Aus Sicherheitsgründen wurde Ihr Windowssystem blockiert

 

OTL Extras logfile created on: 30.01.2012 15:11:44 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = G:\
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,75 Gb Total Physical Memory | 2,10 Gb Available Physical Memory | 76,44% Memory free
4,59 Gb Paging File | 4,04 Gb Available in Paging File | 88,07% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 149,04 Gb Total Space | 59,55 Gb Free Space | 39,95% Space Free | Partition Type: NTFS
Drive G: | 983,70 Mb Total Space | 975,78 Mb Free Space | 99,19% Space Free | Partition Type: FAT
 
Computer Name: BIE | User Name: Erik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Programme\VLC-Player\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Programme\VLC-Player\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
========== System Restore Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\ICQ7.5\ICQ.exe" = C:\Programme\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5 -- (ICQ, LLC.)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\Skype\Plugin Manager\skypePM.exe" = C:\Programme\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager
"C:\Programme\Samsung\Samsung New PC Studio\npsasvr.exe" = C:\Programme\Samsung\Samsung New PC Studio\npsasvr.exe:*:Enabled:KTF MUSIC AoD Server -- (PeeringPortal)
"C:\Programme\Samsung\Samsung New PC Studio\npsvsvr.exe" = C:\Programme\Samsung\Samsung New PC Studio\npsvsvr.exe:*:Enabled:KTF MUSIC VoD Server -- (PeeringPortal)
"C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Dropbox\bin\Dropbox.exe" = C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Dropbox\bin\Dropbox.exe:*:Enabled:Dropbox -- (Dropbox, Inc.)
"C:\Spiele\Microsoft Games\Age of Empires II\age2_x1\age2_x1.exe" = C:\Spiele\Microsoft Games\Age of Empires II\age2_x1\age2_x1.exe:*:Enabled:Age of Empires II Expansion -- (Microsoft Corporation)
"C:\Spiele\KnightShift\KnightShift.ex2" = C:\Spiele\KnightShift\KnightShift.ex2:*:Enabled:KnightShift -- (Reality Pump)
"C:\Dokumente und Einstellungen\All Users\Dokumente\Worms Armageddon\WA.exe" = C:\Dokumente und Einstellungen\All Users\Dokumente\Worms Armageddon\WA.exe:*:Enabled:Worms Armageddon -- (Team17 Software Ltd)
"C:\WINXP\system32\dplaysvr.exe" = C:\WINXP\system32\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper -- (Microsoft Corporation)
"C:\WINXP\system32\dpnsvr.exe" = C:\WINXP\system32\dpnsvr.exe:*:Enabled:Microsoft DirectPlay8-Server -- (Microsoft Corporation)
"C:\Programme\GOG.com\The Witcher 2\bin\witcher2.exe" = C:\Programme\GOG.com\The Witcher 2\bin\witcher2.exe:*:Enabled:The Witcher 2: Assasins of Kings
"C:\Spiele\revolt\revolt.exe" = C:\Spiele\revolt\revolt.exe:*:Enabled:revolt -- ()
"C:\Programme\ICQ7.5\ICQ.exe" = C:\Programme\ICQ7.5\ICQ.exe:*:Enabled:ICQ7.5 -- (ICQ, LLC.)
"C:\Spiele\KnightShift SE\KnightShift.ex2" = C:\Spiele\KnightShift SE\KnightShift.ex2:*:Enabled:KnightShift
"C:\Spiele\Stronghold2\Stronghold2.exe" = C:\Spiele\Stronghold2\Stronghold2.exe:*:Enabled:Stronghold 2 -- (Firefly Studios)
"C:\Spiele\Assasins creed\AssassinsCreed_Dx9.exe" = C:\Spiele\Assasins creed\AssassinsCreed_Dx9.exe:*:Enabled:Assassin's Creed Dx9 -- (Ubisoft)
"C:\Spiele\Assasins creed\AssassinsCreed_Dx10.exe" = C:\Spiele\Assasins creed\AssassinsCreed_Dx10.exe:*:Enabled:Assassin's Creed Dx10 -- (Ubisoft)
"C:\Spiele\Assasins creed\AssassinsCreed_Launcher.exe" = C:\Spiele\Assasins creed\AssassinsCreed_Launcher.exe:*:Enabled:Assassin's Creed Update -- (Ubisoft)
"C:\Spiele\Warcraft III\Warcraft III.exe" = C:\Spiele\Warcraft III\Warcraft III.exe:*:Disabled:Warcraft III -- (Blizzard Entertainment)
"C:\Spiele\Freeciv-2.0.10-gtk2\civserver.exe" = C:\Spiele\Freeciv-2.0.10-gtk2\civserver.exe:*:Enabled:civserver -- ()
"C:\Spiele\SpellForce2\SpellForce2.exe" = C:\Spiele\SpellForce2\SpellForce2.exe:*:Enabled:SpellForce2 -- ()
"C:\Spiele\Sacred 1\Sacred\Sacred.exe" = C:\Spiele\Sacred 1\Sacred\Sacred.exe:*:Enabled:Sacred -- (Ascaron Entertainment GmbH)
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{055EE59D-217B-43A7-ABFF-507B966405D8}" = ATI Catalyst Control Center
"{0AD84416-63A4-4CF3-BDDF-8FA866711FB0}" = Civilization III
"{0CA4C366-9A1C-A493-6628-BECB972C35BA}" = Skins
"{1079E68B-91F1-6661-CD27-1D4BB0D10C9A}" = CCC Help Finnish
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP550_series" = Canon MP550 series MP Drivers
"{1235C921-7B9A-5BEB-5B7A-CC5DEBF31BB6}" = CCC Help Thai
"{16D2C649-CBA8-44EE-B730-12584667D487}" = Stronghold 2
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{1A4E47DC-6701-4A85-AA16-C1F99A44598C}" = SpellForce 2 - Shadow Wars
"{1B8A90DE-5B5F-C596-92DA-DB3E03FA1561}" = Catalyst Control Center Graphics Full Existing
"{1D108D70-E7D1-4089-9A0A-99629C4D0CB8}" = Morrowind
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{23E49254-B48D-4422-93A1-5F26F02A0A69}_is1" = Vampires Dawn II: Ancient Blood
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 24
"{2E84C64C-BA4F-CF98-FF6D-EAF652FD8675}" = CCC Help French
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{35CB6715-41F8-4F99-8881-6FC75BF054B0}" = Oblivion
"{3870A588-D619-325D-036A-C650FD16738B}" = CCC Help Norwegian
"{399C37FB-08AF-493B-BFED-20FBD85EDF7F}" = HP Webcam Driver
"{4091C4D6-6308-B545-E661-105DBA555964}" = Catalyst Control Center Graphics Full New
"{458D3447-3704-EE80-B633-9BA68060E4D1}" = CCC Help Russian
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{58D68DF0-4E8B-4E9E-B425-670F9E37C1A8}" = TES Construction Set
"{5DA3AB29-AFC9-721B-E720-31FB11E6E73B}" = CCC Help Spanish
"{5F499D33-546A-442B-B0F9-4C58F3B5B6E3}" = Cuttermaran 1.70
"{63830359-A054-9403-4C2C-DBEE5676F78A}" = Catalyst Control Center Graphics Light
"{6C19191F-7236-EFEB-D425-22852000CAD6}" = CCC Help Dutch
"{6C6D47F5-7314-4D34-94E0-4240C09B6BDE}" = HP ESU for Microsoft Windows XP
"{6D82D2DB-D5FE-D85F-14BF-738C6C5018B8}" = CCC Help Danish
"{70C592EC-AE9B-4734-928B-676E824FB41E}" = MFC RunTime files
"{7225E3AA-AE83-84A1-F5CE-4B5690E096A9}" = CCC Help Czech
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{7B79D2A4-FEE7-C610-24D2-C7D3109C0FC0}" = ccc-utility
"{7C07FFEF-4F87-AFED-C136-4F4CF04AC6A9}" = CCC Help Swedish
"{7E84FAC8-C518-40F9-9807-7455301D6D25}" = SamsungConnectivityCableDriver
"{82EF29B1-9B60-4142-A155-0599216DD053}" = LightScribe System Software
"{853CA7DC-2604-62F8-E596-8A38AEFB0DBE}" = CCC Help Hungarian
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{8C052CAF-5AF7-471D-74AB-296A50654ABD}" = CCC Help Chinese Standard
"{8C3B20DD-BCEC-9610-3869-446AEACACB2B}" = ccc-core-preinstall
"{8CFA9151-6404-409A-AF22-4632D04582FD}" = Assassin's Creed
"{8E7B09E3-DCE1-2AA6-804E-FEB9C8EB4CD2}" = Catalyst Control Center Core Implementation
"{90753CA2-4BA4-E75E-194D-0F5A466F2D67}" = CCC Help Portuguese
"{9076A738-309F-D9D2-6679-94D1B7A68BF6}" = CCC Help Korean
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 4.1.2
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9DCF2B35-23C4-8D46-F2A0-7F9E56D3BB91}" = CCC Help English
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A3276EED-22A1-4808-9AA3-88A451482E10}" = Catalyst Control Center - Branding
"{A7BC02AF-1128-4A31-BCF8-1A3EE803D3B3}" = SweetIM Toolbar for Internet Explorer 4.2
"{A81A974F-8A22-43E6-9243-5198FF758DA1}" = SweetIM for Messenger 3.6
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC26DD4C-76C0-5473-F86B-2E6806C11B0B}" = Catalyst Control Center Localization All
"{AC599724-5755-48C1-ABE7-ABB857652930}" = PC Connectivity Solution
"{AC76BA86-7AD7-1031-7B44-A94000000001}" = Adobe Reader 9.4.6 - Deutsch
"{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer
"{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}" = Cisco Systems VPN Client 5.0.07.0290
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{B8164387-305E-1037-9E12-E0C964A0D2CC}" = CCC Help Japanese
"{BFA7649A-1D5B-A838-BA32-8F7407467492}" = CCC Help Turkish
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C151CE54-E7EA-4804-854B-F515368B0798}" = AMD Processor Driver
"{C258E913-2D9F-9804-3A5D-D030FC5BD875}" = CCC Help Chinese Traditional
"{C479DF4C-D407-9EA8-E46B-E516AB888288}" = CCC Help Polish
"{C4E2A4A7-B623-40CB-8EEA-72F577E49D56}" = Vampire - The Masquerade Bloodlines
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D163A823-F74A-7B5C-F1BF-30B152405220}" = CCC Help German
"{DC28A406-462D-4A08-A125-3EAF8A64DE4E}" = HP Wireless Assistant
"{DCFAA38D-FB19-A6CD-D771-40CC27F9D312}" = CCC Help Greek
"{DFFC0648-BC4B-47D1-93D2-6CA6B9457641}" = OpenOffice.org 3.2
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E58E19F6-E810-DC1E-09D8-FBCAFC06B66D}" = CCC Help Italian
"{F138762F-5A1F-4CF0-A5E1-1588EF6088A4}" = The Witcher Enhanced Edition
"{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"{F6501365-E2FB-7D26-34E1-02C434EF937D}" = ccc-core-static
"3A5DEFA413DDE699DBA6EBE0A63534ACA524D30F" = Windows-Treiberpaket - Nokia pccsmcfd  (10/12/2007 6.85.4.0)
"6194C28A8F62DD817EA1B918E6E46E806A21B452" = Windows-Treiberpaket - MobileTop (sshpmdm) Modem  (02/23/2007 2.5.0.0)
"65B6FE5418CE28F4D72543FB2D964C3CEC83F161" = Windows-Treiberpaket - MobileTop (sshpusb) USB  (02/23/2007 2.5.0.0)
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion
"ATI Display Driver" = ATI Display Driver
"aTube Catcher" = aTube Catcher
"Avidemux 2.5" = Avidemux 2.5 (32-bit)
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Broadcom 802.11b Network Adapter" = Broadcom 802.11-WLAN-Adapter
"Canon MP550 series Benutzerregistrierung" = Canon MP550 series Benutzerregistrierung
"CanonMyPrinter" = Canon Utilities My Printer
"CanonSolutionMenu" = Canon Utilities Solution Menu
"Easy-PhotoPrint EX" = Canon Utilities Easy-PhotoPrint EX
"Foxit Reader" = Foxit Reader
"Free Video Converter" = Free Video Converter
"Free Video Dub_is1" = Free Video Dub version 2.0.3.1206
"Free YouTube Download_is1" = Free YouTube Download version 3.0.19.1206
"Hamachi" = Hamachi 1.0.1.5
"InstallShield_{AF7E85DC-317C-47F5-810E-B82EE093A612}" = Samsung New PC Studio USB Driver Installer
"InstallShield_{C4E2A4A7-B623-40CB-8EEA-72F577E49D56}" = Vampire - The Masquerade Bloodlines
"InstallShield_{F193FC0E-9E18-40FC-A974-509A1BDD240A}" = Samsung New PC Studio
"IrfanView" = IrfanView (remove only)
"Marvell Miniport Driver" = Marvell Miniport Driver
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mobile Partner" = Mobile Partner
"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)
"MP Navigator EX 3.0" = Canon MP Navigator EX 3.0
"MPEG4E" = MPEG4E VFW - H.264/MPEG-4 AVC codec (remove only)
"Nehrim - Am Rande des Schicksals_is1" = NehrimUninstaller
"Re-Volt" = Re-Volt
"RTP 1.32 Add-On for RM2k" = RTP 1.32 Add-On for RM2k
"RTP for RM2K (Png, Wav, Midi, Fonts)" = RTP for RM2K (Png, Wav, Midi, Fonts)
"SAMSUNG Mobile Composite Device" = SAMSUNG Mobile Composite Device Software
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile Modem Device" = Samsung Mobile Modem Device Software
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"SAMSUNG USB Mobile Device" = SAMSUNG USB Mobile Device Software
"SpellForce 2 Update v1.02" = SpellForce 2 Update v1.02
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"Unlocker" = Unlocker 1.9.0
"VideoCutter_is1" = Kate's Video Cutter
"VLC media player" = VLC media player 1.1.0
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WinGimp-2.0_is1" = GIMP 2.6.11
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Warcraft III" = Warcraft III: All Products
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 01.12.2011 12:35:34 | Computer Name = BIE | Source = ESENT | ID = 490
Description = svchost (2024) Versuch, Datei "C:\WINXP\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
 für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der
 Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet
 wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
 
Error - 10.12.2011 06:23:09 | Computer Name = BIE | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung soffice.bin, Version 3.2.9498.500, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 27.12.2011 13:24:58 | Computer Name = BIE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung vampire.exe, Version 0.0.0.0, fehlgeschlagenes
 Modul materialsystem.dll, Version 1.0.0.1, Fehleradresse 0x0000db95.
 
Error - 29.12.2011 07:58:56 | Computer Name = BIE | Source = PerfNet | ID = 2004
Description = Der Serverdienst konnte nicht geöffnet werden. Die Server-Leistungsinformationen
werden
 nicht zurückgegeben. Der zurückgegebene Fehlercode befindet sich in DWORD 0.
 
Error - 30.12.2011 11:34:09 | Computer Name = BIE | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung vlc.exe, Version 1.1.0.0, Stillstandmodul 
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 22.01.2012 15:46:55 | Computer Name = BIE | Source = .NET Runtime 2.0 Error Reporting | ID = 1000
Description = Faulting application freevideodub.exe, version 2.0.3.1206, stamp 4edf7fd2,
 faulting module sdl.dll, version 1.2.14.0, stamp 4ada0d3c, debug? 0, fault address
 0x0003d1d8.
 
Error - 26.01.2012 14:42:24 | Computer Name = BIE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung morrowind.exe, Version 1.6.0.1820, fehlgeschlagenes
 Modul morrowind.exe, Version 1.6.0.1820, Fehleradresse 0x0018bf63.
 
Error - 26.01.2012 14:43:56 | Computer Name = BIE | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung Autorun.exe, Version 10.0.0.204, Stillstandmodul
 hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
 
Error - 26.01.2012 15:10:20 | Computer Name = BIE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung morrowind.exe, Version 1.6.0.1820, fehlgeschlagenes
 Modul msvcrt.dll, Version 7.0.2600.5512, Fehleradresse 0x00037696.
 
Error - 26.01.2012 15:34:39 | Computer Name = BIE | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung morrowind.exe, Version 1.6.0.1820, fehlgeschlagenes
 Modul morrowind.exe, Version 1.6.0.1820, Fehleradresse 0x0018bf63.
 
[ System Events ]
Error - 23.01.2012 05:12:51 | Computer Name = BIE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 192.168.1.4 für die Netzwerkkarte mit der Netzwerkadresse
 F07BCB1B5B31 wurde durch  den DHCP-Server 0.0.0.0 abgelehnt (der DHCP-Server hat 
eine DHCPNACK-Meldung gesendet).
 
Error - 24.01.2012 12:14:10 | Computer Name = BIE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 192.168.178.25 für die Netzwerkkarte mit der Netzwerkadresse
 F07BCB1B5B31 wurde durch  den DHCP-Server 1.1.1.1 abgelehnt (der DHCP-Server hat 
eine DHCPNACK-Meldung gesendet).
 
Error - 25.01.2012 03:53:23 | Computer Name = BIE | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error - 25.01.2012 03:54:37 | Computer Name = BIE | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   AmdPPM  avgio  avipbb  Fips  ssmdrv
 
Error - 25.01.2012 03:56:06 | Computer Name = BIE | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "BITS"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {4991D34B-80A1-4291-83B6-3328366B9097}
 
Error - 25.01.2012 03:56:09 | Computer Name = BIE | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "BITS"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {4991D34B-80A1-4291-83B6-3328366B9097}
 
Error - 25.01.2012 03:58:51 | Computer Name = BIE | Source = DCOM | ID = 10005
Description = Bei DCOM ist der Fehler "%1084" aufgetreten, als der Dienst "EventSystem"
 mit den Argumenten ""  gestartet wurde, um den folgenden Server zu verwenden:  {1BE1F766-5536-11D1-B726-00C04FB926AF}
 
Error - 25.01.2012 06:18:13 | Computer Name = BIE | Source = Dhcp | ID = 1002
Description = Die IP-Adresslease 192.168.178.25 für die Netzwerkkarte mit der Netzwerkadresse
 F07BCB1B5B31 wurde durch  den DHCP-Server 1.1.1.1 abgelehnt (der DHCP-Server hat 
eine DHCPNACK-Meldung gesendet).
 
Error - 25.01.2012 10:49:54 | Computer Name = BIE | Source = Dhcp | ID = 1000
Description = Die Lease dieses Computers zu der IP-Adresse 134.109.158.215 über 
die   Netzwerkkarte mit der Netzwerkadresse F07BCB1B5B31 ist verloren gegangen.
 
Error - 29.01.2012 12:58:50 | Computer Name = BIE | Source = System Error | ID = 1003
Description = Fehlercode 000000f4, 1. Parameter 00000003, 2. Parameter 8a73ada0,
 3. Parameter 8a73af14, 4. Parameter 805d2984.
 
 
< End of report >
         

OTL logfile created on: 30.01.2012 15:11:44 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = G:\
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
2,75 Gb Total Physical Memory | 2,10 Gb Available Physical Memory | 76,44% Memory free
4,59 Gb Paging File | 4,04 Gb Available in Paging File | 88,07% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 149,04 Gb Total Space | 59,55 Gb Free Space | 39,95% Space Free | Partition Type: NTFS
Drive G: | 983,70 Mb Total Space | 975,78 Mb Free Space | 99,19% Space Free | Partition Type: FAT
 
Computer Name: BIE | User Name: Erik | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - G:\OTL.exe (OldTimer Tools)
PRC - C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Programme\Ask.com\Updater\Updater.exe (Ask)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DatacardService\DCService.exe ()
PRC - C:\Programme\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
PRC - C:\Programme\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Programme\Canon\MyPrinter\BJMYPRT.EXE (CANON INC.)
PRC - C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
PRC - C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
PRC - C:\WINXP\system32\FsUsbExService.Exe (Teruten)
PRC - c:\Programme\IDT\WDM\stacsv.exe (IDT, Inc.)
PRC - C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
PRC - C:\WINXP\system32\AESTFltr.exe (Andrea Electronics Corporation)
PRC - C:\WINXP\explorer.exe (Microsoft Corporation)
PRC - C:\Dokumente und Einstellungen\Erik\Lokale Einstellungen\Anwendungsdaten\Mozilla\Firefox\firefox.exe (Корпорация Майкрософт)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\System.Web\50ea744ffc3cb7f09b027fd6c5c93b2b\System.Web.ni.dll ()
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\System.Management\894d87c08a9a5b5923e7104055a616d2\System.Management.ni.dll ()
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb4cb21d14767292e079366a5d3d76cd\System.Configuration.ni.dll ()
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\Accessibility\c2af7cfbb47c077029a2645930b4eeac\Accessibility.ni.dll ()
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\System.Xml\36f3953f24d4f0b767bf172331ad6f3e\System.Xml.ni.dll ()
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\9a254c455892c02355ab0ab0f0727c5b\System.Windows.Forms.ni.dll ()
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\System.Drawing\6978f2e90f13bc720d57fa6895c911e2\System.Drawing.ni.dll ()
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c8041330ad90929d\System.ni.dll ()
MOD - C:\WINXP\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce433b5aca7fb1b07\mscorlib.ni.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\System.Runtime.Remoting\2.0.0.0__b77a5c561934e089\System.Runtime.Remoting.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3378.39944__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3378.39962__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3378.39957__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3378.39960__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3378.40026__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3378.39996__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3378.40027__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Dashboard\2.0.3378.39961__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3378.39996__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3378.39952__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3378.40008__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3378.39991__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3378.39995__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3378.39983__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Runtime\2.0.3378.39961__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3378.39952__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3378.39985__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3378.39953__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3378.40003__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3378.39962__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Dashboard\2.0.3378.40030__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3378.39989__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3378.39985__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Runtime\2.0.3378.40030__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3378.39989__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3378.39962__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3378.39984__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Dashboard\2.0.3378.39991__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Wizard\2.0.3378.39966__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Wizard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3378.39984__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3378.39966__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3378.39984__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3378.39990__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3363.26478__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3363.26472__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3363.26488__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3363.26504__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3363.26504__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3363.26486__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3363.26504__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Foundation\2.0.3363.26467__90ba9c70f846762e\CLI.Foundation.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3363.26480__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3363.26494__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3363.26501__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\LOG.Foundation\2.0.3363.26465__90ba9c70f846762e\LOG.Foundation.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3363.26466__90ba9c70f846762e\NEWAEM.Foundation.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3363.26525__90ba9c70f846762e\CLI.Foundation.XManifest.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.PowerPlay4.Graphics.Shared\2.0.3363.26502__90ba9c70f846762e\CLI.Aspect.PowerPlay4.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\DEM.OS.I0602\2.0.3363.26488__90ba9c70f846762e\DEM.OS.I0602.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3363.26482__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3363.26479__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3363.26472__90ba9c70f846762e\CLI.Component.Client.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.VPURecover.Graphics.Shared\2.0.3363.26491__90ba9c70f846762e\CLI.Aspect.VPURecover.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\MOM.Foundation\2.0.3363.26485__90ba9c70f846762e\MOM.Foundation.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\DEM.OS\2.0.3363.26502__90ba9c70f846762e\DEM.OS.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\DEM.Graphics\2.0.3363.26489__90ba9c70f846762e\DEM.Graphics.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3363.26477__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3363.26491__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3363.26489__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\MOM.Implementation\2.0.3378.40021__90ba9c70f846762e\MOM.Implementation.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3378.40019__90ba9c70f846762e\LOG.Foundation.Implementation.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3363.26495__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3363.26493__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3363.26492__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3363.26492__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3378.40034__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3363.26494__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3363.26474__90ba9c70f846762e\LOG.Foundation.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3363.26484__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3363.26491__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3363.26490__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3363.26487__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3363.26493__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3363.26476__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3363.26485__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3363.26490__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\APM.Foundation\2.0.3363.26486__90ba9c70f846762e\APM.Foundation.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3363.26478__90ba9c70f846762e\AEM.Server.Shared.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll ()
MOD - C:\WINXP\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3378.39940__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3378.39948__90ba9c70f846762e\CLI.Component.Dashboard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3378.39956__90ba9c70f846762e\CLI.Component.Wizard.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3378.39942__90ba9c70f846762e\CLI.Component.Runtime.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\ATIDEMOS\2.0.3378.39943__90ba9c70f846762e\ATIDEMOS.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\APM.Server\2.0.3378.39942__90ba9c70f846762e\APM.Server.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3378.39944__90ba9c70f846762e\CLI.Component.SkinFactory.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3363.26487__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\AEM.Server\2.0.3378.39941__90ba9c70f846762e\AEM.Server.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3363.26470__90ba9c70f846762e\CLI.Foundation.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3363.26482__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3363.26486__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3363.26484__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3363.26495__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll ()
MOD - C:\WINXP\assembly\GAC_MSIL\CCC.Implementation\2.0.3378.40021__90ba9c70f846762e\CCC.Implementation.dll ()
MOD - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DatacardService\DCService.exe ()
MOD - C:\WINXP\system32\vpnapi.dll ()
MOD - C:\Programme\Avira\AntiVir Desktop\sqlite3.dll ()
MOD - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\pdfshell.DEU ()
MOD - C:\Programme\ATI Technologies\ATI.ACE\Branding\Branding.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (HidServ) --  File not found
SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) -- C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (DCService.exe) -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DatacardService\DCService.exe ()
SRV - (CVPND) -- C:\Programme\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
SRV - (LightScribeService) -- C:\Programme\Gemeinsame Dateien\LightScribe\LSSrvc.exe (Hewlett-Packard Company)
SRV - (FsUsbExService) -- C:\WINXP\system32\FsUsbExService.Exe (Teruten)
SRV - (STacSV) -- c:\Programme\IDT\WDM\stacsv.exe (IDT, Inc.)
SRV - (ServiceLayer) -- C:\Programme\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (hamachi) -- C:\WINXP\system32\drivers\hamachi.sys (LogMeIn, Inc.)
DRV - (avipbb) -- C:\WINXP\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\WINXP\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (atksgt) -- C:\WINXP\system32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\WINXP\system32\drivers\lirsgt.sys ()
DRV - (sptd) -- C:\WINXP\System32\Drivers\sptd.sys ()
DRV - (BCM43XX) -- C:\WINXP\system32\drivers\BCMWL5.SYS (Broadcom Corporation)
DRV - (huawei_enumerator) -- C:\WINXP\system32\drivers\ew_jubusenum.sys (Huawei Technologies Co., Ltd.)
DRV - (hwdatacard) -- C:\WINXP\system32\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV - (CVPNDRVA) -- C:\WINXP\system32\drivers\CVPNDRVA.sys (Cisco Systems, Inc.)
DRV - (ew_hwusbdev) -- C:\WINXP\system32\drivers\ew_hwusbdev.sys (Huawei Technologies Co., Ltd.)
DRV - (ewusbnet) -- C:\WINXP\system32\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV - (yukonwxp) -- C:\WINXP\system32\drivers\yk51x86.sys (Marvell)
DRV - (SNP2UVC) USB2.0 PC Camera (SNP2UVC) -- C:\WINXP\system32\drivers\snp2uvc.sys ()
DRV - (avgio) -- C:\Programme\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (ssmdrv) -- C:\WINXP\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (ati2mtag) -- C:\WINXP\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)
DRV - (FsUsbExDisk) -- C:\WINXP\system32\FsUsbExDisk.Sys ()
DRV - (STHDA) -- C:\WINXP\system32\drivers\sthda.sys (IDT, Inc.)
DRV - (ss_bmdm) -- C:\WINXP\system32\drivers\ss_bmdm.sys (MCCI Corporation)
DRV - (ss_bbus) SAMSUNG USB Mobile Device (WDM) -- C:\WINXP\system32\drivers\ss_bbus.sys (MCCI)
DRV - (ss_bmdfl) SAMSUNG USB Mobile Modem (Filter) -- C:\WINXP\system32\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV - (AESTAud) -- C:\WINXP\system32\drivers\AESTAud.sys (Andrea Electronics Corporation)
DRV - (DNE) -- C:\WINXP\system32\drivers\dne2000.sys (Deterministic Networks, Inc.)
DRV - (pccsmcfd) -- C:\WINXP\system32\drivers\pccsmcfd.sys (Nokia)
DRV - (AmdPPM) -- C:\WINXP\system32\drivers\AmdPPM.sys (Advanced Micro Devices)
DRV - (CVirtA) -- C:\WINXP\system32\drivers\CVirtA.sys (Cisco Systems, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://home.sweetim.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 10 47 4C 26 81 23 CB 01  [binary data]
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultenginename: "SweetIM Search"
FF - prefs.js..browser.search.defaulturl: ""
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.ecosia.org/"
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6906
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: {d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}:2.0.5
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: ""
FF - prefs.js..browser.startup.homepage: "hxxp://www.ecosia.org/"
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINXP\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Programme\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf: C:\Programme\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Programme\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Programme\Mozilla Firefox\components [2012.01.20 03:18:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.06.20 12:37:51 | 000,000,000 | ---D | M]
 
[2010.11.02 22:19:06 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Mozilla\Extensions
[2010.11.02 22:19:06 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2012.01.29 20:24:41 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Mozilla\Firefox\Profiles\7ihksuk0.default\extensions
[2011.11.17 19:25:44 | 000,002,333 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Mozilla\Firefox\Profiles\7ihksuk0.default\searchplugins\askcom.xml
[2011.05.17 14:46:00 | 000,005,212 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Mozilla\Firefox\Profiles\7ihksuk0.default\searchplugins\ecosia.xml
[2011.11.25 13:49:35 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2011.11.17 13:40:49 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
() (No name found) -- C:\DOKUMENTE UND EINSTELLUNGEN\ERIK\ANWENDUNGSDATEN\MOZILLA\FIREFOX\PROFILES\7IHKSUK0.DEFAULT\EXTENSIONS\{D04B0B40-3DAB-4F0B-97A6-04EC3EDDBFB0}.XPI
[2012.01.20 03:18:07 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Programme\mozilla firefox\components\browsercomps.dll
[2011.02.02 20:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\mozilla firefox\plugins\npdeployJava1.dll
[2012.01.20 03:18:03 | 000,001,392 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.01.20 03:18:03 | 000,002,252 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\bing.xml
[2012.01.20 03:18:03 | 000,001,153 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\eBay-de.xml
[2012.01.20 03:18:03 | 000,006,805 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.01.20 03:18:03 | 000,001,178 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.01.20 03:18:03 | 000,001,105 | ---- | M] () -- C:\Programme\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.11.28 23:41:54 | 000,438,750 | R--- | M]) - C:\WINXP\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 127.0.0.1	1-2005-search.com
O1 - Hosts: 15090 more lines...
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AESTFltr] C:\WINXP\System32\AESTFltr.exe (Andrea Electronics Corporation)
O4 - HKLM..\Run: [ApnUpdater] C:\Programme\Ask.com\Updater\Updater.exe (Ask)
O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [CanonMyPrinter] C:\Programme\Canon\MyPrinter\BJMyPrt.exe (CANON INC.)
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Programme\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k File not found
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKLM..\Run: [StartCCC] C:\Programme\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [AutoStartNPSAgent] C:\Programme\Samsung\Samsung New PC Studio\NPSAgent.exe (Samsung Electronics Co., Ltd.)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Programme\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
O4 - HKCU..\Run: [Mozilla client] C:\Dokumente und Einstellungen\Erik\Lokale Einstellungen\Anwendungsdaten\Mozilla\Firefox\firefox.exe (Корпорация Майкрософт)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Programme\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Dokumente und Einstellungen\Erik\Startmenü\Programme\Autostart\Dropbox.lnk = C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{87889AE4-401D-4629-93F0-CB020C542B9E}: DhcpNameServer = 193.189.244.225 193.189.244.206
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINXP\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINXP\system32\userinit.exe) -C:\WINXP\system32\userinit.exe (Microsoft Corporation)
O20 - Winlogon\Notify\AtiExtEvent: DllName - (Ati2evxx.dll) - C:\WINXP\System32\ati2evxx.dll (ATI Technologies Inc.)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Erik\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Erik\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010.07.14 16:59:53 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{010487c6-b772-11e0-bb0e-d00fa4414235}\Shell - "" = AutoRun
O33 - MountPoints2\{010487c6-b772-11e0-bb0e-d00fa4414235}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{010487c6-b772-11e0-bb0e-d00fa4414235}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{c904dc4e-b556-11e0-bb06-fdd75d1a25a5}\Shell - "" = AutoRun
O33 - MountPoints2\{c904dc4e-b556-11e0-bb06-fdd75d1a25a5}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c904dc4e-b556-11e0-bb06-fdd75d1a25a5}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{c904dc52-b556-11e0-bb06-fd87739b964f}\Shell - "" = AutoRun
O33 - MountPoints2\{c904dc52-b556-11e0-bb06-fd87739b964f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c904dc52-b556-11e0-bb06-fd87739b964f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.01.25 08:52:54 | 000,000,000 | ---D | C] -- C:\WINXP\CSC
[2012.01.22 20:50:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Free Video Converter
[2012.01.22 20:50:03 | 000,000,000 | ---D | C] -- C:\Programme\Free Video Converter
[2012.01.22 20:50:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Erik\Startmenü\Programme\MPEG4E
[2012.01.07 22:34:48 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Erik\Eigene Dateien\SpellForce2
[2012.01.07 22:34:06 | 000,000,000 | ---D | C] -- C:\Programme\JoWooD
[2012.01.07 22:31:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Crack
[2012.01.07 22:04:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Erik\Startmenü\Programme\SpellForce
[2010.07.14 18:03:30 | 000,203,312 | ---- | C] ( ) -- C:\WINXP\System32\csnp2uvc.dll
[2010.07.14 18:03:27 | 000,256,560 | ---- | C] ( ) -- C:\WINXP\System32\rsnp2uvc.dll
[1 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.01.30 15:09:49 | 000,002,048 | --S- | M] () -- C:\WINXP\bootstat.dat
[2012.01.30 15:09:48 | 000,173,776 | ---- | M] () -- C:\WINXP\System32\ativvaxx.cap
[2012.01.30 14:58:16 | 000,000,253 | RHS- | M] () -- C:\boot.ini
[2012.01.29 20:42:00 | 000,000,224 | ---- | M] () -- C:\WINXP\tasks\Scheduled Update for Ask Toolbar.job
[2012.01.29 15:37:29 | 000,002,206 | ---- | M] () -- C:\WINXP\System32\wpa.dbl
[2012.01.29 12:15:01 | 002,411,672 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Landau,+Greenberg+&+Kosloff_Coping+with+Life_s+One+Certainty_A+Terror+Management+Perspective+on+the+Existentially+Uncertain+Self.pdf
[2012.01.29 12:14:54 | 000,259,115 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Ist+Unsicherheit+Ursache+oder+Wirkungppt_Final.pdf
[2012.01.28 16:42:19 | 000,203,122 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\EU27_Money.pdf
[2012.01.27 14:17:54 | 012,333,027 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\M_ller-Koalitionstheorien.pdf
[2012.01.26 16:28:23 | 000,001,355 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\The Elder Scrolls Construction Set.lnk
[2012.01.26 16:25:57 | 000,000,497 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Morrowind.lnk
[2012.01.25 19:40:21 | 000,061,389 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Eileen_Proposal_23.pdf
[2012.01.25 19:38:50 | 000,059,423 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Exposé_Eileen_Weber.pdf
[2012.01.25 11:31:15 | 000,020,581 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Eileen_Proposal(2)bearbeitet.odt
[2012.01.25 09:03:14 | 000,449,044 | ---- | M] () -- C:\WINXP\System32\perfh007.dat
[2012.01.25 09:03:14 | 000,432,690 | ---- | M] () -- C:\WINXP\System32\perfh009.dat
[2012.01.25 09:03:14 | 000,080,312 | ---- | M] () -- C:\WINXP\System32\perfc007.dat
[2012.01.25 09:03:14 | 000,067,646 | ---- | M] () -- C:\WINXP\System32\perfc009.dat
[2012.01.23 21:27:46 | 000,086,835 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\ausschuesse.jpg
[2012.01.22 20:50:02 | 000,061,208 | ---- | M] () -- C:\WINXP\System32\MPEG4E-uninstall.exe
[2012.01.20 10:36:24 | 001,922,546 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Video.flv
[2012.01.15 17:16:54 | 000,025,818 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Hausarbeit(1).odt
[2012.01.13 10:55:07 | 000,023,504 | ---- | M] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Hausarbeit.odt
[1 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.01.29 12:15:01 | 002,411,672 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Landau,+Greenberg+&+Kosloff_Coping+with+Life_s+One+Certainty_A+Terror+Management+Perspective+on+the+Existentially+Uncertain+Self.pdf
[2012.01.29 12:14:54 | 000,259,115 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Ist+Unsicherheit+Ursache+oder+Wirkungppt_Final.pdf
[2012.01.28 16:42:19 | 000,203,122 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\EU27_Money.pdf
[2012.01.27 14:17:54 | 012,333,027 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\M_ller-Koalitionstheorien.pdf
[2012.01.26 16:28:23 | 000,001,355 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\The Elder Scrolls Construction Set.lnk
[2012.01.26 16:25:57 | 000,000,497 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Morrowind.lnk
[2012.01.25 19:37:53 | 000,059,423 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Exposé_Eileen_Weber.pdf
[2012.01.25 19:17:01 | 000,061,389 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Eileen_Proposal_23.pdf
[2012.01.25 11:31:14 | 000,020,581 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Eileen_Proposal(2)bearbeitet.odt
[2012.01.23 21:27:46 | 000,086,835 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\ausschuesse.jpg
[2012.01.20 10:36:24 | 001,922,546 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Video.flv
[2012.01.13 22:31:31 | 000,025,818 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Hausarbeit(1).odt
[2012.01.13 10:55:06 | 000,023,504 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Desktop\Hausarbeit.odt
[2012.01.07 22:31:15 | 174,830,100 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\spellforce2_update_v102.exe
[2011.12.11 21:48:27 | 000,061,208 | ---- | C] () -- C:\WINXP\System32\MPEG4E-uninstall.exe
[2011.09.12 08:59:14 | 000,000,274 | ---- | C] () -- C:\WINXP\vtmb.ini
[2011.09.08 23:20:06 | 000,237,568 | ---- | C] () -- C:\WINXP\System32\Unlha32.dll
[2011.09.08 23:20:05 | 000,473,600 | ---- | C] () -- C:\WINXP\System32\Harmony.dll
[2011.09.08 23:19:50 | 000,087,040 | ---- | C] () -- C:\WINXP\UnGins.exe
[2011.06.07 10:30:28 | 000,163,624 | ---- | C] () -- C:\Dokumente und Einstellungen\LocalService\Lokale Einstellungen\Anwendungsdaten\FontCache3.0.0.0.dat
[2011.04.11 21:12:02 | 000,000,664 | ---- | C] () -- C:\WINXP\System32\d3d9caps.dat
[2011.03.21 21:54:48 | 000,010,240 | ---- | C] () -- C:\WINXP\System32\vidx16.dll
[2011.03.01 20:54:21 | 000,279,712 | ---- | C] () -- C:\WINXP\System32\drivers\atksgt.sys
[2011.03.01 20:54:20 | 000,025,888 | ---- | C] () -- C:\WINXP\System32\drivers\lirsgt.sys
[2011.01.17 20:13:53 | 000,095,563 | ---- | C] () -- C:\WINXP\War3Unin.dat
[2010.10.27 15:21:48 | 000,000,023 | ---- | C] () -- C:\WINXP\BlendSettings.ini
[2010.10.26 18:06:06 | 003,686,400 | ---- | C] () -- C:\Programme\Samsung New PC Studio USB Driver Installer.msi
[2010.10.26 18:06:06 | 000,105,472 | ---- | C] () -- C:\Programme\1031.MST
[2010.10.26 18:06:06 | 000,015,832 | ---- | C] () -- C:\Programme\0x0407.ini
[2010.10.26 18:04:40 | 000,110,592 | ---- | C] () -- C:\WINXP\System32\FsUsbExDevice.Dll
[2010.10.26 18:04:40 | 000,036,608 | ---- | C] () -- C:\WINXP\System32\FsUsbExDisk.Sys
[2010.10.26 18:04:31 | 000,002,528 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\$_hpcst$.hpc
[2010.08.14 22:31:29 | 000,354,816 | ---- | C] () -- C:\WINXP\System32\psisdecd.dll
[2010.08.13 03:33:40 | 000,000,525 | ---- | C] () -- C:\WINXP\QIII.INI
[2010.07.17 22:42:11 | 000,000,056 | -H-- | C] () -- C:\WINXP\System32\ezsidmv.dat
[2010.07.17 08:29:11 | 000,000,000 | ---- | C] () -- C:\WINXP\nsreg.dat
[2010.07.14 19:44:49 | 000,011,776 | ---- | C] () -- C:\Dokumente und Einstellungen\Erik\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.07.14 18:06:41 | 000,000,000 | ---- | C] () -- C:\WINXP\ativpsrm.bin
[2010.07.14 18:03:30 | 001,765,168 | ---- | C] () -- C:\WINXP\System32\drivers\snp2uvc.sys
[2010.07.14 18:03:30 | 000,034,480 | ---- | C] () -- C:\WINXP\System32\drivers\sncduvc.sys
[2010.07.14 18:03:30 | 000,027,184 | ---- | C] () -- C:\WINXP\snuvcdsm.exe
[2010.07.14 18:03:30 | 000,015,497 | ---- | C] () -- C:\WINXP\snp2uvc.ini
[2010.07.14 17:50:55 | 000,004,073 | ---- | C] () -- C:\WINXP\ODBCINST.INI
[2010.07.14 17:49:40 | 000,129,296 | ---- | C] () -- C:\WINXP\System32\FNTCACHE.DAT
[2010.07.14 17:02:48 | 000,002,048 | --S- | C] () -- C:\WINXP\bootstat.dat
[2010.07.14 16:56:22 | 000,021,740 | ---- | C] () -- C:\WINXP\System32\emptyregdb.dat
[2010.03.23 12:26:48 | 000,201,512 | ---- | C] () -- C:\WINXP\System32\vpnapi.dll
[2010.03.23 12:17:40 | 000,197,416 | ---- | C] () -- C:\WINXP\System32\CSGina.dll
[2009.04.01 19:57:02 | 003,107,788 | ---- | C] () -- C:\WINXP\System32\ativva5x.dat
[2009.04.01 19:57:02 | 000,887,724 | ---- | C] () -- C:\WINXP\System32\ativva6x.dat
[2009.02.23 13:39:30 | 000,184,394 | ---- | C] () -- C:\WINXP\System32\atiicdxx.dat
[2008.10.28 11:32:40 | 000,950,272 | ---- | C] () -- C:\WINXP\System32\MPEG4Evfw.dll
[2008.04.14 10:00:00 | 013,107,200 | ---- | C] () -- C:\WINXP\System32\oembios.bin
[2008.04.14 10:00:00 | 000,673,088 | ---- | C] () -- C:\WINXP\System32\mlang.dat
[2008.04.14 10:00:00 | 000,449,044 | ---- | C] () -- C:\WINXP\System32\perfh007.dat
[2008.04.14 10:00:00 | 000,432,690 | ---- | C] () -- C:\WINXP\System32\perfh009.dat
[2008.04.14 10:00:00 | 000,272,128 | ---- | C] () -- C:\WINXP\System32\perfi009.dat
[2008.04.14 10:00:00 | 000,269,480 | ---- | C] () -- C:\WINXP\System32\perfi007.dat
[2008.04.14 10:00:00 | 000,218,003 | ---- | C] () -- C:\WINXP\System32\dssec.dat
[2008.04.14 10:00:00 | 000,080,312 | ---- | C] () -- C:\WINXP\System32\perfc007.dat
[2008.04.14 10:00:00 | 000,067,646 | ---- | C] () -- C:\WINXP\System32\perfc009.dat
[2008.04.14 10:00:00 | 000,046,258 | ---- | C] () -- C:\WINXP\System32\mib.bin
[2008.04.14 10:00:00 | 000,034,478 | ---- | C] () -- C:\WINXP\System32\perfd007.dat
[2008.04.14 10:00:00 | 000,028,626 | ---- | C] () -- C:\WINXP\System32\perfd009.dat
[2008.04.14 10:00:00 | 000,004,569 | ---- | C] () -- C:\WINXP\System32\secupd.dat
[2008.04.14 10:00:00 | 000,004,463 | ---- | C] () -- C:\WINXP\System32\oembios.dat
[2008.04.14 10:00:00 | 000,001,804 | ---- | C] () -- C:\WINXP\System32\Dcache.bin
[2008.04.14 10:00:00 | 000,000,741 | ---- | C] () -- C:\WINXP\System32\noise.dat
[2007.10.25 16:26:10 | 000,005,632 | ---- | C] () -- C:\WINXP\System32\drivers\StarOpen.sys
[1997.06.14 12:56:08 | 000,056,832 | ---- | C] () -- C:\WINXP\System32\iyvu9_32.dll
 
========== LOP Check ==========
 
[2011.10.25 07:59:14 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonBJ
[2011.10.25 14:46:35 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJEGV
[2011.10.31 13:32:46 | 000,000,000 | -H-D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CanonIJScan
[2010.08.13 03:27:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DAEMON Tools Lite
[2011.07.23 19:11:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DatacardService
[2011.06.27 20:46:09 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Firefly Studios
[2010.10.26 18:08:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PC Suite
[2011.07.05 09:28:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ubisoft
[2011.12.11 21:48:06 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\VideoConverter
[2011.12.11 21:30:27 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2011.12.11 21:53:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\avidemux
[2011.11.01 12:03:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Canon
[2011.04.05 15:19:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Command & Conquer 3 Tiberium Wars
[2011.12.11 21:37:13 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Cuttermaran
[2010.08.13 03:30:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\DAEMON Tools Lite
[2012.01.30 15:10:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Dropbox
[2011.12.11 22:10:50 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\DVDVideoSoft
[2011.12.11 21:30:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\DVDVideoSoftIEHelpers
[2011.02.23 14:10:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Foxit Software
[2011.11.25 17:01:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\gtk-2.0
[2012.01.29 14:44:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\ICQ
[2010.07.24 19:47:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\OpenOffice.org
[2010.10.26 18:08:33 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\PC Suite
[2010.10.26 18:04:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Samsung
[2010.11.02 22:19:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Thunderbird
[2011.11.25 00:27:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\TS3Client
[2011.07.05 09:30:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Erik\Anwendungsdaten\Ubisoft
[2012.01.29 20:42:00 | 000,000,224 | ---- | M] () -- C:\WINXP\Tasks\Scheduled Update for Ask Toolbar.job
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 20 bytes -> C:\Dokumente und Einstellungen\All Users\Dokumente\Warcraft 3:Mac_Metadata
@Alternate Data Stream - 124 bytes -> C:\Dokumente und Einstellungen\Erik\Desktop\Eileen_Proposal_23.pdf:SummaryInformation

< End of report >