Auswertung

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:44:40, on 22.08.2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v7.00 (7.00.6002.18005)
Boot mode: Normal
 
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEJE.EXE
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\System32\mobsync.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.ask.com?o=15003&l=dis
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files\Epson Software\Easy Photo Print\EPTBL.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [EPSON BX300F Series] C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIEJE.EXE /FU "C:\Windows\TEMP\E_SB51C.tmp" /EF "HKCU"
O4 - HKCU\..\Run: [EA Core] "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
O4 - HKCU\..\Run: [{97BAA1D6-86CE-E88D-E277-E1C688104FC2}] C:\Users\Admin\AppData\Roaming\Navyi\edge.exe
O4 - HKCU\..\Run: [{BB93CC1E-425C-5E4F-F389-C571D0BDEC21}] C:\Users\Admin\AppData\Roaming\Alxi\edag.exe
O4 - HKCU\..\Run: [{6B0664CA-25EE-7317-3092-4803B9D343B2}] C:\Users\Admin\AppData\Roaming\Yhuk\afiv.exe
O4 - HKCU\..\Run: [{A2987928-989B-B248-4DA5-7D2605BEF110}] C:\Users\Admin\AppData\Roaming\Cawua\yfbe.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETZWERKDIENST')
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Admin\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm
O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe
O13 - Gopher Prefix: 
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{A28C3E65-D26C-4C43-B5A8-9BEEA5E92011}: NameServer = 89.246.64.38 82.145.9.38
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
 
--
End of file - 5785 bytes
         

OTL logfile created on: 23.08.2010 00:17:44 - Run 1
OTL by OldTimer - Version 3.2.10.0     Folder = c:\Users\Admin\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 56,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 341,32 Gb Total Space | 219,93 Gb Free Space | 64,44% Space Free | Partition Type: NTFS
Drive D: | 341,32 Gb Total Space | 322,17 Gb Free Space | 94,39% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 968,25 Mb Total Space | 887,00 Mb Free Space | 91,61% Space Free | Partition Type: FAT
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: ADMIN-PC
Current User Name: Admin
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
 
========== Processes (SafeList) ==========
 
PRC - [2010.08.23 00:10:27 | 000,575,488 | ---- | M] (OldTimer Tools) -- c:\Users\Admin\Downloads\OTL.exe
PRC - [2010.08.22 23:44:22 | 000,396,288 | ---- | M] (Trend Micro Inc.) -- C:\Programme\Trend Micro\HijackThis\HijackThis.exe
PRC - [2010.07.25 01:02:56 | 000,014,808 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\plugin-container.exe
PRC - [2010.07.25 01:02:55 | 000,910,296 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2010.06.03 02:50:58 | 001,144,104 | ---- | M] () -- C:\Programme\DivX\DivX Update\DivXUpdate.exe
PRC - [2010.04.20 10:16:51 | 000,267,432 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2010.03.02 10:28:23 | 000,282,792 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.02.24 09:28:01 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2010.01.14 21:10:53 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2009.12.30 14:55:16 | 001,389,904 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2009.09.30 19:58:42 | 000,026,464 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Live\Contacts\wlcomm.exe
PRC - [2009.07.26 16:44:14 | 003,883,840 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Live\Messenger\msnmsgr.exe
PRC - [2009.04.11 08:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2008.01.22 17:00:00 | 000,188,928 | ---- | M] (SEIKO EPSON CORPORATION) -- C:\Windows\System32\spool\drivers\w32x86\3\E_FATIEJE.EXE
PRC - [2008.01.21 04:23:32 | 001,008,184 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Defender\MSASCui.exe
 
 
========== Modules (SafeList) ==========
 
MOD - [2010.08.23 00:10:27 | 000,575,488 | ---- | M] (OldTimer Tools) -- c:\Users\Admin\Downloads\OTL.exe
MOD - [2009.04.11 08:21:38 | 001,686,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18005_none_5cb72f96088b0de0\comctl32.dll
MOD - [2008.01.21 04:24:37 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msscript.ocx
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2010.04.20 10:16:51 | 000,267,432 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.03.18 13:16:28 | 000,753,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe -- (WPFFontCache_v0400)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.02.24 09:28:01 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2009.09.25 03:27:04 | 000,793,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\FntCache.dll -- (FontCache)
SRV - [2009.08.24 13:36:45 | 000,377,344 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- winhttp.dll -- (WinHttpAutoProxySvc)
SRV - [2008.01.21 04:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkfwd.sys -- (NwlnkFwd)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\nwlnkflt.sys -- (NwlnkFlt)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\System32\DRIVERS\ipinip.sys -- (IpInIp)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt -- (EverestDriver)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Users\Admin\AppData\Local\Temp\cpuz132\cpuz132_x32.sys -- (cpuz132)
DRV - [2010.03.01 09:05:19 | 000,124,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2010.02.16 13:24:01 | 000,060,936 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2009.12.30 14:55:24 | 000,038,224 | ---- | M] (Malwarebytes Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\mbamswissarmy.sys -- (MBAMSwissArmy)
DRV - [2009.05.11 09:12:49 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.02.25 03:59:50 | 004,385,792 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag)
DRV - [2009.02.20 03:10:00 | 000,153,952 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtHDMIV.sys -- (RTHDMIAzAudService)
DRV - [2008.12.04 12:34:52 | 000,328,728 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\iaStor.sys -- (iaStor)
DRV - [2008.11.21 09:53:44 | 000,220,288 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\e1y6032.sys -- (e1yexpress) Intel(R)
DRV - [2008.01.21 04:23:27 | 000,386,616 | ---- | M] (LSI Corporation, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasr.sys -- (MegaSR)
DRV - [2008.01.21 04:23:27 | 000,149,560 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu320.sys -- (adpu320)
DRV - [2008.01.21 04:23:27 | 000,031,288 | ---- | M] (LSI Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\megasas.sys -- (megasas)
DRV - [2008.01.21 04:23:26 | 000,101,432 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpu160m.sys -- (adpu160m)
DRV - [2008.01.21 04:23:26 | 000,074,808 | ---- | M] (Silicon Integrated Systems) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sisraid4.sys -- (SiSRaid4)
DRV - [2008.01.21 04:23:26 | 000,040,504 | ---- | M] (Hewlett-Packard Company) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\hpcisss.sys -- (HpCISSs)
DRV - [2008.01.21 04:23:25 | 000,300,600 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adpahci.sys -- (adpahci)
DRV - [2008.01.21 04:23:25 | 000,089,656 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_sas.sys -- (LSI_SAS)
DRV - [2008.01.21 04:23:24 | 001,122,360 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql2300.sys -- (ql2300)
DRV - [2008.01.21 04:23:24 | 000,118,784 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\E1G60I32.sys -- (E1G60) Intel(R)
DRV - [2008.01.21 04:23:24 | 000,079,928 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arcsas.sys -- (arcsas)
DRV - [2008.01.21 04:23:23 | 000,235,064 | ---- | M] (Intel Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iastorv.sys -- (iaStorV)
DRV - [2008.01.21 04:23:23 | 000,130,616 | ---- | M] (VIA Technologies Inc.,Ltd) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\vsmraid.sys -- (vsmraid)
DRV - [2008.01.21 04:23:23 | 000,115,816 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata2.sys -- (ulsata2)
DRV - [2008.01.21 04:23:23 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_scsi.sys -- (LSI_SCSI)
DRV - [2008.01.21 04:23:23 | 000,096,312 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\lsi_fc.sys -- (LSI_FC)
DRV - [2008.01.21 04:23:23 | 000,079,416 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\arc.sys -- (arc)
DRV - [2008.01.21 04:23:22 | 000,342,584 | ---- | M] (Emulex) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\elxstor.sys -- (elxstor)
DRV - [2008.01.21 04:23:21 | 000,422,968 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\adp94xx.sys -- (adp94xx)
DRV - [2008.01.21 04:23:21 | 000,102,968 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvraid.sys -- (nvraid)
DRV - [2008.01.21 04:23:21 | 000,045,112 | ---- | M] (NVIDIA Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nvstor.sys -- (nvstor)
DRV - [2008.01.21 04:23:20 | 000,238,648 | ---- | M] (ULi Electronics Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\uliahci.sys -- (uliahci)
DRV - [2008.01.21 04:23:00 | 000,020,024 | ---- | M] (VIA Technologies, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\viaide.sys -- (viaide)
DRV - [2008.01.21 04:23:00 | 000,019,000 | ---- | M] (CMD Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\cmdide.sys -- (cmdide)
DRV - [2008.01.21 04:23:00 | 000,017,464 | ---- | M] (Acer Laboratories Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\aliide.sys -- (aliide)
DRV - [2007.02.15 14:14:28 | 000,019,840 | ---- | M] (Generic) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StMp3Rec.sys -- (StMp3Rec)
DRV - [2006.11.02 11:50:35 | 000,106,088 | ---- | M] (QLogic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ql40xx.sys -- (ql40xx)
DRV - [2006.11.02 11:50:35 | 000,098,408 | ---- | M] (Promise Technology, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ulsata.sys -- (UlSata)
DRV - [2006.11.02 11:50:19 | 000,045,160 | ---- | M] (IBM Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\nfrd960.sys -- (nfrd960)
DRV - [2006.11.02 11:50:17 | 000,041,576 | ---- | M] (Intel Corp./ICP vortex GmbH) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iirsp.sys -- (iirsp)
DRV - [2006.11.02 11:50:11 | 000,071,272 | ---- | M] (Adaptec, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\djsvs.sys -- (aic78xx)
DRV - [2006.11.02 11:50:09 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteraid.sys -- (iteraid)
DRV - [2006.11.02 11:50:07 | 000,035,944 | ---- | M] (Integrated Technology Express, Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\iteatapi.sys -- (iteatapi)
DRV - [2006.11.02 11:50:05 | 000,035,944 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\symc8xx.sys -- (Symc8xx)
DRV - [2006.11.02 11:50:03 | 000,034,920 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_u3.sys -- (Sym_u3)
DRV - [2006.11.02 11:49:59 | 000,033,384 | ---- | M] (LSI Logic Corporation) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\mraid35x.sys -- (Mraid35x)
DRV - [2006.11.02 11:49:56 | 000,031,848 | ---- | M] (LSI Logic) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\sym_hi.sys -- (Sym_hi)
DRV - [2006.11.02 10:25:24 | 000,071,808 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserid.sys -- (Brserid) Brother MFC Serial Port Interface Driver (WDM)
DRV - [2006.11.02 10:24:47 | 000,011,904 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brusbser.sys -- (BrUsbSer)
DRV - [2006.11.02 10:24:46 | 000,005,248 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltup.sys -- (BrFiltUp)
DRV - [2006.11.02 10:24:45 | 000,013,568 | ---- | M] (Brother Industries, Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\brfiltlo.sys -- (BrFiltLo)
DRV - [2006.11.02 10:24:44 | 000,062,336 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brserwdm.sys -- (BrSerWdm)
DRV - [2006.11.02 10:24:44 | 000,012,160 | ---- | M] (Brother Industries Ltd.) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\brusbmdm.sys -- (BrUsbMdm)
DRV - [2006.11.02 09:36:50 | 000,020,608 | ---- | M] (N-trig Innovative Technologies) [Kernel | Disabled | Stopped] -- C:\Windows\system32\drivers\ntrigdigi.sys -- (ntrigdigi)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://de.ask.com?o=15003&l=dis
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.pewterreport.com/forum/index.php?board=2.0"
FF - prefs.js..extensions.enabledItems: firefox@tvunetworks.com:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 3
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {c36177c0-224a-11da-8cd6-0800200c9a91}:3.8.4
FF - prefs.js..keyword.URL: "hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q="
 
 
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.07.25 01:02:56 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2010.08.21 01:22:42 | 000,000,000 | ---D | M]
 
[2010.04.09 21:43:10 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Extensions
[2010.08.22 16:56:57 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\z0dct4mq.default\extensions
[2010.04.30 17:47:20 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\z0dct4mq.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.05.21 01:00:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\z0dct4mq.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.08.21 20:12:33 | 000,000,000 | ---D | M] (Fasterfox) -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\z0dct4mq.default\extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}
[2010.04.28 20:41:21 | 000,000,000 | ---D | M] -- C:\Users\Admin\AppData\Roaming\mozilla\Firefox\Profiles\z0dct4mq.default\extensions\firefox@tvunetworks.com
[2010.07.15 19:44:43 | 000,002,273 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\z0dct4mq.default\searchplugins\ask.xml
[2010.08.05 22:53:28 | 000,002,384 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\z0dct4mq.default\searchplugins\askcom.xml
[2010.07.15 19:44:43 | 000,001,028 | ---- | M] () -- C:\Users\Admin\AppData\Roaming\Mozilla\FireFox\Profiles\z0dct4mq.default\searchplugins\bing.xml
[2010.04.12 18:52:48 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions
[2010.04.01 18:54:38 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.04.01 18:54:38 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.04.01 18:54:38 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.04.01 18:54:38 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.04.01 18:54:38 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2006.09.18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Programme\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Programme\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Programme\Ask.com\GenericAskToolbar.dll (Ask)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Program Files\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [{6B0664CA-25EE-7317-3092-4803B9D343B2}] C:\Users\Admin\AppData\Roaming\Yhuk\afiv.exe File not found
O4 - HKCU..\Run: [{97BAA1D6-86CE-E88D-E277-E1C688104FC2}] C:\Users\Admin\AppData\Roaming\Navyi\edge.exe File not found
O4 - HKCU..\Run: [{A2987928-989B-B248-4DA5-7D2605BEF110}] C:\Users\Admin\AppData\Roaming\Cawua\yfbe.exe (xdiadrxutcnsqbin)
O4 - HKCU..\Run: [{BB93CC1E-425C-5E4F-F389-C571D0BDEC21}] C:\Users\Admin\AppData\Roaming\Alxi\edag.exe File not found
O4 - HKCU..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe File not found
O4 - HKCU..\Run: [EPSON BX300F Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIEJE.EXE (SEIKO EPSON CORPORATION)
O4 - HKLM..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Admin\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O9 - Extra Button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Programme\PokerStars\PokerStarsUpdate.exe (PokerStars)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-0016-0000-0019-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_19-windows-i586.cab (Java Plug-in 1.6.0_19)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Admin\AppData\Roaming\DisplayFusion\Wallpaper_1.jpg
O24 - Desktop BackupWallPaper: C:\Users\Admin\AppData\Roaming\DisplayFusion\Wallpaper_1.jpg
O29 - HKLM SecurityProviders - (credssp.dll) - credssp.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.08.23 00:08:52 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Malwarebytes
[2010.08.23 00:08:49 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2010.08.23 00:08:47 | 000,019,160 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2010.08.23 00:08:47 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2010.08.23 00:08:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2010.08.22 23:44:22 | 000,000,000 | ---D | C] -- C:\Programme\Trend Micro
[2010.08.21 17:38:44 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2010.08.13 01:16:18 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Avira
[2010.08.11 05:57:33 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2010.08.11 05:57:30 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2010.08.11 05:57:30 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieencode.dll
[2010.08.11 05:57:29 | 000,380,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2010.08.11 05:57:26 | 002,037,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2010.08.11 05:57:22 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rtutils.dll
[2010.08.11 05:57:17 | 003,600,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2010.08.11 05:57:17 | 003,548,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2010.08.10 17:24:34 | 000,238,856 | ---- | C] (Electronic Arts, Inc.) -- C:\Users\Admin\Desktop\winui.dll
[2010.08.10 02:38:53 | 000,000,000 | ---D | C] -- C:\Users\Admin\Documents\FUSSBALL MANAGER 10
[2010.08.10 00:41:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
[2010.08.10 00:39:30 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_39.dll
[2010.08.09 17:25:58 | 000,000,000 | ---D | C] -- C:\ProgramData\EA Core
[2010.08.09 17:25:00 | 000,000,000 | ---D | C] -- C:\Programme\Electronic Arts
[2010.08.09 17:01:45 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Nero
[2010.08.09 16:53:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2010.08.09 16:47:39 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DCompiler_42.dll
[2010.08.09 16:47:23 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_42.dll
[2010.08.09 16:47:07 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\D3DX9_40.dll
[2010.08.09 16:46:50 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_35.dll
[2010.08.09 16:46:33 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_34.dll
[2010.08.09 16:46:17 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3dx9_30.dll
[2010.08.06 18:00:27 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Symantec Shared
[2010.08.06 01:57:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Symantec
[2010.08.06 01:57:35 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller
[2010.08.06 01:57:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton
[2010.08.05 22:58:24 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\DivX Shared
[2010.08.02 05:35:37 | 000,000,000 | ---D | C] -- C:\Users\Admin\AppData\Roaming\Lodyo
[2010.07.24 20:49:48 | 000,000,000 | ---D | C] -- C:\ProgramData\NCH Software
 
========== Files - Modified Within 30 Days ==========
 
[2010.08.23 00:18:11 | 003,407,872 | -HS- | M] () -- C:\Users\Admin\ntuser.dat
[2010.08.23 00:08:51 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.08.22 23:48:00 | 000,001,094 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2010.08.22 23:44:22 | 000,001,878 | ---- | M] () -- C:\Users\Admin\Desktop\HijackThis.lnk
[2010.08.22 23:24:01 | 000,000,286 | -H-- | M] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010.08.22 22:51:46 | 000,005,184 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.08.22 22:51:46 | 000,005,184 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.08.22 20:57:47 | 001,445,310 | ---- | M] () -- C:\Windows\System32\PerfStringBackup.INI
[2010.08.22 20:57:47 | 000,628,504 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2010.08.22 20:57:47 | 000,595,798 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2010.08.22 20:57:47 | 000,126,248 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2010.08.22 20:57:47 | 000,103,872 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2010.08.22 20:51:50 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2010.08.22 20:51:48 | 000,065,536 | ---- | M] () -- C:\Windows\System32\Ikeext.etl
[2010.08.22 20:51:47 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.08.22 20:51:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.08.22 20:51:37 | 3220,361,216 | -HS- | M] () -- C:\hiberfil.sys
[2010.08.22 20:51:05 | 000,524,288 | -HS- | M] () -- C:\Users\Admin\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TMContainer00000000000000000001.regtrans-ms
[2010.08.22 20:51:05 | 000,065,536 | -HS- | M] () -- C:\Users\Admin\NTUSER.DAT{3a539871-6a70-11db-887c-d362bd253390}.TM.blf
[2010.08.22 20:50:35 | 001,059,776 | -H-- | M] () -- C:\Users\Admin\AppData\Local\IconCache.db
[2010.08.21 21:00:40 | 000,001,356 | ---- | M] () -- C:\Users\Admin\AppData\Local\d3d9caps.dat
[2010.08.21 01:22:42 | 000,001,891 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010.08.12 22:09:00 | 000,089,927 | ---- | M] () -- C:\Users\Admin\Desktop\Schnappschuss_perfekt.pdf
[2010.08.11 10:17:21 | 001,595,760 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2010.08.10 17:24:31 | 000,000,590 | ---- | M] () -- C:\Users\Admin\Desktop\EdManager10 - Verknüpfung.lnk
[2010.08.10 02:43:46 | 000,000,551 | ---- | M] () -- C:\Users\Admin\Desktop\FM10 - Verknüpfung.lnk
[2010.08.10 01:21:03 | 000,027,691 | ---- | M] () -- C:\Users\Admin\Desktop\Unbenannt.jpg
[2010.08.09 22:58:11 | 000,000,482 | ---- | M] () -- C:\Users\Admin\Desktop\IsoBuster.lnk
[2010.08.05 22:58:31 | 000,001,398 | ---- | M] () -- C:\Users\Admin\Desktop\DivX Movies.lnk
[2010.08.04 20:51:38 | 000,012,370 | ---- | M] () -- C:\Users\Admin\Desktop\ebay.odt
 
========== Files Created - No Company Name ==========
 
[2010.08.23 00:08:51 | 000,000,822 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2010.08.22 23:44:22 | 000,001,878 | ---- | C] () -- C:\Users\Admin\Desktop\HijackThis.lnk
[2010.08.21 21:04:55 | 3220,361,216 | -HS- | C] () -- C:\hiberfil.sys
[2010.08.12 22:08:26 | 000,089,927 | ---- | C] () -- C:\Users\Admin\Desktop\Schnappschuss_perfekt.pdf
[2010.08.10 17:24:34 | 000,000,590 | ---- | C] () -- C:\Users\Admin\Desktop\EdManager10 - Verknüpfung.lnk
[2010.08.10 02:43:59 | 000,000,551 | ---- | C] () -- C:\Users\Admin\Desktop\FM10 - Verknüpfung.lnk
[2010.08.10 01:39:26 | 000,000,286 | -H-- | C] () -- C:\Windows\tasks\{22116563-108C-42c0-A7CE-60161B75E508}.job
[2010.08.10 01:21:03 | 000,027,691 | ---- | C] () -- C:\Users\Admin\Desktop\Unbenannt.jpg
[2010.08.09 22:58:11 | 000,000,482 | ---- | C] () -- C:\Users\Admin\Desktop\IsoBuster.lnk
[2010.08.05 22:58:31 | 000,001,398 | ---- | C] () -- C:\Users\Admin\Desktop\DivX Movies.lnk
[2010.08.04 20:51:36 | 000,012,370 | ---- | C] () -- C:\Users\Admin\Desktop\ebay.odt
[2010.06.20 16:59:05 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2010.06.20 16:57:01 | 000,000,025 | ---- | C] () -- C:\Windows\CDEBX300DEFGIPS.ini
[2010.06.17 00:33:28 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2010.06.17 00:33:27 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2010.06.17 00:33:26 | 000,881,664 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2010.06.17 00:33:26 | 000,205,824 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2010.06.17 00:33:26 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2010.06.17 00:33:26 | 000,000,547 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll.manifest
[2010.05.12 01:09:53 | 000,077,824 | ---- | C] () -- C:\Windows\System32\DriveInfo.dll
[2010.04.11 12:53:25 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2010.04.10 19:47:36 | 000,017,408 | ---- | C] () -- C:\Users\Admin\AppData\Local\WebpageIcons.db
[2010.04.09 22:08:24 | 000,003,584 | ---- | C] () -- C:\Users\Admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010.04.09 21:31:05 | 000,159,744 | ---- | C] () -- C:\Windows\System32\atitmmxx.dll
[2010.04.09 19:23:54 | 000,001,356 | ---- | C] () -- C:\Users\Admin\AppData\Local\d3d9caps.dat
[2006.11.02 14:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 09:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 128 bytes -> C:\ProgramData\TEMP:1957F8A9
< End of report >
         

OTL Extras logfile created on: 23.08.2010 00:17:44 - Run 1
OTL by OldTimer - Version 3.2.10.0     Folder = c:\Users\Admin\Downloads
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 7.0.6002.18005)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 56,00% Memory free
6,00 Gb Paging File | 5,00 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 341,32 Gb Total Space | 219,93 Gb Free Space | 64,44% Space Free | Partition Type: NTFS
Drive D: | 341,32 Gb Total Space | 322,17 Gb Free Space | 94,39% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
Drive G: | 968,25 Mb Total Space | 887,00 Mb Free Space | 91,61% Space Free | Partition Type: FAT
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: ADMIN-PC
Current User Name: Admin
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Standard
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
https [open] -- "C:\Program Files\Mozilla Firefox\firefox.exe" -requestPending -osint -url "%1" (Mozilla Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{017E76F8-50B2-473D-897F-BC2141F0E2AA}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{0452E4BB-C37B-4838-AACF-D150767203AE}" = lport=rpc | protocol=6 | dir=in | app=c:\windows\system32\vdsldr.exe | 
"{076A39BA-E057-4AA9-9504-86DA8F73B317}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{0CD8BB60-B0D1-4BC1-A1B2-503B97AD1C56}" = lport=rpc | protocol=6 | dir=in | svc=policyagent | app=c:\windows\system32\svchost.exe | 
"{110E1729-B9C7-4B53-89BB-D19F7E67E942}" = rport=137 | protocol=17 | dir=out | app=system | 
"{1171748E-3470-4942-AC49-F4BD437D3EFB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{12B59E9A-BD5D-48CD-A2F2-6F970C3E342E}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=c:\windows\system32\svchost.exe | 
"{13D4EBAD-704A-4927-99F2-95606903C970}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{169993D7-34BA-4A10-AB16-D15E54E01D90}" = lport=5358 | protocol=6 | dir=in | app=system | 
"{1CD2A520-6A0E-4E09-8F88-946E73B33992}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{21501E57-722E-4E68-8735-82F618EED72B}" = rport=3702 | protocol=17 | dir=out | app=c:\windows\system32\netproj.exe | 
"{216E7E3A-A0F5-4990-B5C1-96619FEE5DF1}" = rport=3702 | protocol=17 | dir=out | svc=bits | app=c:\windows\system32\svchost.exe | 
"{24A87287-1668-4038-8020-4B7CFE4694C6}" = rport=10244 | protocol=6 | dir=out | app=system | 
"{24EC38A6-7EA4-4F62-8F1D-9A07B23DC0FC}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{25380703-9C37-4ED3-BB3C-3273A77B8DF2}" = rport=3587 | protocol=6 | dir=out | svc=p2psvc | app=c:\windows\system32\svchost.exe | 
"{28B9C2EA-27C4-489F-BEB2-3C5BD2DD7CE9}" = rport=1723 | protocol=6 | dir=out | app=system | 
"{2A7BA7A4-9145-43D5-B756-E5C8B249FE9C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=c:\windows\system32\svchost.exe | 
"{2DC9F133-8A25-48A3-A056-72EB68F8D47E}" = lport=2178 | protocol=6 | dir=in | app=system | 
"{30AB6D23-771C-4929-82BB-1687AD53BE07}" = lport=138 | protocol=17 | dir=in | app=system | 
"{39C75157-CCFF-4AAC-8478-C928FF365098}" = lport=7777 | protocol=17 | dir=in | app=c:\windows\ehome\ehshell.exe | 
"{3FC27C68-886C-4F07-9B2E-8E36C6D3F36C}" = lport=445 | protocol=6 | dir=in | app=system | 
"{41DDBF01-572D-4D95-8254-DFC0E29D3DBA}" = lport=137 | protocol=17 | dir=in | app=system | 
"{4659D3BC-DF65-4E2D-9C83-2B8A66965C98}" = lport=3702 | protocol=17 | dir=in | app=c:\windows\system32\p2phost.exe | 
"{47AC4198-0318-4372-95D3-41826952F8C8}" = lport=rpc | protocol=6 | dir=in | svc=schedule | app=c:\windows\system32\svchost.exe | 
"{4B5A1FA8-E61F-48F1-9D70-CDFD43D20AFF}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=c:\windows\system32\svchost.exe | 
"{4C524831-6DA6-4181-A837-D73CB3039B35}" = lport=rpc | protocol=6 | dir=in | svc=bits | app=c:\windows\system32\svchost.exe | 
"{4CEB41EE-410F-4A5B-AF43-28C6410DEFB5}" = lport=445 | protocol=6 | dir=in | app=system | 
"{50F905C7-6B59-4BD5-B0E9-D6A3A18B82C1}" = lport=5722 | protocol=6 | dir=in | svc=dfsr | app=c:\windows\system32\dfsr.exe | 
"{56220063-DC0D-40F9-A3F0-0840ED4DD6F0}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{56EFD6D6-27F0-442A-874B-8553F63EEC5F}" = rport=139 | protocol=6 | dir=out | app=system | 
"{56F77869-E604-4BC0-9332-D9516C8FF028}" = rport=138 | protocol=17 | dir=out | app=system | 
"{5B81D3ED-90B6-47EE-85D8-23D90FB89E74}" = lport=rpc | protocol=6 | dir=in | svc=vds | app=c:\windows\system32\vds.exe | 
"{5D35EA83-53A5-42B8-8A59-40AD69F96603}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{5E1FDA7F-A916-444E-9226-2247050AA0B4}" = lport=80 | protocol=6 | dir=in | app=system | 
"{5E3E3142-9525-4D19-B314-6F92F2B10779}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{64D802EE-1B0E-4EF8-9431-312CF9910416}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=c:\windows\system32\svchost.exe | 
"{6779F64D-21B4-46E5-B9B4-50D7EFBACF97}" = lport=1723 | protocol=6 | dir=in | app=system | 
"{695FB657-E432-4473-BF38-71A6EA9584A8}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{699F98BD-F28D-4CF8-9177-2155173E108E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{70FF8048-C70C-4024-B36C-8534545F6AC8}" = lport=10244 | protocol=6 | dir=in | app=system | 
"{7111D0E5-96BA-4636-AB60-E40127BF886C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{7429DE1E-6413-437C-88A7-98D37C45A4CD}" = rport=1701 | protocol=17 | dir=out | app=system | 
"{7AAACE93-5A18-4D03-AFC6-31C2F2B7F68D}" = rport=5357 | protocol=6 | dir=out | app=system | 
"{7CFB0F30-98AA-4A73-8E6F-5E37D628324A}" = lport=3540 | protocol=17 | dir=in | svc=pnrpsvc | app=c:\windows\system32\svchost.exe | 
"{7E561AD0-831A-4D49-AFB6-BAE4BB492979}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{7FA897D8-79DA-44F6-952D-A0897E3CA17D}" = lport=135 | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{816BF378-A944-4ADB-9C0F-82DD68613FCE}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=c:\windows\system32\svchost.exe | 
"{83FC576E-5282-446D-A7E4-5A0E8FA06BEB}" = lport=rpc | protocol=6 | dir=in | svc=* | app=c:\windows\system32\svchost.exe | 
"{85960117-CC79-49D4-B006-5350026A774F}" = lport=3390 | protocol=6 | dir=in | app=system | 
"{85EB7095-21D2-4E40-A3AF-BBADE320A671}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{86911E04-1CBB-45A7-AB97-68DE4CA3DE79}" = lport=162 | protocol=17 | dir=in | svc=snmptrap | app=c:\windows\system32\snmptrap.exe | 
"{870B5B59-D19C-4F4A-8651-048DAABC55EE}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{88BD5604-6C74-41C9-BDBF-4ED5200FE487}" = lport=554 | protocol=6 | dir=in | app=c:\windows\ehome\ehshell.exe | 
"{8A7853DC-2CEC-49F2-9C61-2765DE641F87}" = lport=1701 | protocol=17 | dir=in | app=system | 
"{8AB10A61-5AC1-4102-B408-238B0258B588}" = lport=3702 | protocol=17 | dir=in | svc=bits | app=c:\windows\system32\svchost.exe | 
"{8F2CEA9A-58F0-4BC5-9D4D-34B750044028}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{8FAA8704-A969-427D-B73C-36E304801502}" = rport=5358 | protocol=6 | dir=out | app=system | 
"{97BE0E02-6206-4A59-80FD-57E52BF9E76F}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=c:\windows\system32\svchost.exe | 
"{9A38B615-B138-44E7-B50E-56E04B8427F9}" = lport=rpc | protocol=6 | dir=in | svc=eventlog | app=c:\windows\system32\svchost.exe | 
"{9AACBA8A-1BED-4679-84C5-532D949128DA}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{9F709D93-DDBF-4FB5-B7C3-0C9B2BD89E0C}" = rport=3702 | protocol=17 | dir=out | app=c:\windows\system32\p2phost.exe | 
"{A2A4B0ED-D107-437E-A640-EC24D3A1D2F2}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{A7A71AE1-76E1-45A3-87E8-E4E95B65DF49}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{B18B3BD7-8929-42D8-9080-EA5AD29C6EFA}" = lport=5357 | protocol=6 | dir=in | app=system | 
"{B328830A-ED08-4194-B5FA-EAF868A8BE01}" = lport=443 | protocol=6 | dir=in | app=system | 
"{B34E2BD1-9C5F-4E7A-B013-77757FFBA5A3}" = lport=rpc | protocol=6 | dir=in | app=c:\windows\system32\services.exe | 
"{B40EDA6C-6F9B-4087-866A-662B8D06728E}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{B5FA089D-8A93-48D8-94F4-9D1A889C8087}" = lport=445 | protocol=6 | dir=in | app=system | 
"{B9F36DEB-8C0B-45DC-AD72-F6CAF3A8C5AF}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{BE84A8BE-B468-49C8-85B4-F0659728770D}" = lport=3587 | protocol=6 | dir=in | svc=p2psvc | app=c:\windows\system32\svchost.exe | 
"{C41BC084-E2E8-43D0-8AA9-4D0B8F08855C}" = rport=3540 | protocol=17 | dir=out | svc=pnrpsvc | app=c:\windows\system32\svchost.exe | 
"{C4447351-C578-41F3-8C1F-93343DB4B964}" = rport=5722 | protocol=6 | dir=out | svc=dfsr | app=c:\windows\system32\dfsr.exe | 
"{C651F17B-E4DE-4A5C-A4CF-BFD69C741E8E}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{C6605C0F-B38D-4BD5-A053-23493D6969F2}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{C9BA6D74-3108-4C81-8145-D323A002EEB1}" = lport=rpc | protocol=6 | dir=in | svc=ktmrm | app=c:\windows\system32\svchost.exe | 
"{CC170F62-CB72-44A4-9C2B-269EB902CC8C}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=c:\windows\system32\spoolsv.exe | 
"{CE3598FD-0BEA-4AF9-8B84-F2DFE973904F}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=datei- und druckerfreigabe (spoolerdienst - rpc-epmap) | 
"{D03CBD6A-442B-4877-913B-9AC959CBA538}" = lport=139 | protocol=6 | dir=in | app=system | 
"{D1E6400C-F826-4D0C-9FB5-9287D1640390}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{D2F45729-586B-4BEB-A9BD-2D6C0B547669}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{D7F7E084-AC9E-4DE4-8FBE-F96BA9F7EEF4}" = lport=51402 | protocol=6 | dir=in | name=akamai netsession interface | 
"{D8415C29-FD0B-476A-95F0-7071A6F48F52}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=c:\windows\system32\svchost.exe | 
"{D8892E65-7938-49F6-B666-E20D3954BE4D}" = lport=445 | protocol=6 | dir=in | app=system | 
"{DB38D4E6-AC7A-4F10-BB9D-A0425AFA1DF4}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{DBFD31B5-1AE0-4B8B-9646-A952227D4A54}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{E1DAFE6D-759C-4F28-87E8-B722B3997CD4}" = lport=135 | protocol=6 | dir=in | svc=rpcss | app=c:\windows\system32\svchost.exe | 
"{E2BA35D8-5371-48AD-B095-0F6EEFAB5BB5}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=c:\windows\system32\svchost.exe | 
"{E462DBD8-338C-43C6-B6B9-66C8B0E92F31}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{E53637F0-0489-433F-8982-A0451338030F}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{E63B49B8-B6B7-429E-B669-3168BB5C3D84}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=c:\windows\system32\svchost.exe | 
"{E81E790D-5FC8-4D14-9905-A8DBEEA6C9CE}" = lport=5000 | protocol=17 | dir=in | name=akamai netsession interface | 
"{F015135C-26AE-4F99-8CD3-674297AF4676}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{F08706CF-308E-4AD8-ACB2-29B548C1A3DB}" = rport=445 | protocol=6 | dir=out | app=system | 
"{F30D78E8-1F4D-42FA-90CF-8673C1D6CA42}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{F5293051-8E9E-401A-9EBF-56048E3BBB66}" = lport=445 | protocol=6 | dir=in | app=system | 
"{F53575BA-54B4-42B9-A088-8BCCAA031BBC}" = rport=2178 | protocol=6 | dir=out | app=system | 
"{F61978E3-5763-438C-B2CF-99FAAD9185D9}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
"{F82A2C04-0D6E-412E-888D-9EC06EB1FD0F}" = lport=3702 | protocol=17 | dir=in | app=c:\windows\system32\netproj.exe | 
"{FCF48618-3CC1-4F99-B995-6DE1197829F9}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=c:\windows\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{01D47426-08A9-419B-81D5-33A0793928D9}" = protocol=6 | dir=in | app=c:\windows\system32\msra.exe | 
"{02C8C247-D3D6-4FF6-A010-5C6FFAB7A971}" = protocol=6 | dir=out | app=system | 
"{0402D16E-04FD-49AD-83D8-461D87D20E24}" = protocol=6 | dir=out | app=c:\windows\system32\msra.exe | 
"{0A3AF512-61AD-4D3B-9493-AAECB8553F04}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe | 
"{0F4297B6-1445-4D5D-B16F-081B119C8831}" = protocol=17 | dir=out | app=c:\windows\ehome\ehshell.exe | 
"{0F925D46-B20A-4061-81B0-0600C307E9E5}" = protocol=6 | dir=out | app=c:\program files\windows media player\wmplayer.exe | 
"{17DE5FAD-CF95-40EF-8F3E-1B8FAA4AD5FB}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe | 
"{1F216404-D34F-43F2-86C9-30116A3DE038}" = protocol=17 | dir=in | app=c:\program files\windows media player\wmplayer.exe | 
"{222F8952-357B-46DB-B21E-F8A2F3F10502}" = protocol=17 | dir=out | app=c:\program files\windows media player\wmpnetwk.exe | 
"{2466E28D-D605-4C1D-AABE-95C50AB3160A}" = protocol=6 | dir=in | app=c:\windows\system32\p2phost.exe | 
"{27F83E18-3B04-4ADB-B15F-D8097F4507E9}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{2925E08F-39C4-413C-B4B2-07F709B777D7}" = protocol=1 | dir=in | name=datei- und druckerfreigabe (echoanforderung - icmpv4 eingehend) | 
"{2D376508-8C87-4FA9-83C3-51CD3CFEA160}" = protocol=6 | dir=out | svc=msiscsi | app=c:\windows\system32\svchost.exe | 
"{3110EB6D-80B9-4FF8-9023-499F05CFC593}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe | 
"{3793E80F-AB57-40B1-844F-382114FD13D0}" = protocol=6 | dir=out | app=c:\program files\windows collaboration\wincollab.exe | 
"{39F95577-76B4-4BD2-9F40-85688F91FED3}" = protocol=6 | dir=out | app=c:\program files\windows media player\wmplayer.exe | 
"{3AACA7E5-63E9-465D-970C-C154E2357FDD}" = protocol=17 | dir=in | app=c:\program files\windows collaboration\wincollab.exe | 
"{41E902F8-4788-48A5-9C9F-E49AA3768EE5}" = protocol=17 | dir=in | app=c:\program files\windows media player\wmplayer.exe | 
"{4B62EF6E-FD16-4D00-9D08-4AB39BC0128B}" = protocol=17 | dir=out | app=c:\program files\windows media player\wmplayer.exe | 
"{54260CE3-6D82-4F62-A87A-73F5F3B8254E}" = protocol=6 | dir=in | svc=msiscsi | app=c:\windows\system32\svchost.exe | 
"{722C8A6B-EEC8-40C5-BACE-DCA2C94AA26C}" = dir=in | app=c:\program files\windows live\messenger\wlcsdk.exe | 
"{753F6FB9-481E-499D-8DD9-67D247541C1B}" = protocol=58 | dir=out | name=datei- und druckerfreigabe (echoanforderung - icmpv6 ausgehend) | 
"{77C5EF62-4C96-4AD7-A81D-07BE62EC3FD5}" = protocol=6 | dir=out | app=c:\windows\system32\netproj.exe | 
"{7892112B-B51C-484D-8E0D-6EAE01E72C3A}" = protocol=6 | dir=out | app=c:\windows\system32\msdtc.exe | 
"{7E77E373-5162-4A26-893E-0B8C61CCD13F}" = protocol=6 | dir=out | app=c:\windows\ehome\mcx2prov.exe | 
"{825E9EE3-9E1E-4AFA-99C8-089FF9C0535F}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe | 
"{84089427-1841-4B41-B5BA-960D3D3EC31B}" = protocol=6 | dir=in | app=c:\windows\system32\wbem\unsecapp.exe | 
"{859F0BD4-140A-42DE-8EE9-C86119254551}" = protocol=6 | dir=in | app=c:\windows\system32\netproj.exe | 
"{8649626A-1242-4EEB-B764-36D98CC604B5}" = protocol=17 | dir=out | app=c:\program files\windows collaboration\wincollab.exe | 
"{8F3EA764-72EA-41F5-8343-D407B5459507}" = protocol=6 | dir=in | app=c:\windows\system32\msdtc.exe | 
"{9BECA21D-8EAA-41DE-A989-632DF5B9E832}" = protocol=17 | dir=out | app=c:\program files\windows media player\wmplayer.exe | 
"{A2DCE664-DB94-4D5B-A09F-E19AB0A29D4E}" = protocol=6 | dir=out | app=c:\windows\ehome\ehshell.exe | 
"{ADDFF2E4-04C2-4DA6-B471-532EE18337F8}" = protocol=6 | dir=in | app=c:\windows\system32\plasrv.exe | 
"{B3F82D24-8F4E-4580-B67B-0408C2E86BF8}" = protocol=6 | dir=in | app=c:\program files\windows media player\wmpnetwk.exe | 
"{BA6C59AA-0F05-4FF1-BA4C-A6C5684FFE45}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe | 
"{C3B19054-B63A-4062-8411-11725DF2D9AC}" = protocol=6 | dir=in | app=c:\program files\windows collaboration\wincollab.exe | 
"{CED69C95-D3A8-48D7-90F0-8DD4090407E3}" = protocol=6 | dir=out | app=c:\windows\system32\wudfhost.exe | 
"{D0ECB893-2625-4359-B10A-6F50D47477E5}" = protocol=6 | dir=out | app=c:\windows\system32\p2phost.exe | 
"{D9248D9E-33A6-4383-941A-D461716AB0A7}" = protocol=58 | dir=in | name=datei- und druckerfreigabe (echoanforderung - icmpv6 eingehend) | 
"{E3DA5835-B628-4C37-BEFC-FE215EF78AEC}" = protocol=6 | dir=out | app=c:\program files\windows media player\wmpnetwk.exe | 
"{E5C80A32-9E73-4048-BD91-D6F86AECD2BD}" = protocol=6 | dir=out | svc=winmgmt | app=c:\windows\system32\svchost.exe | 
"{EC8EB37C-8144-435A-8801-70C3F57F7015}" = protocol=6 | dir=out | svc=upnphost | app=c:\windows\system32\svchost.exe | 
"{ECAC5575-B5DC-4E15-B3A2-E524DAEAD921}" = protocol=6 | dir=out | svc=mcx2svc | app=c:\windows\system32\svchost.exe | 
"{EE01E125-50ED-4011-8911-851AFC17FD5B}" = protocol=1 | dir=out | name=datei- und druckerfreigabe (echoanforderung - icmpv4 ausgehend) | 
"{EEC630AC-8DEE-497C-A593-9D3D864707EF}" = protocol=17 | dir=in | app=c:\program files\windows media player\wmpnetwk.exe | 
"{F65B22D4-6589-483F-87DB-2A856D51A826}" = protocol=6 | dir=in | svc=winmgmt | app=c:\windows\system32\svchost.exe | 
"{F7295180-98B3-46B7-BD2E-E39490C966A0}" = protocol=6 | dir=out | app=system | 
"TCP Query User{3E863FA5-CAEE-4A88-8E7A-23B2E5899E75}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"TCP Query User{526A5334-39DF-4C65-849D-F636748F3BB0}C:\windows\system32\taskeng.exe" = protocol=6 | dir=in | app=c:\windows\system32\taskeng.exe | 
"TCP Query User{5B51FD51-D513-455C-9DDD-59DA33D6989C}C:\program files\bittorrent\bittorrent.exe" = protocol=6 | dir=in | app=c:\program files\bittorrent\bittorrent.exe | 
"TCP Query User{718AA858-5CD8-45E6-B63B-CB20A11E89A4}D:\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=d:\sopcast\adv\sopadver.exe | 
"TCP Query User{785448F9-C53B-437F-8503-783EF8A9695B}D:\sopcast\sopcast.exe" = protocol=6 | dir=in | app=d:\sopcast\sopcast.exe | 
"TCP Query User{91E645B5-A060-492F-813E-822A9D2B1001}C:\program files\electronic arts\eadm\core.exe" = protocol=6 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"TCP Query User{9C8FF866-02BB-423D-BB6B-6911C6C8E681}C:\program files\emule\emule.exe" = protocol=6 | dir=in | app=c:\program files\emule\emule.exe | 
"TCP Query User{A57C17F3-F0A4-473C-B349-E3EBA98B8012}C:\windows\explorer.exe" = protocol=6 | dir=in | app=c:\windows\explorer.exe | 
"UDP Query User{01B736EC-A5D2-4EC6-A9BC-3A7CF70C2D75}C:\program files\emule\emule.exe" = protocol=17 | dir=in | app=c:\program files\emule\emule.exe | 
"UDP Query User{4DBFCA66-B694-4F8B-88ED-3954722853E5}D:\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=d:\sopcast\adv\sopadver.exe | 
"UDP Query User{63EAAC88-6F78-41B4-8D55-38CEBC881FA4}D:\sopcast\sopcast.exe" = protocol=17 | dir=in | app=d:\sopcast\sopcast.exe | 
"UDP Query User{645158E1-CDC6-42CD-9BC0-AF83726B26BE}C:\program files\electronic arts\eadm\core.exe" = protocol=17 | dir=in | app=c:\program files\electronic arts\eadm\core.exe | 
"UDP Query User{89838097-1447-4B36-A1F1-CFE9DD2F89F7}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 
"UDP Query User{8C724A76-026B-4B0F-9BD1-A03C7FA0D1F0}C:\windows\system32\taskeng.exe" = protocol=17 | dir=in | app=c:\windows\system32\taskeng.exe | 
"UDP Query User{9E27C6E7-075B-4785-AB48-60E68B397E99}C:\program files\bittorrent\bittorrent.exe" = protocol=17 | dir=in | app=c:\program files\bittorrent\bittorrent.exe | 
"UDP Query User{F06774CB-06AC-4A85-9210-6051DA1DEF20}C:\windows\explorer.exe" = protocol=17 | dir=in | app=c:\windows\explorer.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04DF6640-9EBD-8431-6DD2-C977A3553F62}" = Catalyst Control Center Graphics Full New
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0B7F5E07-329C-D8CF-FB01-56ADEED0CCA2}" = ccc-utility
"{18FF37C9-9EC1-C747-9A62-4AE8CFE23CCE}" = CCC Help Japanese
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{2217B0B4-35CB-48C6-B640-864DF2F30F99}" = OpenOffice.org 3.2
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{26A24AE4-039D-4CA4-87B4-2F83216019FF}" = Java(TM) 6 Update 19
"{294C20ED-7456-D21D-5F99-238F6DCB786D}" = CCC Help English
"{2C728666-E17C-52F0-479F-A1D20F387F95}" = Skins
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4A535470-7AEF-6394-AD3E-A1EC8D986F00}" = ATI Catalyst Install Manager
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{71A11D7D-169F-33F8-EBDF-B766174242ED}" = CCC Help Finnish
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B8E793E-69B1-BBFF-A991-D2F9680D3279}" = Catalyst Control Center Graphics Light
"{7D609E42-A143-2B9F-84AF-798154C43979}" = CCC Help French
"{8146207A-C244-728E-9B38-7CE58E956E28}" = CCC Help Spanish
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{84E16773-F983-4E41-99F6-2D3E167EFB86}" = CCC Help Italian
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D238757-D2B1-4E32-97BC-79ABAF4F38A8}" = Wireless LAN Adapter
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C2013A3-CDA7-E636-E25F-A32D0C6503D9}" = CCC Help Swedish
"{A416DACB-77F8-0FD3-ADB6-C1149D980E44}" = Catalyst Control Center Graphics Previews Vista
"{A52668B6-76ED-0E0F-68BE-5B299FDE2BC2}" = CCC Help Dutch
"{A7FD45DA-872A-22EE-5458-5DE09946FC24}" = Catalyst Control Center Localization All
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.4 - Deutsch
"{AFBE3BF5-4E94-DE54-FF2E-EBB9031594FE}" = CCC Help Norwegian
"{C2232A31-9670-C1B4-D286-B532A87DE5DC}" = Catalyst Control Center Core Implementation
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C9DA29AD-FBA9-4E41-B7BA-79A7FDC38BE3}" = Catalyst Control Center Graphics Full Existing
"{CAA9D1BE-9782-7F83-BDC1-364A85BCF603}" = CCC Help Danish
"{CBC81377-BF70-B459-8581-60DEF26C6F4D}" = ccc-core-static
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{DEDB47A3-C988-4A43-A645-E2CEA571E680}" = Epson Easy Photo Print 2
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{ED00D08A-3C5F-488D-93A0-A04F21F23956}" = Windows Live Communications Platform
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F0E2B312-D7FD-4349-A9B6-E90B36DB1BD0}" = Paint.NET v3.5.5
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{F7F9094C-94B6-1098-0C4B-65A342445D1C}" = CCC Help German
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"{FF537B32-F77F-6FB0-AA78-83B05FDA8616}" = Catalyst Control Center InstallProxy
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"AFPL Ghostscript 8.54" = AFPL Ghostscript 8.54
"AFPL Ghostscript Fonts" = AFPL Ghostscript Fonts
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"B076073A-5527-4f4f-B46B-B10692277DA2_is1" = DisplayFusion 3.1.8.0
"CHIP System-Check-Tool_is1" = CHIP System-Check-Tool 1.1.9.15
"DivX Setup.divx.com" = DivX-Setup
"Elecard MPEG-2 Decoder&Streaming Plug-in for WMP 3.7.90209" = Elecard MPEG-2 Decoder&Streaming Plug-in for WMP
"EPSON BX300F Series" = Druckerdeinstallation für EPSON BX300F Series
"EPSON Scanner" = EPSON Scan
"EPSON Stylus Office BX300F_TX300F Benutzerhandbuch" = EPSON Stylus Office BX300F_TX300F Handbuch
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.5
"FUSSBALL MANAGER 10" = FUSSBALL MANAGER 10
"HijackThis" = HijackThis 2.0.2
"IsoBuster_is1" = IsoBuster 2.8
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.0.4 (Full)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"NVIDIA Drivers" = NVIDIA Drivers
"PDF Blender" = PDF Blender
"PokerStars" = PokerStars
"PROSet" = Intel(R) Network Connections Drivers
"SopCast" = SopCast 3.2.9
"Uninstall_is1" = Uninstall 1.0.0.1
"Veetle TV" = Veetle TV 0.9.17
"VLC media player" = VLC media player 1.0.5
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 21.08.2010 15:05:31 | Computer Name = Admin-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 21.08.2010 15:06:05 | Computer Name = Admin-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 21.08.2010 15:06:07 | Computer Name = Admin-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 21.08.2010 15:07:07 | Computer Name = Admin-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 21.08.2010 15:08:07 | Computer Name = Admin-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 22.08.2010 14:52:09 | Computer Name = Admin-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description = 
 
Error - 22.08.2010 14:52:09 | Computer Name = Admin-PC | Source = Microsoft-Windows-CAPI2 | ID = 131083
Description = 
 
Error - 22.08.2010 14:52:14 | Computer Name = Admin-PC | Source = WinMgmt | ID = 10
Description = 
 
Error - 22.08.2010 14:52:28 | Computer Name = Admin-PC | Source = RasClient | ID = 20227
Description = 
 
Error - 22.08.2010 14:53:50 | Computer Name = Admin-PC | Source = RasClient | ID = 20227
Description = 
 
[ System Events ]
Error - 07.07.2010 10:27:46 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:56:54 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:57:03 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:57:10 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:57:19 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:57:29 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:57:36 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:57:42 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:58:04 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
Error - 07.07.2010 10:58:13 | Computer Name = Admin-PC | Source = cdrom | ID = 262151
Description = Fehlerhafter Block bei Gerät \Device\CdRom0.
 
 
< End of report >