GVU Trojaner + deo0_sar.exe Problem

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Datenbank Version: v2012.09.02.04

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
GuM :: WINDOWS764 [Administrator]

02.09.2012 20:56:52
mbam-log-2012-09-02 (22-13-07).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|E:\|F:\|G:\|H:\|)
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 463246
Laufzeit: 1 Stunde(n), 15 Minute(n), 52 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
F:\Users\GUM\Desktop\NES\rocknes5b3\RockNES.exe (Trojan.Agent.VGENX) -> Keine Aktion durchgeführt.

(Ende)

OTL logfile created on: 02.09.2012 20:49:35 - Run 1
OTL by OldTimer - Version 3.2.59.1     Folder = C:\Users\GuM\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,62 Gb Available Physical Memory | 65,63% Memory free
8,00 Gb Paging File | 6,39 Gb Available in Paging File | 79,96% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 406,92 Gb Free Space | 87,39% Space Free | Partition Type: NTFS
Drive D: | 319,67 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 100,00 Mb Total Space | 71,86 Mb Free Space | 71,86% Space Free | Partition Type: NTFS
Drive F: | 195,21 Gb Total Space | 159,45 Gb Free Space | 81,68% Space Free | Partition Type: NTFS
Drive G: | 244,14 Gb Total Space | 192,60 Gb Free Space | 78,89% Space Free | Partition Type: NTFS
Drive H: | 492,06 Gb Total Space | 111,22 Gb Free Space | 22,60% Space Free | Partition Type: NTFS
 
Computer Name: WINDOWS764 | User Name: GuM | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\GuM\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_4_402_265.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\McAfee Security Scan\3.0.207\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe (OpenOffice.org)
PRC - C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin (OpenOffice.org)
PRC - C:\Program Files (x86)\Razer\Copperhead\razerhid.exe ()
PRC - C:\Program Files (x86)\Razer\Copperhead\razertra.exe ()
PRC - C:\Program Files (x86)\Analog Devices\SoundMAX\SoundMAX.exe (Analog Devices, Inc.)
PRC - C:\Program Files (x86)\Razer\Copperhead\razerofa.exe (Razer Inc.)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
MOD - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll ()
MOD - C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll ()
MOD - C:\Program Files (x86)\Razer\Copperhead\razerhid.exe ()
MOD - C:\Program Files (x86)\Razer\Copperhead\razertra.exe ()
MOD - C:\Program Files (x86)\Razer\Copperhead\download.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (AEADIFilters) -- C:\Windows\SysNative\AEADISRV.EXE (Andrea Electronics Corporation)
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (McComponentHostService) -- C:\Program Files (x86)\McAfee Security Scan\3.0.207\McCHSvc.exe (McAfee, Inc.)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (avipbb) -- C:\Windows\SysNative\drivers\avipbb.sys (Avira GmbH)
DRV:64bit: - (avgntflt) -- C:\Windows\SysNative\drivers\avgntflt.sys (Avira GmbH)
DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (ADIHdAudAddService) -- C:\Windows\SysNative\drivers\ADIHdAud.sys (Analog Devices, Inc.)
DRV:64bit: - (avkmgr) -- C:\Windows\SysNative\drivers\avkmgr.sys (Avira GmbH)
DRV:64bit: - (cpuz135) -- C:\Windows\SysNative\drivers\cpuz135_x64.sys (CPUID)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (TFsExDisk) -- C:\Windows\SysNative\drivers\TFsExDisk.sys (Teruten Inc)
DRV:64bit: - (ss_bmdm) -- C:\Windows\SysNative\drivers\ss_bmdm.sys (MCCI Corporation)
DRV:64bit: - (ss_bbus) -- C:\Windows\SysNative\drivers\ss_bbus.sys (MCCI)
DRV:64bit: - (ss_bmdfl) -- C:\Windows\SysNative\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV:64bit: - (copperhd) -- C:\Windows\SysNative\drivers\copperhd.sys (Razer (Asia-Pacific) Pte Ltd)
DRV:64bit: - (yukonw7) -- C:\Windows\SysNative\drivers\yk62x64.sys ()
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV - (TFsExDisk) -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys (Teruten Inc)
DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = 
 
 
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
IE - HKU\S-1-5-21-1611372496-1212194676-3654038413-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.msn.com/?ocid=EIE9HP&PC=UP50
IE - HKU\S-1-5-21-1611372496-1212194676-3654038413-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.t-online.de/
IE - HKU\S-1-5-21-1611372496-1212194676-3654038413-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-1611372496-1212194676-3654038413-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKU\S-1-5-21-1611372496-1212194676-3654038413-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 16 BE 37 99 F1 69 CD 01  [binary data]
IE - HKU\S-1-5-21-1611372496-1212194676-3654038413-1001\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-1611372496-1212194676-3654038413-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.startup.homepage: "www.t-online.de"
FF - prefs.js..network.proxy.ftp: "184.82.36.77"
FF - prefs.js..network.proxy.ftp_port: 8080
FF - prefs.js..network.proxy.gopher: "184.82.36.77"
FF - prefs.js..network.proxy.gopher_port: 8080
FF - prefs.js..network.proxy.http: "184.82.36.77"
FF - prefs.js..network.proxy.http_port: 8080
FF - prefs.js..network.proxy.type: 1
FF - user.js - File not found
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll ()
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files (x86)\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.122.0: C:\Program Files (x86)\Battlelog Web Plugins\1.122.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.7.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.7.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\Windows\system32\TVUAx\npTVUAx.dll (TVU networks)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.19: C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.09.01 01:10:25 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 15.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2011.10.23 15:09:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GuM\AppData\Roaming\mozilla\Extensions
[2012.07.28 17:16:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GuM\AppData\Roaming\mozilla\Firefox\Profiles\siyqur4c.default\extensions
[2012.08.25 14:03:18 | 000,000,000 | ---D | M] (No name found) -- C:\Users\GuM\AppData\Roaming\mozilla\Firefox\Profiles\vz63bwg3.default-1343594315720\extensions
[2012.07.29 22:43:04 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\GuM\AppData\Roaming\mozilla\Firefox\Profiles\vz63bwg3.default-1343594315720\extensions\ich@maltegoetz.de
[2012.08.13 21:34:44 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2012.01.31 00:09:53 | 000,004,548 | ---- | M] () (No name found) -- C:\USERS\GUM\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\SIYQUR4C.DEFAULT\EXTENSIONS\SUPPORT@FREE-HIDEIP.COM.XPI
[2012.09.01 01:10:25 | 000,266,720 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012.07.14 02:45:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.09.01 01:10:24 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012.07.14 02:45:08 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2012.07.14 02:45:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.07.14 02:45:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.07.14 02:45:07 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4:64bit: - HKLM..\Run: [SoundMAX] C:\Program Files (x86)\Analog Devices\SoundMAX\soundmax.exe (Analog Devices, Inc.)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Copperhead] C:\Program Files (x86)\Razer\Copperhead\razerhid.exe ()
O4 - HKLM..\Run: [NPSStartup]  File not found
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1611372496-1212194676-3654038413-1001..\Run: [ICQ] C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware ] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - Startup: C:\Users\GuM\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
O9 - Extra Button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files (x86)\ICQ7.6\ICQ.exe (ICQ, LLC.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Reg Error: Value error.)
O16 - DPF: {CAFEEFAC-0017-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Java Plug-in 1.7.0_05)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_05-windows-i586.cab (Java Plug-in 10.7.2)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.253
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4AF2B8BA-14D1-4784-A19D-61C6794659B0}: DhcpNameServer = 192.168.0.253
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.09.20 04:41:46 | 000,000,047 | R--- | M] () - D:\autorun.inf -- [ CDFS ]
O33 - MountPoints2\{8ce22020-fd71-11e0-80dc-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{8ce22020-fd71-11e0-80dc-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Install.exe -- [2008.12.16 11:13:00 | 002,805,834 | R--- | M] (Macromedia, Inc.)
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.09.02 20:46:42 | 000,598,528 | ---- | C] (OldTimer Tools) -- C:\Users\GuM\Desktop\OTL.exe
[2012.09.02 19:24:47 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012.09.02 19:24:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012.09.02 19:13:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012.09.02 19:12:06 | 000,246,760 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2012.09.02 19:12:02 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2012.09.02 19:12:02 | 000,174,056 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2012.09.02 19:12:02 | 000,095,208 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2012.08.30 23:15:29 | 000,000,000 | ---D | C] -- C:\Users\GuM\AppData\Roaming\IrfanView
[2012.08.30 23:15:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IrfanView
[2012.08.29 01:56:00 | 000,000,000 | ---D | C] -- C:\kkk
[2012.08.29 01:54:47 | 000,000,000 | ---D | C] -- C:\Users\GuM\Documents\NPS
[2012.08.29 01:50:59 | 000,161,280 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bmdm.sys
[2012.08.29 01:50:59 | 000,127,488 | ---- | C] (MCCI) -- C:\Windows\SysNative\drivers\ss_bbus.sys
[2012.08.29 01:50:59 | 000,018,944 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bmdfl.sys
[2012.08.29 01:50:59 | 000,015,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bwhnt.sys
[2012.08.29 01:50:59 | 000,015,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bwh.sys
[2012.08.29 01:50:59 | 000,015,360 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bcmnt.sys
[2012.08.29 01:50:59 | 000,015,360 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_bcm.sys
[2012.08.29 01:50:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2012.08.29 01:50:23 | 000,025,960 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\FsExService64.Exe
[2012.08.29 01:50:23 | 000,025,960 | ---- | C] (Teruten Inc) -- C:\Windows\SysNative\FsExService64.exe
[2012.08.29 01:50:23 | 000,016,448 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\drivers\TFsExDisk.Sys
[2012.08.29 01:50:23 | 000,016,448 | ---- | C] (Teruten Inc) -- C:\Windows\SysNative\drivers\TFsExDisk.sys
[2012.08.29 01:50:19 | 000,000,000 | ---D | C] -- C:\Users\GuM\AppData\Roaming\Samsung
[2012.08.29 01:50:19 | 000,000,000 | ---D | C] -- C:\Users\GuM\Documents\My NPS Files
[2012.08.29 01:50:16 | 000,000,000 | ---D | C] -- C:\Users\GuM\Documents\Samsung
[2012.08.26 18:32:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
[2012.08.16 01:42:56 | 000,237,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012.08.16 01:42:56 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012.08.16 01:42:56 | 000,096,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012.08.16 01:42:56 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012.08.16 01:42:55 | 000,248,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012.08.16 01:42:55 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012.08.16 01:42:55 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2012.08.16 01:42:55 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2012.08.16 01:42:54 | 002,312,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll
[2012.08.16 01:42:54 | 001,494,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2012.08.16 01:42:54 | 001,427,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2012.08.16 01:42:53 | 000,816,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2012.08.16 01:42:53 | 000,717,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2012.08.15 21:57:53 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2012.08.15 21:57:53 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2012.08.15 21:57:53 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2012.08.15 21:57:51 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2012.08.13 23:57:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2012.08.13 23:57:02 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.08.13 21:32:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Oracle
[2012.08.12 15:22:48 | 000,000,000 | ---D | C] -- C:\Users\GuM\Documents\Anti-Malware
[2012.08.09 00:33:16 | 000,000,000 | ---D | C] -- C:\Users\GuM\AppData\Roaming\Malwarebytes
[2012.08.09 00:33:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.08.08 01:28:37 | 000,746,984 | ---- | C] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
 
========== Files - Modified Within 30 Days ==========
 
[2012.09.02 20:46:44 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\GuM\Desktop\OTL.exe
[2012.09.02 19:24:48 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.09.02 19:12:16 | 000,015,824 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.09.02 19:12:16 | 000,015,824 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.09.02 19:11:59 | 000,095,208 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll
[2012.09.02 19:11:58 | 000,821,736 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\npdeployJava1.dll
[2012.09.02 19:11:58 | 000,746,984 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll
[2012.09.02 19:11:58 | 000,246,760 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe
[2012.09.02 19:11:58 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe
[2012.09.02 19:11:58 | 000,174,056 | ---- | M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe
[2012.09.02 19:04:47 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.09.02 19:04:41 | 3220,529,152 | -HS- | M] () -- C:\hiberfil.sys
[2012.08.31 01:17:55 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2012.08.31 01:17:55 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2012.08.31 01:16:18 | 000,283,304 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.ex0
[2012.08.30 23:37:13 | 000,019,072 | ---- | M] () -- C:\Users\GuM\Desktop\551px-BSG_Sachsenring_Zwickau_-_1968-198925.jpg
[2012.08.30 23:33:15 | 000,020,913 | ---- | M] () -- C:\Users\GuM\Desktop\551px.jpg
[2012.08.30 23:31:36 | 000,038,063 | ---- | M] () -- C:\Users\GuM\Desktop\551px-BSG_Sachsenring_Zwickau_-_1968-19891.jpg
[2012.08.30 23:24:56 | 000,063,263 | ---- | M] () -- C:\Users\GuM\Desktop\551px-BSG_Sachsenring_Zwickau_-_1968-1989.svg.jpg
[2012.08.30 23:15:38 | 000,001,002 | ---- | M] () -- C:\Users\GuM\Desktop\IrfanView.lnk
[2012.08.30 23:06:39 | 000,101,030 | ---- | M] () -- C:\Users\GuM\Desktop\551px-BSG_Sachsenring_Zwickau_-_1968-1989.svg.png
[2012.08.29 01:56:51 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.08.29 01:56:51 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.08.29 01:56:51 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.08.29 01:56:51 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.08.29 01:56:51 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.08.26 18:32:30 | 000,002,094 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
[2012.08.26 18:32:30 | 000,002,094 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
[2012.08.26 13:17:26 | 000,696,520 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe
[2012.08.26 13:17:26 | 000,073,416 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012.08.17 21:33:09 | 000,292,872 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.08.15 23:12:29 | 000,047,719 | ---- | M] () -- C:\Users\GuM\Desktop\8_beide_23.07.-31.08.2012.pdf
[2012.08.15 01:52:06 | 058,052,439 | ---- | M] () -- C:\Users\GuM\Desktop\NachtFuxx - Spring Swing (14I04I2012).mp3
[2012.08.13 23:57:03 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.08.03 22:04:32 | 007,995,681 | ---- | M] () -- C:\Users\GuM\Desktop\12_Liver_Let_Die.mp3
 
========== Files Created - No Company Name ==========
 
[2012.09.02 19:24:48 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.08.30 23:36:02 | 000,019,072 | ---- | C] () -- C:\Users\GuM\Desktop\551px-BSG_Sachsenring_Zwickau_-_1968-198925.jpg
[2012.08.30 23:33:15 | 000,020,913 | ---- | C] () -- C:\Users\GuM\Desktop\551px.jpg
[2012.08.30 23:31:36 | 000,038,063 | ---- | C] () -- C:\Users\GuM\Desktop\551px-BSG_Sachsenring_Zwickau_-_1968-19891.jpg
[2012.08.30 23:24:56 | 000,063,263 | ---- | C] () -- C:\Users\GuM\Desktop\551px-BSG_Sachsenring_Zwickau_-_1968-1989.svg.jpg
[2012.08.30 23:15:38 | 000,001,002 | ---- | C] () -- C:\Users\GuM\Desktop\IrfanView.lnk
[2012.08.30 23:06:38 | 000,101,030 | ---- | C] () -- C:\Users\GuM\Desktop\551px-BSG_Sachsenring_Zwickau_-_1968-1989.svg.png
[2012.08.15 23:12:29 | 000,047,719 | ---- | C] () -- C:\Users\GuM\Desktop\8_beide_23.07.-31.08.2012.pdf
[2012.08.15 01:49:35 | 058,052,439 | ---- | C] () -- C:\Users\GuM\Desktop\NachtFuxx - Spring Swing (14I04I2012).mp3
[2012.08.13 23:57:03 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2012.08.03 22:04:15 | 007,995,681 | ---- | C] () -- C:\Users\GuM\Desktop\12_Liver_Let_Die.mp3
[2012.02.29 14:26:56 | 000,416,064 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe
[2011.11.01 20:49:17 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
[2011.10.26 22:30:28 | 000,283,304 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2011.10.26 22:30:26 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
 
========== LOP Check ==========
 
[2011.10.26 22:55:22 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\AutoHideIP
[2012.01.31 00:09:39 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\FreeHideIP
[2012.09.02 19:08:04 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\ICQ
[2012.08.30 23:15:29 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\IrfanView
[2012.03.21 00:16:44 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\Izegc
[2012.01.22 17:48:19 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\OpenOffice.org
[2012.08.15 00:43:45 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\Origin
[2012.08.29 02:06:53 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\Samsung
[2012.08.15 00:29:53 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\TS3Client
[2012.03.20 02:02:44 | 000,000,000 | ---D | M] -- C:\Users\GuM\AppData\Roaming\Veeqobm
[2012.07.21 13:48:15 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         

OTL Extras logfile created on: 02.09.2012 20:49:35 - Run 1
OTL by OldTimer - Version 3.2.59.1     Folder = C:\Users\GuM\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,62 Gb Available Physical Memory | 65,63% Memory free
8,00 Gb Paging File | 6,39 Gb Available in Paging File | 79,96% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,66 Gb Total Space | 406,92 Gb Free Space | 87,39% Space Free | Partition Type: NTFS
Drive D: | 319,67 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 100,00 Mb Total Space | 71,86 Mb Free Space | 71,86% Space Free | Partition Type: NTFS
Drive F: | 195,21 Gb Total Space | 159,45 Gb Free Space | 81,68% Space Free | Partition Type: NTFS
Drive G: | 244,14 Gb Total Space | 192,60 Gb Free Space | 78,89% Space Free | Partition Type: NTFS
Drive H: | 492,06 Gb Total Space | 111,22 Gb Free Space | 22,60% Space Free | Partition Type: NTFS
 
Computer Name: WINDOWS764 | User Name: GuM | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
 
[HKEY_USERS\S-1-5-21-1611372496-1212194676-3654038413-1001\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01744829-6264-43DD-BEFD-218209FB2DED}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{0AF26A2E-6AF1-4D12-ACA7-B8E3B5E8240F}" = lport=139 | protocol=6 | dir=in | app=system | 
"{0C07D0F6-3FD2-430B-A222-F037E6E429B7}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{0DE6A825-15A9-481C-BA96-27D30823C6C0}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{281E4FC3-822B-4404-A5A6-E052573CF4B6}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{5406CB90-2D36-4CB2-815B-EE72698D4CFC}" = lport=138 | protocol=17 | dir=in | app=system | 
"{6BD8BE80-D7D4-4139-BA50-EE4E4BC9C58E}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{7021136D-E9E8-43CA-A5E6-E3A3E55A7B9E}" = lport=445 | protocol=6 | dir=in | app=system | 
"{76EF6B31-EF3D-4FDB-A7E5-B58C327A44A2}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{9B857DEB-32A6-4670-9E22-3F295F9293D8}" = rport=445 | protocol=6 | dir=out | app=system | 
"{9FEF637B-BA1E-41C0-A8C5-BF97C00B4A01}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{A4ACDFF6-0D49-4E26-8FCE-DD3A32132A46}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{B1F433C4-FA49-4A76-9429-2731B6B88852}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{C0FD28C4-D8CF-4BF1-B632-767767C82B5D}" = rport=139 | protocol=6 | dir=out | app=system | 
"{C72355EC-06E5-499F-AFE9-7EEF44ADD898}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{CC7D8452-DD97-4FBD-B412-81E870440B7C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{D11C8BB3-85F6-45D2-9E88-C5CADF3C0B3C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D6A537C6-B642-4633-87E0-1991679365D0}" = rport=138 | protocol=17 | dir=out | app=system | 
"{DFFCA95F-359D-43E1-8F8C-1059D0208676}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{EBC5E7FE-22F5-42DA-AB9E-E04AEE27EF8D}" = rport=137 | protocol=17 | dir=out | app=system | 
"{F8F49C75-2BD6-41F0-8A46-D05D770CA289}" = lport=137 | protocol=17 | dir=in | app=system | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{00F54A33-A004-48E1-87E2-77B0DD495853}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{0512AF32-40F1-4C5B-B273-B43FBF5AFCC6}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{1033B304-543E-4898-9509-849F501AA646}" = protocol=6 | dir=in | app=c:\spiele\origingames\battlefield 3\bf3.exe | 
"{1077A135-8F4E-4711-B0FF-A422A4FC8646}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{1F3523E2-59CD-4608-91B8-49DE8EC50EEA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{26772A5F-278B-41BF-A25A-785A68E430DE}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe | 
"{30705BB3-F5BA-471A-B392-90E791688B67}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{33136072-F605-4B33-AE3A-29340FA046B1}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{346089F7-A5B3-46DD-9890-3F8F71768DC3}" = protocol=6 | dir=out | app=system | 
"{3C9C771C-47E0-4E55-8CAF-AE30D3D25480}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe | 
"{4114A0F0-DB9F-4265-8993-CEF01E897990}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{50D4F204-A209-4082-B235-BE57F369221B}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\samsung new pc studio\npsvsvr.exe | 
"{588A97A6-086A-47D8-897F-154658581BE7}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{6268CB58-9999-4EB4-A94E-466B4011528D}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{64244EA8-344E-4645-908D-9B34D4A7AD89}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{665F0A25-122A-4AC7-AFAF-645D6EBBCC17}" = protocol=6 | dir=in | app=c:\program files (x86)\samsung\samsung new pc studio\npsasvr.exe | 
"{6A87EAA9-D580-43B6-9194-F88C98A8A8FD}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{71506594-C91C-4C47-8121-B9AAD0132284}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\samsung new pc studio\npsvsvr.exe | 
"{7172F12F-224E-4B60-8CBF-AF7DC8458490}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe | 
"{763ADAB0-CFFA-4037-87F2-157146A38F28}" = protocol=6 | dir=in | app=c:\program files (x86)\veetle\player\veetlenet.exe | 
"{78F0B6CA-A565-4ADF-9934-7DB9F000FB15}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{7D9ED658-1D05-4CD6-A343-129647209EAE}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{81AFAB8E-F961-407F-A110-763FCD25EDD4}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{848FE3F0-6465-4B7B-9DB5-A08ACE5B9477}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{8BF08483-26B8-45B2-9C22-59838D179EBE}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{9ADF75BD-0132-4C44-90C9-2AB1B7331E5F}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{9AF314CC-0217-45F0-BA83-D4492B00ACB1}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{9CB4CC8C-7B64-402A-8561-144CA59195F0}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{A6B75ED5-BB52-4CAA-AE9D-4EFA97C40451}" = protocol=6 | dir=in | app=c:\program files (x86)\veetle\player\veetlenet.exe | 
"{AA5B4BE6-6CCA-47AB-9182-E2691C34D9D2}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7.6\icq.exe | 
"{ACA018B8-4C6C-4A91-8F3B-94DD1882AA62}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{B4A279F9-D3CB-4B28-B041-7DC3BE39F3D7}" = protocol=17 | dir=in | app=c:\spiele\origingames\battlefield 3\bf3.exe | 
"{C0BC6169-D107-411D-9B5D-10CB396DB829}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{D38BBCEC-3155-407A-853E-13EEBEC6E306}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{ED715A29-07B5-4432-94C0-D176F72279F4}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{F5804C24-E2C3-4C38-BA0C-F70A6E96EEC8}" = protocol=17 | dir=in | app=c:\program files (x86)\samsung\samsung new pc studio\npsasvr.exe | 
"{FAF79BBB-0A02-4814-A723-CAB779FDBE13}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"TCP Query User{7260DE1B-7652-4658-B4A7-55CB2F10BFCE}C:\users\gum\appdata\local\temp\tmpe86d.tmp\dslplus1100wlan-update.exe" = protocol=6 | dir=in | app=c:\users\gum\appdata\local\temp\tmpe86d.tmp\dslplus1100wlan-update.exe | 
"TCP Query User{C22B1D4F-8220-47FF-B419-7DF9D57D4B5B}C:\users\gum\appdata\roaming\izegc\nuhaet.exe" = protocol=6 | dir=in | app=c:\users\gum\appdata\roaming\izegc\nuhaet.exe | 
"TCP Query User{C77F0097-E336-462A-AD0B-10D3529D3E28}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe | 
"UDP Query User{52284B18-8613-4FFA-ACA4-66352AEEC05B}C:\users\gum\appdata\roaming\izegc\nuhaet.exe" = protocol=17 | dir=in | app=c:\users\gum\appdata\roaming\izegc\nuhaet.exe | 
"UDP Query User{C4521F9F-0B12-41AE-8A77-1F612B7036A3}C:\users\gum\appdata\local\temp\tmpe86d.tmp\dslplus1100wlan-update.exe" = protocol=17 | dir=in | app=c:\users\gum\appdata\local\temp\tmpe86d.tmp\dslplus1100wlan-update.exe | 
"UDP Query User{FCADA2DD-F029-496A-B1AC-495AA4F25064}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5866DD36-8055-475B-A5C3-82C04091D14E}" = BF3 Settings Editor
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 296.10
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0213
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.7.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.12.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = SAMSUNG USB Driver for Mobile Phones
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"CPUID CPU-Z_is1" = CPUID CPU-Z 1.59
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"TeamSpeak 3 Client" = TeamSpeak 3 Client
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1111706F-666A-4037-7777-211328764D10}" = JavaFX 2.1.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83217007FF}" = Java 7 Update 7
"{28A946E1-E83B-4662-BC7C-23451851489E}" = Razer Copperhead
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{7644E42D-B096-457F-8B5B-901238FC81AE}" = ICQ7.6
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.4) - Deutsch
"{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX
"{F0A37341-D692-11D4-A984-009027EC0A9C}" = SoundMAX
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{FA0BBB87-91A1-4BFD-9005-EB058BBA0E14}_is1" = StreamTransport version: 1.0.2.2171
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"AutoHideIP" = Auto Hide IP
"Avira AntiVir Desktop" = Avira Free Antivirus
"Battlelog Web Plugins" = Battlelog Web Plugins
"ESN Sonar-0.70.4" = ESN Sonar
"FreeHideIP" = Free Hide IP
"Host OpenAL (ADI)" = Host OpenAL (ADI)
"IrfanView" = IrfanView (remove only)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300
"McAfee Security Scan" = McAfee Security Scan Plus
"MozBackup" = MozBackup 1.5.1
"Mozilla Firefox 15.0 (x86 de)" = Mozilla Firefox 15.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Origin" = Origin
"PokerStars" = PokerStars
"PokerStars.net" = PokerStars.net
"PunkBusterSvc" = PunkBuster Services
"SystemRequirementsLab" = System Requirements Lab
"Veetle TV" = Veetle TV
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 14.08.2012 03:49:02 | Computer Name = Windows764 | Source = Windows Search Service | ID = 9000
Description = 
 
Error - 14.08.2012 03:49:02 | Computer Name = Windows764 | Source = Windows Search Service | ID = 7040
Description = 
 
Error - 14.08.2012 03:49:02 | Computer Name = Windows764 | Source = Windows Search Service | ID = 7042
Description = 
 
Error - 14.08.2012 03:49:02 | Computer Name = Windows764 | Source = Windows Search Service | ID = 9002
Description = 
 
Error - 14.08.2012 03:49:02 | Computer Name = Windows764 | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 14.08.2012 03:49:03 | Computer Name = Windows764 | Source = Windows Search Service | ID = 3029
Description = 
 
Error - 14.08.2012 03:49:03 | Computer Name = Windows764 | Source = Windows Search Service | ID = 3028
Description = 
 
Error - 14.08.2012 03:49:03 | Computer Name = Windows764 | Source = Windows Search Service | ID = 3058
Description = 
 
Error - 14.08.2012 03:49:03 | Computer Name = Windows764 | Source = Windows Search Service | ID = 7010
Description = 
 
Error - 28.08.2012 19:50:30 | Computer Name = Windows764 | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: New_PC_Studio_1.5.1.10064_2.exe, 
Version: 15.0.0.591, Zeitstempel: 0x48c8b2ef  Name des fehlerhaften Moduls: ISSetup.dll,
 Version: 15.0.0.591, Zeitstempel: 0x48c89fcc  Ausnahmecode: 0xc0000005  Fehleroffset:
 0x0009a5d1  ID des fehlerhaften Prozesses: 0x1f28  Startzeit der fehlerhaften Anwendung:
 0x01cd85778f2278f3  Pfad der fehlerhaften Anwendung: C:\Users\GuM\Downloads\New_PC_Studio_1.5.1.10064_2.exe
Pfad
 des fehlerhaften Moduls: C:\Users\GuM\AppData\Local\Temp\{155F18F0-B376-4F67-A6BF-647AA5789FCD}\ISSetup.dll
Berichtskennung:
 25bdd4dc-f16b-11e1-8e3f-001fc62fc174
 
[ System Events ]
Error - 23.05.2012 16:16:22 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7038
Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%1330    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 23.05.2012 16:16:22 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1069
 
Error - 24.05.2012 15:34:42 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7038
Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%1330    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 24.05.2012 15:34:42 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1069
 
Error - 25.05.2012 15:52:19 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7038
Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%1330    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 25.05.2012 15:52:19 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1069
 
Error - 26.05.2012 08:15:52 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7038
Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%1330    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 26.05.2012 08:15:52 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1069
 
Error - 26.05.2012 11:00:20 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7038
Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"
 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%1330    Vergewissern
 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
 Management Console (MMC).
 
Error - 26.05.2012 11:00:20 | Computer Name = Windows764 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden
 Fehlers nicht gestartet:   %%1069
 
 
< End of report >