Trojaner-Board - Elektroshop Wagner

Hallo TB

Vor 2 Tagen habe ich eine E-mail mit einer Rechnung erhalten.
Da sie sehr echt aussah und ich keine Schwierigkeiten haben wollte, habe ich den Anhang bzw. das Archiv geöffnet, aber nicht entpackt. Als ich jedoch sah, dass sich darin eine scr-Datei befand habe ich das Archiv mit meinem AVP durchsuchen lassen und den Befund auch vom AVP löschen lassen.

Im Internet steht, dass das bloße betrachten eines Archives den PC nicht infizieren kann, da jedoch mein PC ungefär seitdem viel länger brauch, um zu starten, möchte ich mich doch nochmal bei euch vergewissern, ob alles i. O. ist.

Ich habe dem PC einen Vollscan vom AVP durchführen lassen und dabei nichts gefunden.

Defogger:

Code:

defogger_disable by jpshortstuff (23.02.10.1)

Log created at 12:39 on 23/05/2013 (Daniel)
 

Checking for autostart values...

HKCU\~\Run values retrieved.

HKLM\~\Run values retrieved.
 

Checking for services/drivers...
 
 

-=E.O.F=-

OTL:

Code:

OTL logfile created on: 23.05.2013 12:40:52 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Daniel\Desktop

64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16576)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

7,98 Gb Total Physical Memory | 6,49 Gb Available Physical Memory | 81,32% Memory free

15,96 Gb Paging File | 14,52 Gb Available in Paging File | 91,00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 232,79 Gb Total Space | 120,93 Gb Free Space | 51,95% Space Free | Partition Type: NTFS

 

Computer Name: DANIEL-PC | User Name: Daniel | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Processes (SafeList) ==========

 

PRC - [2013.05.23 12:26:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe

PRC - [2013.05.11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

PRC - [2013.05.09 10:58:30 | 004,858,968 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe

PRC - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe

PRC - [2013.03.14 22:07:46 | 000,383,264 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

 

 
 ========== Modules (No Company Name) ==========

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - [2012.08.06 12:24:22 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)

SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)

SRV - [2013.05.16 23:11:03 | 000,053,248 | ---- | M] () [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe -- (BEService)

SRV - [2013.05.15 12:08:44 | 002,467,664 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)

SRV - [2013.05.15 10:16:19 | 000,256,904 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)

SRV - [2013.05.11 12:37:26 | 000,065,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)

SRV - [2013.05.09 10:58:30 | 000,046,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)

SRV - [2013.05.04 01:35:30 | 000,543,656 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)

SRV - [2013.05.01 18:14:00 | 004,481,144 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)

SRV - [2013.04.11 21:41:41 | 000,115,608 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)

SRV - [2013.03.15 07:53:06 | 001,266,464 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)

SRV - [2013.03.14 22:07:46 | 000,383,264 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)

SRV - [2013.02.28 18:45:16 | 000,161,384 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)

SRV - [2012.12.17 11:39:34 | 000,678,416 | ---- | M] () [Auto | Running] -- C:\Programme\EslWire\service\WireHelperSvc.exe -- (EslWireHelper)

SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)

SRV - [2010.02.19 13:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)

SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - [2013.05.09 10:59:07 | 001,025,808 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)

DRV:64bit: - [2013.05.09 10:59:07 | 000,378,432 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)

DRV:64bit: - [2013.05.09 10:59:07 | 000,189,936 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswVmm.sys -- (aswVmm)

DRV:64bit: - [2013.05.09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)

DRV:64bit: - [2013.05.09 10:59:07 | 000,065,336 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\aswRvrt.sys -- (aswRvrt)

DRV:64bit: - [2013.05.09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)

DRV:64bit: - [2013.05.09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)

DRV:64bit: - [2013.05.09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)

DRV:64bit: - [2012.12.19 07:41:52 | 000,194,488 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)

DRV:64bit: - [2012.12.17 11:39:26 | 000,160,784 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC)

DRV:64bit: - [2012.08.23 16:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)

DRV:64bit: - [2012.08.23 16:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)

DRV:64bit: - [2012.08.23 16:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)

DRV:64bit: - [2012.08.07 09:09:00 | 000,088,832 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)

DRV:64bit: - [2012.08.07 09:09:00 | 000,065,152 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)

DRV:64bit: - [2012.03.30 16:49:08 | 000,056,448 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)

DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)

DRV:64bit: - [2011.09.29 11:30:34 | 000,646,248 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)

DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)

DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)

DRV:64bit: - [2010.11.21 05:23:48 | 000,071,168 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dmvsc.sys -- (dmvsc)

DRV:64bit: - [2010.11.21 05:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)

DRV:64bit: - [2010.02.18 09:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)

DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)

DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)

DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)

DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)

DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)

DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)

DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)

DRV:64bit: - [2009.03.18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)

DRV - [2012.03.05 16:04:30 | 000,053,888 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.1)

DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0E 14 0F 34 3F 31 CE 01  [binary data]

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..extensions.enabledAddons: %7Bb9db16a4-6edc-47ec-a1f4-b86292ed211d%7D:4.9.14

FF - prefs.js..extensions.enabledAddons: %7B5384767E-00D9-40E9-B72F-9CC39D655D6F%7D:1.4.2.1

FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:20.0.1

FF - user.js - File not found

 

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.6: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()

FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)

FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.21.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)

FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll File not found

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2013.05.19 22:14:01 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.04.11 21:41:41 | 000,000,000 | ---D | M]

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2013.04.11 21:41:41 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 20.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

 

[2013.04.04 17:21:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\Extensions

[2013.05.09 21:10:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\Firefox\Profiles\3qducp2b.default\extensions

[2013.04.07 02:04:46 | 000,000,000 | ---D | M] (EPUBReader) -- C:\Users\Daniel\AppData\Roaming\mozilla\Firefox\Profiles\3qducp2b.default\extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F}

[2013.04.06 23:12:13 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Users\Daniel\AppData\Roaming\mozilla\Firefox\Profiles\3qducp2b.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

[2013.05.09 21:10:32 | 000,870,680 | ---- | M] () (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\firefox\profiles\3qducp2b.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

[2013.04.11 21:41:37 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions

[2013.04.11 21:41:41 | 000,263,064 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll

[2013.03.27 05:32:09 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml

[2013.03.27 05:32:09 | 000,002,465 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml

[2013.03.27 05:32:09 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml

[2013.03.27 05:32:09 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml

[2013.03.27 05:32:09 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml

[2013.03.27 05:32:09 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)

O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)

O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)

O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)

O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)

O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)

O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)

O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)

O4 - HKCU..\Run: [Steam] C:\Program Files (x86)\Steam\Steam.exe (Valve Corporation)

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2E32E2F3-EB92-4061-8B3A-FF9CD7B1A3D8}: DhcpNameServer = 192.168.178.1

O18:64bit: - Protocol\Handler\skype4com - No CLSID value found

O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)

O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2013.05.23 12:26:15 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe

[2013.05.23 12:08:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

[2013.05.23 12:08:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi

[2013.05.20 23:12:15 | 004,481,144 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\GameMon.des

[2013.05.20 23:12:08 | 000,004,682 | ---- | C] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\npptNT2.sys

[2013.05.20 23:11:51 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\INCA Shared

[2013.05.20 23:01:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\gPotato.eu

[2013.05.20 22:54:44 | 000,000,000 | ---D | C] -- C:\Program Files\gPotato.eu

[2013.05.16 23:11:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\BattlEye

[2013.05.16 23:02:10 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\Keys

[2013.05.16 23:02:08 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\@Dayz

[2013.05.16 22:41:59 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\DayZCommander

[2013.05.16 22:41:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dotjosh Studios

[2013.05.16 22:41:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Dotjosh Studios

[2013.05.16 22:39:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Bohemia Interactive Studio

[2013.05.16 22:37:42 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\ArmA 2 OA

[2013.05.16 20:09:55 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Documents\ArmA 2

[2013.05.16 20:09:55 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\ArmA 2

[2013.05.16 20:09:53 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

[2013.05.16 20:09:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bohemia Interactive

[2013.05.16 11:46:11 | 000,000,000 | ---D | C] -- C:\ProgramData\TrackMania

[2013.05.16 11:45:59 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Documents\TrackMania

[2013.05.16 11:20:15 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

[2013.05.16 11:06:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

[2013.05.16 11:06:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam

[2013.05.16 11:06:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam

[2013.05.15 22:29:07 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\vlc

[2013.05.15 20:46:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

[2013.05.15 20:46:28 | 000,000,000 | ---D | C] -- C:\Program Files\VideoLAN

[2013.05.15 20:01:45 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\Bewrbung

[2013.05.14 18:09:50 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\weimar

[2013.05.09 21:22:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy

[2013.05.09 21:22:45 | 000,000,000 | ---D | C] -- C:\Program Files\Speccy

[2013.05.02 17:18:24 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\1.5.1 backup

[2013.05.02 17:18:01 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\Minecraft 1.4.7 Kostenlose Vollversion downloaden [deutsch german HD Tutorial]

[2013.04.30 17:50:47 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\testserver

[2013.04.30 12:12:47 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\Backup_Brigitta

[2013.04.25 13:39:23 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe

[2013.04.25 13:36:36 | 000,000,000 | ---D | C] -- C:\Program Files\Adobe

[2013.04.25 13:36:15 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Adobe

[2013.04.25 13:33:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR

[2013.04.24 16:30:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java

 
 ========== Files - Modified Within 30 Days ==========

 

[2013.05.23 12:39:29 | 000,000,000 | ---- | M] () -- C:\Users\Daniel\defogger_reenable

[2013.05.23 12:26:17 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Daniel\Desktop\OTL.exe

[2013.05.23 12:25:33 | 000,050,477 | ---- | M] () -- C:\Users\Daniel\Desktop\Defogger.exe

[2013.05.23 12:16:00 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job

[2013.05.23 12:14:21 | 000,022,640 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

[2013.05.23 12:14:21 | 000,022,640 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

[2013.05.23 12:05:42 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat

[2013.05.23 12:05:37 | 2132,729,855 | -HS- | M] () -- C:\hiberfil.sys

[2013.05.20 23:01:42 | 000,000,950 | ---- | M] () -- C:\Users\Public\Desktop\Rappelz.lnk

[2013.05.19 22:14:02 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt

[2013.05.19 01:51:45 | 000,007,760 | ---- | M] () -- C:\Users\Daniel\Documents\cc_20130519_015139.reg

[2013.05.19 00:49:43 | 000,531,407 | ---- | M] () -- C:\Users\Daniel\Desktop\rot1.jpg

[2013.05.19 00:47:39 | 000,337,467 | ---- | M] () -- C:\Users\Daniel\Desktop\rot.jpg

[2013.05.19 00:40:58 | 000,085,970 | ---- | M] () -- C:\Users\Daniel\Desktop\405677_465433983539725_68627201_n.jpg

[2013.05.18 14:07:16 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI

[2013.05.18 14:07:16 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat

[2013.05.18 14:07:16 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat

[2013.05.18 14:07:16 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat

[2013.05.18 14:07:16 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat

[2013.05.16 22:41:47 | 000,001,336 | ---- | M] () -- C:\Users\Public\Desktop\DayZ Commander.lnk

[2013.05.16 22:37:16 | 000,000,222 | ---- | M] () -- C:\Users\Daniel\Desktop\Arma 2 Operation Arrowhead Beta.url

[2013.05.16 20:11:32 | 000,000,221 | ---- | M] () -- C:\Users\Daniel\Desktop\Arma 2 Operation Arrowhead.url

[2013.05.16 11:26:47 | 000,000,221 | ---- | M] () -- C:\Users\Daniel\Desktop\TrackMania Nations Forever.url

[2013.05.16 11:20:15 | 000,000,221 | ---- | M] () -- C:\Users\Daniel\Desktop\Arma 2.url

[2013.05.16 11:06:57 | 000,000,917 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk

[2013.05.15 20:46:55 | 000,000,871 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk

[2013.05.15 12:13:47 | 000,019,220 | ---- | M] () -- C:\Users\Daniel\Documents\cc_20130515_121343.reg

[2013.05.15 08:53:21 | 004,829,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT

[2013.05.15 08:41:41 | 000,025,185 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf

[2013.05.15 08:41:41 | 000,025,185 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf

[2013.05.09 21:22:46 | 000,000,796 | ---- | M] () -- C:\Users\Public\Desktop\Speccy.lnk

[2013.05.09 21:21:53 | 000,000,822 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk

[2013.05.09 10:59:07 | 001,025,808 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys

[2013.05.09 10:59:07 | 000,378,432 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys

[2013.05.09 10:59:07 | 000,189,936 | ---- | M] () -- C:\Windows\SysNative\drivers\aswVmm.sys

[2013.05.09 10:59:07 | 000,072,016 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys

[2013.05.09 10:59:07 | 000,065,336 | ---- | M] () -- C:\Windows\SysNative\drivers\aswRvrt.sys

[2013.05.09 10:59:07 | 000,064,288 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys

[2013.05.09 10:59:06 | 000,080,816 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys

[2013.05.09 10:59:06 | 000,033,400 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys

[2013.05.09 10:58:37 | 000,041,664 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr

[2013.05.09 10:58:11 | 000,287,840 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe

[2013.05.02 17:51:42 | 054,912,394 | ---- | M] () -- C:\Users\Daniel\Desktop\Minecraft 1.4.7.rar

[2013.05.01 18:14:00 | 004,481,144 | ---- | M] (INCA Internet Co., Ltd.) -- C:\Windows\SysWow64\GameMon.des

[2013.04.30 18:02:55 | 022,311,722 | ---- | M] () -- C:\Users\Daniel\Desktop\region.rar

 
 ========== Files Created - No Company Name ==========

 

[2013.05.23 12:39:29 | 000,000,000 | ---- | C] () -- C:\Users\Daniel\defogger_reenable

[2013.05.23 12:25:32 | 000,050,477 | ---- | C] () -- C:\Users\Daniel\Desktop\Defogger.exe

[2013.05.20 23:12:08 | 000,005,174 | ---- | C] () -- C:\Windows\SysWow64\nppt9x.vxd

[2013.05.20 23:01:42 | 000,000,950 | ---- | C] () -- C:\Users\Public\Desktop\Rappelz.lnk

[2013.05.19 01:51:43 | 000,007,760 | ---- | C] () -- C:\Users\Daniel\Documents\cc_20130519_015139.reg

[2013.05.19 00:49:41 | 000,531,407 | ---- | C] () -- C:\Users\Daniel\Desktop\rot1.jpg

[2013.05.19 00:47:33 | 000,337,467 | ---- | C] () -- C:\Users\Daniel\Desktop\rot.jpg

[2013.05.19 00:40:57 | 000,085,970 | ---- | C] () -- C:\Users\Daniel\Desktop\405677_465433983539725_68627201_n.jpg

[2013.05.16 22:41:47 | 000,001,336 | ---- | C] () -- C:\Users\Public\Desktop\DayZ Commander.lnk

[2013.05.16 22:37:09 | 000,000,222 | ---- | C] () -- C:\Users\Daniel\Desktop\Arma 2 Operation Arrowhead Beta.url

[2013.05.16 20:11:31 | 000,000,221 | ---- | C] () -- C:\Users\Daniel\Desktop\Arma 2 Operation Arrowhead.url

[2013.05.16 11:26:47 | 000,000,221 | ---- | C] () -- C:\Users\Daniel\Desktop\TrackMania Nations Forever.url

[2013.05.16 11:20:15 | 000,000,221 | ---- | C] () -- C:\Users\Daniel\Desktop\Arma 2.url

[2013.05.16 11:06:57 | 000,000,917 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk

[2013.05.15 20:46:55 | 000,000,871 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk

[2013.05.15 12:13:45 | 000,019,220 | ---- | C] () -- C:\Users\Daniel\Documents\cc_20130515_121343.reg

[2013.05.15 08:41:41 | 000,025,185 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf

[2013.05.15 08:41:41 | 000,025,185 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf

[2013.05.09 21:22:46 | 000,000,796 | ---- | C] () -- C:\Users\Public\Desktop\Speccy.lnk

[2013.05.02 17:51:36 | 054,912,394 | ---- | C] () -- C:\Users\Daniel\Desktop\Minecraft 1.4.7.rar

[2013.04.30 18:02:52 | 022,311,722 | ---- | C] () -- C:\Users\Daniel\Desktop\region.rar

[2013.04.25 13:39:12 | 000,001,093 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.1 (64 Bit).lnk

[2013.04.25 13:38:15 | 000,001,227 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS5.1.lnk

[2013.04.25 13:36:12 | 000,001,189 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS5.1.lnk

[2013.04.25 13:35:45 | 000,001,282 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS5.5.lnk

[2013.04.25 13:34:05 | 000,001,383 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS5.5.lnk

[2013.04.25 13:33:59 | 000,001,555 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS5.5.lnk

[2013.04.25 13:33:23 | 000,000,997 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk

 
 ========== ZeroAccess Check ==========

 

[2009.07.14 06:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\shell32.dll -- [2013.02.27 07:52:56 | 014,172,672 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\shell32.dll -- [2013.02.27 06:55:05 | 012,872,704 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 03:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 05:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 03:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== LOP Check ==========

 

[2013.05.16 20:55:26 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\.minecraft

[2013.04.06 23:22:17 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\AnvSoft

[2013.04.23 18:06:21 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\FileZilla

[2013.04.15 13:10:36 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\LolClient

[2013.04.15 00:13:58 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Notepad++

[2013.04.17 17:57:18 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Opera

[2013.05.23 12:38:33 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\TS3Client

[2013.04.04 17:17:33 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\ts3overlay

[2013.04.14 14:13:12 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Webocton - Scriptly

 
 ========== Purity Check ==========

 

 
 

< End of report >

Extra:

Code:

OTL Extras logfile created on: 23.05.2013 12:40:52 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\Daniel\Desktop

64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation

Internet Explorer (Version = 9.10.9200.16576)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

7,98 Gb Total Physical Memory | 6,49 Gb Available Physical Memory | 81,32% Memory free

15,96 Gb Paging File | 14,52 Gb Available in Paging File | 91,00% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 232,79 Gb Total Space | 120,93 Gb Free Space | 51,95% Space Free | Partition Type: NTFS

 

Computer Name: DANIEL-PC | User Name: Daniel | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans

Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)

.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)

.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"

http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)

https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

htmlfile [print] -- "%systemroot%\system32\rundll32.exe" "%systemroot%\system32\mshtml.dll",PrintHTML "%1"

http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)

https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)

inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [Bridge] -- C:\Program Files (x86)\Adobe\Adobe Bridge CS5.1\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]

"AntiVirusOverride" = 0

"AntiSpywareOverride" = 0

"FirewallOverride" = 0

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"EnableFirewall" = 1

"DisableNotifications" = 0

 
 ========== Authorized Applications List ==========

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{01040DA4-BFAD-4B71-9007-A582B6BAFEEE}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{2E000A41-5FCE-41E6-859D-B6046428F572}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{4A308424-C4E2-492E-9577-CA320D8A0580}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{4A80936D-4919-4629-BCCB-9E822FD17522}" = rport=10243 | protocol=6 | dir=out | app=system | 

"{4C2FF716-6FAE-4678-B7F5-FD217DFBFC41}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{4EF8C52E-5F95-40A6-A5BB-4D8215B181FC}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 

"{565C72E5-B09A-4872-B7DF-40812D87AF32}" = rport=137 | protocol=17 | dir=out | app=system | 

"{618A4E4C-EB45-4F40-A643-F825C7589F2A}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 

"{695B3FBA-430A-4470-8A75-9647F748446A}" = lport=10243 | protocol=6 | dir=in | app=system | 

"{7F74B831-919D-4EEC-AFF3-371B81636A80}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{9094E8F0-B8B4-41BB-8555-64816E5D2E4B}" = rport=139 | protocol=6 | dir=out | app=system | 

"{9D2B3748-3DA7-4011-AF2A-BC67634ADD0C}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{A239B765-4D36-43F2-8A2B-958B88670520}" = lport=2869 | protocol=6 | dir=in | app=system | 

"{CEFD5365-B4B4-4EA5-84D9-BCA08A048ED1}" = rport=445 | protocol=6 | dir=out | app=system | 

"{D34F0F88-9C61-499B-B170-A6759556D154}" = lport=139 | protocol=6 | dir=in | app=system | 

"{D3526DFD-F874-44A4-A0C4-CF0E7F40BB41}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{D498058C-F62A-4EFA-B2C8-434CB510625C}" = lport=137 | protocol=17 | dir=in | app=system | 

"{EC3BF06B-C1D4-469C-A646-8908477A430E}" = rport=138 | protocol=17 | dir=out | app=system | 

"{F0ED51EB-FA90-4F96-9EA7-28DB950CDD9D}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 

"{FBC8795B-8609-45AB-ADBB-8045E716EF60}" = lport=138 | protocol=17 | dir=in | app=system | 

"{FD3B3625-4622-4117-87B3-C06D2713E302}" = lport=445 | protocol=6 | dir=in | app=system | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{0919BE2E-C8D6-40AC-BC12-F15398B04649}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{0E819F99-B34E-4DA6-A9BC-E819DF8B9918}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforeverlauncher.exe | 

"{161A37F2-F3D5-49DE-BF93-56402FF6F014}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe | 

"{19045D18-6533-48B7-B3AE-E003C447CA48}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe | 

"{1C32D1C2-4313-4FC2-9D0A-2E69656E9848}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{1FE64D5E-30CF-4A79-94D1-FD0CFC76FED9}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 

"{2334E983-DAAD-4B90-B876-BDE95A901073}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | 

"{238BB271-92A3-4B91-B5FB-D73903C94E6C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe | 

"{254A1029-5936-492E-A892-AB4F4270A0BD}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe | 

"{258591BB-4EC9-497F-81EB-E51AC35B6B82}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{31E82387-2B99-4849-885A-ECBD6B908FAA}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\arma2oa.exe | 

"{3CB1BE47-98C1-4FCA-8FBC-6C73FEE10203}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2\arma2.exe | 

"{43F571C7-96B3-422F-9DB1-08549C16456C}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{45B647B5-E396-4AB1-AA42-22EAC2468B81}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe | 

"{46337F47-6545-4179-A676-579613AF2649}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe | 

"{4776509E-2DBC-42BC-B833-ED5412F9D4BF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{4F812651-2353-4C45-83F9-5B9581AA3DC8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforeverlauncher.exe | 

"{54D26D7E-1812-424A-803E-994AE790943F}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{57510915-A25D-4A65-8530-5B35E16A3509}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | 

"{59BF6B29-0C11-458E-8CFE-5106E76AF3C8}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 

"{6ADFABB2-8C43-4491-A47D-74E6C7CBAF71}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 

"{7C557EC5-A491-47BB-B361-0967322FE893}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 

"{88668102-4A95-497A-BD66-063AE0F49CFA}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 

"{95987B4A-C465-454A-84F1-67304EA957B1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{A375266A-7349-48DF-B6F3-5CA02DAAEC9C}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 

"{A8261A00-07E0-428B-B87D-643E1E0A76BD}" = protocol=6 | dir=out | app=system | 

"{B9E944D3-2969-4ED9-B4EF-4BCE3062DF84}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{C4A2D7B5-A793-403A-B2DD-6278AC80C702}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 

"{C63D8E05-9732-4899-ABBB-3498EC08FC68}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{D43EC156-441B-4935-BF38-399AA592CED0}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 

"{D71864F0-E244-467A-8F95-AE36E3D00096}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\arma 2\arma2.exe | 

"{D7CC75DF-FF95-4840-AD66-46B3EFFDF873}" = dir=out | app=c:\program files\eslwire\wire.exe | 

"{DAB68C89-1350-4A88-A613-1B00D3632019}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 

"{DC9D4840-A3F8-4EE1-A324-1EC9D5EAED81}" = dir=in | app=c:\program files\eslwire\wire.exe | 

"{F07A0EC8-3277-49B8-9598-24E28F897CF5}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 

"{F4A6236A-C5FF-4A09-B209-8499C7CF017A}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\trackmania nations forever\tmforever.exe | 

"TCP Query User{14B6DC84-D643-4171-8E8B-E2C388E287CC}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 

"TCP Query User{491709C1-F2BA-45D1-8B1D-927FD44CFB40}C:\program files\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 

"TCP Query User{6478CBC3-F88B-4B6C-9F32-23FEB2240293}C:\program files\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 

"TCP Query User{8FBC8339-D260-4C16-B1F9-FFAA65636B53}C:\Program Files (x86)\Java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 

"UDP Query User{003D1F49-8377-4B25-973B-45E6FFE738E2}C:\Program Files (x86)\Java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 

"UDP Query User{97DBE5A3-E9B5-4D47-A341-A3609C321E67}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe | 

"UDP Query User{980BB1A8-0A85-42F3-A08F-6EE103D37ACB}C:\program files\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\java.exe | 

"UDP Query User{CDB30FE7-0099-4E57-9653-F0A1FA386AB7}C:\program files\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre7\bin\javaw.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"{120EC191-78F8-CA89-3511-7E90C23F5261}" = AMD Catalyst Install Manager

"{14297226-E0A0-3781-8911-E9D529552663}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729

"{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64

"{26A24AE4-039D-4CA4-87B4-2F86417017FF}" = Java 7 Update 17 (64-bit)

"{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime

"{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64

"{90BF0360-A1DB-4599-A643-95AB90A52C1E}" = Microsoft_VC90_MFCLOC_x86_x64

"{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64

"{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64

"{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 314.22

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 314.22

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 314.22

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 314.22

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.1031

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.12.12

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.23.1

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components

"{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64

"{CF2A565B-1504-BD48-51B5-1D88C621D8C6}" = ccc-utility64

"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319

"{E6277150-51D1-1D9F-1B9F-2D28985BE167}" = AMD Fuel

"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile

"CCleaner" = CCleaner

"ESL Wire_is1" = ESL Wire 1.15.4

"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile

"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack

"Speccy" = Speccy

"TeamSpeak 3 Client" = TeamSpeak 3 Client

"VLC media player" = VLC media player 2.0.6

"WinRAR archiver" = WinRAR 4.20 (64-Bit)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86

"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam

"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86

"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86

"{183F67DB-676D-9629-BB8D-5D91CFC5880C}" = CCC Help Chinese Traditional

"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319

"{1A21C23B-1049-036F-538C-40827D35D35B}" = CCC Help Czech

"{21EF236B-A428-0641-0A9A-6A9A74BA1996}" = CCC Help Finnish

"{26A24AE4-039D-4CA4-87B4-2F83217021FF}" = Java 7 Update 21

"{2E7170BC-A6CB-3C69-A940-A07834EAE1E8}" = CCC Help Italian

"{3450767E-DD72-E31C-CCA5-8F45FF5FCE08}" = Catalyst Control Center

"{3521BDBD-D453-5D9F-AA55-44B75D214629}" = Adobe Community Help

"{3A027737-A119-FABD-4C43-8385D57FC450}" = Catalyst Control Center Localization All

"{45017FF9-8ABB-DFDE-6BFD-43C8D89277F4}" = CCC Help Norwegian

"{46C045BF-2B3F-4BC4-8E4C-00E0CF8BD9DB}" = Adobe AIR

"{494642A2-96C3-FBF9-A43D-41D78A82AE15}" = CCC Help Hungarian

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3

"{4FD6306A-E967-F286-DBA1-2A3C26833A2C}" = CCC Help French

"{58BAA8D0-404E-4585-9FD3-ED1BB72AC2EE}" = Adobe Flash Player 9 ActiveX

"{5BA86B8D-D29E-071C-5D7B-E579A54698AD}" = CCC Help Spanish

"{612C34C7-5E90-47D8-9B5C-0F717DD82726}" = swMSM

"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86

"{69F0CEA4-43E2-4CBB-92DF-41860A40A631}" = Formelrechner

"{71A79918-3497-16D0-3497-E3356F5EE5FB}" = CCC Help Chinese Standard

"{76D0F60C-D265-CFA4-2E06-41E434F9EB41}" = CCC Help Thai

"{78FD6E08-6996-7EBF-E3F8-905836E7C220}" = CCC Help Dutch

"{79A3E8B6-37C0-5F75-7E7D-F4D6FB512329}" = CCC Help Japanese

"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver

"{8B526040-C3BE-5E3F-E6C1-C01BD32BA2C6}" = CCC Help Greek

"{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}" = NVIDIA PhysX

"{9068D15E-25B4-EC21-9BC4-8DBD52722F8E}" = CCC Help Russian

"{90850407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Word Viewer 2003

"{90877318-0BD0-4BDE-BFC0-C4BB12DAC86A}_is1" = Rappelz

"{9158FF30-78D7-40EF-B83E-451AC5334640}" = Adobe Photoshop CS5.1

"{92606477-9366-4D3B-8AE3-6BE4B29727AB}" = League of Legends

"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5

"{AA46B5F5-6E96-A623-5AB4-93BE56BEBB28}" = CCC Help Danish

"{AC4BBB17-A837-3B36-83D8-7DFC90505F95}" = CCC Help Portuguese

"{AC76BA86-7AD7-1031-7B44-AB0000000001}" = Adobe Reader XI (11.0.03) - Deutsch

"{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86

"{B94CD252-ACBB-36C7-133D-94BB87D70F91}" = Catalyst Control Center InstallProxy

"{BC8CEB2B-647B-BBF1-3923-6250AFA64081}" = CCC Help Polish

"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86

"{D73E5C3C-6975-6957-3799-AB306D8189B0}" = CCC Help Korean

"{D7ECDD70-EBAB-42AD-8BE3-2F4D1CEC70A7}" = DayZ Commander

"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86

"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller

"{E05B61A8-A743-57ED-C0BA-6332CC6452FF}" = CCC Help German

"{E22F5B3F-6D82-7354-F199-0EFFDCC4DD33}" = CCC Help Swedish

"{F0319215-C109-C2C9-ECBC-3F08C50E59B3}" = CCC Help Turkish

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver

"{F9706A8C-D740-42CA-8703-E08EDD0F0778}" = LogMeIn Hamachi

"{FBE18FE1-05A4-C5AD-571A-74BC335FDDC6}" = CCC Help English

"Adobe AIR" = Adobe AIR

"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin

"Adobe Shockwave Player" = Adobe Shockwave Player 12.0

"Any Video Converter 5_is1" = Any Video Converter 5 5.0.4

"AP Tuner 3.08" = AP Tuner 3.08

"avast" = avast! Free Antivirus

"BattlEye for OA" = BattlEye for OA Uninstall

"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help

"Crossfire Europe" = Crossfire Europe

"FileZilla Client" = FileZilla Client 3.6.0.2

"Fraps" = Fraps (remove only)

"InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller

"LogMeIn Hamachi" = LogMeIn Hamachi

"Mozilla Firefox 20.0.1 (x86 de)" = Mozilla Firefox 20.0.1 (x86 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"Notepad++" = Notepad++

"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver

"Opera 12.15.1748" = Opera 12.15

"Steam App 11020" = TrackMania Nations Forever

"Steam App 219540" = Arma 2: Operation Arrowhead Beta

"Steam App 33910" = Arma 2

"Steam App 33930" = Arma 2: Operation Arrowhead

"Webocton - Scriptly_is1" = Webocton - Scriptly 0.8.95.6

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 21.05.2013 04:58:06 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0,

 Zeitstempel: 0x501fefb5  Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0,

 Zeitstempel: 0x4f55e10b  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00000000000033c1

ID

 des fehlerhaften Prozesses: 0x6b8  Startzeit der fehlerhaften Anwendung: 0x01ce55e2addbaed1

Pfad

 der fehlerhaften Anwendung: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

Pfad

 des fehlerhaften Moduls: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll

Berichtskennung:

 8cd771ae-c1f4-11e2-9be9-50e549c38faf

 

Error - 21.05.2013 07:19:20 | Computer Name = Daniel-PC | Source = WinMgmt | ID = 10

Description = 

 

Error - 21.05.2013 09:15:56 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0,

 Zeitstempel: 0x501fefb5  Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0,

 Zeitstempel: 0x4f55e10b  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00000000000033c1

ID

 des fehlerhaften Prozesses: 0x780  Startzeit der fehlerhaften Anwendung: 0x01ce5614cf2a4068

Pfad

 der fehlerhaften Anwendung: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

Pfad

 des fehlerhaften Moduls: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll

Berichtskennung:

 91f86d36-c218-11e2-a46d-50e549c38faf

 

Error - 21.05.2013 10:33:29 | Computer Name = Daniel-PC | Source = WinMgmt | ID = 10

Description = 

 

Error - 21.05.2013 15:54:32 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: LolClient.exe, Version: 0.0.0.0, 

Zeitstempel: 0x515663e0  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.17725,

 Zeitstempel: 0x4ec49b8f  Ausnahmecode: 0x80000003  Fehleroffset: 0x0005801d  ID des fehlerhaften

 Prozesses: 0x1220  Startzeit der fehlerhaften Anwendung: 0x01ce565346d6ea2f  Pfad der

 fehlerhaften Anwendung: C:\Riot Games\League of Legends\RADS\projects\lol_air_client\releases\0.0.1.18\deploy\LolClient.exe

Pfad

 des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll  Berichtskennung: 40e5edc9-c250-11e2-b6ba-50e549c38faf

 

Error - 21.05.2013 17:03:15 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0,

 Zeitstempel: 0x501fefb5  Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0,

 Zeitstempel: 0x4f55e10b  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00000000000033c1

ID

 des fehlerhaften Prozesses: 0x748  Startzeit der fehlerhaften Anwendung: 0x01ce562fef019294

Pfad

 der fehlerhaften Anwendung: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

Pfad

 des fehlerhaften Moduls: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll

Berichtskennung:

 da3fb615-c259-11e2-b6ba-50e549c38faf

 

Error - 22.05.2013 03:35:25 | Computer Name = Daniel-PC | Source = WinMgmt | ID = 10

Description = 

 

Error - 22.05.2013 19:20:15 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: Fuel.Service.exe, Version: 1.0.0.0,

 Zeitstempel: 0x501fefb5  Name des fehlerhaften Moduls: Device.dll, Version: 4.1.0.0,

 Zeitstempel: 0x4f55e10b  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00000000000033c1

ID

 des fehlerhaften Prozesses: 0x72c  Startzeit der fehlerhaften Anwendung: 0x01ce56beb36498b4

Pfad

 der fehlerhaften Anwendung: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

Pfad

 des fehlerhaften Moduls: C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Device.dll

Berichtskennung:

 284b09d9-c336-11e2-beed-50e549c38faf

 

Error - 23.05.2013 06:08:00 | Computer Name = Daniel-PC | Source = WinMgmt | ID = 10

Description = 

 

Error - 23.05.2013 06:38:32 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000

Description = Name der fehlerhaften Anwendung: nvtray.exe, Version: 7.17.13.1422,

 Zeitstempel: 0x51428f51  Name des fehlerhaften Moduls: nvtray.exe, Version: 7.17.13.1422,

 Zeitstempel: 0x51428f51  Ausnahmecode: 0x40000015  Fehleroffset: 0x0000000000154f89

ID

 des fehlerhaften Prozesses: 0xc74  Startzeit der fehlerhaften Anwendung: 0x01ce579d35a1111d

Pfad

 der fehlerhaften Anwendung: C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

Pfad

 des fehlerhaften Moduls: C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

Berichtskennung:

 e98073c3-c394-11e2-9f7c-50e549c38faf

 

[ System Events ]

Error - 22.05.2013 10:19:57 | Computer Name = Daniel-PC | Source = bowser | ID = 8003

Description = 

 

Error - 22.05.2013 12:08:00 | Computer Name = Daniel-PC | Source = bowser | ID = 8003

Description = 

 

Error - 22.05.2013 19:20:16 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7034

Description = Dienst "AMD FUEL Service" wurde unerwartet beendet. Dies ist bereits

 1 Mal passiert.

 

Error - 23.05.2013 06:08:36 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7030

Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" ist als interaktiver

 Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive

 Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.

 

Error - 23.05.2013 06:08:39 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7038

Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"

 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%1330    Vergewissern

 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft

 Management Console (MMC).

 

Error - 23.05.2013 06:08:39 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000

Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden

 Fehlers nicht gestartet:   %%1069

 

Error - 23.05.2013 06:08:41 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7009

Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst

 LogMeIn Hamachi Tunneling Engine erreicht.

 

Error - 23.05.2013 06:08:41 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000

Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden

 Fehlers nicht gestartet:   %%1053

 

Error - 23.05.2013 06:38:30 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7038

Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"

 mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:   %%1330    Vergewissern

 Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft

 Management Console (MMC).

 

Error - 23.05.2013 06:38:30 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7000

Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden

 Fehlers nicht gestartet:   %%1069

 

 

< End of report >

Vielen Dank.