![]() |
|
Log-Analyse und Auswertung: Metzes Problem: Achtung! Aus Sicherheitsgründen wurde ihr Windowssystem gesperrtWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() | ![]() Metzes Problem: Achtung! Aus Sicherheitsgründen wurde ihr Windowssystem gesperrt Grüss euch, ich hab mir den gestrigen Abend und die Halbe nacht um die Ohren geschlagen nur um festzustellen das ich nicht weiter komm. Die einzig brauchbaren Tipss und Hilfestellungen die mein Problem betreffen find ich hier bei euch, und dort heisst es dann das ich meinen eigenen Thread aufmachen soll, da dieser Virus oder Trojaner eine spezielle behandlung braucht. So, hier bin ich und würde mich über eure Hilfe freuen. Ich fahre ein Windows 7 32Bit wie Ihr den OTLogfiles entnehmen könnt. Es gibt zwei Benutzer, den Admin und den HTPC. Der HTPC ist betroffen. Fahre ich den PC ohne angestecktes Lankabel hoch, kann ich den Rechner ganz normal steuern. Stecke ich jetzt das Lankabel an komme ich für n paar Minuten auch ins Netz, bevor der Bildschirm wieder schwarz wird. Der Scan mit OTL wurde im normalen Windowsbetrieb ohne Lankabel gemacht. Derzeit bin ich im Abgesicherten Modus mit Netzwerk unterwegs und erstelle dieses Thema. Hier das 1. Ergebniss des Scan mit Titel "OTL": Code:
ATTFilter OTL logfile created on: 23.12.2011 13:28:24 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\HTPC-Win7\Downloads Professional (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 1,88 Gb Available Physical Memory | 62,61% Memory free 6,00 Gb Paging File | 4,69 Gb Available in Paging File | 78,22% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 97,16 Gb Total Space | 13,44 Gb Free Space | 13,83% Space Free | Partition Type: NTFS Drive D: | 931,51 Gb Total Space | 143,25 Gb Free Space | 15,38% Space Free | Partition Type: NTFS Drive E: | 898,44 Gb Total Space | 22,97 Gb Free Space | 2,56% Space Free | Partition Type: NTFS Drive F: | 931,51 Gb Total Space | 66,39 Gb Free Space | 7,13% Space Free | Partition Type: NTFS Drive G: | 33,07 Gb Total Space | 13,77 Gb Free Space | 41,64% Space Free | Partition Type: NTFS Drive H: | 834,35 Gb Total Space | 814,66 Gb Free Space | 97,64% Space Free | Partition Type: NTFS Drive L: | 3,47 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Drive Q: | 931,51 Gb Total Space | 858,14 Gb Free Space | 92,12% Space Free | Partition Type: NTFS Computer Name: HTPC-WIN7-PC | User Name: HTPC-Win7 | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\HTPC-Win7\Downloads\OTL.exe (OldTimer Tools) PRC - C:\Programme\SOUNDGRAPH\iMON\iMON.exe (SoundGraph, Inc.) PRC - C:\Programme\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) PRC - C:\Programme\DAEMON Tools Lite\DTShellHlp.exe (DT Soft Ltd) PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Programme\PDF24\pdf24.exe (Geek Software GmbH) PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira Operations GmbH & Co. KG) PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) PRC - C:\Programme\DivX\DivX Update\DivXUpdate.exe () PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation) PRC - C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) PRC - d:\ELSA\bin\LcSvrAdm.exe (Volkswagen AG) PRC - d:\ELSA\bin\LcSvrHis.exe (Volkswagen AG) PRC - d:\ELSA\bin\LcSvrSaz.exe (Volkswagen AG) PRC - d:\ELSA\bin\LcSvrAuf.exe (Volkswagen AG) PRC - d:\ELSA\bin\LcSvrPas.exe (Volkswagen AG) PRC - d:\ELSA\bin\LcSvrDba.exe (Volkswagen AG) PRC - C:\Programme\TortoiseSVN\bin\TSVNCache.exe (hxxp://tortoisesvn.net) PRC - C:\Programme\OpenOffice.org 3\program\soffice.bin (OpenOffice.org) PRC - C:\Programme\OpenOffice.org 3\program\soffice.exe (OpenOffice.org) PRC - C:\Programme\Hotspot Shield\bin\openvpnas.exe () PRC - C:\Programme\Hotspot Shield\bin\hsswd.exe () PRC - C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.) PRC - C:\Windows\explorer.exe (Microsoft Corporation) PRC - C:\Users\HTPC-Win7\AppData\Roaming\Microsoft\dllhsts.exe (Mozilla Foundation) PRC - C:\Windows\System32\atieclxx.exe (AMD) PRC - C:\Windows\System32\atiesrxx.exe (AMD) PRC - C:\Programme\Vodafone\Via The Phone\VodafoneConnectorService.exe (Vodafone Group) PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation) PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation) PRC - C:\Programme\Windows Sidebar\sidebar.exe (Microsoft Corporation) PRC - C:\Programme\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone) PRC - C:\Programme\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone) PRC - C:\Programme\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe () PRC - C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe (Acronis) PRC - C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis) PRC - C:\Programme\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis) PRC - C:\Programme\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) PRC - C:\Programme\BinarySense\HDDlife 3\hldasvc.exe (BinarySense, Ltd.) ========== Modules (No Company Name) ========== MOD - C:\Programme\Mozilla Firefox\mozjs.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\cc6713be0e405d5a89a2783103f7e771\System.Management.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\CustomMarshalers\545f2e1ca544c2a8a39cbf8565e1c709\CustomMarshalers.ni.dll () MOD - C:\Windows\System32\Macromed\Flash\NPSWF32.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\cabd75d4716ede2fed948cbff94dcc38\System.ServiceProcess.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d76221993c2fdfb991b8c12ae50a30eb\System.Windows.Forms.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\d71769228ebe7732ae31ac194fe00ff0\Accessibility.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\018d2569cf208acbe8ad73908705f607\System.Runtime.Remoting.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Data\45a20172acfdcc160ecb6bd358179c31\System.Data.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Transactions\834be57d8ab824b4ebcbf01161791d70\System.Transactions.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\5a95ba97100404e2ab26b5a9ab9ef965\System.Web.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e245eb9c1067cabd5673fe832d28613\System.Drawing.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Security\9b8dcad25a3be7d4a3f3b8b384f3190a\System.Security.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll () MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll () MOD - C:\Programme\DivX\DivX Update\DivXUpdateCheck.dll () MOD - C:\Programme\DivX\DivX Update\DivXUpdate.exe () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3693.42460__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3693.42442__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3693.42461__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3693.42517__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3693.42456__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3693.42486__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3693.42451__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Runtime\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Shared\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Wizard\2.0.3693.42556__90ba9c70f846762e\CLI.Caste.HydraVision.Wizard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Dashboard\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3693.42488__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Dashboard\2.0.3693.42551__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3693.42537__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3693.42512__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3693.42504__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3693.42462__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3693.42537__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3693.42504__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Runtime\2.0.3693.42550__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3693.42450__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3693.42499__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3693.42503__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3693.42536__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3693.42452__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3693.42462__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3693.42482__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3693.42496__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3309.28604__90ba9c70f846762e\CLI.Foundation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3693.42486__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3693.42466__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3693.42496__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3309.28601__90ba9c70f846762e\LOG.Foundation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3693.42497__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3309.28603__90ba9c70f846762e\NEWAEM.Foundation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3309.28669__90ba9c70f846762e\CLI.Foundation.XManifest.dll () MOD - C:\Windows\assembly\GAC_MSIL\DEM.OS.I0602\2.0.3309.28630__90ba9c70f846762e\DEM.OS.I0602.dll () MOD - C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0703\2.0.2651.18802__90ba9c70f846762e\DEM.Graphics.I0703.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3309.28620__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3309.28617__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3309.28611__90ba9c70f846762e\CLI.Component.Client.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3309.28617__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3309.28608__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3309.28626__90ba9c70f846762e\MOM.Foundation.dll () MOD - C:\Windows\assembly\GAC_MSIL\DEM.OS\2.0.3309.28645__90ba9c70f846762e\DEM.OS.dll () MOD - C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll () MOD - C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3309.28630__90ba9c70f846762e\DEM.Graphics.dll () MOD - C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3309.28617__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3309.28631__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3309.28629__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3309.28645__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3309.28647__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3309.28627__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3309.28647__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll () MOD - C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3693.42564__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3309.28618__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.OverDrive5.Graphics.Shared\2.0.3309.28647__90ba9c70f846762e\CLI.Aspect.OverDrive5.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3309.28644__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3309.28624__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3309.28644__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3309.28632__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3309.28627__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3309.28635__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3309.28626__90ba9c70f846762e\APM.Foundation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3309.28617__90ba9c70f846762e\AEM.Server.Shared.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3693.42525__90ba9c70f846762e\CLI.Component.Systemtray.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3693.42455__90ba9c70f846762e\CLI.Component.Wizard.dll () MOD - C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3693.42531__90ba9c70f846762e\MOM.Implementation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3693.42440__90ba9c70f846762e\CLI.Component.Runtime.dll () MOD - C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3693.42530__90ba9c70f846762e\LOG.Foundation.Implementation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3693.42441__90ba9c70f846762e\CLI.Component.SkinFactory.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3309.28628__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3693.42545__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3309.28608__90ba9c70f846762e\CLI.Foundation.Private.dll () MOD - C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3309.28614__90ba9c70f846762e\LOG.Foundation.Private.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3309.28627__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll () MOD - C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3309.28612__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll () MOD - C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3309.28626__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3309.28624__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll () MOD - C:\Windows\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll () MOD - C:\Windows\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3693.42437__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3693.42446__90ba9c70f846762e\CLI.Component.Dashboard.dll () MOD - C:\Windows\assembly\GAC_MSIL\ATIDEMOS\2.0.3693.42440__90ba9c70f846762e\ATIDEMOS.dll () MOD - C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3693.42439__90ba9c70f846762e\APM.Server.dll () MOD - C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3693.42438__90ba9c70f846762e\AEM.Server.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3309.28621__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll () MOD - C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll () MOD - C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3693.42531__90ba9c70f846762e\CCC.Implementation.dll () MOD - C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3309.28637__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll () MOD - C:\Programme\OpenOffice.org 3\program\libxml2.dll () MOD - C:\Programme\ATI Technologies\ATI.ACE\Branding\Branding.dll () MOD - C:\Windows\assembly\GAC_MSIL\System.Windows.Forms.resources\2.0.0.0_de_b77a5c561934e089\System.Windows.Forms.resources.dll () MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll () MOD - C:\Windows\System32\msjetoledb40.dll () MOD - C:\Windows\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll () MOD - C:\Windows\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll () MOD - C:\Windows\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll () MOD - C:\Programme\WinRAR\RarExt.dll () MOD - C:\Programme\Acronis\TrueImageHome\fox.dll () MOD - C:\Programme\SOUNDGRAPH\iMON\HookUsb.dll () ========== Win32 Services (SafeList) ========== SRV - (Steam Client Service) -- C:\Program Files\Common Files\Steam\SteamService.exe (Valve Corporation) SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG) SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG) SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated) SRV - (LcSvrAdm) -- d:\ELSA\bin\LcSvrAdm.exe (Volkswagen AG) SRV - (LcSvrHis) -- d:\ELSA\bin\LcSvrHis.exe (Volkswagen AG) SRV - (LcSvrSaz) -- d:\ELSA\bin\LcSvrSaz.exe (Volkswagen AG) SRV - (LcSvrAuf) -- d:\ELSA\bin\LcSvrAuf.exe (Volkswagen AG) SRV - (LcSvrPAS) -- d:\ELSA\bin\LcSvrPas.exe (Volkswagen AG) SRV - (LcSvrDba) -- d:\ELSA\bin\LcSvrDba.exe (Volkswagen AG) SRV - (HssTrayService) -- C:\Programme\Hotspot Shield\bin\HssTrayService.exe () SRV - (HotspotShieldService) -- C:\Programme\Hotspot Shield\bin\openvpnas.exe () SRV - (HssWd) -- C:\Program Files\Hotspot Shield\bin\hsswd.exe () SRV - (AMD External Events Utility) -- C:\Windows\System32\atiesrxx.exe (AMD) SRV - (VodafoneConnectorService) -- C:\Program Files\Vodafone\Via The Phone\VodafoneConnectorService.exe (Vodafone Group) SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation) SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation) SRV - (VMCService) -- C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe (Vodafone) SRV - (TryAndDecideService) -- C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe () SRV - (AcrSch2Svc) -- C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe (Acronis) SRV - (WcesComm) -- C:\Windows\WindowsMobile\wcescomm.dll (Microsoft Corporation) SRV - (RapiMgr) -- C:\Windows\WindowsMobile\rapimgr.dll (Microsoft Corporation) SRV - (HDDlife HDD Access service) -- C:\Program Files\BinarySense\HDDlife 3\hldasvc.exe (BinarySense, Ltd.) ========== Driver Services (SafeList) ========== DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH) DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys () DRV - (VBoxDrv) -- C:\Windows\System32\drivers\VBoxDrv.sys (Oracle Corporation) DRV - (VBoxNetFlt) -- C:\Windows\System32\drivers\VBoxNetFlt.sys (Oracle Corporation) DRV - (VBoxNetAdp) -- C:\Windows\System32\drivers\VBoxNetAdp.sys (Oracle Corporation) DRV - (VBoxUSBMon) -- C:\Windows\System32\drivers\VBoxUSBMon.sys (Oracle Corporation) DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH) DRV - (avkmgr) -- C:\Windows\System32\drivers\avkmgr.sys (Avira GmbH) DRV - (FTDIBUS) -- C:\Windows\System32\drivers\ftdibus.sys (FTDI Ltd.) DRV - (FTSER2K) -- C:\Windows\System32\drivers\ftser2k.sys (FTDI Ltd.) DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH) DRV - (hotcore3) -- C:\Windows\system32\DRIVERS\hotcore3.sys (Paragon Software Group) DRV - (taphss) -- C:\Windows\System32\drivers\taphss.sys (AnchorFree Inc) DRV - (timounter) -- C:\Windows\system32\DRIVERS\timntr.sys (Acronis) DRV - (tifsfilter) -- C:\Windows\System32\drivers\tifsfilt.sys (Acronis) DRV - (snapman) -- C:\Windows\system32\DRIVERS\snapman.sys (Acronis) DRV - (tdrpman) -- C:\Windows\system32\DRIVERS\tdrpman.sys (Acronis) DRV - (sscdmdm) -- C:\Windows\System32\drivers\sscdmdm.sys (MCCI Corporation) DRV - (sscdbus) SAMSUNG USB Composite Device driver (WDM) -- C:\Windows\System32\drivers\sscdbus.sys (MCCI Corporation) DRV - (sscdmdfl) -- C:\Windows\System32\drivers\sscdmdfl.sys (MCCI Corporation) DRV - (atikmdag) -- C:\Windows\System32\drivers\atikmdag.sys (ATI Technologies Inc.) DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation) DRV - (Ca1528av) -- C:\Windows\System32\drivers\Ca1528av.sys (Digital Camera) DRV - (NSHE) -- C:\Windows\System32\drivers\NSHE.SYS (T0r0 2008) DRV - (RRamdisk) -- C:\Windows\system32\DRIVERS\rramdisk.sys (gavotte) DRV - (Bulk1528) -- C:\Windows\System32\drivers\Bulk1528.sys (SunPlus) DRV - (hwdatacard) -- C:\Windows\System32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.) DRV - (BS_I2cIo) -- C:\Windows\System32\drivers\BS_I2cIo.sys (BIOSTAR Group) DRV - (Hardlock) -- C:\Windows\system32\drivers\hardlock.sys (Aladdin Knowledge Systems Ltd.) DRV - (SysTool) -- C:\Windows\System32\drivers\SysTool.sys () DRV - (SGIR) -- C:\Windows\System32\drivers\iMON_PAD.sys () DRV - (SGHIDI) -- C:\Windows\System32\drivers\TG_iMON.sys (TG) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.vr6forum.eu/phpBB3/search.php?search_id=unreadposts IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C5 F8 0D 37 10 B2 CC 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Google" FF - prefs.js..browser.search.defaulturl: "hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://www.ebay.de/sch/i.html?_nkw=wacken+2012+&_trksid=p5197.c0.m627" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.10 FF - prefs.js..extensions.enabledItems: pagehacker-nico@nc:1.2 FF - prefs.js..extensions.enabledItems: de-AT@dictionaries.addons.mozilla.org:2.0.2 FF - prefs.js..extensions.enabledItems: yespopupsV1@patheticcockroach.com:0.9.8b FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.1.7 FF - prefs.js..extensions.enabledItems: {8051A235-3BDB-4450-9C02-8CD8C6F9E2CB}:0.3.4 FF - prefs.js..extensions.enabledItems: {CCEA9629-894C-4eef-9F40-8301F3146527}:0.4 FF - prefs.js..extensions.enabledItems: ns@gutscheine4you.com:1.1 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}:6.0.21 FF - prefs.js..extensions.enabledItems: {23fcfd51-4958-4f00-80a3-ae97e717ed8b}:2.1.2.126 FF - prefs.js..extensions.enabledItems: {19503e42-ca3c-4c27-b1e2-9cdb2170ee34}:1.3.3 FF - prefs.js..extensions.enabledItems: {a45e6b3a-725d-4b20-afde-e7486bfe317c}:3.5.4 FF - prefs.js..network.proxy.backup.ftp: "62.150.41.1" FF - prefs.js..network.proxy.backup.ftp_port: 80 FF - prefs.js..network.proxy.backup.gopher: "62.150.41.1" FF - prefs.js..network.proxy.backup.gopher_port: 80 FF - prefs.js..network.proxy.backup.socks: "62.150.41.1" FF - prefs.js..network.proxy.backup.socks_port: 80 FF - prefs.js..network.proxy.backup.ssl: "62.150.41.1" FF - prefs.js..network.proxy.backup.ssl_port: 80 FF - prefs.js..network.proxy.ftp: "62.150.41.1" FF - prefs.js..network.proxy.ftp_port: 80 FF - prefs.js..network.proxy.gopher: "62.150.41.1" FF - prefs.js..network.proxy.gopher_port: 80 FF - prefs.js..network.proxy.http: "62.150.41.1" FF - prefs.js..network.proxy.http_port: 80 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "62.150.41.1" FF - prefs.js..network.proxy.socks_port: 80 FF - prefs.js..network.proxy.ssl: "62.150.41.1" FF - prefs.js..network.proxy.ssl_port: 80 FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011.10.23 18:41:15 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.11.09 22:33:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.11.06 00:43:21 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Programme\Mozilla Firefox\components [2011.11.09 22:33:35 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.11.06 00:43:21 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Components: C:\Program Files\Mozilla Thunderbird\components [2010.08.09 21:41:05 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Plugins: C:\Program Files\Mozilla Thunderbird\plugins [2011.10.26 22:37:13 | 000,000,000 | ---D | M] [2010.05.07 15:18:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Extensions [2010.05.07 15:18:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2011.12.20 06:49:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions [2010.05.08 19:28:24 | 000,000,000 | ---D | M] ("Copy Plain Text [de]") -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\{723AAF16-AF1F-4404-A5D7-0BFE39766605} [2010.05.08 19:28:26 | 000,000,000 | ---D | M] (Aluminium Kai 2) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\{a45e6b3a-725d-4b20-afde-e7486bfe317c} [2010.05.08 19:28:26 | 000,000,000 | ---D | M] (Allow Right-Click [de]) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\{CCEA9629-894C-4eef-9F40-8301F3146527} [2011.10.21 21:45:47 | 000,000,000 | ---D | M] (German Dictionary, extended for Austria) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\de-AT@dictionaries.addons.mozilla.org [2011.10.26 22:30:20 | 000,000,000 | ---D | M] ("flv movies downloader") -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\flvmoviesdownloader@rzll [2010.08.01 16:33:57 | 000,000,000 | ---D | M] (Gutscheine4you.com) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\ns@gutscheine4you.com [2010.05.07 14:00:27 | 000,000,000 | ---D | M] ("Page Hacker") -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\pagehacker-nico@nc [2010.05.08 19:28:23 | 000,000,000 | ---D | M] (No name found) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\temp [2010.05.08 19:28:23 | 000,000,000 | ---D | M] (Yes popups) -- C:\Users\HTPC-Win7\AppData\Roaming\mozilla\Firefox\Profiles\zt049kir.default\extensions\yespopupsV1@patheticcockroach.com [2006.08.24 21:07:50 | 000,001,525 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\amazondotcom-de.xml [2011.12.18 12:22:49 | 000,001,089 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\astalavista.xml [2011.12.21 06:58:38 | 000,002,056 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\beo-de.xml [2011.12.18 12:22:49 | 000,001,412 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\bittorrent.xml [2010.10.26 05:04:05 | 000,001,320 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\CrackSearch.xml [2006.12.04 23:26:52 | 000,001,934 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\CrackServer.xml [2011.12.23 13:24:40 | 000,001,876 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\Crawl.xml [2011.12.23 13:24:39 | 000,002,207 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\dasoertliche.xml [2006.08.24 21:07:50 | 000,001,063 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\eBay-de.xml [2011.12.18 12:22:49 | 000,001,899 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\FileDonkey.xml [2011.12.18 12:22:48 | 000,002,643 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\GameCopyWorld.xml [2006.07.14 18:18:16 | 000,002,336 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\google.xml [2008.03.27 06:26:22 | 000,001,643 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\isohuntBT.xml [2011.12.18 12:22:49 | 000,000,981 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\megasearchpc.xml [2006.12.08 07:08:30 | 000,000,048 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\nocopy.txt [2011.12.23 13:24:39 | 000,001,954 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\PhazeDDL.xml [2011.10.21 17:44:21 | 000,001,323 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\PhazeMP3.xml [2011.12.18 12:22:49 | 000,001,163 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\thebugscracks.xml [2008.03.27 06:26:22 | 000,001,387 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\torrentspy.xml [2006.09.08 19:42:22 | 000,001,186 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\wikipedia-de.xml [2006.09.11 14:39:32 | 000,000,807 | ---- | M] () -- C:\Users\HTPC-Win7\AppData\Roaming\Mozilla\Firefox\Profiles\zt049kir.default\searchplugins\yahoo-de.xml [2011.10.27 21:23:18 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions () (No name found) -- C:\USERS\HTPC-WIN7\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZT049KIR.DEFAULT\EXTENSIONS\{73A6FE31-595D-460B-A920-FCC0F8843232}.XPI () (No name found) -- C:\USERS\HTPC-WIN7\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\ZT049KIR.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI [2011.11.09 22:33:34 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll [2011.09.29 02:24:38 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml [2011.12.11 14:25:58 | 000,002,336 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2011.09.29 02:16:42 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml [2011.09.29 02:24:38 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml [2011.09.29 02:24:38 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml [2011.09.29 02:24:38 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml [2011.09.29 02:24:38 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.06.19 22:50:00 | 000,000,864 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 validation.sls.microsoft.com O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Programme\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) O2 - BHO: (Hotspot Shield Class) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Programme\Hotspot Shield\HssIE\HssIE.dll (AnchorFree Inc.) O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe (Acronis) O4 - HKLM..\Run: [AcronisTimounterMonitor] C:\Programme\Acronis\TrueImageHome\TimounterMonitor.exe (Acronis) O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [iMON] C:\Program Files\SoundGraph\iMON\iMON.exe (SoundGraph, Inc.) O4 - HKLM..\Run: [MobileConnect] C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe (Vodafone) O4 - HKLM..\Run: [NBKeyScan] C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe (Nero AG) O4 - HKLM..\Run: [NPSStartup] File not found O4 - HKLM..\Run: [PDFPrint] C:\Programme\PDF24\pdf24.exe (Geek Software GmbH) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [TrueImageMonitor.exe] C:\Programme\Acronis\TrueImageHome\TrueImageMonitor.exe (Acronis) O4 - HKLM..\Run: [W7LXE] E:\Progs\Windows.7.Loader.eXtreme.Edition.v3.503-NAPALUM\Windows.7.Loader.eXtreme.Edition.v3.503-NAPALUM\Windows.7.Loader.eXtreme.Edition.v3.503-NAPALUM\w7lxe.exe () O4 - HKCU..\Run: [{FFF16654-5952-11DF-BAE2-806E6F6E6963}] C:\Users\HTPC-Win7\AppData\Roaming\Microsoft\dllhsts.exe (Mozilla Foundation) O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG) O4 - HKCU..\Run: [Steam] F:\Games\PC\Steam\steam.exe (Valve Corporation) O4 - Startup: C:\Users\HTPC-Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HDDlife.lnk = File not found O4 - Startup: C:\Users\HTPC-Win7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Programme\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery present O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation) O9 - Extra Button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe File not found O9 - Extra 'Tools' menuitem : PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Programs\PartyGaming\PartyPoker\RunApp.exe File not found O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{771099F0-5BA4-483F-97E4-4F21E9743594}: DhcpNameServer = 10.70.72.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{DC2C0282-E240-4E55-9869-F1AB85257FBE}: DhcpNameServer = 192.168.178.1 O18 - Protocol\Handler\hddlife {BD758015-47D9-477A-8873-4B688A2BC0E2} - C:\Program Files\BinarySense\HDDlife 3\hlAPP.dll (BinarySense, Inc.) O18 - Protocol\Handler\vw-wi {0F3C833F-FB28-40EA-8CB9-6A55B996C3F6} - d:\ELSA\bin\wiprot.dll (TODO: <Company name>) O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O30 - LSA: Authentication Packages - (relog_ap) -C:\Windows\System32\relog_ap.dll (Acronis) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{4948e7f6-6116-11df-8f7b-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{4948e7f6-6116-11df-8f7b-806e6f6e6963}\Shell\AutoRun\command - "" = L:\setup.exe O33 - MountPoints2\{9a77b711-2757-11e1-9cbe-8000600fe800}\Shell - "" = AutoRun O33 - MountPoints2\{9a77b711-2757-11e1-9cbe-8000600fe800}\Shell\AutoRun\command - "" = O:\setup_vmc_lite.exe /checkApplicationPresence O33 - MountPoints2\{a16e1013-7b3e-11df-bf74-00e04d96c0b0}\Shell - "" = AutoRun O33 - MountPoints2\{a16e1013-7b3e-11df-bf74-00e04d96c0b0}\Shell\AutoRun\command - "" = M:\VTP_Manager.exe O33 - MountPoints2\{be8af8a2-ff30-11e0-94f6-00e04d96c0b0}\Shell - "" = AutoRun O33 - MountPoints2\{be8af8a2-ff30-11e0-94f6-00e04d96c0b0}\Shell\AutoRun\command - "" = N:\setup_vmc_lite.exe /checkApplicationPresence O33 - MountPoints2\{be8af8ab-ff30-11e0-94f6-00e04d96c0b0}\Shell - "" = AutoRun O33 - MountPoints2\{be8af8ab-ff30-11e0-94f6-00e04d96c0b0}\Shell\AutoRun\command - "" = N:\setup_vmc_lite.exe /checkApplicationPresence O34 - HKLM BootExecute: (autocheck autochk *) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.12.22 23:20:01 | 000,000,000 | ---D | C] -- C:\ProgramData\SecTaskMan [2011.12.22 23:19:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Security Task Manager [2011.12.22 23:19:56 | 000,000,000 | ---D | C] -- C:\Program Files\Security Task Manager [2011.12.12 10:27:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ElsaWin [2011.12.12 10:27:20 | 000,686,592 | ---- | C] (Volkswagen AG) -- C:\Windows\System32\ElsaCfg.cpl [2011.12.12 10:26:55 | 000,000,000 | ---D | C] -- C:\ElsaWin [2011.12.11 14:25:57 | 000,000,000 | ---D | C] -- C:\Users\HTPC-Win7\AppData\Local\Babylon [2011.12.11 14:25:56 | 000,000,000 | ---D | C] -- C:\Users\HTPC-Win7\AppData\Roaming\Babylon [2011.12.11 14:25:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon [2011.12.10 09:27:03 | 000,000,000 | ---D | C] -- C:\VW [2011.12.07 21:30:56 | 000,000,000 | ---D | C] -- C:\Program Files\NirSoft [2011.12.04 11:34:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24 [2011.12.04 11:33:58 | 000,000,000 | ---D | C] -- C:\Program Files\PDF24 ========== Files - Modified Within 30 Days ========== [2011.12.23 13:27:56 | 000,643,628 | ---- | M] () -- C:\Windows\System32\perfh007.dat [2011.12.23 13:27:56 | 000,606,992 | ---- | M] () -- C:\Windows\System32\perfh009.dat [2011.12.23 13:27:56 | 000,126,188 | ---- | M] () -- C:\Windows\System32\perfc007.dat [2011.12.23 13:27:56 | 000,103,370 | ---- | M] () -- C:\Windows\System32\perfc009.dat [2011.12.23 13:27:22 | 000,024,400 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.12.23 13:27:22 | 000,024,400 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.12.23 13:21:51 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.12.23 13:21:44 | 2415,316,992 | -HS- | M] () -- C:\hiberfil.sys [2011.12.12 18:10:44 | 001,258,089 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\SNC00055.jpg [2011.12.12 18:10:30 | 001,300,675 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\SNC00054.jpg [2011.12.12 15:25:45 | 000,069,119 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\Rechnung_Ladedruckschläuche_SIS4ZA.pdf [2011.12.12 11:33:47 | 000,000,056 | ---- | M] () -- C:\Windows\Acroread.ini [2011.12.12 10:27:29 | 000,000,656 | ---- | M] () -- C:\Users\Public\Desktop\ElsaWin.lnk [2011.12.12 10:27:29 | 000,000,656 | ---- | M] () -- C:\Users\Public\Desktop\ElsaWin Administration.lnk [2011.12.12 10:27:29 | 000,000,556 | ---- | M] () -- C:\Windows\ODBC.INI [2011.12.11 14:26:11 | 000,000,309 | ---- | M] () -- C:\user.js [2011.12.11 01:44:04 | 000,000,069 | ---- | M] () -- C:\Windows\NeroDigital.ini [2011.12.09 19:31:32 | 000,134,856 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys [2011.12.07 19:45:43 | 000,243,870 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\SNC00043.jpg [2011.12.07 19:45:42 | 000,238,780 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\SNC00042.jpg [2011.12.04 11:35:26 | 000,088,509 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\Rechnung_T3T4.pdf [2011.12.04 11:34:05 | 000,001,818 | ---- | M] () -- C:\Users\Public\Desktop\PDF24 Editor.lnk [2011.12.04 11:29:09 | 000,043,183 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\order_detail.htm [2011.11.25 20:23:50 | 001,248,267 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\SNC00027.jpg [2011.11.23 23:30:52 | 000,057,334 | ---- | M] () -- C:\Users\HTPC-Win7\Desktop\IMG_0352.jpg ========== Files Created - No Company Name ========== [2011.12.12 19:30:01 | 001,300,675 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\SNC00054.jpg [2011.12.12 19:30:00 | 001,258,089 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\SNC00055.jpg [2011.12.12 15:25:45 | 000,069,119 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\Rechnung_Ladedruckschläuche_SIS4ZA.pdf [2011.12.12 11:26:10 | 000,000,056 | ---- | C] () -- C:\Windows\Acroread.ini [2011.12.12 10:27:29 | 000,000,656 | ---- | C] () -- C:\Users\Public\Desktop\ElsaWin.lnk [2011.12.12 10:27:29 | 000,000,656 | ---- | C] () -- C:\Users\Public\Desktop\ElsaWin Administration.lnk [2011.12.11 14:26:11 | 000,000,309 | ---- | C] () -- C:\user.js [2011.12.07 19:45:43 | 000,243,870 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\SNC00043.jpg [2011.12.07 19:45:41 | 000,238,780 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\SNC00042.jpg [2011.12.04 11:35:25 | 000,088,509 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\Rechnung_T3T4.pdf [2011.12.04 11:34:05 | 000,001,818 | ---- | C] () -- C:\Users\Public\Desktop\PDF24 Editor.lnk [2011.12.04 11:29:08 | 000,043,183 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\order_detail.htm [2011.11.25 21:46:15 | 001,248,267 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\SNC00027.jpg [2011.11.23 23:30:50 | 000,057,334 | ---- | C] () -- C:\Users\HTPC-Win7\Desktop\IMG_0352.jpg [2011.11.13 13:10:30 | 000,000,000 | ---- | C] () -- C:\Windows\Setup.INI [2011.10.31 15:16:52 | 000,000,030 | ---- | C] () -- C:\Windows\USDL_GrandPrix_-_MyOmnia.eu_Edition_-_Vista.INI [2010.10.05 19:43:17 | 000,016,384 | ---- | C] () -- C:\Windows\System32\FileOps.exe [2010.10.05 19:35:58 | 000,000,556 | ---- | C] () -- C:\Windows\ODBC.INI [2010.08.14 07:47:54 | 000,005,120 | ---- | C] () -- C:\Users\HTPC-Win7\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.08.14 07:31:54 | 000,014,115 | ---- | C] () -- C:\Windows\twspmm.ini [2010.08.10 18:35:23 | 000,000,201 | ---- | C] () -- C:\Windows\ETKINST.INI [2010.07.25 09:29:03 | 000,007,642 | ---- | C] () -- C:\Users\HTPC-Win7\AppData\Local\Resmon.ResmonCfg [2010.05.29 15:14:31 | 000,188,416 | ---- | C] () -- C:\Windows\System32\ftdiunin.exe [2010.05.29 15:14:31 | 000,000,133 | ---- | C] () -- C:\Windows\System32\ftdiun2k.ini [2010.05.19 19:53:20 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2010.05.16 22:19:55 | 000,163,999 | ---- | C] () -- C:\Windows\hpwins10.dat [2010.05.16 22:19:55 | 000,000,372 | ---- | C] () -- C:\Windows\hpwmdl10.dat [2010.05.12 15:12:13 | 000,028,672 | ---- | C] () -- C:\Windows\System32\hlduinst.exe [2010.05.10 19:35:49 | 000,153,088 | ---- | C] () -- C:\Windows\System32\UNWISE.EXE [2010.05.10 19:35:49 | 000,006,836 | ---- | C] () -- C:\Windows\System32\UNWISE.INI [2010.05.07 11:34:03 | 000,018,090 | ---- | C] () -- C:\Windows\System32\drivers\iMON_PAD.sys [2010.05.07 11:29:42 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll [2010.05.06 22:11:21 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2009.07.14 09:47:43 | 000,643,628 | ---- | C] () -- C:\Windows\System32\perfh007.dat [2009.07.14 09:47:43 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat [2009.07.14 09:47:43 | 000,126,188 | ---- | C] () -- C:\Windows\System32\perfc007.dat [2009.07.14 09:47:43 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat [2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 05:33:53 | 000,289,720 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT [2009.07.14 03:05:48 | 000,606,992 | ---- | C] () -- C:\Windows\System32\perfh009.dat [2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat [2009.07.14 03:05:48 | 000,103,370 | ---- | C] () -- C:\Windows\System32\perfc009.dat [2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat [2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT [2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat [2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll [2009.07.14 00:41:47 | 000,001,536 | ---- | C] () -- C:\Windows\System32\winver.exe [2009.06.18 18:29:04 | 000,197,654 | ---- | C] () -- C:\Windows\System32\atiicdxx.dat [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat [2009.05.08 14:08:40 | 000,258,048 | ---- | C] () -- C:\Windows\System32\EMRegSys.dll [2009.02.18 16:55:22 | 000,294,912 | ---- | C] () -- C:\Windows\System32\ATIODE.exe [2009.02.03 19:52:04 | 000,045,056 | ---- | C] () -- C:\Windows\System32\ATIODCLI.exe [2008.06.23 12:02:02 | 000,097,410 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4 [2008.05.23 16:48:50 | 000,020,270 | ---- | C] () -- C:\ProgramData\DeviceInstaller.xml [2007.10.25 16:26:10 | 000,005,632 | ---- | C] () -- C:\Windows\System32\drivers\StarOpen.sys [2006.11.10 14:08:50 | 000,024,064 | ---- | C] () -- C:\Windows\System32\drivers\SysTool.sys ========== Alternate Data Streams ========== @Alternate Data Stream - 150 bytes -> C:\ProgramData\TEMP:B3D74A13 < End of report > Code:
ATTFilter OTL Extras logfile created on: 23.12.2011 13:28:24 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\HTPC-Win7\Downloads Professional (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 3,00 Gb Total Physical Memory | 1,88 Gb Available Physical Memory | 62,61% Memory free 6,00 Gb Paging File | 4,69 Gb Available in Paging File | 78,22% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files Drive C: | 97,16 Gb Total Space | 13,44 Gb Free Space | 13,83% Space Free | Partition Type: NTFS Drive D: | 931,51 Gb Total Space | 143,25 Gb Free Space | 15,38% Space Free | Partition Type: NTFS Drive E: | 898,44 Gb Total Space | 22,97 Gb Free Space | 2,56% Space Free | Partition Type: NTFS Drive F: | 931,51 Gb Total Space | 66,39 Gb Free Space | 7,13% Space Free | Partition Type: NTFS Drive G: | 33,07 Gb Total Space | 13,77 Gb Free Space | 41,64% Space Free | Partition Type: NTFS Drive H: | 834,35 Gb Total Space | 814,66 Gb Free Space | 97,64% Space Free | Partition Type: NTFS Drive L: | 3,47 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS Drive Q: | 931,51 Gb Total Space | 858,14 Gb Free Space | 92,12% Space Free | Partition Type: NTFS Computer Name: HTPC-WIN7-PC | User Name: HTPC-Win7 | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation) .hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation) htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [Browse with &IrfanView] -- "C:\Program Files\IrfanView\i_view32.exe" "%1 /thumbs" (Irfan Skiljan) Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = Reg Error: Unknown registry data type -- File not found "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 ========== Authorized Applications List ========== ========== HKEY_LOCAL_MACHINE Uninstall List ========== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{03CAB33F-D1C2-48C6-8766-DAE84DFC25FE}" = Microsoft Sync Framework Services v1.0 (x86) "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp version 0.99.7 "{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}" = Scan "{0FFAC7BB-50DC-CB54-6CA7-A8B74513280B}" = CCC Help Chinese Traditional "{16BD54E2-0A2F-4CAD-8AA1-6D2220FDA6CF}" = SmartFTP Client "{1C802083-6D79-78ED-BF1C-601DDF908DD1}" = Catalyst Control Center Core Implementation "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 21 "{282C4EAA-F162-F52F-7BAF-C7B50DAAA00A}" = ccc-utility "{28728178-FF15-218B-0B63-012692F42C28}" = CCC Help Danish "{2ADE2157-7A5E-122C-B51D-EB8A01B15943}" = DeepBurner v1.9.0.228 "{32851025-1E46-83A3-1320-471619254E39}" = Catalyst Control Center Localization All "{34A0FF07-F11A-4157-84A3-92F8AD688CBF}" = Vodafone Mobile Broadband via the phone "{3E0D0742-45BF-4438-8CE2-1AAADE878DBD}" = Vodafone Mobile Broadband via the phone "{3EB004D3-F84C-4736-AEB9-77FCA90B9CF8}" = HDDlife Pro 3.0 "{40217B2F-462B-94A4-E84E-6A1C6EDBCE2F}" = CCC Help Swedish "{43CDF946-F5D9-4292-B006-BA0D92013021}" = WebReg "{45F4941E-5E77-11DF-A71D-005056C00008}" = Paragon Partition Manager™ 11 Free Edition "{47FDEFC7-BFE6-FD75-41D1-28DD572BD2D9}" = ATI Catalyst Install Manager "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4B6A3B5E-D26E-4690-A061-F3E2FB10F0E5}" = TortoiseSVN 1.6.9.19725 (32 bit) "{5343A801-92E5-C234-9F27-AB27EC738BF6}" = CCC Help Japanese "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{570C2A84-A145-4DF0-AE9D-012584DF09DC}" = SPCA1528 PC Driver "{5D22226D-EBC1-C95F-7746-2E3A9F4C97BA}" = CCC Help Russian "{600C37F2-098B-A165-C1DB-6AE2B89D8D49}" = Catalyst Control Center Graphics Previews Common "{61F8CA2C-9A80-8A1B-D3B9-347530CB387F}" = CCC Help Norwegian "{633A06C3-B709-479A-AAB3-5EE94AD9EE4B}" = Acronis*True*Image*Home "{650E4124-292E-4638-944C-99A880C9D0F0}" = Oracle VM VirtualBox 4.1.6 "{674B407D-EAB1-B6B6-F9BF-C34CEE4CD83F}" = Catalyst Control Center Graphics Light "{69F411C5-4851-6DA9-EA4C-160BEF8788AA}" = CCC Help French "{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin "{6BBA26E9-AB03-4FE7-831A-3535584CA002}" = Toolbox "{6DD27E54-2598-0FEC-7CE1-BE00924C0570}" = Catalyst Control Center Graphics Previews Vista "{70CAF6DA-C2F4-40C4-A0A4-10FB04701669}" = bpd_scan "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{77F09242-A107-4CB6-A295-D8656C2C3795}" = Samsung USB Driver (MCCI 4.24) "{78F5C5A8-C3E4-417A-AD23-4C95447FD239}" = TPower2 "{7C27114E-6FC8-21F5-E501-FE48F09243DF}" = CCC Help Dutch "{80237C20-CBF3-F841-4AD5-E727AA86FBD1}" = CCC Help Italian "{802EE127-D32A-1447-09DC-77419772BCDC}" = CCC Help Portuguese "{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 3.8.0 "{836AFA32-7B8B-2C19-99D9-36EF32B42EB8}" = CCC Help Thai "{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7 "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{8B0B72BC-3007-45E9-BBA3-7B7EF8819FA3}" = 5700_Help "{8D1E61D1-1395-4E97-997F-D002DB3A5074}" = OpenOffice.org 3.2 "{8D7133DE-27D2-47E5-B248-4180278D32AA}" = Catalyst Control Center - Branding "{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile-Gerätecenter "{92127AF5-FDD8-4ADF-BC40-C356C9EE0B7D}" = 32 Bit HP CIO Components Installer "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{9390B88E-CED5-4F79-B9CA-5088289CBAB0}" = SmartFTP Client German (Germany) MUI "{946942CB-D078-F33A-A3CD-27E0393507FD}" = CCC Help Turkish "{9682B99B-BB28-AD37-CA50-C1CB5BFF0FA6}" = Catalyst Control Center Graphics Full New "{9DBCF44B-77AC-81D8-0F8E-1E60D6330AC2}" = Catalyst Control Center InstallProxy "{A02CC93A-134F-0319-1438-B1E895B52577}" = CCC Help German "{A49F249F-0C91-497F-86DF-B2585E8E76B7}" = Microsoft Visual C++ 2005 Redistributable "{A7E1ADB8-162B-7C33-60FB-0561A17BD876}" = CCC Help Spanish "{A8B4A92C-BAB9-4CBC-A095-BEE5F44686F5}" = J5700_Basic "{A8BD5A60-E843-46DC-8271-ABF20756BE0F}" = Microsoft Sync Framework Runtime v1.0 (x86) "{A919AABD-61FA-4E16-0000-26966C3D2481}" = GameJack 6 "{A96EEF55-155C-552E-ABB1-6FDAEF5BD944}" = CCC Help Polish "{A99968BE-C155-474C-0089-33239DEE1CE2}" = NFS Underground "{AC76BA86-7AD7-1033-7B44-AA1000000001}" = Adobe Reader X (10.1.1) "{ACEB2BAF-96DF-48FD-ADD5-43842D4C443D}" = Adobe AIR "{ADB25FF0-AEC4-2CFB-130C-2C60D80C5934}" = CCC Help Greek "{B04D5DA5-11DA-830C-85C6-0FF9185787E7}" = Skins "{B099C29E-EC83-4BF2-A4FF-5809D09C1C1B}" = BIOScreen "{B7C076CA-126E-497C-8724-B589F54031AF}" = HDD Regenerator "{BB603E9F-ECE8-7713-B0AC-7E0614E8C058}" = Catalyst Control Center HydraVision Full "{BE232D60-AEA5-502F-ACBF-9AC188A82C21}" = CCC Help Finnish "{BE282C23-5484-47FF-B2C1-EBEA5C891031}" = Nero 8 "{C15C4AB5-EF5D-5050-273C-4636E3FBE301}" = CCC Help Czech "{C656142F-EFE1-44CD-BFAD-6CBC6DCB9860}" = Vodafone Mobile Connect Lite "{C96A23CB-DDE6-4DEF-AD83-D5D5037D4316}" = iMON "{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones "{D1A85247-63B6-4F20-910E-58377D1B7430}_is1" = Picture Resizer 2.0 "{D43B1A55-6957-4E93-A674-338F78B4A202}" = BPDSoftware "{DE3C8BD1-8656-408E-0001-7BB0830A561C}" = MovieSaver*2.0 "{E09CD13D-7CE3-351C-1625-8DC7F21A99C0}" = ccc-core-static "{E0A1335B-3D84-413B-B92C-DF2D4BAACA0C}" = BPDSoftware_Ini "{E373E0E2-20F5-90DF-B315-615EA6E52101}" = Catalyst Control Center Graphics Full Existing "{E6DA746E-1175-88BD-2B16-1DC62018E060}" = CCC Help Chinese Standard "{EF901A4B-A25A-4962-83C6-C6691D062ED9}" = Nero Mega Plugin Pack "{F053BFD9-4357-6A82-6042-CF919667448F}" = CCC Help English "{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 "{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver "{F17EB02C-DA0D-EDEF-2E16-501FB700A710}" = CCC Help Hungarian "{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio "{F2F8F16F-253E-4846-B508-8666FE2C5B14}" = HP Officejet J5700 Series "{F5DDC0CD-F13A-83F0-5103-563A17EA306F}" = CCC Help Korean "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "370F970D5E7062280B50CB0E992F50C6DAB9E73E" = Windows-Treiberpaket - Samsung Electronics Co., LTD (ss_bserd) Ports (09/19/2009 5.00.0.0) "427AEA289D5472880C429F9C824A920BA154595B" = Windows-Treiberpaket - Samsung Electronics Co., LTD (ss_bmdm) Modem (09/19/2009 5.00.0.0) "5513-1208-7298-9440" = JDownloader 0.9 "619FC70B90CF4F3DD502F21CF8F20D4969667855" = Windows-Treiberpaket - SAMSUNG Electronics Co., Ltd. (sscdmdm) Modem (10/15/2009 5.02.0.0) "67508234057A3DD0825E4C2468FD42A700B3ED78" = Windows-Treiberpaket - SAMSUNG Electronics Co., Ltd. (sscdbus) USB (10/15/2009 5.02.0.0) "AC3Filter_is1" = AC3Filter 1.63b "Adobe AIR" = Adobe AIR "Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe SVG Viewer" = Adobe SVG Viewer 3.0 "Avira AntiVir Desktop" = Avira Free Antivirus "B406677FA530D213D0B10B080DCD1080AE866D39" = Windows-Treiberpaket - Ross-Tech USB Driver Package (05/21/2009 2.04.18) "Chicken Invaders_is1" = Chicken Invaders v1.30 "D6336B8FD7FAC973DF15525B8DB853BC282665F8" = Windows-Treiberpaket - Samsung Electronics Co., LTD (ss_bbus) USB (09/19/2009 5.00.0.0) "DAEMON Tools Lite" = DAEMON Tools Lite "DivX Setup" = DivX-Setup "E44441CD01CC4D3E7B3C54273F94D69A0F7F4202" = Windows-Treiberpaket - SAMSUNG Electronics Co., Ltd. (sscdserd) Ports (10/15/2009 5.02.0.0) "ElsaWin" = ElsaWin "ETKA7.3_Germany_2011" = ETKA 7.3 Germany 2011 "Frontplatten Designer" = Frontplatten Designer "FTDICOMM" = FTDI USB Serial Converter Drivers "Hardlock Gerätetreiber" = Hardlock Gerätetreiber "HD Tune_is1" = HD Tune 2.55 "HotspotShield" = Hotspot Shield 1.44 "InstallShield_{77F09242-A107-4CB6-A295-D8656C2C3795}" = Samsung USB Driver (MCCI 4.24) "InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio "IrfanView" = IrfanView (remove only) "MozBackup" = MozBackup 1.5.1 "Mozilla Firefox 8.0 (x86 de)" = Mozilla Firefox 8.0 (x86 de) "Mozilla Thunderbird (3.1.2)" = Mozilla Thunderbird (3.1.2) "multidisplayUI" = multidisplayUI "multidisplayUI_v2" = multidisplayUI_v2 "Prog-Express" = Batronix Prog-Express "SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set "Samsung Mobile USB Modem" = SAMSUNG Mobile USB Modem Software "Security Task Manager" = Security Task Manager 1.8d "SmartFTP Client 4.0 Setup Files" = SmartFTP Client 4.0 Setup Files (remove only) "Target 3001! V14 discover" = Target 3001! V14 discover "Texas Holdem Poker 3D Deluxe Edition DeLEGiON_is1" = Texas Holdem Poker 3D Deluxe Edition v1 0 DeLEGiON "uTorrent" = µTorrent "VCDS RKS (GER)" = VCDS RKS 908.1 (GER) "VLC media player" = VLC media player 1.1.2 "WinAVI Video Converter 10.0_is1" = WinAVI Video Converter "WinAVR-20100110" = WinAVR 20100110 (remove only) "WinRAR archiver" = WinRAR "Your Uninstaller! 2008_is1" = Your Uninstaller! 2008 Version 6.0 ========== Last 10 Event Log Errors ========== Error reading Event Logs: The Event Service is not operating properly or the Event Logs are corrupt! < End of report > Vielen Dank. Auch wenns nicht hinhaut, ich wünsch euch Ruhige Feiertage. Gruss Michael Geändert von Metz (23.12.2011 um 14:14 Uhr) |
Themen zu Metzes Problem: Achtung! Aus Sicherheitsgründen wurde ihr Windowssystem gesperrt |
32 bit, achtung!, alternate, antivir, aus sicherheitsgründen wurde ihr windowssystem gesperrt, avira, behandlung, bho, bildschirm, branding, converter, desktop, device driver, downloader, error, firefox, flash player, format, gerätetreiber, google, helper, host.exe, hotspot, hotspot shield, install.exe, jdownloader, langs, mozilla, mozilla thunderbird, netzwerk, officejet, plug-in, problem, realtek, registry, rundll, scan, sched.exe, software, speicherplatz, studio, taskhost.exe, trojaner, video converter, virtualbox, virus, vodafone, webcheck, windows, windows 7 32bit, windowssystem gesperrt, wurde ihr |