BKA-Virus restlos entfernen

OTL logfile created on: 05.05.2013 18:28:03 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\M****\Downloads
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16540)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 1,12 Gb Available Physical Memory | 56,11% Memory free
3,98 Gb Paging File | 3,05 Gb Available in Paging File | 76,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 199,90 Gb Total Space | 142,14 Gb Free Space | 71,10% Space Free | Partition Type: NTFS
Drive D: | 498,64 Gb Total Space | 228,71 Gb Free Space | 45,87% Space Free | Partition Type: NTFS
 
Computer Name: DRSF-3756 | User Name: M**** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2013.05.05 18:23:59 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\M****\Downloads\OTL.exe
PRC - [2013.03.07 01:32:44 | 004,767,304 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe
PRC - [2013.03.07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe
PRC - [2012.12.18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2012.11.23 04:48:41 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2012.10.02 13:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
PRC - [2011.04.28 14:06:45 | 000,126,976 | ---- | M] () -- C:\Windows\System32\UAService.exe
PRC - [2011.02.25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2009.12.23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) -- C:\Programme\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
PRC - [2009.07.14 03:14:21 | 000,294,400 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\ink\InputPersonalization.exe
PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Programme\Spybot - Search & Destroy\SDWinSec.exe
PRC - [2007.09.07 10:25:12 | 000,102,400 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\stacsv.exe
PRC - [2006.11.03 17:55:50 | 000,703,280 | ---- | M] (Broadcom Corporation.) -- C:\Programme\WIDCOMM\Bluetooth Software\BTTray.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2009.08.23 19:58:06 | 000,094,208 | ---- | M] () -- C:\Programme\FileZilla FTP Client\fzshellext.dll
MOD - [2006.11.03 17:46:24 | 000,126,976 | ---- | M] () -- C:\Programme\WIDCOMM\Bluetooth Software\BTKeyInd.dll
MOD - [2006.11.03 17:25:56 | 000,389,120 | ---- | M] () -- C:\Windows\System32\btwhidcs.dll
 
 
========== Services (SafeList) ==========
 
SRV - File not found [Auto | Running] -- C:\Program Files\Spybot -- (SBSDWSCService)
SRV - [2013.04.13 18:48:09 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2013.03.07 01:32:44 | 000,045,248 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2013.02.28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Programme\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.12.18 21:08:28 | 000,065,192 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2012.10.18 20:31:00 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2012.10.02 13:13:44 | 003,064,000 | ---- | M] (Skype Technologies S.A.) [Auto | Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service)
SRV - [2012.03.21 15:26:04 | 000,580,976 | ---- | M] (SMART Technologies) [Disabled | Stopped] -- C:\Programme\SMART Technologies\Education Software\SMARTHelperService.exe -- (SMARTHelperService)
SRV - [2012.01.05 17:42:34 | 000,075,624 | ---- | M] (Alcohol Soft Development Team) [Auto | Stopped] -- C:\Programme\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe -- (AxAutoMntSrv)
SRV - [2011.08.18 18:36:53 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2011.04.28 14:06:45 | 000,126,976 | ---- | M] () [Auto | Running] -- C:\Windows\System32\UAService.exe -- (UserAccess)
SRV - [2010.11.20 14:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2010.09.28 14:42:00 | 000,814,344 | ---- | M] (ABBYY) [Disabled | Stopped] -- C:\Programme\Common Files\ABBYY\FineReader\10.00\Licensing\CE\NetworkLicenseServer.exe -- (ABBYY.Licensing.FineReader.Corporate.10.0)
SRV - [2010.01.09 21:37:50 | 004,640,000 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE -- (osppsvc)
SRV - [2010.01.09 21:18:00 | 000,149,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose)
SRV - [2009.12.23 23:34:20 | 000,370,688 | ---- | M] (StarWind Software) [Auto | Running] -- C:\Programme\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe -- (StarWindServiceAE)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.07.03 11:40:30 | 000,009,216 | ---- | M] (Vodafone) [Disabled | Stopped] -- C:\Programme\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe -- (VMCService)
SRV - [2007.09.07 10:25:12 | 000,102,400 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\stacsv.exe -- (STacSV)
SRV - [2007.05.31 16:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007.05.31 16:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\vmnetadapter.sys -- (VMnetAdapter)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\sxuptp.sys -- (sxuptp)
DRV - File not found [Kernel | Disabled | Stopped] -- C:\Windows\\SystemRoot\System32\Drivers\sptd.sys -- (sptd)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\Drivers\frmupgr.sys -- (DFUBTUSB)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\TEMP\cpuz135\cpuz135_x32.sys -- (cpuz135)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\DRIVERS\bnsdusb.sys -- (bnsdusb)
DRV - [2013.03.07 01:33:24 | 000,765,736 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2013.03.07 01:33:24 | 000,368,176 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2013.03.07 01:33:24 | 000,164,736 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\aswVmm.sys -- (aswVmm)
DRV - [2013.03.07 01:33:24 | 000,062,376 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2013.03.07 01:33:24 | 000,049,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\drivers\aswRvrt.sys -- (aswRvrt)
DRV - [2013.03.07 01:33:23 | 000,066,336 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV - [2013.03.07 01:33:23 | 000,060,656 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\System32\drivers\aswRdr2.sys -- (aswRdr)
DRV - [2013.03.07 01:33:22 | 000,029,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012.08.23 16:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012.08.23 16:40:25 | 000,049,664 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.11.20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32)
DRV - [2009.07.14 00:02:49 | 000,046,080 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\bcm4sbxp.sys -- (bcm4sbxp)
DRV - [2009.06.29 17:59:02 | 000,112,128 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2009.06.29 17:59:02 | 000,102,912 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbfake.sys -- (hwusbfake)
DRV - [2009.04.09 13:38:26 | 000,102,784 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2007.09.07 10:26:04 | 000,330,240 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2007.02.27 10:19:46 | 000,017,152 | ---- | M] (WideViewer Electronics CO., LTD) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BDA_Capture_225.sys -- (BDA_Capture_225)
DRV - [2007.02.24 14:42:22 | 000,039,936 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimmptsk.sys -- (rimmptsk)
DRV - [2007.02.08 22:24:00 | 001,939,488 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\lvuvc.sys -- (LVUVC)
DRV - [2007.02.08 22:24:00 | 000,041,504 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LVUSBSta.sys -- (LVUSBSta)
DRV - [2007.01.23 16:40:20 | 000,042,496 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rimsptsk.sys -- (rimsptsk)
DRV - [2007.01.09 13:53:52 | 000,018,944 | ---- | M] (WideView Technology Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\BDA_Loader_225.sys -- (BDA_Loader_225)
DRV - [2006.11.14 17:35:20 | 000,037,376 | ---- | M] (REDC) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rixdptsk.sys -- (rismxdp)
DRV - [2006.10.20 14:34:16 | 000,037,296 | ---- | M] (Broadcom Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btusbflt.sys -- (btusbflt)
DRV - [2005.05.25 09:39:06 | 000,004,608 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Programme\RMClock\RTCore32.sys -- (RTCore32)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0C 51 EF 5D 9D 2D CC 01  [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = 172.16.0.252:8080
 
========== FireFox ==========
 
FF - prefs.js..extensions.enabledAddons: 2020Player_IKEA%402020Technologies.com:5.0.94.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1
FF - prefs.js..network.proxy.backup.ftp: "212.87.71.181"
FF - prefs.js..network.proxy.backup.ftp_port: 1080
FF - prefs.js..network.proxy.backup.socks: "212.87.71.181"
FF - prefs.js..network.proxy.backup.socks_port: 1080
FF - prefs.js..network.proxy.backup.ssl: "212.87.71.181"
FF - prefs.js..network.proxy.backup.ssl_port: 1080
FF - prefs.js..network.proxy.ftp: "87.236.209.107"
FF - prefs.js..network.proxy.ftp_port: 443
FF - prefs.js..network.proxy.http: "87.236.209.107"
FF - prefs.js..network.proxy.http_port: 443
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "87.236.209.107"
FF - prefs.js..network.proxy.socks_port: 443
FF - prefs.js..network.proxy.socks_version: 0
FF - prefs.js..network.proxy.ssl: "87.236.209.107"
FF - prefs.js..network.proxy.ssl_port: 443
FF - prefs.js..network.proxy.type: 0
FF - user.js - File not found
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.450: C:\Program Files\Real Alternative\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.448: C:\Program Files\Real Alternative\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=:  File not found
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\amazon.com/AmazonMP3DownloaderPlugin: C:\Program Files\Amazon\MP3 Downloader\npAmazonMP3DownloaderPlugin101727.dll (Amazon.com, Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.04.13 18:48:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.04.13 18:47:58 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013.04.13 18:48:11 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2013.04.13 18:47:58 | 000,000,000 | ---D | M]
 
[2011.09.04 05:22:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M****\AppData\Roaming\mozilla\Extensions
[2011.09.04 05:22:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M****\AppData\Roaming\mozilla\Extensions\songbird@songbirdnest.com
[2012.10.25 15:48:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\M****\AppData\Roaming\mozilla\Firefox\Profiles\mnhniip9.default\extensions
[2012.09.22 09:05:13 | 000,000,000 | ---D | M] (20-20 3D Viewer - IKEA) -- C:\Users\M****\AppData\Roaming\mozilla\Firefox\Profiles\mnhniip9.default\extensions\2020Player_IKEA@2020Technologies.com
[2013.04.13 18:47:52 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2013.04.13 18:47:52 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Programme\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
[2013.04.13 18:48:10 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.07.11 23:48:12 | 000,012,800 | ---- | M] (Nullsoft, Inc.) -- C:\Program Files\mozilla firefox\plugins\npwachk.dll
[2012.12.17 20:59:46 | 000,001,738 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml
[2012.09.22 08:55:51 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.12.17 20:59:46 | 000,001,148 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml
[2012.12.17 20:59:46 | 000,001,379 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml
[2013.02.21 15:48:20 | 000,002,086 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\twitter.xml
[2012.12.17 20:59:46 | 000,001,334 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml
 
O1 HOSTS File: ([2012.02.09 19:33:59 | 000,441,387 | R--- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 15168 more lines...
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Programme\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKCU..\Run: [Rainlendar2] C:\Programme\Rainlendar2\Rainlendar2.exe ()
O4 - Startup: C:\Users\M****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\M****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Bild an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm ()
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O8 - Extra context menu item: Seite an &Bluetooth-Gerät senden... - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O9 - Extra 'Tools' menuitem : @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Programme\WIDCOMM\Bluetooth Software\btsendto_ie.htm ()
O15 - HKCU\..Trusted Domains: fritz.box ([]* in Local intranet)
O15 - HKCU\..Trusted Ranges: Range37 ([*] in Local intranet)
O16 - DPF: {1ABA5FAC-1417-422B-BA82-45C35E2C908B} hxxp://kitchenplanner.ikea.com/DE/Core/Player/2020PlayerAX_IKEA_Win32.cab (20-20 3D Viewer for IKEA)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{CF21866D-5835-4889-9A60-4102EB0FDBAD}: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{E56CBDD1-F48A-47DF-AF50-C8D765607FB7}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{1dec0884-fc01-11e1-a4d1-00188bb7ff90}\Shell - "" = AutoRun
O33 - MountPoints2\{1dec0884-fc01-11e1-a4d1-00188bb7ff90}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{40c8021e-d628-11e0-8594-00188bb7ff90}\Shell - "" = AutoRun
O33 - MountPoints2\{40c8021e-d628-11e0-8594-00188bb7ff90}\Shell\AutoRun\command - "" = F:\setup.exe
O33 - MountPoints2\{6c9a02c0-8fb5-11e0-928e-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{6c9a02c0-8fb5-11e0-928e-806e6f6e6963}\Shell\AutoRun\command - "" = G:\autorn.exe start.exe
O33 - MountPoints2\{6f9dfb2d-a547-11e0-a764-00188bb7ff90}\Shell - "" = AutoRun
O33 - MountPoints2\{6f9dfb2d-a547-11e0-a764-00188bb7ff90}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{6f9dfb37-a547-11e0-a764-00188bb7ff90}\Shell - "" = AutoRun
O33 - MountPoints2\{6f9dfb37-a547-11e0-a764-00188bb7ff90}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{6f9dfb39-a547-11e0-a764-00188bb7ff90}\Shell - "" = AutoRun
O33 - MountPoints2\{6f9dfb39-a547-11e0-a764-00188bb7ff90}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\{6f9dfbf8-a547-11e0-a764-00188bb7ff90}\Shell - "" = AutoRun
O33 - MountPoints2\{6f9dfbf8-a547-11e0-a764-00188bb7ff90}\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O33 - MountPoints2\F\Shell - "" = AutoRun
O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\setup_vmc_lite.exe /checkApplicationPresence
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKCU\...com [@ = comfile] -- Reg Error: Key error. File not found
O37 - HKCU\...exe [@ = exefile] -- Reg Error: Key error. File not found
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2013.05.05 17:53:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.05.05 17:52:54 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.05.05 17:52:53 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.05.03 19:45:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013.04.13 18:47:48 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
 
========== Files - Modified Within 30 Days ==========
 
[2013.05.05 18:32:41 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.05.05 18:32:41 | 000,013,760 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.05.05 18:25:38 | 000,000,165 | ---- | M] () -- C:\Windows\hpbafd.ini
[2013.05.05 18:24:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.05.05 18:24:56 | 000,000,000 | ---- | M] () -- C:\Windows\System32\drivers\lvuvc.hs
[2013.05.05 18:24:47 | 1602,895,872 | -HS- | M] () -- C:\hiberfil.sys
[2013.05.05 18:23:44 | 000,000,020 | ---- | M] () -- C:\Users\M****\defogger_reenable
[2013.05.05 17:53:02 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.05.05 17:47:42 | 000,700,608 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.05.05 17:47:42 | 000,655,280 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.05.05 17:47:42 | 000,149,372 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.05.05 17:47:42 | 000,122,152 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.04.22 21:34:43 | 000,088,244 | ---- | M] () -- C:\ProgramData\dudenbib.wav
[2013.04.16 22:31:13 | 000,460,432 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
 
========== Files Created - No Company Name ==========
 
[2013.05.05 18:23:18 | 000,000,020 | ---- | C] () -- C:\Users\M****\defogger_reenable
[2013.05.05 17:53:02 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2013.03.23 10:39:00 | 000,164,736 | ---- | C] () -- C:\Windows\System32\drivers\aswVmm.sys
[2013.03.23 10:38:59 | 000,049,248 | ---- | C] () -- C:\Windows\System32\drivers\aswRvrt.sys
[2013.01.01 20:44:56 | 000,094,274 | ---- | C] () -- C:\Windows\System32\HPBHEALR.DLL
[2012.12.08 15:39:20 | 000,107,520 | RHS- | C] () -- C:\Windows\System32\TAKDSDecoder.dll
[2012.11.02 11:53:21 | 000,172,032 | ---- | C] () -- C:\Windows\System32\binkw32.dll
[2012.11.02 11:01:46 | 000,061,440 | ---- | C] () -- C:\Windows\System32\VDDLoader.dll
[2012.06.26 22:25:15 | 000,645,632 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2012.06.26 22:25:15 | 000,240,640 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2012.04.11 22:02:18 | 000,000,918 | ---- | C] () -- C:\Users\M****\AppData\Roaming\coreavc.ini
[2012.04.11 20:27:46 | 000,000,040 | -HS- | C] () -- C:\ProgramData\.zreglib
[2012.03.10 23:09:59 | 000,000,707 | ---- | C] () -- C:\Windows\wiso.ini
[2012.01.01 14:43:20 | 000,000,416 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2012.01.01 14:43:20 | 000,000,034 | ---- | C] () -- C:\Windows\System32\BD7820N.DAT
[2011.11.08 01:30:16 | 000,000,039 | ---- | C] () -- C:\Windows\WININIT.INI
[2011.11.08 01:23:22 | 000,007,610 | ---- | C] () -- C:\Users\M****\AppData\Local\Resmon.ResmonCfg
[2011.10.28 16:25:38 | 000,000,287 | ---- | C] () -- C:\Windows\EReg072.dat
[2011.10.23 22:42:27 | 000,000,064 | ---- | C] () -- C:\Windows\System32\rp_stats.dat
[2011.10.23 22:42:27 | 000,000,044 | ---- | C] () -- C:\Windows\System32\rp_rules.dat
[2011.09.25 11:28:23 | 000,005,894 | ---- | C] () -- C:\Windows\System32\comBS17j.dll
[2011.09.20 22:17:34 | 000,008,704 | ---- | C] () -- C:\Users\M****\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.08.11 21:16:04 | 000,017,920 | ---- | C] () -- C:\Windows\RmPPTWeb.exe
[2011.07.26 21:05:34 | 000,000,575 | ---- | C] () -- C:\Users\M****\AppData\Roaming\AutoGK.ini
[2011.05.22 18:37:38 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2011.05.19 19:13:58 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2011.05.08 21:57:29 | 000,870,609 | ---- | C] () -- C:\Windows\PlagiarismFinder 2.0 Uninstaller.exe
[2011.04.28 13:41:29 | 000,088,244 | ---- | C] () -- C:\ProgramData\dudenbib.wav
[2011.04.27 18:44:43 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2009.06.16 13:25:02 | 000,121,512 | R--- | C] () -- C:\ProgramData\DeviceManager.xml.rc4
 
========== ZeroAccess Check ==========
 
[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
========== LOP Check ==========
 
[2012.09.23 11:10:53 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Amazon
[2012.01.18 18:49:10 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Audacity
[2011.09.25 11:28:28 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\beSoft
[2012.03.10 23:13:30 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Buhl Data Service
[2013.04.28 17:29:18 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Cornelsen
[2013.05.05 18:26:02 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Dropbox
[2012.06.07 18:19:39 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\FileZilla
[2011.06.04 00:11:42 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\FRITZ!
[2011.05.16 20:28:55 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\GrabPro
[2011.05.11 19:34:29 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\ldoce5
[2013.03.30 00:16:33 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\MediaMonkey
[2012.05.08 10:02:39 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Mobipocket
[2012.07.21 13:43:37 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\mp3DirectCut
[2013.03.14 08:47:57 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Mp3tag
[2012.05.29 15:43:25 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\MyPhoneExplorer
[2011.05.22 18:57:11 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Nuance
[2011.04.27 15:20:42 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Opera
[2013.04.16 21:00:50 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Orbit
[2011.09.04 06:07:36 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Philips
[2012.01.31 22:56:05 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Philips-Songbird
[2011.05.08 21:58:15 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\PlagiarismFinder
[2011.05.05 22:49:02 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\ProgSense
[2012.09.30 15:36:41 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\ProtectDisc
[2013.03.30 15:36:05 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Samsung
[2012.12.22 17:37:09 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\ScummVM
[2012.06.27 23:50:49 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Subtitle Edit
[2011.04.30 11:11:23 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Synaptics
[2013.05.03 20:06:05 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\uTorrent
[2011.07.03 23:39:14 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Vodafone
[2012.06.12 19:46:54 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\XBMC
[2011.09.06 14:51:17 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\XMedia Recode
[2012.01.05 10:56:22 | 000,000,000 | ---D | M] -- C:\Users\M****\AppData\Roaming\Zeon
 
========== Purity Check ==========
 
 

< End of report >
         

OTL Extras logfile created on: 05.05.2013 18:28:03 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\M****\Downloads
 Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.10.9200.16540)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
1,99 Gb Total Physical Memory | 1,12 Gb Available Physical Memory | 56,11% Memory free
3,98 Gb Paging File | 3,05 Gb Available in Paging File | 76,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 199,90 Gb Total Space | 142,14 Gb Free Space | 71,10% Space Free | Partition Type: NTFS
Drive D: | 498,64 Gb Total Space | 228,71 Gb Free Space | 45,87% Space Free | Partition Type: NTFS
 
Computer Name: DRSF-3756 | User Name: M**** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.bat [@ = batfile] -- Reg Error: Key error. File not found
.com [@ = comfile] -- Reg Error: Key error. File not found
.exe [@ = exefile] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [MediaMonkey.1Play] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" "%1" (Ventis Media Inc.)
Directory [MediaMonkey.2PlayNext] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" /NEXT "%1" (Ventis Media Inc.)
Directory [MediaMonkey.3Enqueue] -- "C:\Program Files\MediaMonkey\MediaMonkey.exe" /ADD "%1" (Ventis Media Inc.)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Directory [Winamp.Bookmark] -- "C:\Program Files\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Program Files\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Program Files\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Program Files\Orbitdownloader\orbitdm.exe" = C:\Program Files\Orbitdownloader\orbitdm.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
"C:\Program Files\Orbitdownloader\orbitnet.exe" = C:\Program Files\Orbitdownloader\orbitnet.exe:*:Enabled:Orbit -- (Orbitdownloader.com)
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{03B6F14F-6D2C-4694-9438-EE0FDEC1E088}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{0CA24A25-16A4-4FC4-937B-CB1862CBDACF}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{0F18DD3C-F789-4E76-8C69-057D4E25B93C}" = rport=137 | protocol=17 | dir=out | app=system | 
"{11CE3101-7D7C-45CC-B824-F23936E82734}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{17C596A2-F7FD-4088-9B95-467BB779C0B0}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{26B5C8C1-3D1B-4D60-A976-1EFEB6467E3C}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{2F4042F1-A23F-4822-8BE7-2C5C2FFAEEB0}" = rport=139 | protocol=6 | dir=out | app=system | 
"{37DACDD5-F1A8-43BA-B196-EDDAA809CC46}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{43633C47-ED7B-44E2-89D0-CBE2C7823275}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{4782841F-4404-4776-9035-DD980650A775}" = rport=445 | protocol=6 | dir=out | app=system | 
"{4A79EFE3-590D-408F-936C-42475763079A}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{51C2EE00-9A94-406A-95ED-C98250D21E3E}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{583C1FF1-D553-438A-8088-16833D1C975B}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{6B15E1F1-8D98-4BC1-A697-3EEFA01C79DB}" = rport=138 | protocol=17 | dir=out | app=system | 
"{720F3467-E941-4494-9E9F-665BDF88146F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{7DD55E9D-DD90-4D00-8998-A6FA5A9382D1}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{80B0060B-AB30-426F-857C-895EAA6453B3}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{8444B6CB-1737-426B-9F4C-F2A5ED802F65}" = lport=137 | protocol=17 | dir=in | app=system | 
"{8D72AE64-FC49-43E9-86FB-1B878B1E3839}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{8D9DE143-E626-41BE-BBD4-3A1632EC7076}" = lport=445 | protocol=6 | dir=in | app=system | 
"{91406498-3401-48E3-B22B-8FBC57824295}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{920B1C4C-1563-477B-93BF-0F23AD8CD4BA}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{9280418A-E283-4F4F-9B1C-368A4D0F47A2}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{92C7FF1A-85B3-40A2-9938-342C68EF597A}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe | 
"{92D40D2C-B488-4C5E-B4D2-8B7140A21F89}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe | 
"{A445E6FF-0E8B-4D1C-A9EF-2589D24AC613}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{C0A42283-6D92-4B47-B075-FCEE9467283D}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{D7EAAA33-EBDD-4861-B5EC-A7D7C8E5D0A3}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{E2EAF1F4-D97B-4EC9-999E-1590A11C45CB}" = lport=139 | protocol=6 | dir=in | app=system | 
"{EF30A626-E865-4C74-B4E8-7C82860A9182}" = lport=138 | protocol=17 | dir=in | app=system | 
"{EF3F766A-8071-4680-89B2-5B056637E70F}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\office14\outlook.exe | 
"{F2D7FE5A-F9D0-4C44-AEF8-2F80B81A8A93}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{05172614-ACB2-4365-AC1C-A7B8BBED6B1B}" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"{0F6B13CD-CFB2-403E-B112-905AC0B22CD5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{11663549-9C81-462A-A09F-9A7C064A20C8}" = dir=in | app=c:\program files\samsung\allshare\allsharedms\allsharedms.exe | 
"{19D1AAF7-1198-4361-A569-2EE428605C73}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{1F043998-E151-4873-BA81-2B2A11328C06}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{22551347-692E-49CD-AA36-47DADF86CD32}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{2C84D612-ADD2-4DAC-B2EB-65D2FE78BE96}" = protocol=17 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{2CB4B5E7-90AD-4DD7-8131-42847E5BB23D}" = protocol=17 | dir=in | app=c:\users\M****\appdata\roaming\dropbox\bin\dropbox.exe | 
"{39417FB9-ADAF-40C7-8AEF-7DA2019BE99D}" = protocol=17 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{49F2797D-5A7F-47EE-8A26-E6BB70571293}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{49F8501E-28EC-40D7-B5B1-99142B446E3A}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{53D5A496-CE8F-472C-A6AF-F15C75F91E7E}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
"{5789C736-94D9-4213-937C-4E6D070DF2C4}" = protocol=6 | dir=out | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{5B699322-4E4C-4F89-B03A-F0B52831DD5D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{65482A82-A309-4238-934F-027D60BBDB95}" = protocol=6 | dir=out | name=orbit - test | 
"{6AF878D2-2913-41A0-9C9B-7E5BE7A09BFC}" = protocol=17 | dir=in | app=c:\program files\opera\pluginwrapper\opera_plugin_wrapper.exe | 
"{6F125804-4877-46CE-A278-61D332930C43}" = protocol=6 | dir=out | app=system | 
"{71FAACBA-BE1F-4BB4-B76C-5442F9BC3AD9}" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"{769F7431-A165-423B-B2D9-E36D42C39629}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{7B99396A-AE47-4D47-8E43-E9E82435622E}" = protocol=6 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\hp1006mc.exe | 
"{872B8DEC-E0ED-43D1-8C72-F221DD3DCFF6}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{89C4D608-B731-4850-92A5-0841FB8C15CE}" = protocol=6 | dir=in | app=c:\program files\smart technologies\education software\vantageservice.exe | 
"{92A725B4-9873-4AAC-9AA5-7CF2B37DA4C5}" = protocol=6 | dir=out | svc=rapimgr | app=%systemroot%\system32\svchost.exe | 
"{957EE628-15EA-4F05-B99C-579211E9D85E}" = protocol=6 | dir=in | svc=wcescomm | app=%systemroot%\system32\svchost.exe | 
"{97BA8E38-36A6-4374-A716-74E846F51909}" = protocol=6 | dir=in | app=c:\users\M****\appdata\roaming\dropbox\bin\dropbox.exe | 
"{9FF216F6-EFEE-4813-A04C-9641BC74D2FC}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe | 
"{A205A604-A9C6-417B-9F06-8F470BB0A1CC}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office14\onenote.exe | 
"{A968CDBF-3BF5-4A4F-8824-DD7C442C416C}" = protocol=17 | dir=in | app=c:\windows\system32\spool\drivers\w32x86\3\hp1006mc.exe | 
"{B38A8DCB-4DEC-4035-888F-8CCF003BFA6C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{B5159418-D51F-40EE-A38E-C7BF2D8B133F}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{BB615C44-A73B-489C-82DD-B5AE063B09FD}" = protocol=17 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{BED61188-0B0E-414A-BD68-798363CF877E}" = dir=in | app=c:\program files\skype\phone\skype.exe | 
"{C41E2F96-839C-4460-9632-AA88362CA69E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{C4E3B9C4-8B82-4C6C-95B4-E93EAC50C41E}" = protocol=6 | dir=in | app=c:\program files\utorrent\utorrent.exe | 
"{CA28B93D-FF61-491B-B815-5239F1B1D9DF}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{D3508FF6-2D65-410B-87AC-88199627F703}" = protocol=6 | dir=in | app=c:\program files\opera\pluginwrapper\opera_plugin_wrapper.exe | 
"{D5EA2665-511C-4E7F-8DC2-F8EF88E2E471}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{DDD3EB04-9A33-4ADF-A5F6-A0FA645F1E8F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{FEA5D127-8180-4400-A0F5-7C48509D12D0}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"TCP Query User{0737E5D4-87DF-403E-A0F6-829AA99C0B0A}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | 
"TCP Query User{08D8C316-AD11-49A3-83D3-39D6D921E3BE}C:\program files\xbmc\xbmc.exe" = protocol=6 | dir=in | app=c:\program files\xbmc\xbmc.exe | 
"TCP Query User{25CC7C23-0703-434F-BF08-0043A4B0066A}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"TCP Query User{2AB5B086-A071-4D99-9131-19712F7DFCDA}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"TCP Query User{39FD3809-4B4C-43DE-9104-A4EF6157780F}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=6 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe | 
"TCP Query User{4322F0B6-71A7-4741-B6A4-BD6C74195731}C:\users\M****\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=6 | dir=in | app=c:\users\M****\appdata\roaming\dropbox\bin\dropbox.exe | 
"TCP Query User{5288AC75-A1FF-4AA5-8B4E-92D71C19002F}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe | 
"TCP Query User{635FF40E-3A88-4C34-8EA5-0D1C586B6133}C:\program files\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe | 
"TCP Query User{6E1D4206-42EE-4C86-9A41-45C49810BD1C}C:\program files\orbitdownloader\orbitnet.exe" = protocol=6 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe | 
"TCP Query User{70FAEB7D-66DB-4B6C-9AE5-569CABCD67F7}C:\program files\mediamonkey\mediamonkey (non-skinned).exe" = protocol=6 | dir=in | app=c:\program files\mediamonkey\mediamonkey (non-skinned).exe | 
"TCP Query User{7403F672-C5F7-45B0-AE71-499E0913BE7B}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"TCP Query User{79321D46-7BC4-4EB7-B3F4-A5133428BA5D}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"TCP Query User{848E5D6B-5160-4035-B7CC-CD423B1A7E92}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=6 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe | 
"TCP Query User{918DC545-32AF-4262-8A9B-082322E90037}D:\treiber etc\charon\charon.exe" = protocol=6 | dir=in | app=d:\treiber etc\charon\charon.exe | 
"TCP Query User{B08C6E3F-F059-45CF-90DC-3758B6E9068C}C:\program files\real alternative\media player classic\mplayerc.exe" = protocol=6 | dir=in | app=c:\program files\real alternative\media player classic\mplayerc.exe | 
"TCP Query User{BE564F05-0547-417C-AF2A-C14B67BA8773}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"TCP Query User{C84FAF46-F15E-4A55-823E-D5F8B5811431}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"TCP Query User{D0C36F0D-6208-466D-99B1-CED0EC3993E1}C:\unreal\system\unreal.exe" = protocol=6 | dir=in | app=c:\unreal\system\unreal.exe | 
"TCP Query User{F77BA4A5-F391-42E0-AEE1-63CBF221F9C9}C:\program files\opera\opera.exe" = protocol=6 | dir=in | app=c:\program files\opera\opera.exe | 
"UDP Query User{130D6E0D-A3D4-43B5-BFC1-A72E99F50943}C:\program files\mediamonkey\mediamonkey (non-skinned).exe" = protocol=17 | dir=in | app=c:\program files\mediamonkey\mediamonkey (non-skinned).exe | 
"UDP Query User{1514DC29-3C58-4AC8-A9C8-8DA166C019A5}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=17 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe | 
"UDP Query User{23FD26F1-5A2D-42BF-8E52-147A7D57170C}C:\program files\xbmc\xbmc.exe" = protocol=17 | dir=in | app=c:\program files\xbmc\xbmc.exe | 
"UDP Query User{2F2F20A6-7639-49DE-B0C3-A5C278FEF38C}C:\program files\opera\opera.exe" = protocol=17 | dir=in | app=c:\program files\opera\opera.exe | 
"UDP Query User{35AFF422-0D64-443F-B5F0-8030D03AF6F6}C:\unreal\system\unreal.exe" = protocol=17 | dir=in | app=c:\unreal\system\unreal.exe | 
"UDP Query User{36C89543-2AE7-4497-B2FB-1203B71336DD}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | 
"UDP Query User{3D247923-3860-4013-AF36-0D1836F7C17E}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"UDP Query User{43D4AB6D-8EBD-4F7D-80EC-EC8290D44EDC}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 
"UDP Query User{5941278C-44B6-4763-927C-7F3E8D70ACD6}D:\treiber etc\charon\charon.exe" = protocol=17 | dir=in | app=d:\treiber etc\charon\charon.exe | 
"UDP Query User{601E83A8-F9BF-491D-BC02-0FF66F5151BA}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"UDP Query User{66DF421C-6BB5-4199-A054-3DBADDFCED33}C:\users\M****\appdata\roaming\dropbox\bin\dropbox.exe" = protocol=17 | dir=in | app=c:\users\M****\appdata\roaming\dropbox\bin\dropbox.exe | 
"UDP Query User{704FA4DD-B2C7-4C5F-B702-235345679917}C:\program files\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe | 
"UDP Query User{8E3433D5-4D6A-4257-A8F8-D5E8A822B192}C:\program files\myphoneexplorer\myphoneexplorer.exe" = protocol=17 | dir=in | app=c:\program files\myphoneexplorer\myphoneexplorer.exe | 
"UDP Query User{9DE921D3-57F3-431D-95AC-FF8EFCF11611}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
"UDP Query User{B0ED3AD5-AE95-4C65-9AE6-A0FFEC5D533F}C:\program files\orbitdownloader\orbitnet.exe" = protocol=17 | dir=in | app=c:\program files\orbitdownloader\orbitnet.exe | 
"UDP Query User{CA612542-9DAC-4E83-A357-C44D0C152047}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe | 
"UDP Query User{DEFD1AA4-FB52-4BAC-BCB0-126E7C208B8B}C:\program files\real alternative\media player classic\mplayerc.exe" = protocol=17 | dir=in | app=c:\program files\real alternative\media player classic\mplayerc.exe | 
"UDP Query User{F8F1C419-CF55-4C1F-A6C2-FDD4B1E891F2}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe | 
"UDP Query User{FEDF27CB-A9C0-49D7-A404-C1263B951C40}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{068724F8-D8BE-4B43-8DDD-B9FE9E49FD76}" = Scansoft PDF Professional
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{269809c7-2b37-4f8d-9317-bfa82a1f3041}.sdb" = crystal_disk
"{26A24AE4-039D-4CA4-87B4-2F83217017FF}" = Java 7 Update 17
"{342126E1-173C-4585-BFBE-3EBDD20E3E9E}" = Mobipocket Reader 6.2
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79A64F98-1796-4FA2-B5FF-C90F83D8BACD}" = Vodafone Mobile Connect Lite
"{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime
"{7F0C4457-8E64-491B-8D7B-991504365D1E}" = QuickSet
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8ECBE643-8230-11D5-9D6B-00A024112F81}" = VDMSound 2.0.4
"{8F311E92-C29F-4DF9-8259-B739A1831669}_is1" = SUPER © v2012.build.54 (Nov 18, 2012) version v2012.build.54
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{904CCF62-818D-4675-BC76-D37EB399F917}" = Windows Mobile-Gerätecenter
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BA2A8C7-BFFD-4125-9377-C191C3FF174F}" = AxCrypt 1.7.2867.0
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A0FE0292-D3BE-3447-80F2-72E032A54875}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"{A13E07E1-A423-44FB-9DEE-B24C75C1BAF2}" = WIDCOMM Bluetooth Software 6.0.1.3100
"{A462213D-EED4-42C2-9A60-7BDD4D4B0B17}" = SigmaTel Audio
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{AC76BA86-7AD7-1033-7B44-AB0000000001}" = Adobe Reader XI (11.0.02)
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call
"{C489B6E0-56CB-4B0F-B2E6-FF4C3D9FAE4F}" = TMPGEnc Plus 2.5
"{E21D6DB6-6DAB-3A63-8C09-CB6606D7403B}" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU
{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"5513-1208-7298-9440" = JDownloader 0.9
"AC3Filter_is1" = AC3Filter 1.63b
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Audacity 1.3 Beta (Unicode)_is1" = Audacity 1.3.13 (Unicode)
"AutoGK" = Auto Gordian Knot 2.55
"avast" = avast! Free Antivirus
"AviSynth" = AviSynth 2.5
"CCleaner" = CCleaner
"CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_14F100C3" = Conexant HDA D110 MDC V.92 Modem
"CoreAVC Professional Edition" = CoreAVC Professional Edition (remove only)
"DVBViewer Pro_is1" = DVBViewer Pro
"DVD Decrypter" = DVD Decrypter (Remove Only)
"DVDFab 9_is1" = DVDFab 9.0.1.5 (08/12/2012) Qt
"EPSON Printer and Utilities" = EPSON-Drucker-Software
"FileZilla Client" = FileZilla Client 3.2.7.1
"HaaliMkx" = Haali Media Splitter
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HijackThis" = HijackThis 2.0.2
"InstallShield_{C489B6E0-56CB-4B0F-B2E6-FF4C3D9FAE4F}" = TMPGEnc Plus 2.5
"IsoBuster_is1" = IsoBuster 3.1
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"MediaMonkey_is1" = MediaMonkey 4.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86)" = Microsoft Visual Studio 2010 Tools for Office Runtime (x86)
"Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - DEU" = Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x86) Language Pack - DEU
"Mozilla Firefox 20.0.1 (x86 en-GB)" = Mozilla Firefox 20.0.1 (x86 en-GB)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"Mp3tag" = Mp3tag v2.49
"Office14.SingleImage" = Microsoft Office Professional 2010
"Opera 12.15.1748" = Opera 12.15
"Orbit_is1" = Orbit Downloader
"phase-6" = phase-6 2.1.1.1a
"Philips Songbird" = Philips Songbird
"PlagiarismFinder 2.0" = PlagiarismFinder 2.0
Rainlendar2" = Rainlendar2 (remove only)
"RealAlt_is1" = Real Alternative 2.0.2
"SubtitleEdit_is1" = Subtitle Edit 3.2.8
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"uTorrent" = µTorrent
"VLC media player" = VLC media player 2.0.4
"VobSub" = VobSub v2.23 (Remove Only)
"Winamp" = Winamp
"WinRAR archiver" = WinRAR 4.00 (32-bit)
"XMedia Recode" = XMedia Recode 3.0.6.0
"Xvid Video Codec 1.3.2" = Xvid Video Codec
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dropbox" = Dropbox
"Winamp Detect" = Winamp Detector Plug-in
"XBMC" = XBMC
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 29.04.2013 18:37:23 | Computer Name = DRSF-3756 | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot
 - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "c:\program
 files\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der Wert "*" des "language"-Attributs
 im assemblyIdentity-Element ist ungültig.
 
Error - 02.05.2013 10:05:20 | Computer Name = DRSF-3756 | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot
 - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "c:\program
 files\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der Wert "*" des "language"-Attributs
 im assemblyIdentity-Element ist ungültig.
 
Error - 03.05.2013 15:11:13 | Computer Name = DRSF-3756 | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot
 - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "c:\program
 files\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der Wert "*" des "language"-Attributs
 im assemblyIdentity-Element ist ungültig.
 
Error - 04.05.2013 12:21:30 | Computer Name = DRSF-3756 | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot
 - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "c:\program
 files\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der Wert "*" des "language"-Attributs
 im assemblyIdentity-Element ist ungültig.
 
Error - 05.05.2013 09:54:51 | Computer Name = DRSF-3756 | Source = SideBySide | ID = 16842785
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Common
 Files\SMART Technologies\Support\dpinst64.exe".  Die abhängige Assemblierung "Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0""
 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm
 "sxstrace.exe".
 
Error - 05.05.2013 10:00:08 | Computer Name = DRSF-3756 | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files\spybot
 - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei "c:\program
 files\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der Wert "*" des "language"-Attributs
 im assemblyIdentity-Element ist ungültig.
 
[ Media Center Events ]
Error - 29.02.2012 07:54:20 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 12:54:20 - Fehler beim Herstellen der Internetverbindung.  12:54:20 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 29.02.2012 07:54:56 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 12:54:49 - Fehler beim Herstellen der Internetverbindung.  12:54:49 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 12.03.2012 04:29:24 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 09:29:24 - Fehler beim Herstellen der Internetverbindung.  09:29:24 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 12.03.2012 04:30:01 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 09:29:54 - Fehler beim Herstellen der Internetverbindung.  09:29:54 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 12.03.2012 05:30:47 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 10:30:47 - Fehler beim Herstellen der Internetverbindung.  10:30:47 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 12.03.2012 05:31:23 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 10:31:16 - Fehler beim Herstellen der Internetverbindung.  10:31:16 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 12.03.2012 09:58:54 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 14:58:54 - Fehler beim Herstellen der Internetverbindung.  14:58:54 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 12.03.2012 09:59:31 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 14:59:23 - Fehler beim Herstellen der Internetverbindung.  14:59:23 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 12.03.2012 11:00:18 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 16:00:18 - Fehler beim Herstellen der Internetverbindung.  16:00:18 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 12.03.2012 11:00:51 | Computer Name = DRSF-3756 | Source = MCUpdate | ID = 0
Description = 16:00:47 - Fehler beim Herstellen der Internetverbindung.  16:00:47 
-     Serververbindung konnte nicht hergestellt werden..  
 
[ System Events ]
Error - 05.05.2013 11:35:01 | Computer Name = DRSF-3756 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 05.05.2013 11:35:01 | Computer Name = DRSF-3756 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 05.05.2013 11:35:01 | Computer Name = DRSF-3756 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 05.05.2013 11:35:01 | Computer Name = DRSF-3756 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 05.05.2013 11:35:01 | Computer Name = DRSF-3756 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 05.05.2013 11:35:01 | Computer Name = DRSF-3756 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Netzwerklistendienst" ist vom Dienst "NLA (Network Location
 Awareness)" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 05.05.2013 11:35:26 | Computer Name = DRSF-3756 | Source = Service Control Manager | ID = 7001
Description = Der Dienst "PnP-X-IP-Busenumerator" ist vom Dienst "Funktionssuchanbieter-Host"
 abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 05.05.2013 11:39:09 | Computer Name = DRSF-3756 | Source = DCOM | ID = 10005
Description = 
 
Error - 05.05.2013 11:43:53 | Computer Name = DRSF-3756 | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "F:" den Befehl "chkdsk" aus.
 
Error - 05.05.2013 11:43:58 | Computer Name = DRSF-3756 | Source = Ntfs | ID = 262199
Description = Die Dateisystemstruktur auf dem Datenträger ist beschädigt und unbrauchbar.
Führen
 Sie auf dem Volume "H:" den Befehl "chkdsk" aus.
 
 
< End of report >