gumplchen | 01.09.2010 15:03 | Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Datenbank Version: 4521
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18943
01.09.2010 15:28:16
mbam-log-2010-09-01 (15-28-16).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 278824
Laufzeit: 1 Stunde(n), 6 Minute(n), 43 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
hier ist der OTL log
OTL Logfile: Code:
OTL logfile created on: 01.09.2010 15:56:02 - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\Christoph\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18943)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 59,00% Memory free
10,00 Gb Paging File | 8,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): c:\pagefile.sys 6000 6000 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,76 Gb Total Space | 281,46 Gb Free Space | 60,43% Space Free | Partition Type: NTFS
Drive D: | 3,71 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: CHRISTOPH-PC
Current User Name: Christoph
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Processes (SafeList) ==========
PRC - C:\Users\Christoph\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\PnkBstrB.exe ()
PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
PRC - C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 1\firefox.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 1\plugin-container.exe (Mozilla Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
========== Modules (SafeList) ==========
MOD - C:\Users\Christoph\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV:64bit: - (PnkBstrB) -- C:\Windows\SysNative\PnkBstrB.exe File not found
SRV:64bit: - (PnkBstrA) -- C:\Windows\SysNative\PnkBstrA.exe File not found
SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software)
SRV - (TuneUp.Defrag) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (PnkBstrB) -- C:\Windows\SysWOW64\PnkBstrB.exe ()
SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
SRV - (avg9emc) -- C:\Program Files (x86)\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg9wd) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (Apple Mobile Device) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (WPFFontCache_v0400) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\WPF\WPFFontCache_v0400.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_64) -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV:64bit: - (NwlnkFwd) -- C:\Windows\SysNative\DRIVERS\nwlnkfwd.sys File not found
DRV:64bit: - (NwlnkFlt) -- C:\Windows\SysNative\DRIVERS\nwlnkflt.sys File not found
DRV:64bit: - (IpInIp) -- C:\Windows\SysNative\DRIVERS\ipinip.sys File not found
DRV:64bit: - (AvgTdiA) -- C:\Windows\SysNative\Drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgLdx64) -- C:\Windows\SysNative\Drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgMfx64) -- C:\Windows\SysNative\Drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\Drivers\usbaapl64.sys (Apple, Inc.)
DRV:64bit: - (WpdUsb) -- C:\Windows\SysNative\DRIVERS\wpdusb.sys (Microsoft Corporation)
DRV:64bit: - (qcusbser) -- C:\Windows\SysNative\DRIVERS\qcusbser.sys (QUALCOMM Incorporated)
DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\DRIVERS\GEARAspiWDM.sys (GEAR Software Inc.)
DRV:64bit: - (RTL8169) -- C:\Windows\SysNative\DRIVERS\Rtlh64.sys (Realtek Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\Wbem\ntfs.mof ()
DRV:64bit: - (ialm) -- C:\Windows\SysNative\DRIVERS\ialmnt5.sys (Intel Corporation)
DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys (TuneUp Software)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.telekom.at/suche
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.telekom.at
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.selectedEngine: "Amazon.de"
FF - prefs.js..extensions.enabledItems: testpilot@labs.mozilla.com:1.0rc1
FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.845
FF - prefs.js..extensions.enabledItems: battlefieldheroespatcher@ea.com:5.0.23.0
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files (x86)\AVG\AVG9\Firefox [2010.07.25 11:02:38 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 1\components [2010.07.30 11:00:17 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 1\plugins [2010.08.30 23:03:50 | 000,000,000 | ---D | M]
[2010.07.26 22:20:32 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\mozilla\Extensions
[2010.08.31 23:24:36 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\mozilla\Firefox\Profiles\ssg0iz8z.default\extensions
[2010.07.27 07:26:42 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Christoph\AppData\Roaming\mozilla\Firefox\Profiles\ssg0iz8z.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.08.18 22:29:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christoph\AppData\Roaming\mozilla\Firefox\Profiles\ssg0iz8z.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.08.29 00:41:23 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Christoph\AppData\Roaming\mozilla\Firefox\Profiles\ssg0iz8z.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.07.26 22:23:11 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\mozilla\Firefox\Profiles\ssg0iz8z.default\extensions\battlefieldheroespatcher@ea.com
O1 HOSTS File: ([2006.09.18 23:37:24 | 000,000,761 | ---- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKCU..\Run: [EPSON SX100 Series] C:\Windows\SysWow64\spool\DRIVERS\x64\3\E_IATIEDE.EXE File not found
O4 - HKCU..\Run: [msnmsgr] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O8:64bit: - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Christoph\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Christoph\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm ()
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O15 - HKCU\..Trusted Domains: blank ([]about in Local intranet)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WI1F86~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\img23.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\img23.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2007.03.12 12:42:14 | 000,000,044 | R--- | M] () - D:\Autorun.inf -- [ UDF ]
O33 - MountPoints2\{fb637f4e-97c6-11df-88ee-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{fb637f4e-97c6-11df-88ee-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Seite2.exe -- [2007.03.12 12:41:48 | 002,468,389 | R--- | M] (Computec Media AG)
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2010.09.01 14:22:58 | 000,000,000 | ---D | C] -- C:\Users\Christoph\Desktop\Schrott
[2010.09.01 00:33:35 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Users\Christoph\Desktop\OTL.exe
[2010.08.30 21:15:53 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Local\Reality Pump
[2010.08.29 00:36:59 | 000,034,624 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe
[2010.08.29 00:36:54 | 000,036,160 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll
[2010.08.29 00:36:54 | 000,030,016 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll
[2010.08.29 00:36:54 | 000,025,920 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll
[2010.08.29 00:36:54 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll
[2010.08.29 00:36:08 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\TuneUp Software
[2010.08.29 00:36:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TuneUp Utilities 2010
[2010.08.29 00:35:25 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2010.08.29 00:35:18 | 000,000,000 | -HSD | C] -- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
[2010.08.27 14:33:28 | 000,000,000 | ---D | C] -- C:\Users\Christoph\Documents\Mount&Blade Warband Savegames
[2010.08.27 14:32:05 | 000,000,000 | ---D | C] -- C:\Users\Christoph\Documents\Mount&Blade Warband
[2010.08.27 14:32:05 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\Mount&Blade Warband
[2010.08.25 08:19:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft XNA
[2010.08.24 21:10:14 | 000,000,000 | ---D | C] -- C:\Programme\DIFX
[2010.08.24 21:08:40 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\Acer E400 USB Driver
[2010.08.18 22:29:24 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.08.18 22:29:09 | 000,000,000 | ---D | C] -- C:\Users\Christoph\Documents\DVDVideoSoft
[2010.08.18 22:28:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2010.08.18 22:28:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2010.08.18 21:39:02 | 000,000,000 | ---D | C] -- C:\ProgramData\id Software
[2010.08.16 22:24:48 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\mIRC
[2010.08.16 22:24:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mIRC
[2010.08.13 15:26:58 | 000,000,000 | ---D | C] -- C:\Users\Christoph\Desktop\Internet
[2010.08.13 12:13:13 | 000,000,000 | ---D | C] -- C:\ProgramData\m2portal
[2010.08.12 18:51:21 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\mquadr.at
[2010.08.12 18:51:21 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Local\mquadr.at
[2010.08.12 18:51:21 | 000,000,000 | ---D | C] -- C:\ProgramData\mquadr.at
[2010.08.12 18:51:21 | 000,000,000 | ---D | C] -- C:\ProgramData\m2backup
[2010.08.12 18:50:57 | 000,000,000 | -H-D | C] -- C:\ProgramData\{DE1CDDDC-29FB-4BCF-94A4-B8339595BAB7}
[2010.08.12 18:50:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\aon
[2010.08.12 18:50:32 | 000,000,000 | -H-D | C] -- C:\ProgramData\{0B1855D9-8D06-4BE1-B93C-7EFA1D0C3E32}
[2010.08.12 18:41:41 | 000,000,000 | -H-D | C] -- C:\ProgramData\{29558F44-C67B-4F2C-99E0-F1CE2AE1F960}
[2010.08.12 18:41:32 | 000,000,000 | -H-D | C] -- C:\ProgramData\{392ECEAB-FD15-485B-8C44-C2C591EDECB5}
[2010.08.12 18:41:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\A1 Telekom Austria
[2010.08.12 18:19:36 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Local\PackageAware
[2010.08.12 15:43:05 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2010.08.12 15:43:05 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll
[2010.08.12 15:42:55 | 000,081,920 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2010.08.12 15:42:53 | 004,697,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2010.08.12 15:42:43 | 002,335,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iertutil.dll
[2010.08.12 15:42:41 | 000,706,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010.08.12 15:42:41 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010.08.12 15:42:41 | 000,252,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010.08.12 15:42:41 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\occache.dll
[2010.08.12 15:42:41 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010.08.12 15:42:41 | 000,173,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2010.08.12 15:42:41 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iernonce.dll
[2010.08.12 15:42:40 | 001,538,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2010.08.12 15:42:40 | 001,469,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2010.08.12 15:42:40 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2010.08.12 15:42:40 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010.08.12 15:42:40 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2010.08.12 15:42:40 | 000,162,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe
[2010.08.12 15:42:40 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2010.08.12 15:42:40 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesysprep.dll
[2010.08.12 15:42:40 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2010.08.12 15:42:40 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iesetup.dll
[2010.08.12 15:42:40 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll
[2010.08.12 15:42:40 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ie4uinit.exe
[2010.08.12 15:42:40 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll
[2010.08.12 15:42:40 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010.08.12 15:42:40 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010.08.11 20:07:02 | 000,000,000 | -H-D | C] -- C:\Users\Christoph\Documents\Runes of Magic
[2010.08.11 16:20:28 | 000,000,000 | ---D | C] -- C:\Users\Christoph\Desktop\Runes_of_Magic_3.0.1.2153
[2010.08.11 16:20:28 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\FOG Downloader
[2010.08.10 09:00:52 | 000,319,488 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\HideWin.exe
[2010.08.09 22:45:03 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\TS3Client
[2010.08.09 22:44:42 | 000,000,000 | ---D | C] -- C:\Programme\TeamSpeak 3 Client
[2010.08.09 18:06:26 | 000,000,000 | ---D | C] -- C:\Programme\Defraggler
[2010.08.09 09:45:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab
[2010.08.08 15:30:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard
[2010.08.08 15:28:23 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\Blizzard Entertainment
[2010.08.08 13:32:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2010.08.08 13:32:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2010.08.06 15:35:56 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Roaming\REAPER
[2010.08.05 22:19:16 | 000,000,000 | ---D | C] -- C:\Users\Christoph\Tracing
[2010.08.05 22:17:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight
[2010.08.05 22:16:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft
[2010.08.05 22:16:49 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2010.08.05 22:16:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live SkyDrive
[2010.08.05 22:16:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
[2010.08.05 22:16:09 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2010.08.05 22:12:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live
[2010.08.05 18:25:53 | 000,000,000 | ---D | C] -- C:\Programme\Paint.NET
[2010.08.05 18:25:37 | 000,000,000 | ---D | C] -- C:\Users\Christoph\AppData\Local\Paint.NET
[2010.08.02 20:04:47 | 000,000,000 | ---D | C] -- C:\Users\Christoph\Documents\StarCraft II
[2010.08.02 20:04:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment
[2010.08.02 20:04:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment
[2010.08.02 20:03:54 | 000,000,000 | ---D | C] -- C:\Spiele
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2010.09.01 15:59:00 | 005,242,880 | -HS- | M] () -- C:\Users\Christoph\NTUSER.DAT
[2010.09.01 15:57:42 | 000,004,448 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2010.09.01 15:57:42 | 000,004,448 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2010.09.01 12:03:24 | 064,139,718 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm
[2010.09.01 11:58:56 | 000,037,301 | ---- | M] () -- C:\ProgramData\nvModes.dat
[2010.09.01 11:58:56 | 000,037,301 | ---- | M] () -- C:\ProgramData\nvModes.001
[2010.09.01 11:57:28 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.09.01 11:57:26 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.09.01 11:57:18 | 4293,386,240 | -HS- | M] () -- C:\hiberfil.sys
[2010.09.01 00:39:55 | 000,524,288 | -HS- | M] () -- C:\Users\Christoph\NTUSER.DAT{d7ceb1a9-98b7-11df-af99-001d7da76728}.TMContainer00000000000000000001.regtrans-ms
[2010.09.01 00:39:55 | 000,065,536 | -HS- | M] () -- C:\Users\Christoph\NTUSER.DAT{d7ceb1a9-98b7-11df-af99-001d7da76728}.TM.blf
[2010.09.01 00:39:44 | 002,730,437 | -H-- | M] () -- C:\Users\Christoph\AppData\Local\IconCache.db
[2010.09.01 00:33:39 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Christoph\Desktop\OTL.exe
[2010.08.31 20:12:20 | 000,007,838 | ---- | M] () -- C:\Users\Christoph\Desktop\hijackthis4
[2010.08.31 12:17:12 | 000,007,560 | ---- | M] () -- C:\Users\Christoph\Desktop\hijackthis3
[2010.08.31 12:16:50 | 000,000,976 | ---- | M] () -- C:\Users\Christoph\Documents\cc_20100831_121648.reg
[2010.08.31 12:14:52 | 000,007,623 | ---- | M] () -- C:\Users\Christoph\Desktop\hijackthis2
[2010.08.31 10:37:51 | 000,000,801 | ---- | M] () -- C:\Users\Christoph\Desktop\Fiesta Online(EU_German).lnk
[2010.08.30 23:03:50 | 000,001,917 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2010.08.29 15:15:09 | 000,008,247 | ---- | M] () -- C:\Users\Christoph\Desktop\hijackthis1
[2010.08.29 00:36:46 | 000,001,921 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2010.08.29 00:36:45 | 000,001,907 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk
[2010.08.28 23:57:47 | 000,001,284 | ---- | M] () -- C:\Users\Christoph\Documents\cc_20100828_235744.reg
[2010.08.26 14:45:36 | 000,034,624 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe
[2010.08.26 14:40:38 | 000,025,920 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll
[2010.08.26 14:40:34 | 000,021,312 | ---- | M] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll
[2010.08.26 14:40:32 | 000,036,160 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll
[2010.08.26 14:40:24 | 000,030,016 | ---- | M] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll
[2010.08.24 21:03:42 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2010.08.21 22:06:35 | 000,214,720 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr
[2010.08.21 22:06:35 | 000,214,720 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe
[2010.08.18 22:29:18 | 000,001,074 | ---- | M] () -- C:\Users\Christoph\Desktop\DVDVideoSoft Free Studio.lnk
[2010.08.18 21:39:06 | 000,075,064 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe
[2010.08.18 21:39:05 | 002,373,712 | ---- | M] () -- C:\Windows\SysWow64\pbsvc.exe
[2010.08.17 11:29:03 | 000,011,314 | ---- | M] () -- C:\Users\Christoph\Documents\cc_20100817_112852.reg
[2010.08.16 22:24:49 | 000,000,790 | ---- | M] () -- C:\Users\Public\Desktop\mIRC.lnk
[2010.08.12 19:24:24 | 000,228,600 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2010.08.11 20:04:52 | 000,001,601 | ---- | M] () -- C:\Users\Christoph\Desktop\Runes of Magic.lnk
[2010.08.10 09:17:08 | 000,004,848 | ---- | M] () -- C:\Users\Christoph\Documents\cc_20100810_091704.reg
[2010.08.10 09:04:20 | 000,319,488 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\HideWin.exe
[2010.08.09 22:44:43 | 000,000,915 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2010.08.09 11:24:07 | 000,000,680 | ---- | M] () -- C:\Users\Christoph\AppData\Local\d3d9caps.dat
[2010.08.09 09:37:05 | 000,002,188 | ---- | M] () -- C:\Users\Christoph\Documents\cc_20100809_093653.reg
[2010.08.09 09:32:09 | 001,445,116 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.08.09 09:32:09 | 000,628,504 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2010.08.09 09:32:09 | 000,591,302 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.08.09 09:32:09 | 000,126,054 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2010.08.09 09:32:09 | 000,000,000 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.08.08 16:09:32 | 000,000,818 | ---- | M] () -- C:\Users\Public\Desktop\World of Warcraft.lnk
[2010.08.08 12:53:18 | 000,004,470 | ---- | M] () -- C:\Users\Christoph\Documents\cc_20100808_125315.reg
[2010.08.07 12:57:32 | 000,019,598 | ---- | M] () -- C:\Users\Christoph\Documents\cc_20100807_125709.reg
[2010.08.05 18:27:09 | 000,000,990 | ---- | M] () -- C:\Users\Public\Desktop\Paint.NET.lnk
[2010.08.04 10:40:21 | 000,000,784 | ---- | M] () -- C:\Users\Public\Desktop\LOCO.lnk
[2010.08.02 20:18:51 | 000,000,761 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
========== Files Created - No Company Name ==========
[2010.08.31 20:12:20 | 000,007,838 | ---- | C] () -- C:\Users\Christoph\Desktop\hijackthis4
[2010.08.31 12:17:12 | 000,007,560 | ---- | C] () -- C:\Users\Christoph\Desktop\hijackthis3
[2010.08.31 12:16:49 | 000,000,976 | ---- | C] () -- C:\Users\Christoph\Documents\cc_20100831_121648.reg
[2010.08.31 12:14:52 | 000,007,623 | ---- | C] () -- C:\Users\Christoph\Desktop\hijackthis2
[2010.08.31 10:37:51 | 000,000,801 | ---- | C] () -- C:\Users\Christoph\Desktop\Fiesta Online(EU_German).lnk
[2010.08.29 15:15:09 | 000,008,247 | ---- | C] () -- C:\Users\Christoph\Desktop\hijackthis1
[2010.08.29 00:36:46 | 000,001,921 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk
[2010.08.29 00:36:45 | 000,001,907 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk
[2010.08.28 23:57:45 | 000,001,284 | ---- | C] () -- C:\Users\Christoph\Documents\cc_20100828_235744.reg
[2010.08.25 08:18:34 | 000,174,197 | ---- | C] () -- C:\Users\Christoph\AppData\Local\dd_depcheck_NETFX_EXP_35.txt
[2010.08.25 08:18:28 | 000,118,382 | ---- | C] () -- C:\Users\Christoph\AppData\Local\dd_dotnetfx35install.txt
[2010.08.25 08:18:28 | 000,001,678 | ---- | C] () -- C:\Users\Christoph\AppData\Local\uxeventlog.txt
[2010.08.25 08:18:28 | 000,000,002 | ---- | C] () -- C:\Users\Christoph\AppData\Local\dd_dotnetfx35error.txt
[2010.08.24 21:03:42 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_07_00.Wdf
[2010.08.18 22:29:10 | 000,001,074 | ---- | C] () -- C:\Users\Christoph\Desktop\DVDVideoSoft Free Studio.lnk
[2010.08.18 21:39:05 | 002,373,712 | ---- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2010.08.17 11:28:53 | 000,011,314 | ---- | C] () -- C:\Users\Christoph\Documents\cc_20100817_112852.reg
[2010.08.16 22:24:49 | 000,000,790 | ---- | C] () -- C:\Users\Public\Desktop\mIRC.lnk
[2010.08.11 20:04:53 | 000,001,601 | ---- | C] () -- C:\Users\Christoph\Desktop\Runes of Magic.lnk
[2010.08.10 09:17:05 | 000,004,848 | ---- | C] () -- C:\Users\Christoph\Documents\cc_20100810_091704.reg
[2010.08.09 22:44:48 | 000,437,328 | ---- | C] () -- C:\Users\Christoph\AppData\Local\dd_vcredistMSI7115.txt
[2010.08.09 22:44:47 | 000,011,458 | ---- | C] () -- C:\Users\Christoph\AppData\Local\dd_vcredistUI7115.txt
[2010.08.09 22:44:43 | 000,000,915 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2010.08.09 13:53:49 | 4293,386,240 | -HS- | C] () -- C:\hiberfil.sys
[2010.08.09 10:02:56 | 000,000,680 | ---- | C] () -- C:\Users\Christoph\AppData\Local\d3d9caps.dat
[2010.08.09 09:36:55 | 000,002,188 | ---- | C] () -- C:\Users\Christoph\Documents\cc_20100809_093653.reg
[2010.08.08 15:33:43 | 000,000,818 | ---- | C] () -- C:\Users\Public\Desktop\World of Warcraft.lnk
[2010.08.08 12:53:17 | 000,004,470 | ---- | C] () -- C:\Users\Christoph\Documents\cc_20100808_125315.reg
[2010.08.07 12:57:10 | 000,019,598 | ---- | C] () -- C:\Users\Christoph\Documents\cc_20100807_125709.reg
[2010.08.05 18:27:09 | 000,000,990 | ---- | C] () -- C:\Users\Public\Desktop\Paint.NET.lnk
[2010.08.04 10:40:21 | 000,000,784 | ---- | C] () -- C:\Users\Public\Desktop\LOCO.lnk
[2010.08.02 20:04:47 | 000,000,761 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II.lnk
[2010.07.26 17:46:45 | 000,000,097 | ---- | C] () -- C:\Windows\SysWow64\PICSDK.ini
[2010.07.26 17:43:55 | 000,000,025 | ---- | C] () -- C:\Windows\CDESX100DEFGIPS.ini
[2010.07.25 16:53:48 | 000,368,640 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2010.07.25 16:53:43 | 000,117,248 | ---- | C] () -- C:\Windows\SysWow64\EhStorAuthn.dll
[2010.07.25 15:36:09 | 000,060,124 | ---- | C] () -- C:\Windows\SysWow64\tcpmon.ini
[2010.07.25 12:02:03 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.07.25 11:00:34 | 000,037,301 | ---- | C] () -- C:\ProgramData\nvModes.dat
[2010.07.25 11:00:34 | 000,037,301 | ---- | C] () -- C:\ProgramData\nvModes.001
[2010.07.25 10:40:22 | 000,000,732 | ---- | C] () -- C:\Users\Christoph\AppData\Local\d3d9caps64.dat
========== LOP Check ==========
[2010.07.25 12:04:22 | 000,000,000 | -HSD | M] -- C:\Users\Christoph\AppData\Roaming\.#
[2010.08.24 21:08:40 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\Acer E400 USB Driver
[2010.08.18 22:29:24 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.07.26 17:53:30 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\EPSON
[2010.08.11 20:06:13 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\FOG Downloader
[2010.08.27 17:16:52 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\Mount&Blade Warband
[2010.08.12 18:51:21 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\mquadr.at
[2010.08.06 15:38:45 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\REAPER
[2010.08.05 16:30:44 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\Teeworlds
[2010.08.28 11:53:44 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\TS3Client
[2010.08.29 00:36:08 | 000,000,000 | ---D | M] -- C:\Users\Christoph\AppData\Roaming\TuneUp Software
[2010.09.01 00:40:16 | 000,032,468 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
========== Purity Check ==========
< End of report > --- --- ---
und Extras:
OTL Logfile: Code:
OTL Extras logfile created on: 01.09.2010 15:56:03 - Run 1
OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\Christoph\Desktop
64bit-Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18943)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
4,00 Gb Total Physical Memory | 2,00 Gb Available Physical Memory | 59,00% Memory free
10,00 Gb Paging File | 8,00 Gb Available in Paging File | 79,00% Paging File free
Paging file location(s): c:\pagefile.sys 6000 6000 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 465,76 Gb Total Space | 281,46 Gb Free Space | 60,43% Space Free | Partition Type: NTFS
Drive D: | 3,71 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
Computer Name: CHRISTOPH-PC
Current User Name: Christoph
Logged in as Administrator.
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox 4.0 Beta 1\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = A8 A5 84 9A 03 2C CB 01 [binary data]
"VistaSp2" = 2B 5D 42 83 0C 2C CB 01 [binary data]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"oobe_av" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{18467FD5-2A4E-4FAE-A128-1AAA1BBF822F}" = lport=2869 | protocol=6 | dir=in | app=system |
"{AC3786D1-1962-4A32-BAE2-4AA2AC9D0F8F}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{12ECD363-55C0-4769-A75D-10F5C99FAFD0}" = protocol=6 | dir=in | app=c:\program files (x86)\a1 telekom austria\breitband-internet-installation\fixnet installer\installer.exe |
"{14B3075D-F6A0-4B00-9EA9-3F390FD44B19}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe |
"{15927C52-D0C1-4B60-B4EE-5C4CC46BBB8D}" = protocol=17 | dir=in | app=c:\spiele\starcraft ii\starcraft ii.exe |
"{193DBC3F-7891-4B09-9FE8-B410FB0813A3}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{1AE32CC3-1BA2-4A3C-AD2B-236786B4D3BD}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{27233131-2FFB-420A-8D6B-F31F20126017}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\gumpl\counter-strike source\hl2.exe |
"{2940D250-8588-4FAC-AF0C-DDEE1D977035}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\lead and gold gangs of the wild west\lag_win32_public_dev.exe |
"{29BD42FD-9B96-4687-B529-7906A0D12F01}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{3287A622-F552-45C0-B71D-EE671E217A66}" = protocol=6 | dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{341F2EAD-35A1-4D0A-90EA-BE2E80C3949B}" = protocol=6 | dir=in | app=c:\spiele\two worlds\twoworlds_radeon.exe |
"{351E42DD-3243-4A76-BBE5-C10AC97F7BBB}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{3B31F62C-1B66-4137-8E7E-8EDFB3B45B8F}" = protocol=17 | dir=in | app=c:\program files (x86)\itunes\itunes.exe |
"{42BFD56E-BECF-426F-94D9-F7C5B5AD802C}" = protocol=17 | dir=in | app=c:\spiele\two worlds\twoworlds_radeon.exe |
"{44E7DD2F-BE80-402E-BC68-E7DEA8E2EE45}" = protocol=6 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{494E5E63-F333-4F72-9A51-1D0B21EFD9B8}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{496E9807-3219-4BDF-941B-7BF16B06D42F}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{5EA9ED48-CC4F-4AD7-80C0-6528B1566855}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe |
"{60835E97-3E70-491D-9FDD-E4DCB1791F04}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe |
"{6DB7DBC5-3E4E-49AB-8D4B-7A93BFECB37C}" = protocol=17 | dir=in | app=c:\program files (x86)\bonjour\mdnsresponder.exe |
"{728FC2E5-0537-49C2-AF63-4FBD5FA46173}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe |
"{82F8E8DC-C8F9-46F9-9D34-20D5B321E5AC}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe |
"{846F395F-51FD-4037-9652-A8BE5007F4FD}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\lead and gold gangs of the wild west\lag_win32_public_dev.exe |
"{8DF729B0-EA42-4E8D-9436-32EF64AA2BD8}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\gumpl\counter-strike source\hl2.exe |
"{9727BC7B-32B9-4BC1-8EFF-D0466BB74141}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plain sight\plainsight.exe |
"{9E839F89-F041-473C-90FC-FBF64AAD2E6F}" = protocol=6 | dir=in | app=c:\spiele\world of warcraft\wow-3.2.0-dede-downloader.exe |
"{A079363E-3B90-40A2-B58B-211D1D32CE4E}" = protocol=17 | dir=in | app=c:\spiele\world of warcraft\wow-3.2.0-dede-downloader.exe |
"{AA9E0E6F-C6A1-4EC5-B1C8-91188D002D7B}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\swarm.exe |
"{AAA976B5-2F95-471D-A50B-D781F8444B2D}" = protocol=6 | dir=in | app=c:\spiele\two worlds\twoworlds.exe |
"{AAF77653-07BB-4A41-A2C5-A73058677C46}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{AF85EC09-4D03-4E45-8EB8-DF5E4F2C46E9}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\plain sight\plainsight.exe |
"{BD39D3E2-F86C-4041-937E-D794204CF027}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe |
"{C00DAA8B-66DB-4687-9782-8FC700B5D14C}" = protocol=17 | dir=in | app=c:\spiele\two worlds\twoworlds.exe |
"{CFE70161-C473-47C5-8C35-2EF58C0C6E0C}" = protocol=17 | dir=in | app=c:\program files (x86)\a1 telekom austria\breitband-internet-installation\fixnet installer\installer.exe |
"{DA29D991-5875-4961-981D-63DD31E1206C}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mountblade warband\mb_warband.exe |
"{DEBFBE4B-41B2-477F-8915-39A8FF85FEFE}" = protocol=6 | dir=in | app=c:\spiele\starcraft ii\starcraft ii.exe |
"{E50E555C-C987-4E23-826B-BF91E295DB79}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\mountblade warband\mb_warband.exe |
"{ECF318A0-80C9-4F15-90F7-495067F34810}" = dir=in | app=c:\program files (x86)\avg\avg9\avgupd.exe |
"{EDAC159E-4701-455E-85E4-A38478177615}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"{EEAD49F9-E282-4B41-99FE-2A93DE646680}" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\alien swarm\srcds.exe |
"{F4EF55A8-ED61-42A0-BB65-53826DAB7F16}" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steam.exe |
"{FD1E9D0A-5BC8-49E7-AE81-6528BA998232}" = dir=in | app=c:\program files (x86)\avg\avg9\avgemc.exe |
"{FF252A92-7542-46B0-A7E1-5E1599CEAA8F}" = dir=in | app=c:\program files (x86)\avg\avg9\avgnsa.exe |
"TCP Query User{066B1690-B295-4900-B1D6-148CAA0C9A61}C:\spiele\starcraft ii\support\blizzarddownloader.exe" = protocol=6 | dir=in | app=c:\spiele\starcraft ii\support\blizzarddownloader.exe |
"TCP Query User{114699DF-D798-4C02-8DCE-02C8F59A9383}C:\spiele\alaplaya\loco\system\loco.exe" = protocol=6 | dir=in | app=c:\spiele\alaplaya\loco\system\loco.exe |
"TCP Query User{49821027-0B43-4FA3-B17A-7B5AA67263E4}C:\spiele\starcraft ii\versions\base15405\sc2.exe" = protocol=6 | dir=in | app=c:\spiele\starcraft ii\versions\base15405\sc2.exe |
"TCP Query User{62733807-FA7F-460D-8DEA-7F97DA315F8F}C:\spiele\starcraft ii\versions\base15405\sc2.exe" = protocol=6 | dir=in | app=c:\spiele\starcraft ii\versions\base15405\sc2.exe |
"TCP Query User{67691470-D871-435B-9679-468BC4DF810E}C:\spiele\alaplaya\loco\system\loco.exe" = protocol=6 | dir=in | app=c:\spiele\alaplaya\loco\system\loco.exe |
"TCP Query User{782C7EA1-15BA-4A7B-A4A9-7DB4E42CDD19}C:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"TCP Query User{82CF1251-C716-4B1D-90C6-4FEF690C6800}C:\users\christoph\downloads\fogdownloader-rom_3_0_1_2153.exe" = protocol=6 | dir=in | app=c:\users\christoph\downloads\fogdownloader-rom_3_0_1_2153.exe |
"TCP Query User{88AC1397-7E8F-4647-9461-5399F60AB815}C:\spiele\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\spiele\world of warcraft\launcher.exe |
"TCP Query User{B6E9F098-9EAB-4439-8C46-D4D50834425E}C:\spiele\starcraft ii\starcraft ii.exe" = protocol=6 | dir=in | app=c:\spiele\starcraft ii\starcraft ii.exe |
"TCP Query User{C387EAA6-7B2A-4EE9-9005-B28C0D617823}C:\program files (x86)\steam\steamapps\gumpl\counter-strike source\hl2.exe" = protocol=6 | dir=in | app=c:\program files (x86)\steam\steamapps\gumpl\counter-strike source\hl2.exe |
"TCP Query User{C6A600AD-7C89-412E-8620-95A6FBE74C0E}C:\spiele\runes of magic\client.exe" = protocol=6 | dir=in | app=c:\spiele\runes of magic\client.exe |
"TCP Query User{D59DE735-3526-4661-8412-BFE69485AF5F}C:\program files (x86)\mirc\mirc.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"TCP Query User{D724FBD1-CD3F-4F72-BF29-2AC069AE7C65}C:\spiele\starcraft ii\support\blizzarddownloader.exe" = protocol=6 | dir=in | app=c:\spiele\starcraft ii\support\blizzarddownloader.exe |
"TCP Query User{E834B44F-43F4-4BB3-85A1-F8C87C8358BC}C:\spiele\runes of magic\client.exe" = protocol=6 | dir=in | app=c:\spiele\runes of magic\client.exe |
"UDP Query User{0AA4E8F4-CF10-4464-B616-074C17554754}C:\spiele\starcraft ii\support\blizzarddownloader.exe" = protocol=17 | dir=in | app=c:\spiele\starcraft ii\support\blizzarddownloader.exe |
"UDP Query User{1443F0F1-88F7-4B3E-A239-3634F882D4A4}C:\spiele\alaplaya\loco\system\loco.exe" = protocol=17 | dir=in | app=c:\spiele\alaplaya\loco\system\loco.exe |
"UDP Query User{1D28B62B-714C-4C57-B0A5-DF5E6E5BCC71}C:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\common\left 4 dead 2\left4dead2.exe |
"UDP Query User{2615DB13-C340-4644-B053-67F6D0B9D2AF}C:\program files (x86)\steam\steamapps\gumpl\counter-strike source\hl2.exe" = protocol=17 | dir=in | app=c:\program files (x86)\steam\steamapps\gumpl\counter-strike source\hl2.exe |
"UDP Query User{2FE31C1A-9BE2-4C74-84F6-705D12D3E99C}C:\spiele\runes of magic\client.exe" = protocol=17 | dir=in | app=c:\spiele\runes of magic\client.exe |
"UDP Query User{352D5352-93A5-42DD-98EF-3834853CBD24}C:\users\christoph\downloads\fogdownloader-rom_3_0_1_2153.exe" = protocol=17 | dir=in | app=c:\users\christoph\downloads\fogdownloader-rom_3_0_1_2153.exe |
"UDP Query User{39FD8068-E7E1-476C-812D-489C6216FF45}C:\program files (x86)\mirc\mirc.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mirc\mirc.exe |
"UDP Query User{53048FB9-A795-4111-AB23-EA50AA8990C1}C:\spiele\alaplaya\loco\system\loco.exe" = protocol=17 | dir=in | app=c:\spiele\alaplaya\loco\system\loco.exe |
"UDP Query User{79752A59-D0A8-43C7-A3BA-5F44222A72AD}C:\spiele\runes of magic\client.exe" = protocol=17 | dir=in | app=c:\spiele\runes of magic\client.exe |
"UDP Query User{95A5B6CA-5569-4275-8D7F-BB98419F42BB}C:\spiele\starcraft ii\support\blizzarddownloader.exe" = protocol=17 | dir=in | app=c:\spiele\starcraft ii\support\blizzarddownloader.exe |
"UDP Query User{9F134A3B-3ED4-4D15-8121-B8EBDEBFC2C2}C:\spiele\starcraft ii\versions\base15405\sc2.exe" = protocol=17 | dir=in | app=c:\spiele\starcraft ii\versions\base15405\sc2.exe |
"UDP Query User{AF028524-CE35-4CB3-A84D-EB4188731780}C:\spiele\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\spiele\world of warcraft\launcher.exe |
"UDP Query User{CBB7460A-65D1-45A0-AAD7-815E377371D9}C:\spiele\starcraft ii\starcraft ii.exe" = protocol=17 | dir=in | app=c:\spiele\starcraft ii\starcraft ii.exe |
"UDP Query User{DAB1EB58-7B5A-4019-B8DB-7A378135F042}C:\spiele\starcraft ii\versions\base15405\sc2.exe" = protocol=17 | dir=in | app=c:\spiele\starcraft ii\versions\base15405\sc2.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{23170F69-40C1-2702-0465-000001000000}" = 7-Zip 4.65 (x64 edition)
"{23B45E10-0CA5-43E9-BD6D-C2BD6CBE11AC}" = iTunes
"{328CC232-CFDC-468B-A214-2E21300E4CB5}" = Apple Mobile Device Support
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}" = Bonjour
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{EE936C7A-EA40-31D5-9B65-8E3E089C3828}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148
"{F0E2B312-D7FD-4349-A9B6-E90B36DB1BD1}" = Paint.NET v3.5.5
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"0BADEE36424C9945238CD1CBDECB6800485FD933" = Windows-Treiberpaket - Linux Developer Community Net (02/02/2010 5.1.2600.2781)
"5F3015F0AD4F9F61F4D01EAE1AF322C1A901C27C" = Windows-Treiberpaket - ACER Incorporated (qcusbser) Ports (10/12/2009 2.0.6.6)
"A61AC676A7F61C423134B0621CBA2D4134507A2D" = Windows-Treiberpaket - ACER, Inc (androidusb) USB (10/12/2009 1.0.0010.00000)
"BF39BAA13199B9BFDFC03B6C26851E9F3246C6A2" = Windows-Treiberpaket - ACER Incorporated (qcusbser) Modem (10/12/2009 2.0.6.6)
"Defraggler" = Defraggler
"EPSON SX100 Series" = EPSON SX100 Series Printer Uninstall
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"TeamSpeak 3 Client" = TeamSpeak 3 Client
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}" = Microsoft XNA Framework Redistributable 3.1
"{1ED31028-6D65-4CFD-AD03-8E484A052FE7}" = aonUpdate
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2BEB102E-F9CD-4881-984B-E288F66FD394}" = Quake Live Mozilla Plugin
"{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64)
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3D9892BB-A751-4E48-ADC8-E4289956CE1D}" = QuickTime
"{4767A89A-F6A5-41B1-903C-734483739882}" = Highspeed-Internet-Installation
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5AC1CB24-8B13-48F9-BDBE-EAA0D2C5253A}" = Aion
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B7FB3C4-E71B-478D-9E15-5AE97EAD67B8}" = aonFTP
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE)
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A809006-C25A-4A3A-9DAB-94659BCDB107}" = NVIDIA PhysX
"{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}" = Battlefield Heroes
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{904B64C4-49D8-4941-A2B6-D13D06C5CD8B}" = Controller
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = Runes of Magic
"{AC76BA86-7AD7-1031-7B44-A93000000001}" = Adobe Reader 9.3.4 - Deutsch
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B2D328BE-45AD-4D92-96F9-2151490A203E}" = Apple Application Support
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{C9FB868B-2086-4EE2-BD4F-BFBA36B131F4}" = NCsoft Launcher
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{DEDB47A3-C988-4A43-A645-E2CEA571E680}" = Epson Easy Photo Print 2
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"aonFTP" = aonFTP
"aonUpdate" = aonUpdate
"AVG9Uninstall" = AVG Free 9.0
"CCleaner" = CCleaner
"Controller" = Controller
"EPSON Scanner" = EPSON Scan
"EPSON Stylus SX100_TX100 Benutzerhandbuch" = EPSON Stylus SX100_TX100 Handbuch
"Fiesta Online(EU_German)" = Fiesta Online(EU_German) 1.02.100
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.8
"Highspeed-Internet-Installation" = Highspeed-Internet-Installation
"LOCO" = LOCO EU
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"mIRC" = mIRC
"Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8)
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PunkBusterSvc" = PunkBuster Services
"StarCraft II" = StarCraft II
"Steam App 240" = Counter-Strike: Source
"Steam App 4000" = Garry's Mod
"Steam App 42120" = Lead and Gold - Gangs of the Wild West
"Steam App 48700" = Mount and Blade: Warband
"Steam App 49900" = Plain Sight
"Steam App 550" = Left 4 Dead 2
"Steam App 630" = Alien Swarm
"TuneUp Utilities" = TuneUp Utilities
"Two Worlds" = Two Worlds
"Uninstall_is1" = Uninstall 1.0.0.1
"WinLiveSuite_Wave3" = Windows Live Essentials
"World of Warcraft" = World of Warcraft
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"OnlineFestplatte" = aon Online Festplatte (entfernen)
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 28.08.2010 18:47:00 | Computer Name = Christoph-PC | Source = LoadPerf | ID = 3001
Description =
Error - 28.08.2010 18:47:07 | Computer Name = Christoph-PC | Source = LoadPerf | ID = 3001
Description =
Error - 28.08.2010 18:47:12 | Computer Name = Christoph-PC | Source = Application Hang | ID = 1002
Description = Programm SystemInformation.exe, Version 9.0.4600.2 arbeitet nicht
mehr mit Windows zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im
Applet "Lösungen für Probleme" in der Systemsteuerung, um nach weiteren Informationen
über das Problem zu suchen. Prozess-ID: 11b0 Anfangszeit: 01cb4702a6f0d0ae Zeitpunkt
der Beendigung: 0
Error - 29.08.2010 04:10:04 | Computer Name = Christoph-PC | Source = LoadPerf | ID = 3001
Description =
Error - 29.08.2010 09:24:56 | Computer Name = Christoph-PC | Source = LoadPerf | ID = 3001
Description =
Error - 30.08.2010 06:32:44 | Computer Name = Christoph-PC | Source = LoadPerf | ID = 3001
Description =
Error - 31.08.2010 04:03:34 | Computer Name = Christoph-PC | Source = LoadPerf | ID = 3001
Description =
Error - 31.08.2010 14:14:21 | Computer Name = Christoph-PC | Source = LoadPerf | ID = 3001
Description =
Error - 31.08.2010 18:35:45 | Computer Name = Christoph-PC | Source = Application Hang | ID = 1002
Description = Programm OTL.exe, Version 3.2.11.0 arbeitet nicht mehr mit Windows
zusammen und wurde beendet. Überprüfen Sie den Problemverlauf im Applet "Lösungen
für Probleme" in der Systemsteuerung, um nach weiteren Informationen über das Problem
zu suchen. Prozess-ID: cc Anfangszeit: 01cb495ca93512a0 Zeitpunkt der Beendigung:
4
Error - 01.09.2010 06:03:49 | Computer Name = Christoph-PC | Source = LoadPerf | ID = 3001
Description =
[ System Events ]
Error - 28.08.2010 18:46:22 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 28.08.2010 18:46:30 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 28.08.2010 18:46:37 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 28.08.2010 18:46:43 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 28.08.2010 18:46:49 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 28.08.2010 18:46:56 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 28.08.2010 18:47:03 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 28.08.2010 18:47:10 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7023
Description =
Error - 31.08.2010 09:14:49 | Computer Name = Christoph-PC | Source = Service Control Manager | ID = 7011
Description =
Error - 31.08.2010 14:08:00 | Computer Name = Christoph-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am 31.08.2010 um 20:05:10 unerwartet heruntergefahren.
< End of report > --- --- --- |