antivir meldet immer und mehrfach TR/Crypt.XPACK.Gen, wenn ich BitDefender ausführe

OTL logfile created on: 24.03.2011 20:07:00 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Jan\Desktop
64bit- An unknown product  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 57,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 74,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,65 Gb Total Space | 56,40 Gb Free Space | 57,75% Space Free | Partition Type: NTFS
Drive D: | 9,77 Gb Total Space | 9,69 Gb Free Space | 99,22% Space Free | Partition Type: NTFS
Drive E: | 488,75 Gb Total Space | 420,66 Gb Free Space | 86,07% Space Free | Partition Type: NTFS
Drive L: | 3,73 Gb Total Space | 3,62 Gb Free Space | 97,10% Space Free | Partition Type: FAT32
Drive M: | 465,65 Gb Total Space | 434,31 Gb Free Space | 93,27% Space Free | Partition Type: FAT32
 
Computer Name: JAN-DELL | User Name: Jan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2011.03.24 19:49:40 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Jan\Desktop\OTL.exe
PRC - [2011.03.23 20:58:02 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2011.03.17 13:29:25 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.01.30 16:45:14 | 000,821,144 | ---- | M] (Adobe Systems Inc.) -- E:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
PRC - [2011.01.27 16:51:05 | 002,253,688 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe
PRC - [2011.01.03 18:53:56 | 001,718,784 | ---- | M] (3CX Ltd) -- E:\Program Files (x86)\3CX Assistant\tcx.assistant.client.exe
PRC - [2011.01.03 18:52:34 | 000,307,200 | ---- | M] (3CX Ltd) -- E:\Program Files (x86)\3CX Assistant\CRM\3CX Assistant CRM.exe
PRC - [2011.01.03 18:51:08 | 000,458,752 | ---- | M] (3CX Ltd) -- E:\Program Files (x86)\3CX Assistant\3CXPhone.exe
PRC - [2010.11.30 18:12:47 | 000,135,336 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
PRC - [2010.11.30 18:12:37 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.07.19 11:46:28 | 002,251,864 | ---- | M] (3CX Software Ltd.) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXCP.exe
PRC - [2010.07.19 11:46:28 | 001,432,664 | ---- | M] (3CX Software Ltd.) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXTunnel.exe
PRC - [2010.07.19 11:46:26 | 003,927,128 | ---- | M] (3CX Software Ltd.) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXPhoneSystem.exe
PRC - [2010.07.19 11:46:26 | 002,948,184 | ---- | M] (3CX Software Ltd.) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXFaxServer.exe
PRC - [2010.07.19 11:46:26 | 002,202,712 | ---- | M] (3CX Software Ltd.) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXPO.exe
PRC - [2010.07.19 11:46:26 | 000,666,712 | ---- | M] (3CX Ltd) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXSLDBServ.exe
PRC - [2010.07.19 11:46:20 | 003,751,000 | ---- | M] (3CX Software Ltd.) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXIvrServer.exe
PRC - [2010.07.19 11:46:20 | 001,248,344 | ---- | M] (3CX Software Ltd.) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXMediaServer.exe
PRC - [2010.06.25 23:16:40 | 002,166,784 | ---- | M] () -- E:\Program Files (x86)\3CX PhoneSystem\Bin\VCEHost.exe
PRC - [2010.03.18 11:29:06 | 003,678,208 | ---- | M] (PostgreSQL Global Development Group) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\pgsql\bin\postgres.exe
PRC - [2010.03.18 11:29:06 | 000,065,536 | ---- | M] (PostgreSQL Global Development Group) -- E:\Program Files (x86)\3CX PhoneSystem\Bin\pgsql\bin\pg_ctl.exe
PRC - [2010.03.04 21:43:10 | 010,538,720 | ---- | M] (Priacta) -- E:\Program Files (x86)\Priacta\Trog Bar\Trog Bar.exe
PRC - [2009.07.14 02:14:47 | 000,254,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
PRC - [2009.03.05 16:07:20 | 002,260,480 | RHS- | M] (Safer-Networking Ltd.) -- E:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- E:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
 
 
========== Modules (SafeList) ==========
 
MOD - [2011.03.24 19:49:40 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Jan\Desktop\OTL.exe
MOD - [2011.01.30 15:58:50 | 000,126,976 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- E:\Program Files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas64-v1.5_45\plugin_registry.m32
MOD - [2011.01.30 15:58:49 | 000,233,472 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- E:\Program Files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas64-v1.5_45\plugin_nt.m32
MOD - [2011.01.30 15:58:47 | 000,098,304 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- E:\Program Files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas64-v1.5_45\plugin_net.m32
MOD - [2011.01.30 15:58:46 | 000,282,624 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- E:\Program Files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas64-v1.5_45\plugin_fragments.m32
MOD - [2011.01.30 15:58:44 | 000,172,032 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- E:\Program Files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas64-v1.5_45\plugin_extra.m32
MOD - [2011.01.30 15:58:43 | 000,122,880 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- E:\Program Files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas64-v1.5_45\plugin_base.m32
MOD - [2011.01.30 15:58:39 | 000,303,104 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) -- E:\Program Files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas64-v1.5_45\midas32.dll
MOD - [2010.08.21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV:64bit: - [2009.04.29 16:11:10 | 000,682,264 | ---- | M] (BitDefender SRL) [Auto | Running] -- C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe -- (LIVESRV)
SRV - [2011.03.18 09:51:04 | 003,229,784 | ---- | M] () [Auto | Running] -- c:\program files (x86)\common files\akamai\netsession_win_d76cf65.dll -- (Akamai)
SRV - [2011.03.17 13:29:25 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.01.27 16:51:05 | 002,253,688 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version6\TeamViewer_Service.exe -- (TeamViewer6)
SRV - [2010.11.30 18:12:47 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010.07.19 11:46:28 | 002,251,864 | ---- | M] (3CX Software Ltd.) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXCP.exe -- (3CXConferenceRoom)
SRV - [2010.07.19 11:46:28 | 001,432,664 | ---- | M] (3CX Software Ltd.) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXTunnel.exe -- (3CXTunnel)
SRV - [2010.07.19 11:46:26 | 003,927,128 | ---- | M] (3CX Software Ltd.) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXPhoneSystem.exe -- (3CXPhoneSystem)
SRV - [2010.07.19 11:46:26 | 002,948,184 | ---- | M] (3CX Software Ltd.) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXFaxServer.exe -- (3CXFAXSrv)
SRV - [2010.07.19 11:46:26 | 002,202,712 | ---- | M] (3CX Software Ltd.) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXPO.exe -- (3CXParkOrbit)
SRV - [2010.07.19 11:46:26 | 000,666,712 | ---- | M] (3CX Ltd) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXSLDBServ.exe -- (3CXCfgServ)
SRV - [2010.07.19 11:46:26 | 000,031,832 | ---- | M] (3CX) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXCallHistoryService.exe -- (3CXCallHistoryService)
SRV - [2010.07.19 11:46:22 | 000,565,848 | ---- | M] (3CX Ltd) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\Assistant\3CXAssistantServer.exe -- (3CXAssistantServer)
SRV - [2010.07.19 11:46:22 | 000,035,928 | ---- | M] (3CX) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXVoiceMailScanner.exe -- (3CXVBoxMgr)
SRV - [2010.07.19 11:46:20 | 003,751,000 | ---- | M] (3CX Software Ltd.) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXIvrServer.exe -- (3CXIvr)
SRV - [2010.07.19 11:46:20 | 001,248,344 | ---- | M] (3CX Software Ltd.) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\3CXMediaServer.exe -- (3CXMediaServer)
SRV - [2010.06.25 23:16:40 | 002,166,784 | ---- | M] () [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\VCEHost.exe -- (3CXQueueManager)
SRV - [2010.05.21 11:05:58 | 000,686,592 | ---- | M] (Aprelium) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\Webserver\abyssws.exe -- (AbyssWebServer)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.03.18 11:29:06 | 000,065,536 | ---- | M] (PostgreSQL Global Development Group) [Auto | Running] -- E:\Program Files (x86)\3CX PhoneSystem\Bin\pgsql\bin\pg_ctl.exe -- (3CX PhoneSystem Database Server)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2009.04.21 13:08:52 | 002,584,344 | ---- | M] (BitDefender S. R. L.) [Auto | Running] -- E:\Program Files\BitDefender\BitDefender 2009\vsserv.exe -- (VSSERV)
SRV - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) [Auto | Running] -- E:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe -- (SBSDWSCService)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.02.02 10:12:28 | 000,154,632 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\bdfm.sys -- (bdfm)
DRV:64bit: - [2010.11.30 18:13:02 | 000,116,568 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb)
DRV:64bit: - [2010.11.30 18:13:02 | 000,083,120 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt)
DRV:64bit: - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 21:35:20 | 000,278,016 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\e1e6032e.sys -- (e1express) Intel(R)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.04.06 16:44:42 | 000,313,352 | ---- | M] (BitDefender S.R.L. Bucharest, ROMANIA) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\bdfsfltr.sys -- (bdfsfltr)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://d8n4mx4j/argoweb/aaf001web/argomain.aspx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 41 23 41 03 8E BC CB 01  [binary data]
IE - HKCU\..\URLSearchHook: {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "https://encrypted.google.com/"
FF - prefs.js..extensions.enabledItems: KavAntiBanner@Kaspersky.ru:11.0.0.232
FF - prefs.js..extensions.enabledItems: linkfilter@kaspersky.ru:11.0.0.232
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: elemhidehelper@adblockplus.org:1.1
FF - prefs.js..extensions.enabledItems: adblockpopups@jessehakanen.net:0.2.2
FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.0
FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.48.3
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: web2pdfextension@web2pdf.adobedotcom:1.0
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.9.1.14019
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=SPC2&o=15000&locale=de_EU&apn_uid=66DD85BA-C92A-40D7-962E-7F28A7123A29&apn_ptnrs=PV&apn_sauid=D141EC4A-8700-46B2-9977-38798991AE28&apn_dtid=YYYYYYYYCH&q="
 
FF - HKLM\software\mozilla\Firefox\Extensions\\web2pdfextension@web2pdf.adobedotcom: E:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2011.02.17 16:08:25 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.03.23 20:58:02 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.16\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.03.23 20:58:02 | 000,000,000 | ---D | M]
 
[2011.01.25 13:57:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\Extensions
[2011.03.24 19:09:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\21utm4zw.default\extensions
[2011.03.08 15:21:52 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\21utm4zw.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2011.01.29 20:10:36 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\21utm4zw.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.01.29 20:10:36 | 000,000,000 | ---D | M] ("BetterPrivacy") -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\21utm4zw.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
[2011.02.17 16:43:15 | 000,000,000 | ---D | M] (Adblock Plus Pop-up Addon) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\21utm4zw.default\extensions\adblockpopups@jessehakanen.net
[2011.01.29 20:10:36 | 000,000,000 | ---D | M] (Element Hiding Helper for Adblock Plus) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\21utm4zw.default\extensions\elemhidehelper@adblockplus.org
[2011.02.26 19:33:15 | 000,000,000 | ---D | M] (Sopcast Ask Toolbar) -- C:\Users\Jan\AppData\Roaming\mozilla\Firefox\Profiles\21utm4zw.default\extensions\toolbar@ask.com
[2011.03.24 19:55:44 | 000,002,396 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\21utm4zw.default\searchplugins\askcom.xml
[2011.03.07 12:19:44 | 000,003,470 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\21utm4zw.default\searchplugins\wettercom.xml
[2011.01.26 00:58:54 | 000,000,983 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\21utm4zw.default\searchplugins\wortschatz-deutsch.xml
[2011.01.29 18:35:18 | 000,002,057 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\21utm4zw.default\searchplugins\youtube-videosuche.xml
[2011.03.08 09:26:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.01.29 13:33:53 | 000,000,000 | ---D | M] (Skype extension) -- C:\Program Files (x86)\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
[2011.01.30 16:52:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.03.08 09:26:36 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
File not found (No name found) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\EXTENSIONS\KAVANTIBANNER@KASPERSKY.RU
File not found (No name found) -- C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\EXTENSIONS\LINKFILTER@KASPERSKY.RU
[2011.02.17 16:08:25 | 000,000,000 | ---D | M] (Adobe Acrobat - Create PDF) -- E:\PROGRAM FILES (X86)\ADOBE\ACROBAT 10.0\ACROBAT\BROWSER\WCFIREFOXEXTN
[2011.02.02 21:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll
[2010.12.03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.12.03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.12.03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.12.03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.12.03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2011.01.28 23:48:22 | 000,429,287 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O1 - Hosts: 127.0.0.1	www.007guard.com
O1 - Hosts: 127.0.0.1	007guard.com
O1 - Hosts: 127.0.0.1	008i.com
O1 - Hosts: 127.0.0.1	www.008k.com
O1 - Hosts: 127.0.0.1	008k.com
O1 - Hosts: 127.0.0.1	www.00hq.com
O1 - Hosts: 127.0.0.1	00hq.com
O1 - Hosts: 127.0.0.1	010402.com
O1 - Hosts: 127.0.0.1	www.032439.com
O1 - Hosts: 127.0.0.1	032439.com
O1 - Hosts: 127.0.0.1	www.0scan.com
O1 - Hosts: 127.0.0.1	0scan.com
O1 - Hosts: 127.0.0.1	1000gratisproben.com
O1 - Hosts: 127.0.0.1	www.1000gratisproben.com
O1 - Hosts: 127.0.0.1	1001namen.com
O1 - Hosts: 127.0.0.1	www.1001namen.com
O1 - Hosts: 127.0.0.1	100888290cs.com
O1 - Hosts: 127.0.0.1	www.100888290cs.com
O1 - Hosts: 127.0.0.1	www.100sexlinks.com
O1 - Hosts: 127.0.0.1	100sexlinks.com
O1 - Hosts: 127.0.0.1	10sek.com
O1 - Hosts: 127.0.0.1	www.10sek.com
O1 - Hosts: 127.0.0.1	www.1-2005-search.com
O1 - Hosts: 127.0.0.1	1-2005-search.com
O1 - Hosts: 127.0.0.1	123fporn.info
O1 - Hosts: 14777 more lines...
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - E:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files (x86)\bin\jp2ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (Sopcast Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask)
O4:64bit: - HKLM..\Run: [BDAgent] E:\Program Files\BitDefender\BitDefender 2009\bdagent.exe (BitDefender S.R.L.)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [3CXAssistant] e:\Program Files (x86)\3CX Assistant\tcx.assistant.client.exe (3CX Ltd)
O4 - HKLM..\Run: [Acrobat Assistant 8.0] E:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] E:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [Trog Bar] E:\Program Files (x86)\Priacta\Trog Bar\Trog Bar.exe (Priacta)
O4 - HKCU..\Run: [Adobe Acrobat Synchronizer] E:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\AdobeCollabSync.exe (Adobe Systems Incorporated)
O4 - HKCU..\Run: [Speech Recognition] C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation)
O4 - HKCU..\Run: [SpybotSD TeaTimer] e:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3CXPhone.lnk = E:\Program Files (x86)\3CX Assistant\3CXPhone.exe (3CX Ltd)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 28
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8:64bit: - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: In Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: d8n4mx4j ([]http in Vertrauenswürdige Sites)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = **************
O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18 - Protocol\Handler\mso-offdap11 {32505114-5902-49B2-880A-1F7738E5A384} - C:\PROGRA~2\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.03.24 19:57:19 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT
[2011.03.24 19:56:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ERUNT
[2011.03.24 19:56:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT
[2011.03.24 19:46:52 | 000,791,393 | ---- | C] (Lars Hederer                                                ) -- C:\Users\Jan\Desktop\Erunt-setup.exe
[2011.03.24 19:46:52 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Users\Jan\Desktop\OTL.exe
[2011.03.24 19:46:52 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Users\Jan\Desktop\TFC.exe
[2011.03.22 14:47:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Delta Access
[2011.03.22 14:45:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Delta Access
[2011.03.17 19:09:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
[2011.03.17 19:09:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2011.03.17 19:08:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple
[2011.03.17 19:08:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update
[2011.03.11 15:22:14 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\ElevatedDiagnostics
[2011.03.11 14:46:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011.03.08 21:25:50 | 000,000,000 | --SD | C] -- C:\Users\Jan\Documents\Eigene Datenquellen
[2011.03.08 09:26:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2011.03.07 21:39:58 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Priacta
[2011.03.07 21:33:33 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Local\Priacta
[2011.03.07 21:33:27 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt
[2011.03.07 21:32:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trog Bar
[2011.03.07 21:31:11 | 006,723,072 | ---- | C] (Priacta) -- C:\Users\Jan\Desktop\TrogBarSetup.exe
[2011.03.01 08:40:07 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Avira
[2011.03.01 08:37:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2011.03.01 08:37:40 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys
[2011.03.01 08:37:40 | 000,083,120 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys
[2011.03.01 08:37:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2011.03.01 08:37:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
[2011.02.26 19:32:51 | 000,000,000 | ---D | C] -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SopCast
[2011.02.26 19:32:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SopCast
[2011.02.26 19:32:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ask.com
 
========== Files - Modified Within 30 Days ==========
 
[2011.03.24 19:59:31 | 000,014,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.03.24 19:59:31 | 000,014,848 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.03.24 19:56:51 | 000,000,924 | ---- | M] () -- C:\Users\Jan\Desktop\NTREGOPT.lnk
[2011.03.24 19:56:51 | 000,000,905 | ---- | M] () -- C:\Users\Jan\Desktop\ERUNT.lnk
[2011.03.24 19:55:35 | 001,621,744 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.03.24 19:55:35 | 000,701,532 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.03.24 19:55:35 | 000,656,244 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.03.24 19:55:35 | 000,149,816 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.03.24 19:55:35 | 000,122,604 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.03.24 19:53:35 | 000,000,899 | ---- | M] () -- C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\3CXPhone.lnk
[2011.03.24 19:51:50 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.03.24 19:51:45 | 3169,259,520 | -HS- | M] () -- C:\hiberfil.sys
[2011.03.24 19:50:40 | 000,081,984 | ---- | M] () -- C:\Windows\SysNative\bdod.bin
[2011.03.24 19:49:44 | 000,791,393 | ---- | M] (Lars Hederer                                                ) -- C:\Users\Jan\Desktop\Erunt-setup.exe
[2011.03.24 19:49:40 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Users\Jan\Desktop\OTL.exe
[2011.03.24 19:49:40 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Users\Jan\Desktop\TFC.exe
[2011.03.24 19:45:48 | 000,742,874 | ---- | M] () -- C:\Users\Jan\Desktop\Load.exe
[2011.03.18 11:09:10 | 000,053,102 | ---- | M] () -- C:\Users\Jan\Desktop\belastungsermaechtigung_winet_lsvplus_chf.pdf
[2011.03.17 19:09:19 | 000,001,606 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2011.03.13 12:40:23 | 000,005,701 | ---- | M] () -- C:\Users\Jan\Desktop\Anleitung.html
[2011.03.11 15:20:14 | 000,002,777 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft Office Outlook 2007.lnk
[2011.03.11 15:20:14 | 000,002,679 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft Office Word 2007.lnk
[2011.03.11 14:46:42 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.03.09 14:13:25 | 000,608,846 | ---- | M] () -- C:\Users\Jan\Desktop\stellplatz emmishofer strasse 4.jpg
[2011.03.08 21:37:51 | 000,040,414 | ---- | M] () -- C:\Users\Jan\Desktop\Dokument5.pdf
[2011.03.07 21:33:20 | 000,001,591 | ---- | M] () -- C:\Windows\GettingThingsDone.mif
[2011.03.07 21:32:23 | 000,000,862 | ---- | M] () -- C:\Users\Public\Desktop\Trog Bar.lnk
[2011.03.07 21:31:12 | 006,723,072 | ---- | M] (Priacta) -- C:\Users\Jan\Desktop\TrogBarSetup.exe
[2011.03.04 08:17:10 | 000,413,680 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.03.03 16:53:00 | 001,186,468 | ---- | M] () -- C:\Users\Jan\Desktop\Handbuch Angebote_Mailings.pdf
 
========== Files Created - No Company Name ==========
 
[2011.03.24 19:56:51 | 000,000,924 | ---- | C] () -- C:\Users\Jan\Desktop\NTREGOPT.lnk
[2011.03.24 19:56:51 | 000,000,905 | ---- | C] () -- C:\Users\Jan\Desktop\ERUNT.lnk
[2011.03.24 19:45:50 | 000,742,874 | ---- | C] () -- C:\Users\Jan\Desktop\Load.exe
[2011.03.18 11:06:00 | 000,053,102 | ---- | C] () -- C:\Users\Jan\Desktop\belastungsermaechtigung_winet_lsvplus_chf.pdf
[2011.03.17 19:09:19 | 000,001,606 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk
[2011.03.17 19:08:05 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2011.03.13 12:41:14 | 000,005,701 | ---- | C] () -- C:\Users\Jan\Desktop\Anleitung.html
[2011.03.11 15:20:14 | 000,002,777 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Office Outlook 2007.lnk
[2011.03.11 15:20:14 | 000,002,679 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft Office Word 2007.lnk
[2011.03.11 14:46:42 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011.03.11 14:46:42 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.03.09 14:13:25 | 000,608,846 | ---- | C] () -- C:\Users\Jan\Desktop\stellplatz emmishofer strasse 4.jpg
[2011.03.08 21:37:51 | 000,040,414 | ---- | C] () -- C:\Users\Jan\Desktop\Dokument5.pdf
[2011.03.07 21:32:23 | 000,000,862 | ---- | C] () -- C:\Users\Public\Desktop\Trog Bar.lnk
[2011.03.03 16:53:00 | 001,186,468 | ---- | C] () -- C:\Users\Jan\Desktop\Handbuch Angebote_Mailings.pdf
[2011.02.07 21:18:41 | 000,004,608 | ---- | C] () -- C:\Users\Jan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.29 13:35:16 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2011.01.25 13:57:17 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2011.01.25 13:56:27 | 001,587,628 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.01.25 13:50:31 | 000,003,096 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010.03.18 11:28:44 | 000,916,849 | ---- | C] () -- C:\Windows\SysWow64\libiconv-2.dll
[2010.03.18 11:28:44 | 000,188,491 | ---- | C] () -- C:\Windows\SysWow64\libpq.dll
[2010.03.18 11:28:44 | 000,110,592 | ---- | C] () -- C:\Windows\SysWow64\pgxalib.dll
[2010.03.18 11:28:44 | 000,094,208 | ---- | C] () -- C:\Windows\SysWow64\pgenlista.dll
[2010.03.18 11:28:44 | 000,094,208 | ---- | C] () -- C:\Windows\SysWow64\pgenlist.dll
[2010.03.18 11:28:44 | 000,051,016 | ---- | C] () -- C:\Windows\SysWow64\libintl-2.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
 
========== LOP Check ==========
 
[2011.02.07 19:51:45 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\3CX Assistant
[2011.02.07 19:52:16 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\3CX Assistant CRM Integration
[2011.01.29 01:10:14 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\BitDefender
[2011.03.24 10:06:40 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\Delta Access
[2011.01.30 16:56:53 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\f-secure
[2011.01.25 16:27:00 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\Install
[2011.01.26 19:05:19 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\Local
[2011.02.07 17:05:44 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\NetCentrics
[2011.03.07 21:40:01 | 000,000,000 | ---D | M] -- C:\Users\Jan\AppData\Roaming\Priacta
[2009.07.14 06:08:49 | 000,020,790 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.01.25 13:40:32 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2011.01.25 13:24:37 | 000,000,000 | -HSD | M] -- C:\Boot
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.01.25 13:40:18 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2011.01.25 14:10:51 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2011.01.29 20:33:49 | 000,000,000 | R--D | M] -- C:\Programme
[2011.03.24 19:56:51 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2011.03.22 14:47:03 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.01.25 13:40:18 | 000,000,000 | -HSD | M] -- C:\Programme
[2011.01.25 13:40:18 | 000,000,000 | -HSD | M] -- C:\Recovery
[2011.03.24 20:00:28 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.01.25 13:40:25 | 000,000,000 | R--D | M] -- C:\Users
[2011.03.24 19:57:19 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: EXPLORER.EXE  >
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\SysWOW64\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2009.08.03 07:19:07 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\explorer.exe
[2009.10.31 07:34:59 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2009.10.31 07:38:38 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2009.08.03 07:17:37 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
 
< MD5 for: USERINIT.EXE  >
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe
[2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2009.10.28 08:01:57 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe
[2009.10.28 07:24:40 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >

< End of report >
         

OTL Extras logfile created on: 24.03.2011 20:07:00 - Run 1
OTL by OldTimer - Version 3.2.22.3     Folder = C:\Users\Jan\Desktop
64bit- An unknown product  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 57,00% Memory free
8,00 Gb Paging File | 6,00 Gb Available in Paging File | 74,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 97,65 Gb Total Space | 56,40 Gb Free Space | 57,75% Space Free | Partition Type: NTFS
Drive D: | 9,77 Gb Total Space | 9,69 Gb Free Space | 99,22% Space Free | Partition Type: NTFS
Drive E: | 488,75 Gb Total Space | 420,66 Gb Free Space | 86,07% Space Free | Partition Type: NTFS
Drive L: | 3,73 Gb Total Space | 3,62 Gb Free Space | 97,10% Space Free | Partition Type: FAT32
Drive M: | 465,65 Gb Total Space | 434,31 Gb Free Space | 93,27% Space Free | Partition Type: FAT32
 
Computer Name: JAN-DELL | User Name: Jan | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = ChromeHTML] -- Reg Error: Key error. File not found
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" File not found
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
http [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1"
https [open] -- "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" -- "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02382870-19C7-3ACD-BBAE-F6E3760947DC}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{44B436FA-FB33-4B24-8AD1-D8C9A50474E9}" = BitDefender Free Edition 2009
"{54D5AEEB-EBD9-4C0D-930D-98712597320C}" = 3CX Assistant
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{B87F2B5D-99D0-42B8-A34E-5AA549D6E220}" = 3CX PhoneSystem
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216023FF}" = Java(TM) 6 Update 24
"{388E4B09-3E71-4649-8921-F44A3A2954A7}" = Microsoft Visual Studio 2005 Tools for Office Runtime
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{54F710E8-6D75-4EC1-8F3F-D86631E64D20}" = Trog Bar
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{86D4B82A-ABED-442A-BE86-96357B70F4FE}" = Ask Toolbar
"{86EF9EB6-DE10-4ABB-B221-D61972BB3C09}" = Collaboration Data Objects 1.2.1
"{8A725CEB-7A4B-410F-A0CF-4FC4D9712E0A}" = AAFOutlookCTI
"{90120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{90120000-0014-0000-0000-0000000FF1CE}_PRO_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0014-0000-0000-0000000FF1CE}_PRO_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_PRO_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_PRO_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_PRO_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_PRO_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_PRO_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_PRO_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_PRO_{A0516415-ED61-419A-981D-93596DA74165}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PRO_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PRO_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_PRO_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_PRO_{E64BA721-2310-4B55-BE5A-2925F9706192}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002A-0407-1000-0000000FF1CE}_PRO_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_PRO_{26454C26-D259-4543-AA60-3189E09C5F76}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A4-0409-0000-0000000FF1CE}" = Microsoft Office 2003 Web Components
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{AC76BA86-1033-F400-7760-000000000005}" = Adobe Acrobat X Pro - English, Français, Deutsch
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X (10.0.1) - Deutsch
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{D98D9F77-0760-4850-9F33-54811BBE96F5}" = AAFClientPackages
"{DE042823-C359-4B87-B66B-308057E8B6AF}" = Camtasia Studio 7
"{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}" = Skype™ 5.1
"{EE6097DD-05F4-4178-9719-D3170BF098E8}" = Apple Application Support
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Akamai" = Akamai NetSession Interface
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"ERUNT_is1" = ERUNT 1.1j
"HijackThis" = HijackThis 2.0.2
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft Visual Studio 2005 Tools for Office Runtime" = Visual Studio 2005 Tools for Office Second Edition Runtime
"Mozilla Firefox (3.6.16)" = Mozilla Firefox (3.6.16)
"PRO" = Microsoft Office Professional 2007
"SopCast" = SopCast 3.3.2
"TeamViewer 6" = TeamViewer 6
"Veetle TV" = Veetle TV 0.9.18
"VLC media player" = VLC media player 1.1.6
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"OTS BAU-I Vorgangsbearbeitung" = OTS BAU-I Vorgangsbearbeitung
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 21.03.2011 07:30:18 | Computer Name = Jan-Dell.************** | Source = SideBySide | ID = 16842824
Description = Fehler beim Generieren des Aktivierungskontextes für "e:\Program Files
 (x86)\3CX Assistant\CRM\3CX Assistant Microsoft Outlook Addin\3CX Assistant Microsoft
 Outlook Addin.dll.Manifest". Fehler in Manifest- oder Richtliniendatei "e:\Program
 Files (x86)\3CX Assistant\CRM\3CX Assistant Microsoft Outlook Addin\3CX Assistant
 Microsoft Outlook Addin.dll.Manifest" in Zeile 4.  Das asmv2:clrClassInvocation-Element
 wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements
 angezeigt, das von dieser Windows-Version nicht unterstützt wird.
 
Error - 21.03.2011 07:31:19 | Computer Name = Jan-Dell.************** | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "e:\program files
 (x86)\spybot - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei
 "e:\program files (x86)\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der
 Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 22.03.2011 04:04:41 | Computer Name = Jan-Dell.************** | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: sapisvr.exe, Version: 5.3.11513.0,
 Zeitstempel: 0x4a5bd271  Name des fehlerhaften Moduls: spsreng.dll, Version: 8.0.7600.16385,
 Zeitstempel: 0x4a5be06c  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0000000000087287
ID
 des fehlerhaften Prozesses: 0x1398  Startzeit der fehlerhaften Anwendung: 0x01cbe8677179b0dc
Pfad
 der fehlerhaften Anwendung: C:\Windows\Speech\Common\sapisvr.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\System32\Speech\Engines\SR\spsreng.dll  Berichtskennung: 09c2fd7f-545b-11e0-82d5-0019d12a83a4
 
Error - 22.03.2011 09:46:22 | Computer Name = Jan-Dell.************** | Source = MsiInstaller | ID = 11308
Description = 
 
Error - 22.03.2011 12:18:07 | Computer Name = Jan-Dell.************** | Source = SideBySide | ID = 16842761
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
 (x86)\Delta Access\argo.web\CollaborationExtensions\adxloader.dll.Manifest". Fehler
 in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Delta Access\argo.web\CollaborationExtensions\adxloader.dll.Manifest"
 in Zeile 2.  Das Stammelement der Manifestdatei muss assembliert sein.
 
Error - 22.03.2011 12:18:46 | Computer Name = Jan-Dell.************** | Source = SideBySide | ID = 16842824
Description = Fehler beim Generieren des Aktivierungskontextes für "e:\Program Files
 (x86)\3CX Assistant\CRM\3CX Assistant Microsoft Outlook Addin\3CX Assistant Microsoft
 Outlook Addin.dll.Manifest". Fehler in Manifest- oder Richtliniendatei "e:\Program
 Files (x86)\3CX Assistant\CRM\3CX Assistant Microsoft Outlook Addin\3CX Assistant
 Microsoft Outlook Addin.dll.Manifest" in Zeile 4.  Das asmv2:clrClassInvocation-Element
 wird als untergeordnetes Element des urn:schemas-microsoft-com:asm.v1^entryPoint-Elements
 angezeigt, das von dieser Windows-Version nicht unterstützt wird.
 
Error - 22.03.2011 12:19:46 | Computer Name = Jan-Dell.************** | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "e:\program files
 (x86)\spybot - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei
 "e:\program files (x86)\spybot - search & destroy\DelZip179.dll" in Zeile 8.  Der
 Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
 
Error - 22.03.2011 13:38:28 | Computer Name = Jan-Dell.************** | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: wmpnetwk.exe, Version: 12.0.7600.16385,
 Zeitstempel: 0x4a5bd03d  Name des fehlerhaften Moduls: midas64.dll, Version: 0.5.1633.2369,
 Zeitstempel: 0x4acc719f  Ausnahmecode: 0xc00000fd  Fehleroffset: 0x000000000000de26
ID
 des fehlerhaften Prozesses: 0x9f0  Startzeit der fehlerhaften Anwendung: 0x01cbe8677c07b8ee
Pfad
 der fehlerhaften Anwendung: C:\Program Files\Windows Media Player\wmpnetwk.exe  Pfad
 des fehlerhaften Moduls: E:\Program Files\BitDefender\BitDefender 2009\BitDefender
 InnerFire\midas64-v1.5_45\midas64.dll  Berichtskennung: 31ee7c02-54ab-11e0-82d5-0019d12a83a4
 
Error - 23.03.2011 06:06:45 | Computer Name = Jan-Dell.************** | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: sapisvr.exe, Version: 5.3.11513.0,
 Zeitstempel: 0x4a5bd271  Name des fehlerhaften Moduls: spsreng.dll, Version: 8.0.7600.16385,
 Zeitstempel: 0x4a5be06c  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0000000000087287
ID
 des fehlerhaften Prozesses: 0x1320  Startzeit der fehlerhaften Anwendung: 0x01cbe941d256aaeb
Pfad
 der fehlerhaften Anwendung: C:\Windows\Speech\Common\sapisvr.exe  Pfad des fehlerhaften
 Moduls: C:\Windows\System32\Speech\Engines\SR\spsreng.dll  Berichtskennung: 41b870c6-5535-11e0-91b3-0019d12a83a4
 
Error - 24.03.2011 14:46:54 | Computer Name = Jan-Dell.************** | Source = SideBySide | ID = 16842811
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Users\Jan\Desktop\Erunt-setup.exe".
 Fehler in Manifest- oder Richtliniendatei "C:\Users\Jan\Desktop\Erunt-setup.exe"
 in Zeile 10.  Ungültige XML-Syntax.
 
[ OSession Events ]
Error - 20.02.2011 14:29:33 | Computer Name = Jan-Dell.************** | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 28608
 seconds with 240 seconds of active time.  This session ended with a crash.
 
Error - 21.02.2011 02:59:40 | Computer Name = Jan-Dell.************** | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 6, Application Name: Microsoft Office Outlook, Application Version:
 12.0.6550.5003, Microsoft Office Version: 12.0.6425.1000. This session lasted 293
 seconds with 120 seconds of active time.  This session ended with a crash.
 
[ System Events ]
Error - 22.03.2011 13:38:26 | Computer Name = Jan-Dell.************** | Source = Microsoft-Windows-GroupPolicy | ID = 1058
Description = Fehler bei der Verarbeitung der Gruppenrichtlinie. Der Versuch, die
 Datei "\\**************\sysvol\**************\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini"
 von einem Domänencontroller zu lesen, war nicht erfolgreich. Die Gruppenrichtlinieneinstellungen
 dürfen nicht angewendet werden, bis dieses Ereignis behoben ist. Dies ist möglicherweise
 ein vorübergehendes Problem, das mindestens eine der folgenden Ursachen haben kann:
   a) Namensauflösung/Netzwerkverbindung mit dem aktuellen Domänencontroller.   b) Wartezeit
 des Dateireplikationsdienstes (eine auf einem anderen Domänencontroller erstellte
 Datei hat nicht auf dem aktuellen Domänencontroller repliziert).   c) Der DFS-Client
 (Distributed File System) wurde deaktiviert.
 
Error - 22.03.2011 13:38:44 | Computer Name = Jan-Dell.************** | Source = Service Control Manager | ID = 7011
Description = Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung
 von Dienst WMPNetworkSvc erreicht.
 
Error - 22.03.2011 13:39:02 | Computer Name = Jan-Dell.************** | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet
 beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden
 in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 23.03.2011 05:42:32 | Computer Name = Jan-Dell.************** | Source = NETLOGON | ID = 5719
Description = Der Computer konnte eine sichere Sitzung mit einem  Domänencontroller
 in der Domäne *************  aufgrund der folgenden  Ursache nicht einrichten:   %%1311

Dies
 kann zu Authentifizierungsproblemen führen. Stellen  Sie sicher, dass der Computer
 mit dem Netzwerk verbunden ist.  Wenden Sie sich an den Domänenadministrator, wenn
 das Problem  weiterhin besteht.        ZUSÄTZLICHE INFORMATIONEN    Wenn dieser Computer ein 
Domänencontroller der bestimmten  Domäne ist, wird eine sichere Sitzung zum primären
Domänencontrolleremulator
 in der bestimmten Domäne eingerichtet.  Andernfalls richtet dieser Computer eine 
sichere Sitzung zu  einem beliebigen Domänencontroller in der bestimmten Domäne ein.
 
Error - 23.03.2011 05:42:40 | Computer Name = Jan-Dell.************** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "BDSelfPr" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
Error - 23.03.2011 05:42:55 | Computer Name = Jan-Dell.************** | Source = Microsoft-Windows-GroupPolicy | ID = 1129
Description = Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender 
Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann
 eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn
 die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde 
und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere 
Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.
 
Error - 24.03.2011 03:12:27 | Computer Name = Jan-Dell.************** | Source = NETLOGON | ID = 5719
Description = Der Computer konnte eine sichere Sitzung mit einem  Domänencontroller
 in der Domäne ********** aufgrund der folgenden  Ursache nicht einrichten:   %%1311

Dies
 kann zu Authentifizierungsproblemen führen. Stellen  Sie sicher, dass der Computer
 mit dem Netzwerk verbunden ist.  Wenden Sie sich an den Domänenadministrator, wenn
 das Problem  weiterhin besteht.        ZUSÄTZLICHE INFORMATIONEN    Wenn dieser Computer ein 
Domänencontroller der bestimmten  Domäne ist, wird eine sichere Sitzung zum primären
Domänencontrolleremulator
 in der bestimmten Domäne eingerichtet.  Andernfalls richtet dieser Computer eine 
sichere Sitzung zu  einem beliebigen Domänencontroller in der bestimmten Domäne ein.
 
Error - 24.03.2011 03:12:36 | Computer Name = Jan-Dell.************** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "BDSelfPr" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
Error - 24.03.2011 03:12:43 | Computer Name = Jan-Dell.************** | Source = Microsoft-Windows-GroupPolicy | ID = 1129
Description = Bei der Verarbeitung der Gruppenrichtlinie ist aufgrund fehlender 
Netzwerkkonnektivität mit einem Domänencontroller ein Fehler aufgetreten. Dies kann
 eine vorübergehende Bedingung sein. Es wird eine Erfolgsmeldung generiert, wenn
 die Verbindung des Computers mit dem Domänencontroller wiederhergestellt wurde 
und wenn die Gruppenrichtlinie erfolgreich verarbeitet wurde. Falls für mehrere 
Stunden keine Erfolgsmeldung angezeigt wird, wenden Sie sich an den Administrator.
 
Error - 24.03.2011 14:52:26 | Computer Name = Jan-Dell.************** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "BDSelfPr" wurde aufgrund folgenden Fehlers nicht gestartet:
   %%2
 
 
< End of report >