll
[2011.01.20 16:03:18 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RemoteDesktopServer
[2011.01.20 16:03:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RemoteDesktopServer
[2011.01.17 18:55:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Messenger Plus!
[2011.01.17 18:55:01 | 000,000,000 | ---D | C] -- C:\Programme\Messenger Plus! Live
[2011.01.17 18:53:58 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft
[2011.01.17 18:53:42 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live SkyDrive
[2011.01.17 18:53:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
[2011.01.17 18:53:22 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live
[2011.01.17 18:53:10 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2011.01.16 16:58:32 | 000,000,000 | ---D | C] -- C:\Users\Spirit\Desktop\reghack_s8500_v11
[2011.01.11 21:34:53 | 000,000,000 | ---D | C] -- C:\Programme\TeamViewer
[2011.01.11 03:39:11 | 000,518,656 | ---- | C] (Wizgate) -- C:\Windows\System32\BomberMan.exe
[2011.01.11 03:17:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BMO WORLD
[2011.01.10 23:04:01 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Roaming\skypePM
[2011.01.10 23:03:01 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Skype
[2011.01.10 23:03:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2011.01.10 23:02:59 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Roaming\Skype
[2011.01.10 23:02:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2011.01.07 18:30:42 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Local\PunkBuster
[2011.01.01 20:21:33 | 000,000,000 | ---D | C] -- C:\Users\Spirit\AppData\Roaming\Local
========== Files - Modified Within 30 Days ==========
[2011.01.26 21:00:25 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.01.26 21:00:25 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.01.26 20:55:14 | 000,000,308 | -HS- | M] () -- C:\Windows\tasks\PLGPVX.job
[2011.01.26 20:55:07 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.01.26 20:30:41 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\Spirit\Desktop\OTL.exe
[2011.01.26 20:14:50 | 000,000,773 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.01.26 07:12:11 | 000,643,628 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.01.26 07:12:11 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.01.26 07:12:11 | 000,126,188 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.01.26 07:12:11 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.01.25 22:47:44 | 000,001,276 | ---- | M] () -- C:\Users\Spirit\Desktop\Command & Conquer 4.lnk
[2011.01.25 21:22:54 | 000,305,688 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.01.25 14:48:35 | 000,001,005 | ---- | M] () -- C:\Users\Spirit\Documents\Winstep.lnk
[2011.01.25 14:48:35 | 000,000,707 | ---- | M] () -- C:\Users\Spirit\Desktop\Winstep Xtreme.lnk
[2011.01.24 15:59:02 | 000,098,392 | ---- | M] (Sunbelt Software) -- C:\Windows\System32\drivers\SBREDrv.sys
[2011.01.24 14:28:54 | 000,002,577 | ---- | M] () -- C:\Windows\System32\config.nt
[2011.01.24 11:04:59 | 000,000,000 | RHS- | M] () -- C:\Windows\wininit.ini
[2011.01.24 05:41:30 | 000,000,664 | ---- | M] () -- C:\Users\Spirit\Desktop\RegCleaner.lnk
[2011.01.23 19:24:34 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2011.01.23 19:24:34 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2011.01.23 18:19:37 | 000,000,916 | ---- | M] () -- C:\Users\Spirit\Desktop\Spybot - Search & Destroy.lnk
[2011.01.23 16:10:19 | 000,079,360 | RHS- | M] () -- C:\Windows\System32\dwmredirz.dll
[2011.01.20 16:03:35 | 000,000,901 | ---- | M] () -- C:\Users\Spirit\Desktop\RemoteDesktop.lnk
[2011.01.17 18:54:10 | 000,002,068 | ---- | M] () -- C:\Users\Spirit\Desktop\Windows Live Messenger .lnk
[2011.01.13 09:41:29 | 000,357,968 | ---- | M] (AVAST Software) -- C:\Windows\System32\drivers\aswSnx.sys
[2011.01.11 21:34:56 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 6.lnk
[2011.01.11 03:43:33 | 000,919,040 | ---- | M] () -- C:\Windows\System32\_launch.exe
[2011.01.11 03:39:11 | 000,518,656 | ---- | M] (Wizgate) -- C:\Windows\System32\BomberMan.exe
[2011.01.11 03:39:07 | 000,471,552 | ---- | M] () -- C:\Windows\System32\bmo.dll
[2011.01.11 03:17:13 | 000,000,701 | ---- | M] () -- C:\Users\Public\Desktop\BMO WORLD.lnk
[2011.01.11 00:28:48 | 000,139,080 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011.01.11 00:28:26 | 000,270,240 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2011.01.11 00:21:29 | 000,270,240 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0
[2011.01.10 23:04:04 | 000,000,056 | -H-- | M] () -- C:\ProgramData\ezsidmv.dat
[2011.01.10 23:03:01 | 000,002,497 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.01.07 18:28:01 | 000,138,056 | ---- | M] () -- C:\Users\Spirit\AppData\Roaming\PnkBstrK.sys
========== Files Created - No Company Name ==========
[2011.01.26 20:14:50 | 000,000,773 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.01.25 22:47:48 | 000,001,276 | ---- | C] () -- C:\Users\Spirit\Desktop\Command & Conquer 4.lnk
[2011.01.25 14:48:35 | 000,001,005 | ---- | C] () -- C:\Users\Spirit\Documents\Winstep.lnk
[2011.01.25 14:48:35 | 000,000,707 | ---- | C] () -- C:\Users\Spirit\Desktop\Winstep Xtreme.lnk
[2011.01.24 11:04:59 | 000,000,000 | RHS- | C] () -- C:\Windows\wininit.ini
[2011.01.24 05:41:30 | 000,000,664 | ---- | C] () -- C:\Users\Spirit\Desktop\RegCleaner.lnk
[2011.01.23 19:24:34 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2011.01.23 19:24:34 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2011.01.23 18:19:37 | 000,000,916 | ---- | C] () -- C:\Users\Spirit\Desktop\Spybot - Search & Destroy.lnk
[2011.01.23 16:10:19 | 000,079,360 | RHS- | C] () -- C:\Windows\System32\dwmredirz.dll
[2011.01.23 16:10:19 | 000,000,308 | -HS- | C] () -- C:\Windows\tasks\PLGPVX.job
[2011.01.20 16:03:35 | 000,000,901 | ---- | C] () -- C:\Users\Spirit\Desktop\RemoteDesktop.lnk
[2011.01.17 18:54:10 | 000,002,068 | ---- | C] () -- C:\Users\Spirit\Desktop\Windows Live Messenger .lnk
[2011.01.11 21:34:56 | 000,001,132 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 6.lnk
[2011.01.11 21:34:56 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 6.lnk
[2011.01.11 03:39:16 | 000,919,040 | ---- | C] () -- C:\Windows\System32\_launch.exe
[2011.01.11 03:39:07 | 000,471,552 | ---- | C] () -- C:\Windows\System32\bmo.dll
[2011.01.11 03:17:13 | 000,000,701 | ---- | C] () -- C:\Users\Public\Desktop\BMO WORLD.lnk
[2011.01.10 23:04:04 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011.01.10 23:03:01 | 000,002,497 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2011.01.07 18:32:02 | 000,270,240 | ---- | C] () -- C:\Windows\System32\PnkBstrB.xtr
[2011.01.07 18:28:01 | 000,139,080 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011.01.07 18:28:01 | 000,138,056 | ---- | C] () -- C:\Users\Spirit\AppData\Roaming\PnkBstrK.sys
[2011.01.07 18:27:37 | 000,270,240 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2011.01.07 18:27:37 | 000,270,240 | ---- | C] () -- C:\Windows\System32\PnkBstrB.ex0
[2011.01.07 18:27:35 | 000,075,136 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2010.10.14 01:36:44 | 000,179,263 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.09.11 07:56:57 | 000,005,632 | ---- | C] () -- C:\Users\Spirit\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.09.09 08:45:52 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2010.09.09 08:45:52 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2010.09.09 08:45:52 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2010.09.09 08:45:52 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2010.08.08 16:37:14 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2010.08.08 16:37:14 | 000,036,640 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2010.03.30 18:23:55 | 000,000,011 | ---- | C] () -- C:\Windows\EuBcd.ini
[2010.03.30 18:19:12 | 000,472,064 | ---- | C] () -- C:\Windows\System32\NTFSFormat.dll
[2010.03.30 18:19:12 | 000,180,224 | ---- | C] () -- C:\Windows\System32\DeviceManager.dll
[2010.03.30 18:19:12 | 000,139,776 | ---- | C] () -- C:\Windows\System32\NTFSCopy.dll
[2010.03.30 18:19:12 | 000,093,184 | ---- | C] () -- C:\Windows\System32\Partition.dll
[2010.03.30 18:19:12 | 000,086,528 | ---- | C] () -- C:\Windows\System32\NTFSLib.dll
[2010.03.30 18:19:12 | 000,086,016 | ---- | C] () -- C:\Windows\System32\ResizeNTFS.dll
[2010.03.30 18:19:12 | 000,068,096 | ---- | C] () -- C:\Windows\System32\Device.dll
[2010.03.30 18:19:12 | 000,065,536 | ---- | C] () -- C:\Windows\System32\FatCopy.dll
[2010.03.30 18:19:12 | 000,061,952 | ---- | C] () -- C:\Windows\System32\FatResizeMove.dll
[2010.03.30 18:19:12 | 000,045,568 | ---- | C] () -- C:\Windows\System32\FileSystemCheck.dll
[2010.03.30 18:19:12 | 000,031,744 | ---- | C] () -- C:\Windows\System32\FatLib.dll
[2010.03.30 18:19:12 | 000,025,088 | ---- | C] () -- C:\Windows\System32\FATFileSystemAnalyser.dll
[2010.03.30 18:19:12 | 000,024,576 | ---- | C] () -- C:\Windows\System32\NTFSFileSystemAnalyser.dll
[2010.03.30 18:19:12 | 000,022,016 | ---- | C] () -- C:\Windows\System32\FatFormat.dll
[2010.03.30 18:19:12 | 000,021,504 | ---- | C] () -- C:\Windows\System32\Fixup.dll
[2010.03.30 18:19:12 | 000,017,920 | ---- | C] () -- C:\Windows\System32\SectorCopy.dll
[2010.03.30 18:19:12 | 000,014,848 | ---- | C] () -- C:\Windows\System32\FileSystemAnalyser.dll
[2010.03.30 18:19:12 | 000,014,848 | ---- | C] () -- C:\Windows\System32\EuEpmGdi.dll
[2010.03.30 18:19:12 | 000,010,752 | ---- | C] () -- C:\Windows\System32\DeviceAdapter.dll
[2010.03.30 18:19:12 | 000,006,656 | ---- | C] () -- C:\Windows\System32\CallbackOperator.dll
[2010.03.30 18:19:11 | 000,009,728 | ---- | C] () -- C:\Windows\System32\epmntdrv.sys
[2010.03.30 18:19:11 | 000,003,072 | ---- | C] () -- C:\Windows\System32\EuGdiDrv.sys
[2010.02.11 06:30:38 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2009.12.28 23:30:13 | 000,000,040 | ---- | C] () -- C:\ProgramData\ra3.ini
[2009.12.25 20:28:52 | 000,691,696 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2009.12.12 19:26:44 | 000,000,410 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.26 16:21:02 | 000,015,498 | ---- | C] () -- C:\Windows\VX1000.ini
========== Alternate Data Streams ==========
Code:
OTL Extras logfile created on: 26.01.2011 21:03:29 - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Users\Spirit\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 73,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 86,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 29,29 Gb Total Space | 12,49 Gb Free Space | 42,65% Space Free | Partition Type: NTFS
Drive D: | 119,75 Gb Total Space | 67,67 Gb Free Space | 56,51% Space Free | Partition Type: NTFS
Computer Name: SPIRIT-PC | User Name: Spirit | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Programme\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{015C0A2E-3837-4BAC-9AEC-4E7D84808035}" = Loong
"{0C9C323B-395D-4483-A444-F7E11EE5B610}_is1" = BMO WORLD 4.4.0
"{0FFAC7BB-50DC-CB54-6CA7-A8B74513280B}" = CCC Help Chinese Traditional
"{1C802083-6D79-78ED-BF1C-601DDF908DD1}" = Catalyst Control Center Core Implementation
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FDA5A37-B22D-43FF-B582-B8964050DC13}" = Microsoft Games for Windows - LIVE Redistributable
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{2217B0B4-35CB-48C6-B640-864DF2F30F99}" = OpenOffice.org 3.2
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216017FF}" = Java(TM) 6 Update 22
"{282C4EAA-F162-F52F-7BAF-C7B50DAAA00A}" = ccc-utility
"{28728178-FF15-218B-0B63-012692F42C28}" = CCC Help Danish
"{28BE306E-5DA6-4F9C-BDB0-DBA3C8C6FFFD}" = QuickTime
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{32851025-1E46-83A3-1320-471619254E39}" = Catalyst Control Center Localization All
"{34303899-28C5-4A66-B95C-3B4F089CD34E}" = ESET Smart Security
"{40217B2F-462B-94A4-E84E-6A1C6EDBCE2F}" = CCC Help Swedish
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5343A801-92E5-C234-9F27-AB27EC738BF6}" = CCC Help Japanese
"{584109EB-CEA0-4954-804B-211000018301}" = Tinker
"{5B4383F2-37EE-4E97-AD81-F5FF76F286DA}" = OutlookAddInNet3Setup
"{5D22226D-EBC1-C95F-7746-2E3A9F4C97BA}" = CCC Help Russian
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{600C37F2-098B-A165-C1DB-6AE2B89D8D49}" = Catalyst Control Center Graphics Previews Common
"{61F8CA2C-9A80-8A1B-D3B9-347530CB387F}" = CCC Help Norwegian
"{674B407D-EAB1-B6B6-F9BF-C34CEE4CD83F}" = Catalyst Control Center Graphics Light
"{69F411C5-4851-6DA9-EA4C-160BEF8788AA}" = CCC Help French
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6DD27E54-2598-0FEC-7CE1-BE00924C0570}" = Catalyst Control Center Graphics Previews Vista
"{72736F5F-520D-472A-88CC-7B02872FD34E}" = ATI Catalyst Registration
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7C27114E-6FC8-21F5-E501-FE48F09243DF}" = CCC Help Dutch
"{80237C20-CBF3-F841-4AD5-E727AA86FBD1}" = CCC Help Italian
"{802EE127-D32A-1447-09DC-77419772BCDC}" = CCC Help Portuguese
"{82696435-8572-4D8B-A230-D1AA567D0F0F}" = Command & Conquer™ 4 Tiberian Twilight
"{836AFA32-7B8B-2C19-99D9-36EF32B42EB8}" = CCC Help Thai
"{86A4C6D9-29EE-4719-AFA1-BA3341862B83}" = Microsoft Games for Windows - LIVE
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding
"{8FB53850-246A-3507-8ADE-0060093FFEA6}" = Visual Studio Tools for the Office system 3.0 Runtime
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile-Gerätecenter
"{90850407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003
"{90877318-0BD0-4BDE-BFC0-C4BB12DAC86A}_is1" = Rappelz_DE
"{946942CB-D078-F33A-A3CD-27E0393507FD}" = CCC Help Turkish
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9682B99B-BB28-AD37-CA50-C1CB5BFF0FA6}" = Catalyst Control Center Graphics Full New
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A02CC93A-134F-0319-1438-B1E895B52577}" = CCC Help German
"{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable
"{A7E1ADB8-162B-7C33-60FB-0561A17BD876}" = CCC Help Spanish
"{A96EEF55-155C-552E-ABB1-6FDAEF5BD944}" = CCC Help Polish
"{AB06254A-9A28-F8AD-236E-FB5C3108FE85}" = ATI Catalyst Install Manager
"{ADB25FF0-AEC4-2CFB-130C-2C60D80C5934}" = CCC Help Greek
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B04D5DA5-11DA-830C-85C6-0FF9185787E7}" = Skins
"{B3BC9DB1-0B0A-48B0-B86B-EA77CAA7F800}" = Microsoft Corporation
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{BB603E9F-ECE8-7713-B0AC-7E0614E8C058}" = Catalyst Control Center HydraVision Full
"{BE232D60-AEA5-502F-ACBF-9AC188A82C21}" = CCC Help Finnish
"{C15C4AB5-EF5D-5050-273C-4636E3FBE301}" = CCC Help Czech
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}" = Kies
"{E09CD13D-7CE3-351C-1625-8DC7F21A99C0}" = ccc-core-static
"{E373E0E2-20F5-90DF-B315-615EA6E52101}" = Catalyst Control Center Graphics Full Existing
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{E6DA746E-1175-88BD-2B16-1DC62018E060}" = CCC Help Chinese Standard
"{F053BFD9-4357-6A82-6042-CF919667448F}" = CCC Help English
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F17EB02C-DA0D-EDEF-2E16-501FB700A710}" = CCC Help Hungarian
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{F5DDC0CD-F13A-83F0-5103-563A17EA306F}" = CCC Help Korean
"{F916C6DF-2601-4385-9500-C45FF398D4CB}" = Install(GE)
"{FE0646A7-19D0-41B4-A2BB-2C35D644270D}" = Windows Live OneCare safety scanner
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"Akamai" = Akamai NetSession Interface
"All To MP3 Converter_is1" = All To MP3 Converter 2.7
"DivX Setup.divx.com" = DivX-Setup
"EASEUS Partition Master Professional Edition_is1" = EASEUS Partition Master 3.0.2 Professional
"Episode 1" = Back to the Future The Game - Episode 1
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.2
"ImgBurn" = ImgBurn
"InstallShield_{D6CD26FD-CD7F-4C86-96A3-EEBFABE5FE47}" = Kies
"JDownloader" = JDownloader
"Logitech Eyetoy Webcam" = Logitech Eyetoy Webcam
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Messenger Plus! Live" = Messenger Plus! Live
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"Mp3tag" = Mp3tag v2.46a
"OpenAL" = OpenAL
"RemoteDesktopServer" = RemoteDesktopServer
"Rohan_DE" = R.O.H.A.N. Vendetta
"Silkroad" = Silkroad
"StarCraft II" = StarCraft II
"TeamViewer 6" = TeamViewer 6
"Uninstall_is1" = Uninstall 1.0.0.1
"Visual Studio Tools for the Office system 3.0 Runtime" = Visual Studio Tools for the Office system 3.0 Runtime
"VLC media player" = VLC media player 1.0.3
"WBFS Manager 3.0" = WBFS Manager 3.0
"Windows Live OneCare safety scanner" = Windows Live OneCare safety scanner
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
"Winstep Xtreme_is1" = Winstep Xtreme 10.9
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 22.01.2011 16:20:10 | Computer Name = Spirit-PC | Source = EventSystem | ID = 4621
Description =
Error - 23.01.2011 10:41:05 | Computer Name = Spirit-PC | Source = EventSystem | ID = 4621
Description =
Error - 23.01.2011 11:42:01 | Computer Name = Spirit-PC | Source = Microsoft-Windows-RestartManager | ID = 10007
Description = Die Anwendung oder der Dienst "MSCamSvc" konnte nicht neu gestartet
werden.
Error - 23.01.2011 14:23:26 | Computer Name = Spirit-PC | Source = EventSystem | ID = 4621
Description =
Error - 23.01.2011 16:07:26 | Computer Name = Spirit-PC | Source = EventSystem | ID = 4621
Description =
Error - 24.01.2011 02:37:19 | Computer Name = Spirit-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "d:\programme\spybot
- search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "d:\programme\spybot
- search & destroy\DelZip179.dll" in Zeile 8. Der Wert "*" des "language"-Attributs
im assemblyIdentity-Element ist ungültig.
Error - 24.01.2011 10:55:57 | Computer Name = Spirit-PC | Source = Lavasoft Ad-Aware Service | ID = 0
Description =
Error - 24.01.2011 11:54:46 | Computer Name = Spirit-PC | Source = Application Hang | ID = 1002
Description = Programm wmplayer.exe, Version 12.0.7600.16415 kann nicht mehr unter
Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
zu suchen. Prozess-ID: 5f0 Startzeit: 01cbbbdeb51a053a Endzeit: 99 Anwendungspfad:
C:\Program Files\Windows Media Player\wmplayer.exe Berichts-ID: 35bedaad-27d2-11e0-b28a-001fe25bd40d
Error - 24.01.2011 12:11:56 | Computer Name = Spirit-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7600.16385,
Zeitstempel: 0x4a5bccb3 Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 6.1.7600.16385,
Zeitstempel: 0x4a5bdaae Ausnahmecode: 0x0000046b Fehleroffset: 0x00009617 ID des fehlerhaften
Prozesses: 0xf1c Startzeit der fehlerhaften Anwendung: 0x01cbbbd781955ecd Pfad der
fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe Pfad
des fehlerhaften Moduls: C:\Windows\system32\KERNELBASE.dll Berichtskennung: a96cecbe-27d4-11e0-b28a-001fe25bd40d
Error - 25.01.2011 01:18:46 | Computer Name = Spirit-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "d:\programme\spybot
- search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "d:\programme\spybot
- search & destroy\DelZip179.dll" in Zeile 8. Der Wert "*" des "language"-Attributs
im assemblyIdentity-Element ist ungültig.
[ Media Center Events ]
Error - 12.12.2009 14:27:03 | Computer Name = Spirit-PC | Source = Microsoft-Windows-Media Center Extender | ID = 539
Description =
Error - 12.12.2009 14:35:19 | Computer Name = Spirit-PC | Source = Microsoft-Windows-Media Center Extender | ID = 538
Description =
Error - 13.12.2009 13:15:57 | Computer Name = Spirit-PC | Source = Microsoft-Windows-Media Center Extender | ID = 538
Description =
Error - 13.12.2009 13:31:02 | Computer Name = Spirit-PC | Source = Microsoft-Windows-Media Center Extender | ID = 538
Description =
Error - 14.12.2009 06:01:05 | Computer Name = Spirit-PC | Source = Microsoft-Windows-Media Center Extender | ID = 112
Description =
[ System Events ]
Error - 26.01.2011 09:57:10 | Computer Name = Spirit-PC | Source = DCOM | ID = 10005
Description =
Error - 26.01.2011 09:57:41 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "PnP-X-IP-Busenumerator" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068
Error - 26.01.2011 10:00:48 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Ati External Event Utility" wurde aufgrund folgenden Fehlers
nicht gestartet: %%2
Error - 26.01.2011 10:01:05 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ASPI32 aswSnx
Error - 26.01.2011 10:03:47 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "PnkBstrA" wurde unerwartet beendet. Dies ist bereits 1 Mal
passiert.
Error - 26.01.2011 10:04:07 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Winstep Xtreme Service" wurde unerwartet beendet. Dies ist
bereits 1 Mal passiert.
Error - 26.01.2011 14:35:46 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Ati External Event Utility" wurde aufgrund folgenden Fehlers
nicht gestartet: %%2
Error - 26.01.2011 14:36:02 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ASPI32 aswSnx
Error - 26.01.2011 15:55:10 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Ati External Event Utility" wurde aufgrund folgenden Fehlers
nicht gestartet: %%2
Error - 26.01.2011 15:55:19 | Computer Name = Spirit-PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
ASPI32 aswSnx
< End of report >
|
