Google verlinkt auf teils anstößige Seiten.
Hey Leute,
ich habe ein Problem. Wie schon bei vielen anderen hier werde ich manchmal auf falsche Seiten umgeleitet, wenn ich Suchergebnisse öffnen will. Diese sind teils anstößige Seiten und in letzter Zeit ist es immer die gleiche. Ich habe die Beiträge in diesem Forum schon durchgelesen, jedoch keine brauchbaren Lösungsansatz für mich gefunden. Jetzt habe ich, wie von Larusso beschrieben, die drei Log-Files erstellt und poste die hier mal:
Ein kleines Problem tritt auf: Ich kann die anderen Logs nicht posten, sind vielleicht zu lang. Jedenfalls passiert nach dem Editieren nichts. OTL:OTL Logfile: Code:
OTL logfile created on: 25.02.2011 20:44:43 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Dokumente und Einstellungen\Besitzer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 60,00% Memory free
3,00 Gb Paging File | 2,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 48,83 Gb Total Space | 3,05 Gb Free Space | 6,26% Space Free | Partition Type: NTFS
Drive D: | 100,21 Gb Total Space | 38,71 Gb Free Space | 38,63% Space Free | Partition Type: NTFS
Drive G: | 877,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Computer Name: ***** | User Name: Besitzer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011.02.25 20:32:33 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\OTL.exe
PRC - [2011.02.25 20:25:06 | 000,178,688 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temp\csrss.exe
PRC - [2011.02.25 18:48:32 | 000,173,056 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\dwm.exe
PRC - [2011.02.25 18:48:11 | 000,161,792 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Microsoft\conhost.exe
PRC - [2011.02.22 23:18:20 | 000,269,480 | ---- | M] (Avira GmbH) -- D:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.02.18 07:13:05 | 000,912,344 | ---- | M] (Mozilla Corporation) -- D:\Programme\Mozilla Firefox\firefox.exe
PRC - [2010.12.06 08:31:52 | 001,910,152 | ---- | M] (LogMeIn Inc.) -- D:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2010.12.06 08:31:48 | 001,238,408 | ---- | M] (LogMeIn Inc.) -- D:\Programme\LogMeIn Hamachi\hamachi-2.exe
PRC - [2010.11.02 01:06:14 | 000,135,336 | ---- | M] (Avira GmbH) -- D:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2010.11.02 01:06:13 | 000,281,768 | ---- | M] (Avira GmbH) -- D:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010.01.14 21:10:54 | 000,076,968 | ---- | M] (Avira GmbH) -- D:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2010.01.03 16:07:48 | 000,246,520 | ---- | M] () -- D:\Programme\ICQ6Toolbar\ICQ Service.exe
PRC - [2009.10.19 23:11:52 | 000,616,712 | ---- | M] (hxxp://tortoisesvn.net) -- D:\Programme\TortoiseSVN\bin\TSVNCache.exe
PRC - [2008.12.10 00:10:14 | 000,024,636 | ---- | M] (Apache Software Foundation) -- D:\Programme\xampp\apache\bin\apache.exe
PRC - [2008.08.27 02:53:46 | 000,185,872 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
PRC - [2008.04.14 03:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004.11.15 11:20:20 | 000,077,824 | R--- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
PRC - [2002.11.29 20:08:32 | 000,065,536 | ---- | M] () -- D:\Programme\Keyboard Driver\Keyboard Driver\Ikeymain.exe
PRC - [2001.02.23 09:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe
========== Modules (SafeList) ==========
MOD - [2011.02.25 20:32:33 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\OTL.exe
MOD - [2010.08.23 17:11:46 | 001,054,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
MOD - [2009.10.19 23:11:50 | 000,812,296 | ---- | M] (hxxp://tortoisesvn.net) -- D:\Programme\TortoiseSVN\bin\TortoiseSVN.dll
MOD - [2009.10.19 23:11:50 | 000,049,416 | ---- | M] (hxxp://tortoisesvn.net) -- D:\Programme\TortoiseSVN\bin\TortoiseStub.dll
MOD - [2009.10.19 23:11:24 | 000,128,776 | ---- | M] (Apache Software Foundation) -- D:\Programme\TortoiseSVN\bin\libapr_tsvn.dll
MOD - [2009.10.19 23:11:22 | 000,186,632 | ---- | M] (Apache Software Foundation) -- D:\Programme\TortoiseSVN\bin\libaprutil_tsvn.dll
MOD - [2009.10.19 23:11:22 | 000,063,240 | ---- | M] (Free Software Foundation) -- D:\Programme\TortoiseSVN\bin\intl3_tsvn.dll
MOD - [2009.08.13 17:55:46 | 000,085,768 | ---- | M] (hxxp://tortoisesvn.net) -- C:\Programme\Gemeinsame Dateien\TortoiseOverlays\TortoiseOverlays.dll
MOD - [2009.07.11 23:02:02 | 000,653,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll
MOD - [2009.07.11 23:02:00 | 000,569,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll
MOD - [2009.02.09 13:18:00 | 001,507,328 | ---- | M] () -- C:\WINDOWS\system32\nview.dll
MOD - [2009.02.09 13:18:00 | 000,311,296 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvwrsde.dll
MOD - [2009.02.09 13:18:00 | 000,081,920 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\system32\nvwddi.dll
MOD - [2008.04.14 03:22:25 | 000,025,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\system32\shfolder.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [On_Demand | Stopped] -- -- (AppMgmt)
SRV - File not found [Auto | Stopped] -- -- (Apache2)
SRV - [2011.02.22 23:18:20 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Programme\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2010.12.06 08:31:48 | 001,238,408 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- D:\Programme\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2010.11.02 01:06:14 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Programme\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2010.01.03 16:07:48 | 000,246,520 | ---- | M] () [Auto | Running] -- D:\Programme\ICQ6Toolbar\ICQ Service.exe -- (ICQ Service)
SRV - [2008.12.10 00:10:14 | 000,024,636 | ---- | M] (Apache Software Foundation) [Auto | Running] -- D:\Programme\xampp\apache\bin\apache.exe -- (Apache2.2)
SRV - [2007.01.19 12:54:14 | 000,097,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\MSN Messenger\usnsvc.exe -- (usnjsvc)
SRV - [2006.11.03 09:56:28 | 000,920,576 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Windows Media Player\wmpnetwk.exe -- (WMPNetworkSvc)
SRV - [2004.10.22 03:24:18 | 000,073,728 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2004.04.28 08:07:22 | 000,196,666 | ---- | M] (AVM Berlin) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\AVM\De_serv.exe -- (de_serv)
SRV - [2001.02.23 09:07:30 | 000,270,336 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7Debug\mdm.exe -- (MDM)
========== Driver Services (SafeList) ==========
DRV - [2011.02.22 23:18:21 | 000,137,656 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2010.11.14 06:00:59 | 000,061,960 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010.02.03 14:56:56 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.12.08 17:42:48 | 000,037,920 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2009.12.08 17:42:26 | 000,027,168 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\rrnetcap.sys -- (RRNetCapMP)
DRV - [2009.12.08 17:42:26 | 000,027,168 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\rrnetcap.sys -- (RRNetCap)
DRV - [2009.05.11 09:12:50 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.02.13 11:35:01 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- D:\Programme\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008.08.21 10:51:00 | 000,271,360 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\atksgt.sys -- (atksgt)
DRV - [2008.08.21 10:50:59 | 000,018,048 | ---- | M] () [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2008.08.02 12:13:51 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\WINDOWS\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2008.04.14 18:52:28 | 000,019,240 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SiWinAcc.sys -- (SiFilter)
DRV - [2008.04.14 18:52:10 | 000,073,768 | ---- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SI3114.sys -- (SI3114)
DRV - [2008.01.23 09:19:44 | 000,501,560 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\ACEDRV11.sys -- (acedrv11)
DRV - [2007.03.15 10:27:59 | 000,094,064 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510mdm.sys -- (k510mdm)
DRV - [2007.03.15 10:27:59 | 000,085,408 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510mgmt.sys -- (k510mgmt) Sony Ericsson K510 USB WMC Device Management Drivers (WDM)
DRV - [2007.03.15 10:27:59 | 000,083,344 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510obex.sys -- (k510obex)
DRV - [2007.03.15 10:27:59 | 000,058,288 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510bus.sys -- (k510bus) Sony Ericsson K510 Driver driver (WDM)
DRV - [2007.03.15 10:27:59 | 000,008,336 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\k510mdfl.sys -- (k510mdfl)
DRV - [2007.03.13 07:51:18 | 000,639,224 | ---- | M] () [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\sptd.sys -- (sptd)
DRV - [2006.07.21 23:07:36 | 000,005,504 | ---- | M] (Silicon Image, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\SiRemFil.sys -- (SiRemFil)
DRV - [2006.03.26 13:22:14 | 000,051,200 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2006.03.13 10:38:23 | 000,006,656 | ---- | M] (Protection Technology (StarForce)) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
DRV - [2005.12.22 12:24:52 | 000,137,884 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2005.12.22 12:24:52 | 000,010,864 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2005.12.22 12:24:50 | 000,080,272 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\sscdbus.sys -- (sscdbus) SAMSUNG USB Composite Device driver (WDM)
DRV - [2005.11.03 15:40:07 | 000,063,488 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfvfs02.sys -- (sfvfs02) StarForce Protection VFS Driver (version 2.x)
DRV - [2005.08.10 15:06:28 | 000,019,968 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x)
DRV - [2005.02.01 01:00:00 | 000,014,976 | R--- | M] (AVM GmbH) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\avmunet.sys -- (AVMUNET)
DRV - [2004.11.17 12:05:38 | 002,297,664 | R--- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [2004.10.27 00:24:00 | 000,223,104 | R--- | M] (Marvell) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\yk51x86.sys -- (yukonwxp)
DRV - [2004.09.02 07:24:38 | 000,082,816 | R--- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\nvatabus.sys -- (nvatabus)
DRV - [2004.07.21 05:02:00 | 000,166,400 | R--- | M] (Silicon Image, Inc) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\Si3114r5.sys -- (Si3114r5)
DRV - [2004.06.19 10:55:26 | 000,015,872 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temp\cdiskdun.sys -- (cdiskdun)
DRV - [2004.05.02 09:47:08 | 000,023,040 | R--- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\System32\drivers\GVCplDrv.sys -- (GVCplDrv)
DRV - [2004.04.28 08:03:44 | 000,011,264 | ---- | M] (AVM Berlin) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\netdsl.sys -- (NETDSL)
DRV - [2004.04.28 08:03:42 | 000,374,272 | ---- | M] (AVM Berlin) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NETFWDSL.SYS -- (NETFWDSL)
DRV - [2004.04.28 07:58:44 | 000,027,648 | ---- | M] (AVM Berlin) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\Aadev.sys -- (aadev)
DRV - [2004.03.09 11:18:09 | 000,065,504 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prohlp02.sys -- (prohlp02)
DRV - [2004.03.09 10:45:49 | 000,077,184 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\prodrv06.sys -- (prodrv06)
DRV - [2003.12.01 16:20:52 | 000,004,832 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\sfhlp01.sys -- (sfhlp01)
DRV - [2003.09.06 13:22:08 | 000,006,944 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\WINDOWS\System32\drivers\prosync1.sys -- (prosync1)
DRV - [2001.08.17 13:51:32 | 000,018,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\irsir.sys -- (irsir)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = hxxp://google.icq.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\..\URLSearchHook: {2bae58c2-79f9-45d1-a286-81f911301c3a} - D:\Programme\P2P_Energy\tbP2P_.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - D:\Programme\ICQ6Toolbar\20101104133540\ICQToolBar.dll (ICQ)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = http=127.0.0.1:59636
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "ICQ Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - prefs.js..extensions.enabledItems: tineye@ideeinc.com:1.1
FF - prefs.js..extensions.enabledItems: {9c51bd27-6ed8-4000-a2bf-36cb95c0c947}:11.0.1
FF - prefs.js..extensions.enabledItems: piclens@cooliris.com:1.12.0.36949
FF - prefs.js..extensions.enabledItems: {b9db16a4-6edc-47ec-a1f4-b86292ed211d}:4.8.4
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=2.0.0.2&q="
FF - prefs.js..network.proxy.backup.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ftp_port: 4001
FF - prefs.js..network.proxy.backup.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.backup.gopher_port: 4001
FF - prefs.js..network.proxy.backup.socks: "127.0.0.1"
FF - prefs.js..network.proxy.backup.socks_port: 4001
FF - prefs.js..network.proxy.backup.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.backup.ssl_port: 4001
FF - prefs.js..network.proxy.ftp: "127.0.0.1"
FF - prefs.js..network.proxy.ftp_port: 4001
FF - prefs.js..network.proxy.gopher: "127.0.0.1"
FF - prefs.js..network.proxy.gopher_port: 4001
FF - prefs.js..network.proxy.http: "127.0.0.1"
FF - prefs.js..network.proxy.http_port: 4001
FF - prefs.js..network.proxy.share_proxy_settings: true
FF - prefs.js..network.proxy.socks: "127.0.0.1"
FF - prefs.js..network.proxy.socks_port: 4001
FF - prefs.js..network.proxy.ssl: "127.0.0.1"
FF - prefs.js..network.proxy.ssl_port: 4001
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Components: D:\Programme\Mozilla Firefox\components [2011.02.18 07:13:20 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.15\extensions\\Plugins: D:\Programme\Mozilla Firefox\plugins [2011.02.18 07:13:20 | 000,000,000 | ---D | M]
[2010.08.24 13:00:20 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Extensions
[2011.02.25 01:31:29 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\extensions
[2011.01.26 10:20:33 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.08.24 13:01:15 | 000,000,000 | ---D | M] (Tamper Data) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}
[2011.02.21 02:06:11 | 000,000,000 | ---D | M] (DownloadHelper) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}
[2011.01.26 10:20:31 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010.08.24 13:01:13 | 000,000,000 | ---D | M] (AnyColor) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\extensions\anycolor.pavlos256@gmail.com
[2010.12.27 13:55:34 | 000,000,000 | ---D | M] (Cooliris) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\extensions\piclens@cooliris.com
[2011.02.18 21:51:23 | 000,000,000 | ---D | M] (TinEye Reverse Image Search) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\extensions\tineye@ideeinc.com
[2010.06.19 06:20:30 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions
[2008.01.05 06:39:12 | 000,000,000 | ---D | M] (Metal Lion - Brushed iCe Chrome) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions\{01C901F4-12C5-4515-A5DE-CC0FD4F20BCA}
[2008.01.05 06:38:14 | 000,000,000 | ---D | M] (Metal Lion - iCe) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions\{1AFC82C3-0154-4b09-878B-D68500EFBE76}
[2008.10.17 18:34:52 | 000,000,000 | ---D | M] (Google Toolbar for Firefox) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
[2008.01.05 06:36:45 | 000,000,000 | ---D | M] (Metal Lion - 300) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions\{4A207596-AED2-4223-929F-BBE1D691B7CD}
[2010.04.22 14:27:29 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2008.01.05 06:40:37 | 000,000,000 | ---D | M] (PimpZilla) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions\{a02c0c70-605c-11da-8cd6-0800200c9a66}
[2009.01.27 20:51:52 | 000,000,000 | ---D | M] (Move Media Player) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions\moveplayer@movenetworks.com
[2008.01.05 06:44:56 | 000,000,000 | ---D | M] (RedShift V2) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\nrrbllxk.default\extensions\redshift_V2@shift-themes.com
[2010.06.19 06:20:31 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\qzkmaj7n.Standard-Benutzer\extensions
[2010.04.22 14:27:43 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\qzkmaj7n.Standard-Benutzer\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
[2011.02.25 18:35:15 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\icqplugin-1.xml
[2011.02.16 17:21:15 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\icqplugin-2.xml
[2010.07.18 07:57:46 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\icqplugin-3.xml
[2010.08.24 13:01:22 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\icqplugin-4.xml
[2010.09.08 02:42:08 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\icqplugin-5.xml
[2010.11.07 08:16:25 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\icqplugin-6.xml
[2010.11.09 07:15:40 | 000,000,950 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\icqplugin-7.xml
[2010.06.25 08:51:06 | 000,000,947 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\icqplugin.xml
[2009.12.27 00:18:48 | 000,003,982 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Mozilla\Firefox\Profiles\i8a1fh1x.default\searchplugins\wowhead-de.xml
[2011.02.25 01:31:29 | 000,000,000 | ---D | M] (No name found) -- D:\Programme\Mozilla Firefox\extensions
[2009.05.29 19:30:03 | 000,000,000 | ---D | M] (Java Quick Starter) -- D:\PROGRAMME\JAVA\JRE6\LIB\DEPLOY\JQS\FF
[2011.02.18 07:13:13 | 000,001,392 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2011.02.18 07:13:13 | 000,002,344 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2011.02.18 07:13:13 | 000,006,805 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2011.02.18 07:13:13 | 000,001,178 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2011.02.18 07:13:13 | 000,001,105 | ---- | M] () -- D:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2008.03.26 20:04:50 | 000,231,250 | R--- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 .supercocklol.com
O1 - Hosts: 127.0.0.1 www..webloyalty.com
O1 - Hosts: 127.0.0.1 007guard.com
O1 - Hosts: 127.0.0.1 www.007guard.com
O1 - Hosts: 127.0.0.1 008i.com
O1 - Hosts: 127.0.0.1 008k.com
O1 - Hosts: 127.0.0.1 www.008k.com
O1 - Hosts: 127.0.0.1 00hq.com
O1 - Hosts: 127.0.0.1 www.00hq.com
O1 - Hosts: 127.0.0.1 010402.com
O1 - Hosts: 127.0.0.1 032439.com
O1 - Hosts: 127.0.0.1 www.032439.com
O1 - Hosts: 127.0.0.1 1001-search.info
O1 - Hosts: 127.0.0.1 www.1001-search.info
O1 - Hosts: 127.0.0.1 www.100888290cs.com
O1 - Hosts: 127.0.0.1 100888290cs.com
O1 - Hosts: 127.0.0.1 100sexlinks.com
O1 - Hosts: 127.0.0.1 www.100sexlinks.com
O1 - Hosts: 127.0.0.1 www.10sek.com
O1 - Hosts: 127.0.0.1 10sek.com
O1 - Hosts: 127.0.0.1 123topsearch.com
O1 - Hosts: 127.0.0.1 www.123topsearch.com
O1 - Hosts: 127.0.0.1 www.132.com
O1 - Hosts: 127.0.0.1 132.com
O1 - Hosts: 8104 more lines...
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (P2P Energy Toolbar) - {2bae58c2-79f9-45d1-a286-81f911301c3a} - D:\Programme\P2P_Energy\tbP2P_.dll (Conduit Ltd.)
O2 - BHO: (Burn4Free Toolbar Helper) - {60BF5EE3-0105-4858-AD98-17C19F86B042} - C:\Programme\Burn4Free Toolbar\v3.3.0.0\Burn4Free_Toolbar.dll ()
O2 - BHO: (no name) - {7C109800-A5D5-438F-9640-18D17E168B88} - No CLSID value found.
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (Windows Live Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (no name) - {9EBBE90B-282E-4c39-8A7E-120749169F0F} - No CLSID value found.
O2 - BHO: (Burn4Free Toolbar Helper) - {D187A56B-A33F-4CBE-9D77-459FC0BAE012} - D:\Programme\Burn4Free Toolbar\v3.3.0.0\Burn4Free_Toolbar.dll ()
O2 - BHO: (no name) - {F8E5CA21-C27B-43e7-B2BE-4CA93C9F9A1F} - No CLSID value found.
O3 - HKLM\..\Toolbar: (P2P Energy Toolbar) - {2bae58c2-79f9-45d1-a286-81f911301c3a} - D:\Programme\P2P_Energy\tbP2P_.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Burn4Free Toolbar) - {4F11ACBB-393F-4C86-A214-FF3D0D155CC3} - D:\Programme\Burn4Free Toolbar\v3.3.0.0\Burn4Free_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (Burn4Free Toolbar) - {55FAF0F2-44D4-425F-B5F5-6B275B621EAB} - C:\Programme\Burn4Free Toolbar\v3.3.0.0\Burn4Free_Toolbar.dll ()
O3 - HKLM\..\Toolbar: (no name) - {70DE7956-479D-4eb7-8641-2B45774C350E} - No CLSID value found.
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - D:\Programme\ICQ6Toolbar\20101104133540\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\ShellBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - D:\Programme\ICQ6Toolbar\20101104133540\ICQToolBar.dll (ICQ)
O3 - HKCU\..\Toolbar\WebBrowser: (P2P Energy Toolbar) - {2BAE58C2-79F9-45D1-A286-81F911301C3A} - D:\Programme\P2P_Energy\tbP2P_.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - D:\Programme\ICQ6Toolbar\20101104133540\ICQToolBar.dll (ICQ)
O4 - HKLM..\Run: [avgnt] D:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [conhost] C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Microsoft\conhost.exe ()
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [Keyboard driver ] D:\Programme\Keyboard Driver\Keyboard Driver\Ikeymain.exe ()
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] D:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVRTCLK] C:\WINDOWS\system32\NVRTClk\NVRTClk.exe ()
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\SOUNDMAN.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Anleitung.exe ()
F3 - HKCU WinNT: Load - (C:\DOKUME~1\Besitzer\LOKALE~1\Temp\csrss.exe) - C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Temp\csrss.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - C:\Programme\Microsoft Office\Office10\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Programme\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.1 - {71BFC818-0CED-42D6-9C87-5142918957EE} - D:\Programme\ICQ7.1\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - File not found
O9 - Extra 'Tools' menuitem : ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - File not found
O9 - Extra Button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - D:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
O15 - HKCU\..Trusted Domains: fritz.box ([]* in Lokales Intranet)
O15 - HKCU\..Trusted Ranges: Range1 ([*] in Lokales Intranet)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_06-windows-i586.cab (Java Plug-in 1.5.0_06)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab (Java Plug-in 1.6.0_13)
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} hxxp://icq.oberon-media.com/Gameshell/GameHost/1.0/OberonGameHost.cab (Oberon Flash Game Host)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O18 - Protocol\Handler\cdo {CD00020A-8B95-11D1-82DB-00C04FB1625D} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Folders\PKMCDO.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\mso-offdap {3D9F03FA-7A94-11D3-BE81-0050048385D1} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Web Components\10\OWC10.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKCU Winlogon: Shell - (C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\dwm.exe) - C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\dwm.exe ()
O22 - SharedTaskScheduler: {9c87cb31-93d0-4f3e-a360-4a91ff77aeb7} - important - Reg Error: Key error. File not found
O24 - Desktop Components:0 () - hxxp://blog.visuellegedanken.de/images/2007_04_09_zwerg_wallpaper_1280_1024.jpg
O24 - Desktop Components:1 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.04.03 13:31:09 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2007.12.13 00:00:49 | 000,000,064 | R--- | M] () - G:\Autorun.inf -- [ UDF ]
O33 - MountPoints2\{1ab97f03-c31a-11da-b5ed-806d6172696f}\Shell - "" = AutoRun
O33 - MountPoints2\{1ab97f03-c31a-11da-b5ed-806d6172696f}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{1ab97f03-c31a-11da-b5ed-806d6172696f}\Shell\AutoRun\command - "" = E:\setup.exe
O33 - MountPoints2\{20034cd7-96d8-11df-876d-000feae16a16}\Shell - "" = AutoRun
O33 - MountPoints2\{20034cd7-96d8-11df-876d-000feae16a16}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{20034cd7-96d8-11df-876d-000feae16a16}\Shell\AutoRun\command - "" = H:\Startme.exe
O33 - MountPoints2\{5e2a3638-3837-11de-8725-000feae16a16}\Shell\AutoRun\command - "" = H:\Menu.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: AppMgmt - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^Besitzer^Startmenü^Programme^Autostart^hamachi.lnk - - File not found
MsConfig - StartUpFolder: C:^Dokumente und Einstellungen^Besitzer^Startmenü^Programme^Autostart^OpenOffice.org 3.2.lnk - D:\Programme\OpenOffice.org 3\program\quickstart.exe - ()
MsConfig - StartUpReg: Adobe Photo Downloader - hkey= - key= - C:\Programme\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: Adobe Reader Speed Launcher - hkey= - key= - D:\Programme\Adobe\Reader 9.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: DAEMON Tools - hkey= - key= - C:\Programme\DAEMON Tools\daemon.exe (DT Soft Ltd.)
MsConfig - StartUpReg: EA Core - hkey= - key= - D:\Programme\Electronic Arts\EADM\Core.exe (Electronic Arts)
MsConfig - StartUpReg: FaxCenterServer - hkey= - key= - D:\Programme\Lexmark Fax Solutions\fm3032.exe ()
MsConfig - StartUpReg: ICQ - hkey= - key= - D:\Programme\ICQ6.5\ICQ.exe (ICQ, LLC.)
MsConfig - StartUpReg: Lexmark 2200 Series - hkey= - key= - D:\Programme\Lexmark 2200 Series\lxbvbmgr.exe (Lexmark International, Inc.)
MsConfig - StartUpReg: LogMeIn Hamachi Ui - hkey= - key= - D:\Programme\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
MsConfig - StartUpReg: MsnMsgr - hkey= - key= - C:\Programme\MSN Messenger\msnmsgr.exe (Microsoft Corporation)
MsConfig - StartUpReg: RemoteControl - hkey= - key= - C:\Programme\CyberLink\PowerDVD\PDVDServ.exe (Cyberlink Corp.)
MsConfig - StartUpReg: Skype - hkey= - key= - D:\Programme\Skype\Phone\Skype.exe (Skype Technologies S.A.)
MsConfig - StartUpReg: Sony Ericsson PC Suite - hkey= - key= - File not found
MsConfig - StartUpReg: Steam - hkey= - key= - d:\programme\steam\steam.exe (Valve Corporation)
MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - D:\Programme\Java\jre6\bin\jusched.exe (Sun Microsystems, Inc.)
MsConfig - StartUpReg: TkBellExe - hkey= - key= - C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.)
MsConfig - StartUpReg: UnlockerAssistant - hkey= - key= - C:\Programme\Unlocker\UnlockerAssistant.exe ()
CREATERESTOREPOINT
Restore point Set: OTL Restore Point (16902053519425536)
========== Files/Folders - Created Within 30 Days ==========
[2011.02.25 20:43:53 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011.02.25 20:42:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\ERUNT
[2011.02.25 20:42:56 | 000,000,000 | ---D | C] -- D:\Programme\ERUNT
[2011.02.25 20:32:23 | 000,791,393 | ---- | C] (Lars Hederer ) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Erunt-setup.exe
[2011.02.25 20:32:23 | 000,446,464 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\TFC.exe
[2011.02.25 20:32:22 | 000,580,608 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\OTL.exe
[2011.02.25 19:47:24 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\HiJackThis204.exe
[2011.02.24 13:06:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\PMB Files
[2011.02.24 13:05:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PMB Files
[2011.02.24 13:05:21 | 000,000,000 | ---D | C] -- D:\Programme\Pando Networks
[2011.02.18 11:40:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Physikformeln
[2011.02.15 11:33:31 | 000,000,000 | ---D | C] -- D:\Programme\NaturalSoft
[2011.02.15 11:33:04 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\naturalsoft
[2011.02.15 04:53:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Warzone 2100 2.3
[2011.02.15 04:49:57 | 000,000,000 | ---D | C] -- D:\Programme\Warzone 2100
[2011.02.15 04:30:26 | 000,000,000 | ---D | C] -- D:\Programme\Google
[2011.02.11 12:48:52 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\johnsadventures.com
[2011.02.11 12:48:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\johnsadventures.com
[2011.02.11 12:48:03 | 000,000,000 | ---D | C] -- D:\Programme\johnsadventures.com
[2011.02.09 17:10:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Desktoptopia for Windows
[2011.01.27 18:28:29 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Besitzer\Recent
[2007.08.13 16:46:00 | 000,102,912 | ---- | C] (Albert L Faber) -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\CDRip.dll
[2007.01.18 20:09:54 | 000,623,616 | ---- | C] (Ivan Bischof ©2003 - 2005) -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\No23 Recorder.exe
[2006.12.11 18:13:14 | 000,013,872 | ---- | C] (Un4seen Developments) -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\basscd.dll
[2006.12.11 18:13:12 | 000,097,336 | ---- | C] (Un4seen Developments) -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\bass.dll
[48 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[14 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011.03.14 14:42:44 | 000,365,461 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Anleitung.exe
[2011.03.13 12:36:01 | 000,009,241 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Anleitung.html
[2011.02.25 20:42:57 | 000,000,515 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\NTREGOPT.lnk
[2011.02.25 20:42:57 | 000,000,502 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\ERUNT.lnk
[2011.02.25 20:37:58 | 000,013,686 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011.02.25 20:36:22 | 000,215,755 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011.02.25 20:35:53 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011.02.25 20:35:51 | 1610,141,696 | -HS- | M] () -- C:\hiberfil.sys
[2011.02.25 20:32:36 | 000,301,568 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\g2m3e4r.exe
[2011.02.25 20:32:33 | 000,580,608 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\OTL.exe
[2011.02.25 20:32:31 | 000,791,393 | ---- | M] (Lars Hederer ) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Erunt-setup.exe
[2011.02.25 20:32:29 | 000,446,464 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\TFC.exe
[2011.02.25 20:31:16 | 000,742,874 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Load.exe
[2011.02.25 20:24:57 | 000,014,686 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\E9DA.63C
[2011.02.25 19:47:32 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Dokumente und Einstellungen\Besitzer\Desktop\HiJackThis204.exe
[2011.02.25 19:35:00 | 000,001,220 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1645522239-839522115-1003UA.job
[2011.02.25 18:48:32 | 000,173,056 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\dwm.exe
[2011.02.25 08:19:40 | 000,327,339 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\.recently-used.xbel
[2011.02.24 12:19:57 | 000,028,925 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Trainingsplan.odt
[2011.02.24 10:35:06 | 000,001,168 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-789336058-1645522239-839522115-1003Core.job
[2011.02.23 23:41:52 | 000,006,363 | -HS- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Folder.jpg
[2011.02.23 23:41:52 | 000,001,956 | -HS- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\AlbumArtSmall.jpg
[2011.02.23 15:54:33 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LauncherAccess.dt
[2011.02.22 23:18:21 | 000,137,656 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2011.02.21 16:05:45 | 000,001,619 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\RecConfig.xml
[2011.02.20 03:47:46 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2011.02.20 00:19:47 | 000,066,048 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.02.18 00:59:20 | 000,012,587 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Trainingsplan.ods
[2011.02.17 22:44:40 | 019,466,994 | ---- | M] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\01 - HOusetime.fm - .mp3
[2011.02.15 04:50:29 | 000,444,952 | ---- | M] (Creative Labs) -- C:\WINDOWS\System32\wrap_oal.dll
[2011.02.09 14:53:26 | 000,270,848 | ---- | M] () -- C:\WINDOWS\System32\dllcache\sbe.dll
[2011.02.09 14:53:26 | 000,186,880 | ---- | M] () -- C:\WINDOWS\System32\dllcache\encdec.dll
[2011.02.06 14:52:48 | 000,000,348 | ---- | M] () -- C:\WINDOWS\SoftWriting.ini
[2011.02.06 14:52:18 | 000,000,101 | ---- | M] () -- C:\WINDOWS\BUZZTWLC.INI
[2011.02.06 13:09:42 | 000,192,976 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[48 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[14 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.03.13 12:41:20 | 000,009,241 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Anleitung.html
[2011.03.13 12:16:23 | 000,365,461 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Anleitung.exe
[2011.02.25 20:42:57 | 000,000,515 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\NTREGOPT.lnk
[2011.02.25 20:42:57 | 000,000,502 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\ERUNT.lnk
[2011.02.25 20:32:23 | 000,301,568 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\g2m3e4r.exe
[2011.02.25 20:31:16 | 000,742,874 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Load.exe
[2011.02.25 18:48:32 | 000,173,056 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\dwm.exe
[2011.02.25 18:48:13 | 000,014,686 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\E9DA.63C
[2011.02.25 08:19:40 | 000,327,339 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\.recently-used.xbel
[2011.02.18 00:39:11 | 000,012,587 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\Trainingsplan.ods
[2011.02.17 22:34:31 | 019,466,994 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Desktop\01 - HOusetime.fm - .mp3
[2011.02.17 21:49:24 | 000,028,925 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Eigene Dateien\Trainingsplan.odt
[2011.02.09 14:53:26 | 000,270,848 | ---- | C] () -- C:\WINDOWS\System32\dllcache\sbe.dll
[2011.02.09 14:53:26 | 000,186,880 | ---- | C] () -- C:\WINDOWS\System32\dllcache\encdec.dll
[2011.02.06 09:54:00 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK
[2010.12.30 23:35:24 | 000,000,121 | ---- | C] () -- C:\WINDOWS\Winchat.ini
[2010.11.06 07:08:23 | 000,000,101 | ---- | C] () -- C:\WINDOWS\BUZZTWLC.INI
[2010.10.14 19:33:54 | 000,000,348 | ---- | C] () -- C:\WINDOWS\SoftWriting.ini
[2010.08.24 13:00:17 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010.05.19 10:34:18 | 001,970,176 | ---- | C] () -- C:\WINDOWS\System32\d3dx9.dll
[2010.04.04 02:13:49 | 000,000,033 | ---- | C] () -- C:\WINDOWS\Multimedia manager.INI
[2010.03.26 17:02:45 | 000,065,974 | ---- | C] () -- D:\Programme\viewsonicinstruct_xp.pdf
[2010.03.26 17:01:07 | 000,000,101 | ---- | C] () -- C:\WINDOWS\VSWizard.ini
[2010.02.19 10:28:15 | 000,000,119 | ---- | C] () -- C:\WINDOWS\Podcasts.INI
[2009.09.20 10:58:55 | 000,178,176 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2009.07.07 19:00:59 | 000,001,619 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\RecConfig.xml
[2009.05.04 00:09:45 | 000,000,032 | ---- | C] () -- C:\WINDOWS\Menu.INI
[2009.04.03 20:18:31 | 001,073,152 | ---- | C] () -- C:\WINDOWS\System32\libmysql_c.dll
[2009.02.09 13:18:00 | 001,724,416 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2009.02.09 13:18:00 | 001,657,376 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2009.02.09 13:18:00 | 001,507,328 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2009.02.09 13:18:00 | 001,346,080 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2009.02.09 13:18:00 | 001,101,824 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2009.02.09 13:18:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2009.02.09 13:18:00 | 000,449,056 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2009.02.09 13:18:00 | 000,436,768 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2009.01.30 08:20:45 | 000,000,872 | ---- | C] () -- C:\WINDOWS\unins001.dat
[2009.01.07 01:40:51 | 000,000,056 | -H-- | C] () -- C:\WINDOWS\System32\ezsidmv.dat
[2008.12.24 08:30:58 | 000,000,000 | ---- | C] () -- C:\WINDOWS\iplayer.INI
[2008.10.07 09:13:30 | 000,197,912 | ---- | C] () -- C:\WINDOWS\System32\physxcudart_20.dll
[2008.10.07 09:13:22 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSwedish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSpanish.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelPortugese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelKorean.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelJapanese.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelGerman.dll
[2008.10.07 09:13:20 | 000,058,648 | ---- | C] () -- C:\WINDOWS\System32\AgCPanelFrench.dll
[2008.08.21 10:51:00 | 000,271,360 | ---- | C] () -- C:\WINDOWS\System32\drivers\atksgt.sys
[2008.08.21 10:50:59 | 000,018,048 | ---- | C] () -- C:\WINDOWS\System32\drivers\lirsgt.sys
[2008.08.17 10:58:05 | 000,111,104 | ---- | C] () -- C:\WINDOWS\System32\uharc.exe
[2008.07.30 02:15:23 | 000,043,520 | ---- | C] () -- C:\WINDOWS\System32\CmdLineExt03.dll
[2008.05.02 10:48:56 | 000,000,335 | ---- | C] () -- C:\WINDOWS\WPE PRO.INI
[2008.05.02 01:47:40 | 000,002,834 | ---- | C] () -- C:\WINDOWS\WoWEmuHackSettings.ini
[2008.04.26 22:25:40 | 000,005,632 | ---- | C] () -- C:\WINDOWS\System32\drivers\StarOpen.sys
[2008.03.26 19:31:12 | 000,000,253 | ---- | C] () -- C:\WINDOWS\wininit.ini
[2008.03.09 19:52:14 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll
[2008.03.09 19:52:14 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll
[2008.02.21 03:03:24 | 000,012,288 | ---- | C] () -- C:\WINDOWS\System32\DivXWMPExtType.dll
[2008.02.13 02:16:17 | 000,007,360 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2008.01.04 22:07:26 | 000,032,768 | ---- | C] () -- C:\WINDOWS\System32\LXPRMON.DLL
[2008.01.04 22:07:26 | 000,020,480 | ---- | C] () -- C:\WINDOWS\System32\LXPMONUI.DLL
[2008.01.04 22:04:42 | 000,000,337 | ---- | C] () -- C:\WINDOWS\lexstat.ini
[2008.01.04 22:04:28 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\lxbvvs.dll
[2008.01.04 22:04:26 | 000,040,960 | ---- | C] () -- C:\WINDOWS\System32\INSTMON.EXE
[2008.01.04 22:04:05 | 000,000,187 | ---- | C] () -- C:\WINDOWS\System32\lxbvcoin.ini
[2007.12.11 14:47:02 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\LauncherAccess.dt
[2007.09.07 09:13:02 | 000,069,632 | R--- | C] () -- C:\WINDOWS\System32\xmltok.dll.off
[2007.09.07 09:13:02 | 000,036,864 | R--- | C] () -- C:\WINDOWS\System32\xmlparse.dll.off
[2007.08.13 16:46:00 | 000,155,136 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\lame_enc.dll
[2007.07.21 10:57:21 | 000,000,150 | ---- | C] () -- C:\WINDOWS\W2W.ini
[2007.06.29 00:43:00 | 001,018,748 | ---- | C] () -- C:\WINDOWS\System32\nvucode.bin
[2007.05.13 00:27:02 | 000,004,212 | -H-- | C] () -- C:\WINDOWS\System32\zllictbl.dat
[2007.05.12 08:35:26 | 000,022,328 | ---- | C] () -- C:\WINDOWS\System32\drivers\PnkBstrK.sys
[2007.05.12 08:24:53 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html
[2007.05.11 12:47:33 | 000,103,736 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrB.exe
[2007.05.11 12:15:43 | 000,066,872 | ---- | C] () -- C:\WINDOWS\System32\PnkBstrA.exe
[2007.01.27 15:55:01 | 000,000,015 | ---- | C] () -- C:\WINDOWS\System32\asdrawim.ini
[2007.01.25 00:19:34 | 000,000,144 | ---- | C] () -- C:\WINDOWS\GroteskGusto.ini
[2006.12.31 16:54:42 | 000,000,029 | ---- | C] () -- C:\WINDOWS\softy.ini
[2006.12.29 03:27:37 | 000,153,088 | ---- | C] () -- C:\WINDOWS\System32\fldlckun.exe
[2006.12.29 03:11:03 | 000,000,006 | ---- | C] () -- C:\WINDOWS\System32\Urncb.dll
[2006.12.12 17:30:26 | 003,596,288 | ---- | C] () -- C:\WINDOWS\System32\qt-dx331.dll
[2006.11.02 11:16:27 | 000,083,968 | ---- | C] () -- C:\WINDOWS\UnGins.exe
[2006.11.01 09:57:24 | 001,138,688 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2006.10.26 00:06:48 | 000,064,000 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\vorbisenc.dll
[2006.10.26 00:06:48 | 000,019,456 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\vorbisfile.dll
[2006.10.26 00:06:46 | 000,143,872 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\vorbis.dll
[2006.10.26 00:06:36 | 000,015,872 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\ogg.dll
[2006.10.20 18:13:06 | 000,669,002 | ---- | C] () -- C:\WINDOWS\unins000.exe
[2006.10.20 18:13:06 | 000,003,861 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2006.10.16 07:58:14 | 000,086,016 | ---- | C] () -- C:\WINDOWS\System32\aspolyzt.dll
[2006.10.14 08:54:01 | 000,000,238 | ---- | C] () -- C:\WINDOWS\mafosav.INI
[2006.09.09 12:58:41 | 000,000,552 | ---- | C] () -- C:\WINDOWS\System32\d3d8caps.dat
[2006.09.03 12:16:37 | 000,000,077 | ---- | C] () -- C:\WINDOWS\Baby Boh!.ini
[2006.08.23 22:05:31 | 000,002,631 | ---- | C] () -- C:\WINDOWS\cdplayer.ini
[2006.08.08 18:50:20 | 000,000,067 | ---- | C] () -- C:\WINDOWS\galaxy.ini
[2006.08.02 12:12:40 | 000,012,288 | ---- | C] () -- C:\WINDOWS\impborl.dll
[2006.07.24 20:05:42 | 000,156,160 | ---- | C] () -- C:\WINDOWS\System32\unrar3.dll
[2006.07.24 20:05:42 | 000,075,264 | ---- | C] () -- C:\WINDOWS\System32\unacev2.dll
[2006.07.19 13:30:02 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\drivers\wnmsav.dat
[2006.07.14 16:38:23 | 000,000,028 | ---- | C] () -- C:\WINDOWS\mscpt.dat
[2006.06.26 15:26:57 | 000,001,091 | ---- | C] () -- C:\WINDOWS\disney.ini
[2006.06.18 10:08:03 | 000,001,285 | ---- | C] () -- C:\WINDOWS\eReg.dat
[2006.05.18 12:44:38 | 000,004,870 | ---- | C] () -- C:\WINDOWS\mozver.dat
[2006.05.18 11:57:20 | 000,290,816 | ---- | C] () -- C:\WINDOWS\Uninstall_tkexe.exe
[2006.04.16 17:08:01 | 000,156,672 | R--- | C] () -- C:\WINDOWS\System32\RTLCPAPI.dll
[2006.04.12 17:34:07 | 000,066,048 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2006.04.06 15:36:40 | 000,000,169 | ---- | C] () -- C:\WINDOWS\RtlRack.ini
[2006.04.04 14:03:39 | 000,000,400 | ---- | C] () -- C:\WINDOWS\ODBC.INI
[2006.04.03 15:42:06 | 000,823,296 | R--- | C] () -- C:\WINDOWS\KochRun.exe
[2006.04.03 15:42:06 | 000,001,062 | R--- | C] () -- C:\WINDOWS\KochRun.ini
[2006.04.03 14:20:00 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2006.04.03 14:18:57 | 000,192,976 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2006.04.03 13:45:19 | 000,024,576 | R--- | C] () -- C:\WINDOWS\System32\NVRTClk.exe
[2006.04.03 13:45:15 | 000,023,040 | R--- | C] () -- C:\WINDOWS\System32\drivers\GVCplDrv.sys
[2006.04.03 13:33:03 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2006.04.03 13:28:41 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2006.02.26 10:08:28 | 000,585,728 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2005.08.23 21:34:06 | 000,029,184 | ---- | C] () -- C:\Dokumente und Einstellungen\Besitzer\Lokale Einstellungen\Anwendungsdaten\no23xwrapper.dll
[2005.07.06 11:59:58 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\asdrawli.dll
[2005.07.04 14:17:30 | 000,069,632 | ---- | C] () -- C:\WINDOWS\System32\ASDRAWMA.DLL
[2005.02.25 17:07:18 | 000,286,208 | ---- | C] () -- C:\WINDOWS\System32\CNCS232.DLL
[2005.01.01 04:11:32 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2004.08.17 16:34:52 | 000,036,864 | ---- | C] () -- C:\WINDOWS\System32\AS_SORT.DLL
[2004.08.04 13:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2004.08.04 13:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2004.08.04 13:00:00 | 000,598,016 | ---- | C] () -- C:\WINDOWS\System32\pngqgilc.dll
[2004.08.04 13:00:00 | 000,449,086 | ---- | C] () -- C:\WINDOWS\System32\perfh007.dat
[2004.08.04 13:00:00 | 000,432,932 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2004.08.04 13:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2004.08.04 13:00:00 | 000,269,480 | ---- | C] () -- C:\WINDOWS\System32\perfi007.dat
[2004.08.04 13:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2004.08.04 13:00:00 | 000,080,298 | ---- | C] () -- C:\WINDOWS\System32\perfc007.dat
[2004.08.04 13:00:00 | 000,067,696 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2004.08.04 13:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2004.08.04 13:00:00 | 000,034,478 | ---- | C] () -- C:\WINDOWS\System32\perfd007.dat
[2004.08.04 13:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2004.08.04 13:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2004.08.04 13:00:00 | 000,004,461 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2004.08.04 13:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\dcache.bin
[2004.08.04 13:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2003.05.22 11:31:44 | 000,033,792 | ---- | C] () -- C:\WINDOWS\System32\ASDRAW32.DLL
[2002.07.12 15:29:28 | 000,073,728 | ---- | C] () -- C:\WINDOWS\System32\AS_MDB32.DLL
========== LOP Check ==========
[2008.01.18 01:09:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CBL-Electronics
[2009.09.02 10:05:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Electronic Arts
[2007.12.08 08:55:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Firefly Studios
[2010.04.22 14:27:14 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ICQ
[2011.02.24 13:06:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\PMB Files
[2010.02.19 10:09:44 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\RapidSolution
[2008.01.18 08:35:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\sentinel
[2010.02.19 10:08:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP
[2007.04.24 01:22:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Ulead Systems
[2010.02.17 17:36:08 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\.#
[2006.07.27 10:16:23 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\AnotherZipper
[2007.01.27 15:34:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\ASCON Installer
[2007.01.27 15:38:07 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\ASCON Programme
[2010.01.26 18:40:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Atari
[2006.08.02 11:10:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Azureus
[2006.04.24 19:42:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Babylon
[2009.07.05 07:57:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Bioshock
[2008.01.18 00:51:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\CBL-Electronics
[2007.05.18 09:21:51 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Command & Conquer 3 Tiberium Wars
[2008.02.04 11:56:47 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\ConvertTemp
[2007.05.22 19:51:05 | 000,000,000 | RH-D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\CrystalSpace
[2006.06.05 19:06:58 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Dailymedia
[2011.01.04 21:38:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\DVDVideoSoft
[2010.06.19 06:04:17 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\DVDVideoSoftIEHelpers
[2010.03.27 03:41:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\FOG Downloader
[2009.09.04 08:20:20 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Free Audio Editor
[2010.06.19 06:21:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\FreeAudioPack
[2006.04.15 17:43:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\FRITZ!
[2010.10.14 19:28:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\GetRightToGo
[2011.02.25 08:11:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\gtk-2.0
[2010.09.03 09:33:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\ICQ
[2006.08.11 11:09:54 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\ICQLite
[2011.02.11 12:52:43 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\johnsadventures.com
[2007.04.29 09:00:05 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Leadertech
[2008.02.14 06:39:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\LimeWire Turbo
[2005.01.03 11:41:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\LimeWireTurbo
[2010.07.22 04:25:25 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Neverball
[2006.04.22 19:34:34 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Noctua
[2010.06.26 03:38:55 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\OpenOffice.org
[2006.12.19 16:52:48 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Opera
[2009.12.22 23:36:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Recorder
[2007.12.11 14:52:38 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Samsung
[2007.12.02 00:14:24 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Sierra
[2009.10.21 17:55:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\SQLyog
[2009.10.24 13:54:12 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Subversion
[2006.12.14 14:19:27 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Sudeki
[2009.05.31 09:14:00 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Teleca
[2009.04.10 07:35:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\temp
[2008.02.20 10:38:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Temporary
[2007.04.27 17:03:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\The Hobbit
[2008.02.18 21:46:15 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\TransRender
[2010.07.12 02:26:49 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\TS3Client
[2007.03.07 21:11:41 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\uk.co.planetside
[2006.08.23 20:28:59 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Ulead Systems
[2007.01.25 00:12:03 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Vso
[2010.11.21 22:42:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Besitzer\Anwendungsdaten\Webocton - Scriptly
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*. >
[2006.08.08 18:54:48 | 000,000,000 | ---D | M] -- C:\Alien Arena 2006 UE
[2011.02.08 06:52:27 | 000,000,000 | ---D | M] -- C:\Casino
[2008.01.01 12:47:09 | 000,000,000 | ---D | M] -- C:\Dark Age of Camelot - Shrouded Isles
[2008.07.22 18:24:01 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen
[2007.01.03 02:12:25 | 000,000,000 | ---D | M] -- C:\Downloads
[2007.02.23 03:12:20 | 000,000,000 | ---D | M] -- C:\Games
[2008.04.05 22:45:31 | 000,000,000 | ---D | M] -- C:\Logs
[2006.10.28 08:26:18 | 000,000,000 | ---D | M] -- C:\My Downloads
[2006.10.07 13:11:36 | 000,000,000 | ---D | M] -- C:\My Squeak
[2006.06.03 12:57:05 | 000,000,000 | ---D | M] -- C:\Neophyte
[2009.01.29 17:25:11 | 000,000,000 | ---D | M] -- C:\NVIDIA
[2006.04.06 15:32:16 | 000,000,000 | ---D | M] -- C:\pdwork
[2008.08.27 02:53:47 | 000,000,000 | ---D | M] -- C:\Program Files
[2010.10.12 20:32:36 | 000,000,000 | R--D | M] -- C:\Programme
[2009.03.29 10:27:40 | 000,000,000 | -HSD | M] -- C:\RECYCLER
[2006.10.28 08:27:22 | 000,000,000 | ---D | M] -- C:\Speicherstände
[2010.12.26 16:10:25 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2007.02.21 02:45:48 | 000,000,000 | ---D | M] -- C:\Temp
[2010.08.26 13:48:23 | 000,000,000 | ---D | M] -- C:\tmp
[2011.02.25 20:43:53 | 000,000,000 | ---D | M] -- C:\WINDOWS
[2010.01.26 22:37:21 | 000,000,000 | ---D | M] -- C:\WoW-3.1.3-to-3.2.0-deDE-Win-patch
[2010.01.26 22:43:12 | 000,000,000 | ---D | M] -- C:\wow-3.2.0.10192-to-3.2.0.10314-dede-patch
[2010.01.26 22:43:39 | 000,000,000 | ---D | M] -- C:\wow-3.2.0.10314-to-3.2.2.10482-dede-patch
[2010.01.26 22:43:54 | 000,000,000 | ---D | M] -- C:\wow-3.2.2.10482-to-3.2.2.10505-dede-patch
< %PROGRAMFILES%\*.exe >
Invalid Environment Variable: LOCALAPPDATA
< %systemroot%\*. /mp /s >
< MD5 for: EXPLORER.EXE >
[2004.08.04 13:00:00 | 001,035,264 | ---- | M] (Microsoft Corporation) MD5=22FE1BE02EADDE1632E478E4125639E0 -- C:\WINDOWS\$NtUninstallKB938828$\explorer.exe
[2007.06.13 14:10:08 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=331ED93570BAF3CFE30340298762CD56 -- C:\WINDOWS\$hf_mig$\KB938828\SP2QFE\explorer.exe
[2008.04.14 03:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\explorer.exe
[2008.04.14 03:22:45 | 001,036,800 | ---- | M] (Microsoft Corporation) MD5=418045A93CD87A352098AB7DABE1B53E -- C:\WINDOWS\ServicePackFiles\i386\explorer.exe
[2007.06.13 14:21:45 | 001,036,288 | ---- | M] (Microsoft Corporation) MD5=64D320C0E301EEDC5A4ADBBDC5024F7F -- C:\WINDOWS\$NtServicePackUninstall$\explorer.exe
< MD5 for: USERINIT.EXE >
[2008.04.14 03:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\ServicePackFiles\i386\userinit.exe
[2008.04.14 03:23:03 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe
[2004.08.04 13:00:00 | 000,025,088 | ---- | M] (Microsoft Corporation) MD5=D1E53DC57143F2584B1DD53B036C0633 -- C:\WINDOWS\$NtServicePackUninstall$\userinit.exe
< MD5 for: WINLOGON.EXE >
[2004.08.04 13:00:00 | 000,507,392 | ---- | M] (Microsoft Corporation) MD5=2B6A0BAF33A9918F09442D873848FF72 -- C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe
[2008.04.14 03:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\ServicePackFiles\i386\winlogon.exe
[2008.04.14 03:23:05 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2011-02-23 00:42:39
========== Alternate Data Streams ==========
@Alternate Data Stream - 88 bytes -> C:\Dokumente und Einstellungen\Besitzer\Desktop\Housetime.fm.asx:SummaryInformation
@Alternate Data Stream - 115 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:A11F741D
< End of report >
--- --- --- Extras:OTL Logfile: Code:
OTL Extras logfile created on: 25.02.2011 20:44:43 - Run 1
OTL by OldTimer - Version 3.2.22.3 Folder = C:\Dokumente und Einstellungen\Besitzer\Desktop
Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 60,00% Memory free
3,00 Gb Paging File | 2,00 Gb Available in Paging File | 84,00% Paging File free
Paging file location(s): C:\pagefile.sys 0 0 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = D:\Programme
Drive C: | 48,83 Gb Total Space | 3,05 Gb Free Space | 6,26% Space Free | Partition Type: NTFS
Drive D: | 100,21 Gb Total Space | 38,71 Gb Free Space | 38,63% Space Free | Partition Type: NTFS
Drive G: | 877,81 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Computer Name: ***** | User Name: Besitzer | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.reg [@ = Regedit.Document] -- Reg Error: Key error. File not found
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\Office10\msohtmed.exe" %1 (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "D:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "D:\Programme\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
"DisableMonitoring" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
"DisableMonitoring" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"58494:TCP" = 58494:TCP:*:Enabled:Pando Media Booster
"58494:UDP" = 58494:UDP:*:Enabled:Pando Media Booster
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
"DoNotAllowExceptions" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"3724:TCP" = 3724:TCP:*:Enabled:Blizzard Downloader: 3724
"8085:TCP" = 8085:TCP:*:Enabled:8085
"8093:TCP" = 8093:TCP:*:Enabled:8093
"8129:TCP" = 8129:TCP:*:Enabled:8129
"18802:TCP" = 18802:TCP:*:Enabled:BitComet 18802 TCP
"18802:UDP" = 18802:UDP:*:Enabled:BitComet 18802 UDP
"58494:TCP" = 58494:TCP:*:Enabled:Pando Media Booster
"58494:UDP" = 58494:UDP:*:Enabled:Pando Media Booster
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\MSN Messenger\msncall.exe" = C:\Programme\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)
"C:\Programme\MSN Messenger\msnmsgr.exe" = C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- (Microsoft Corporation)
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- (Microsoft Corporation)
"D:\Programme\ICQ7.1\ICQ.exe" = D:\Programme\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1 -- (ICQ, LLC.)
"D:\Programme\ICQ7.1\aolload.exe" = D:\Programme\ICQ7.1\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"D:\Programme\ICQ6.5\ICQ.exe" = D:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ.exe -- (ICQ, LLC.)
"D:\Programme\Pando Networks\Media Booster\PMB.exe" = D:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\FRITZ!DSL\FritzDsl.exe" = C:\Programme\FRITZ!DSL\FritzDsl.exe:*:Enabled:FRITZ!web DSL -- (AVM Berlin)
"C:\Programme\TrackMania Nations ESWC\TmNationsESWC.exe" = C:\Programme\TrackMania Nations ESWC\TmNationsESWC.exe:*:Enabled:TmNationsESWC
"C:\Programme\Microsoft Games\Age of Empires\Empires.exe" = C:\Programme\Microsoft Games\Age of Empires\Empires.exe:*:Enabled:Age of Empires
"C:\Programme\ICQLite\ICQLite.exe" = C:\Programme\ICQLite\ICQLite.exe:*:Enabled:ICQ Lite
"C:\Programme\MSN Messenger\msncall.exe" = C:\Programme\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)
"C:\Programme\MSN Messenger\msnmsgr.exe" = C:\Programme\MSN Messenger\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1 -- (Microsoft Corporation)
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- (Microsoft Corporation)
"C:\Programme\Sierra\Empire Earth II\EE2.exe" = C:\Programme\Sierra\Empire Earth II\EE2.exe:*:Enabled:EMPIRE EARTH 2 starten
"C:\Programme\WarRock\WRLauncher.exe" = C:\Programme\WarRock\WRLauncher.exe:*:Enabled:Launch WRLauncher.exe
"C:\Programme\WarRock\WRUpdater.exe" = C:\Programme\WarRock\WRUpdater.exe:*:Enabled:Launch WRUpdater.exe
"D:\Programme\America's Army\System\ArmyOps.exe" = D:\Programme\America's Army\System\ArmyOps.exe:*:Enabled:ArmyOps
"D:\Programme\Ascaron Entertainment\Sacred\Sacred.exe" = D:\Programme\Ascaron Entertainment\Sacred\Sacred.exe:*:Enabled:Sacred
"D:\Programme\Ascaron Entertainment\Sacred\GameServer.exe" = D:\Programme\Ascaron Entertainment\Sacred\GameServer.exe:*:Enabled:Sacred Gameserver
"D:\Programme\Electronic Arts\Command & Conquer 3\RetailExe\1.0\cnc3game.dat" = D:\Programme\Electronic Arts\Command & Conquer 3\RetailExe\1.0\cnc3game.dat:*:Enabled:Command & Conquer 3 Tiberium Wars -- (Electronic Arts Inc.)
"C:\Programme\EA GAMES\Command and Conquer Generals\game.dat" = C:\Programme\EA GAMES\Command and Conquer Generals\game.dat:*:Enabled:game
"C:\Programme\TrackMania Sunrise\TmSunrise.exe" = C:\Programme\TrackMania Sunrise\TmSunrise.exe:*:Enabled:TmSunrise -- ()
"D:\Programme\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe" = D:\Programme\THQ\Dawn of War - Dark Crusade\DarkCrusade.exe:*:Enabled:DarkCrusade -- (THQ Canada Inc.)
"D:\Programme\LittleFighter2\LF2_v1.9\lf2.exe" = D:\Programme\LittleFighter2\LF2_v1.9\lf2.exe:*:Enabled:lf2 -- ()
"D:\Programme\Steam\SteamApps\bl4cksc0rp\half-life 2 deathmatch\hl2.exe" = D:\Programme\Steam\SteamApps\bl4cksc0rp\half-life 2 deathmatch\hl2.exe:*:Enabled:hl2 -- ()
"D:\Programme\Sierra\Empire Earth II\EE2.exe" = D:\Programme\Sierra\Empire Earth II\EE2.exe:*:Enabled:Empire Earth II -- (Mad Doc Software)
"D:\Programme\Firefly Studios\Stronghold 2\Stronghold2.exe" = D:\Programme\Firefly Studios\Stronghold 2\Stronghold2.exe:*:Enabled:Stronghold 2
"D:\Programme\Avant Browser\avant.exe" = D:\Programme\Avant Browser\avant.exe:*:Enabled:Avant Browser
"D:\Programme\Java\jre1.6.0_03\bin\javaw.exe" = D:\Programme\Java\jre1.6.0_03\bin\javaw.exe:*:Enabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
"C:\Dokumente und Einstellungen\Besitzer\Desktop\WoW-BurningCrusade-deDE-Installer-downloader.exe" = C:\Dokumente und Einstellungen\Besitzer\Desktop\WoW-BurningCrusade-deDE-Installer-downloader.exe:*:Enabled:Blizzard Downloader
"D:\Programme\World of Warcraft\Launcher.exe" = D:\Programme\World of Warcraft\Launcher.exe:*:Enabled:World of Warcraft
"D:\Programme\World of Warcraft\Repair.exe" = D:\Programme\World of Warcraft\Repair.exe:*:Enabled:World of Warcraft - Reparieren
"D:\Programme\EA SPORTS\FIFA 08\FIFA08.exe" = D:\Programme\EA SPORTS\FIFA 08\FIFA08.exe:*:Enabled:FIFA08
"D:\Programme\ICQ6\ICQ.exe" = D:\Programme\ICQ6\ICQ.exe:*:Enabled:ICQ6
"C:\Dokumente und Einstellungen\Besitzer\Desktop\Sonstiges\Setups\WoW-BurningCrusade-deDE-Installer-downloader.exe" = C:\Dokumente und Einstellungen\Besitzer\Desktop\Sonstiges\Setups\WoW-BurningCrusade-deDE-Installer-downloader.exe:*:Enabled:Blizzard Downloader -- (Blizzard Entertainment)
"D:\Programme\World of Warcraft\BackgroundDownloader.exe" = D:\Programme\World of Warcraft\BackgroundDownloader.exe:*:Enabled:Blizzard Downloader
"D:\Programme\Kopie von World of Warcraft\Wow.exe" = D:\Programme\Kopie von World of Warcraft\Wow.exe:*:Enabled:Wow
"D:\Programme\Kopie von World of Warcraft\Launcher.exe" = D:\Programme\Kopie von World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher
"D:\Programme\ICQ6.5\ICQ.exe" = D:\Programme\ICQ6.5\ICQ.exe:*:Enabled:ICQ6 -- (ICQ, LLC.)
"D:\Programme\xampp\apache\bin\apache.exe" = D:\Programme\xampp\apache\bin\apache.exe:*:Enabled:Apache HTTP Server -- (Apache Software Foundation)
"D:\Programme\xampp\mysql\bin\mysqld.exe" = D:\Programme\xampp\mysql\bin\mysqld.exe:*:Disabled:mysqld -- ()
"D:\Programme\Mozilla Firefox\firefox.exe" = D:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox -- (Mozilla Corporation)
"D:\Programme\Electronic Arts\EADM\Core.exe" = D:\Programme\Electronic Arts\EADM\Core.exe:*:Enabled:EA Download Manager -- (Electronic Arts)
"D:\Programme\BitComet\BitComet.exe" = D:\Programme\BitComet\BitComet.exe:*:Enabled:BitComet.exe
"C:\Dokumente und Einstellungen\Besitzer\Desktop\dslan_v1.3\dslan_v1.3\mysql\bin\mysqld.exe" = C:\Dokumente und Einstellungen\Besitzer\Desktop\dslan_v1.3\dslan_v1.3\mysql\bin\mysqld.exe:*:Enabled:mysqld
"C:\Dokumente und Einstellungen\Besitzer\Desktop\dslan_v1.3\dslan_v1.3\apache\bin\apache.exe" = C:\Dokumente und Einstellungen\Besitzer\Desktop\dslan_v1.3\dslan_v1.3\apache\bin\apache.exe:*:Enabled:Apache HTTP Server
"D:\Programme\LittleFighter2\LF2_v2.0a\lf2.exe" = D:\Programme\LittleFighter2\LF2_v2.0a\lf2.exe:*:Enabled:lf2 -- ()
"C:\Dokumente und Einstellungen\Besitzer\Desktop\FOGDownloader-RoM_2_1_6_2049.exe" = C:\Dokumente und Einstellungen\Besitzer\Desktop\FOGDownloader-RoM_2_1_6_2049.exe:*:Enabled:YuLeech
"D:\Programme\Steam\Steam.exe" = D:\Programme\Steam\Steam.exe:*:Enabled:Steam -- (Valve Corporation)
"D:\Programme\Kopie von World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-deDE-downloader.exe" = D:\Programme\Kopie von World of Warcraft\WoW-3.1.3.9947-to-3.2.0.10192-deDE-downloader.exe:*:Enabled:Blizzard Downloader
"D:\Programme\ICQ7.1\ICQ.exe" = D:\Programme\ICQ7.1\ICQ.exe:*:Enabled:ICQ7.1 -- (ICQ, LLC.)
"D:\Programme\ICQ7.1\aolload.exe" = D:\Programme\ICQ7.1\aolload.exe:*:Enabled:aolload.exe -- (AOL LLC)
"D:\Programme\Kopie von Kopie von World of Warcraft\Launcher.exe" = D:\Programme\Kopie von Kopie von World of Warcraft\Launcher.exe:*:Enabled:Blizzard Launcher
"D:\Programme\Steam\SteamApps\bl4cksc0rp\day of defeat source\hl2.exe" = D:\Programme\Steam\SteamApps\bl4cksc0rp\day of defeat source\hl2.exe:*:Enabled:Day of Defeat: Source
"D:\Programme\Steam\SteamApps\common\audiosurf\engine\QuestViewer.exe" = D:\Programme\Steam\SteamApps\common\audiosurf\engine\QuestViewer.exe:*:Enabled:Audiosurf -- ()
"D:\Programme\Cyanide\Blood Bowl\BB.exe" = D:\Programme\Cyanide\Blood Bowl\BB.exe:*:Enabled:Blood Bowl -- (Cyanide)
"D:\Programme\Steam\SteamApps\bl4cksc0rp\counter-strike source\hl2.exe" = D:\Programme\Steam\SteamApps\bl4cksc0rp\counter-strike source\hl2.exe:*:Enabled:Counter-Strike: Source -- ()
"D:\Programme\Pando Networks\Media Booster\PMB.exe" = D:\Programme\Pando Networks\Media Booster\PMB.exe:*:Enabled:Pando Media Booster -- ()
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{044F9133-B8D7-4d11-BF39-803FA20F5C8B}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for Win32
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam(TM)
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{06F80017-8F98-4C94-B868-52358569FC32}" = Command & Conquer Generals
"{0E592C31-09EF-3CA1-A7DE-05D13DFCF791}" = Microsoft Windows SDK for Visual Studio 2008 SP1 Express Tools for .NET Framework - deu
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1A0B8239-664B-434A-99D8-C50793513249}" = Audials TV
"{22B0E143-2B0B-435B-9F56-136A3D16065F}" = No23 Recorder
"{22B3CC30-77B8-419C-AA4B-F571FDF5D66D}" = Windows Live Sign-in Assistant
"{23BA16A6-D656-4F65-AEA2-B727B1656D2F}" = Samsung PC Studio
"{24D753CA-6AE9-4E30-8F5F-EFC93E08BF3D}" = Skype™ Beta 4.0
"{26A24AE4-039D-4CA4-87B4-2F83216013FF}" = Java(TM) 6 Update 13
"{279DB581-239C-4E13-97F8-0F48E40BE75C}" = Windows Live Messenger
"{2A9A40C7-6670-4D5F-8F41-D12E2E08B48B}" = Star Wars(TM): Knights of the Old Republic (TM)
"{2E97F7E8-ABDE-4E0D-B0AD-B6B4BAD89E24}" = Rome - Total War - Gold Edition
"{30355ED7-DE49-4C8D-BE23-2161D36E8A9A}" = Microsoft SQL Server 2008 Setup Support Files (English)
"{3248F0A8-6813-11D6-A77B-00B0D0150060}" = J2SE Runtime Environment 5.0 Update 6
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{342D4AD7-EC4C-4EC8-AEA6-E70F5905A490}" = SQL Server System CLR Types
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3D696B-0DB7-3C6D-A356-3DB8CE541918}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{4A6F34E2-09E5-4616-B227-4A26A488A6F9}" = Microsoft SQL Server 2008 Common Files
"{4AF2248C-B3DF-46FB-9596-87F5DB193689}" = Microsoft SQL Server 2008-Browser
"{4BDFD2CE-6329-42E4-9801-9B3D1F10D79B}" = Adobe® Photoshop® Album Starter Edition 3.0
"{60DE4033-9503-48D1-A483-7846BD217CA9}" = ICQ6.5
"{64F4B0A9-30F6-4073-9FC9-49312E49614B}" = e-mix 4.0 home edition
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{71BFC818-0CED-42D6-9C87-5142918957EE}" = ICQ7.1
"{764C0C8F-B1B1-49BF-AEDC-4E48E857A667}" = Lexmark Fax Solutions
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{842FAF7C-50EF-4463-9B8F-6222E1384D7D}" = Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{8D1E61D1-1395-4E97-997F-D002DB3A5074}" = OpenOffice.org 3.2
"{90280407-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional mit FrontPage
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9559F7CA-5E34-4237-A2D9-D856464AD727}" = Project64 1.6
"{9580813D-94B1-4C28-9426-A441E2BB29A5}" = Counter-Strike: Source
"{980A182F-E0A2-4A40-94C1-AE0C1235902E}" = Pando Media Booster
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9C19FFB1-25FC-43FC-AC78-919E5E2A6DD0}" = TortoiseSVN 1.6.6.17493 (32 bit)
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1031-7B44-A90000000001}" = Adobe Reader 9 - Deutsch
"{AF66AE87-4302-4B30-A47E-9E2D634DD1E6}" = USB V9 Steering Wheel W/Vibration
"{B023185F-F1EF-4F97-B0BD-AE6D802226D1}" = NVIDIA WDM Drivers
"{B13A7C41581B411290FBC0395694E2A9}" = DivX Converter
"{B3484CA2-43A9-4FE4-9DCD-05BED10B9B2E}" = AudialsOne
"{B4FEA924-630D-11D4-B78E-005004566E4D}" = ViewSonic Monitor Drivers
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{C4A4722E-79F9-417C-BD72-8D359A090C97}" = Samsung PC Studio
"{C91C4EF4-63E1-41EE-AE6A-5152628FDC21}" = Microsoft SQL Server 2008 Native Client
"{C965F01C-76EA-4BD7-973E-46236AE312D7}" = Sql Server Customer Experience Improvement Program
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE4A3D0F-D1B0-47D1-BF99-3E957C548D12}" = LogMeIn Hamachi
"{D074DC76-F6C9-440E-A1D0-1DE958417FDB}" = Microsoft SQL Server VSS Writer
"{D1696920-9794-4BBC-8A30-7A88763DE5A2}" = ABBYY FineReader 5.0 Sprint Plus
"{DD1865F0-AD73-40FB-B23E-1822E02396FF}" = NVIDIA PhysX
"{DDEDAF6C-488E-4CDA-8276-1CCF5F3C5C32}" = Command & Conquer 3
"{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}" = Windows Media Encoder 9-Reihe
"{E3E71D07-CD27-46CB-8448-16D4FB29AA13}" = Microsoft WSE 3.0 Runtime
"{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}" = Samsung PC Studio 3 USB Driver Installer
"{F1A19FDD-A454-46FA-8355-E0B961777333}" = Keyboard Driver
"{F1DC7648-8623-442F-92B7-E118DF61872E}" = Microsoft SQL Server 2008 RsFx Driver
"{F5E87B12-3C27-452F-8E78-21D42164FD83}" = Microsoft SQL Server 2008 Management Objects
"{FF39FC01-819B-42E4-AE49-1968AF12DDD4}" = Dawn of War - Dark Crusade
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FF6F95A4-E59B-45C8-BEA8-0BDC8D9CAB51}" = Microsoft SQL Server 2008 Common Files
"AC3Filter" = AC3Filter (remove only)
"Adobe Flash Player ActiveX" = Adobe Flash Player ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"AMPLUS Vokabel-Trainer" = AMPLUS Vokabel-Trainer
"Audiograbber" = Audiograbber 1.83 SE
"auxilium 3.1 light_is1" = auxilium 3.1 light
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BloodBowl_is1" = Blood Bowl 1.1.0.0
"Burn4Free" = Burn4Free CD and DVD
"Burn4Free Toolbar" = Burn4Free Toolbar
"CCleaner" = CCleaner
"CEP - Colour Enable Packages_is1" = CEP - Color Enable Package
"Cheat Engine 5.6_is1" = Cheat Engine 5.6
"DVD Flick_is1" = DVD Flick 1.3.0.7
"EADM" = EA Download Manager
"eragon screensaver" = eragon screensaver
"ERUNT_is1" = ERUNT 1.1j
"Flatcast_is1" = Flatcast 5.0
"Free Video to MP3 Converter_is1" = Free Video to MP3 Converter version 4.2.14
"FRITZ!DSL" = AVM FRITZ!DSL
"Game Maker 6.1" = Game Maker 6.1
"Game Maker 7.0" = Game Maker 7.0
"Hero Fighter" = Hero Fighter
"ICQToolbar" = ICQ Toolbar
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"ie8" = Windows Internet Explorer 8
"InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}" = Command & Conquer Generals
"InstallShield_{764C0C8F-B1B1-49BF-AEDC-4E48E857A667}" = Lexmark Fax-Lösungen
"Interactive Screensaver - Splinter Cell" = Interactive Screensaver - Splinter Cell
"InterActual Player" = InterActual Player
"Lexmark 2200 Series" = Lexmark 2200 Series
"Little Fighter 2 v1.9" = Little Fighter 2 v1.9
"Little Fighter 2 version 2.0a" = Little Fighter 2 version 2.0a
"LogMeIn Hamachi" = LogMeIn Hamachi
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft SQL Server 10" = Microsoft SQL Server 2008
"Microsoft SQL Server 10 Release" = Microsoft SQL Server 2008
"Mozilla Firefox (3.6.15)" = Mozilla Firefox (3.6.15)
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"Neverball" = Neverball 1.5.4
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Drivers" = NVIDIA Drivers
"OpenAL" = OpenAL
"P2P Energy Toolbar" = P2P Energy Toolbar
"PhotoScape" = PhotoScape
"Power Name Generator" = Power Name Generator
"PremiumSoft Navicat 8.0 Lite for MySQL_is1" = PremiumSoft Navicat 8.0 Lite for MySQL
"ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
"RarZilla Free Unrar 2.52" = RarZilla Free Unrar 2.52
"RealPlayer 6.0" = RealPlayer
"SAMSUNG CDMA Modem" = SAMSUNG CDMA Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"save2pc Light_is1" = save2pc Light 3.43
"SereneScreen Marine Aquarium 2.6_is1" = SereneScreen Marine Aquarium 2.6
"SimpleOCR 3.1" = SimpleOCR 3.1
"SimpleScreenshot" = SimpleScreenshot 1.30
"SlotCars" = PC Slot Cars Game
"ST6UNST #1" = Recorder
"Steam App 12910" = Audiosurf Demo
"Steam App 220" = Half-Life 2
"Steam App 240" = Counter-Strike: Source
"Steam App 380" = Half-Life 2: Episode One
"Steam App 400" = Portal
"T4EPlayer" = T4E Player
"Teamspeak 2 RC2_is1" = TeamSpeak 2 RC2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"TmSunrise_is1" = TrackMania Sunrise Extreme 1.5.0
"TUGZip_is1" = TUGZip 3.4
"Uninstall_is1" = Uninstall 1.0.0.1
"Unlocker" = Unlocker 1.8.3
"Virtual DJ Home - Atomix Productions" = Virtual DJ Home - Atomix Productions
"VLC media player" = VLC media player 1.0.2
"War of the Ring" = WAR OF THE RING™ DER RINGKRIEG™
"Webocton - Scriptly_is1" = Webocton - Scriptly 0.8.95.6
"Windows Media Encoder 9" = Windows Media Encoder 9-Reihe
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"Windows Media Player" = Windows Media Player 11
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinGimp-2.0_is1" = GIMP 2.4.0
"WinGTK-2_is1" = GTK+ 2.8.18-1 runtime environment
"WMFDist11" = Windows Media Format 11 runtime
"wmp11" = Windows Media Player 11
"World of Warcraft" = World of Warcraft
"Worms for Pocket PC" = Worms for Pocket PC
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0
"xampp" = XAMPP 1.7.0
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Move Media Player" = Move Media Player
"Skip-Net" = Skip-Net
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 21.02.2011 09:25:23 | Computer Name = ***** | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.5512, fehlgeschlagenes
Modul funavisplitter.ax, Version 1.0.0.7, Fehleradresse 0x0000a1bc.
Error - 23.02.2011 19:49:20 | Computer Name = ***** | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 1.9.2.4079, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 24.02.2011 04:18:27 | Computer Name = ***** | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung audialsone.exe, Version 4.1.115.1500, fehlgeschlagenes
Modul msvcr80.dll, Version 8.0.50727.4053, Fehleradresse 0x00015190.
Error - 24.02.2011 20:21:25 | Computer Name = ***** | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung firefox.exe, Version 1.9.2.4079, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.
Error - 25.02.2011 14:42:35 | Computer Name = ***** | Source = nview_info | ID = 11141121
Description =
Error - 25.02.2011 15:21:48 | Computer Name = ***** | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung hamachi-2-ui.exe, Version 2.0.3.89, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x10079240.
Error - 25.02.2011 15:21:49 | Computer Name = ***** | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung mbam.exe, Version 1.36.0.0, fehlgeschlagenes
Modul unknown, Version 0.0.0.0, Fehleradresse 0x10078920.
Error - 25.02.2011 15:21:51 | Computer Name = ***** | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung , Version 0.0.0.0, fehlgeschlagenes Modul
unknown, Version 0.0.0.0, Fehleradresse 0x00000000.
Error - 25.02.2011 15:22:09 | Computer Name = ***** | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung , Version 0.0.0.0, fehlgeschlagenes Modul
unknown, Version 0.0.0.0, Fehleradresse 0x00000000.
Error - 25.02.2011 15:38:02 | Computer Name = ***** | Source = ESENT | ID = 490
Description = svchost (636) Versuch, Datei "C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb"
für den Lese-/Schreibzugriff zu öffnen, ist mit Systemfehler 32 (0x00000020): "Der
Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet
wird. " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Öffnen von Dateien.
[ System Events ]
Error - 24.02.2011 03:44:35 | Computer Name = ***** | Source = PSched | ID = 14103
Description = QoS [Adapter {7151162D-3C17-4452-8699-F0E9D51FD52E}]: Die Abfrage des
Netzwerkkartentreibers nach OID_GEN_LINK_SPEED ist fehlgeschlagen.
Error - 24.02.2011 05:15:18 | Computer Name = ***** | Source = PSched | ID = 14103
Description = QoS [Adapter {7151162D-3C17-4452-8699-F0E9D51FD52E}]: Die Abfrage des
Netzwerkkartentreibers nach OID_GEN_LINK_SPEED ist fehlgeschlagen.
Error - 24.02.2011 06:54:09 | Computer Name = ***** | Source = PSched | ID = 14103
Description = QoS [Adapter {7151162D-3C17-4452-8699-F0E9D51FD52E}]: Die Abfrage des
Netzwerkkartentreibers nach OID_GEN_LINK_SPEED ist fehlgeschlagen.
Error - 24.02.2011 16:55:35 | Computer Name = ***** | Source = PSched | ID = 14103
Description = QoS [Adapter {7151162D-3C17-4452-8699-F0E9D51FD52E}]: Die Abfrage des
Netzwerkkartentreibers nach OID_GEN_LINK_SPEED ist fehlgeschlagen.
Error - 24.02.2011 19:43:48 | Computer Name = ***** | Source = PSched | ID = 14103
Description = QoS [Adapter {7151162D-3C17-4452-8699-F0E9D51FD52E}]: Die Abfrage des
Netzwerkkartentreibers nach OID_GEN_LINK_SPEED ist fehlgeschlagen.
Error - 25.02.2011 02:09:07 | Computer Name = ***** | Source = PSched | ID = 14103
Description = QoS [Adapter {7151162D-3C17-4452-8699-F0E9D51FD52E}]: Die Abfrage des
Netzwerkkartentreibers nach OID_GEN_LINK_SPEED ist fehlgeschlagen.
Error - 25.02.2011 13:22:21 | Computer Name = ***** | Source = PSched | ID = 14103
Description = QoS [Adapter {7151162D-3C17-4452-8699-F0E9D51FD52E}]: Die Abfrage des
Netzwerkkartentreibers nach OID_GEN_LINK_SPEED ist fehlgeschlagen.
Error - 25.02.2011 15:25:24 | Computer Name = ***** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Apache2" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
Error - 25.02.2011 15:25:51 | Computer Name = ***** | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
atapi PCIIde SI3114
Error - 25.02.2011 15:37:47 | Computer Name = ***** | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Apache2" wurde aufgrund folgenden Fehlers nicht gestartet:
%%3
< End of report >
--- --- ---
Gmer: Code:
GMER 1.0.15.15570 - hxxp://www.gmer.net
Rootkit scan 2011-02-25 21:04:58
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\0000007f Maxtor_6V160E0 rev.VA111630
Running: g2m3e4r.exe; Driver: C:\DOKUME~1\Besitzer\LOKALE~1\Temp\kgryraog.sys
---- System - GMER 1.0.15 ----
SSDT B0D861C6 ZwCreateKey
SSDT B0D861BC ZwCreateThread
SSDT B0D861CB ZwDeleteKey
SSDT B0D861D5 ZwDeleteValueKey
SSDT sptd.sys ZwEnumerateKey [0xB9ED684E]
SSDT sptd.sys ZwEnumerateValueKey [0xB9ED6BEE]
SSDT B0D861DA ZwLoadKey
SSDT sptd.sys ZwOpenKey [0xB9ED1090]
SSDT B0D861A8 ZwOpenProcess
SSDT B0D861AD ZwOpenThread
SSDT sptd.sys ZwQueryKey [0xB9ED6CC6]
SSDT sptd.sys ZwQueryValueKey [0xB9ED6B46]
SSDT B0D861E4 ZwReplaceKey
SSDT B0D861DF ZwRestoreKey
SSDT B0D861D0 ZwSetValueKey
Code \??\C:\WINDOWS\system32\drivers\hidev4iu.sys (Button Miniport Driver for Input Devices/Bluw (Hong Kong) Limited) ZwResumeThread [0xB1A85DF4]
---- Kernel code sections - GMER 1.0.15 ----
PAGE ntkrnlpa.exe!ZwResumeThread 805CAD9E 7 Bytes JMP B1A85DF8 \??\C:\WINDOWS\system32\drivers\hidev4iu.sys (Button Miniport Driver for Input Devices/Bluw (Hong Kong) Limited)
? C:\WINDOWS\system32\drivers\sptd.sys Der Prozess kann nicht auf die Datei zugreifen, da sie von einem anderen Prozess verwendet wird.
.text USBPORT.SYS!DllUnload B8DE48AC 5 Bytes JMP 8A619448
.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xB7B23360, 0x35483F, 0xE8000020]
? System32\Drivers\arez3u4m.SYS Das System kann den angegebenen Pfad nicht finden. !
.reloc C:\WINDOWS\system32\drivers\acedrv11.sys section is executable [0xA76A0480, 0x306DD, 0xE0000060]
.text C:\WINDOWS\system32\DRIVERS\atksgt.sys section is writeable [0xA727C300, 0x3ACC8, 0xE8000020]
.text C:\WINDOWS\system32\DRIVERS\lirsgt.sys section is writeable [0xB2FE5300, 0x1B7E, 0xE8000020]
---- User code sections - GMER 1.0.15 ----
.text D:\Programme\Mozilla Firefox\firefox.exe[280] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 004013F0 D:\Programme\Mozilla Firefox\firefox.exe (Firefox/Mozilla Corporation)
? C:\DOKUME~1\Besitzer\LOKALE~1\Temp\csrss.exe[1120] number of sections mismatch; time/date stamp mismatch; unknown module: OLEAUT32.dllunknown module: RASAPI32.dllunknown module: WINHTTP.dll
.isete C:\DOKUME~1\Besitzer\LOKALE~1\Temp\csrss.exe[1120] C:\DOKUME~1\Besitzer\LOKALE~1\Temp\csrss.exe unknown last section [0x0042D000, 0x1E000, 0x40000040]
---- Devices - GMER 1.0.15 ----
Device \FileSystem\Ntfs \Ntfs 8A7211D8
AttachedDevice \FileSystem\Ntfs \Ntfs SiWinAcc.sys (Windows Accelerator Driver/Silicon Image, Inc)
Device \FileSystem\Udfs \UdfsCdRom 89F4F3B8
Device \FileSystem\Udfs \UdfsDisk 89F4F3B8
Device \Driver\usbohci \Device\USBPDO-0 8A2091D8
Device \Driver\usbehci \Device\USBPDO-1 8A63A768
Device \Driver\NetBT \Device\NetBT_Tcpip_{7151162D-3C17-4452-8699-F0E9D51FD52E} 890F91D8
Device \Driver\prodrv06 \Device\ProDrv06 E211F008
Device \Driver\Ftdisk \Device\HarddiskVolume1 8A7241D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{75A194B9-F09B-4C88-B646-84BD1CC42606} 890F91D8
Device \Driver\Ftdisk \Device\HarddiskVolume2 8A7241D8
Device \Driver\Cdrom \Device\CdRom0 8A6761D8
Device \Driver\NetBT \Device\NetBT_Tcpip_{CE66EAE0-5428-4023-934B-1AEE0F3C7763} 890F91D8
Device \Driver\Cdrom \Device\CdRom1 8A6761D8
Device \Driver\Cdrom \Device\CdRom2 8A6761D8
Device \Driver\prohlp02 \Device\ProHlp02 E1AF9C60
Device \Driver\NetBT \Device\NetBt_Wins_Export 890F91D8
Device \Driver\NetBT \Device\NetbiosSmb 890F91D8
Device \Driver\00000046 \Device\0000005c sptd.sys
Device \Driver\usbohci \Device\USBFDO-0 8A2091D8
Device \Driver\usbehci \Device\USBFDO-1 8A63A768
Device \Driver\nvatabus \Device\NvAta0 8A7231D8
Device \Driver\nvatabus \Device\NvAta0 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 890E31D8
Device \Driver\nvatabus \Device\NvAta1 8A7231D8
Device \Driver\nvatabus \Device\NvAta1 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\nvatabus \Device\0000007c 8A7231D8
Device \Driver\nvatabus \Device\0000007c prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \FileSystem\MRxSmb \Device\LanmanRedirector 890E31D8
Device \Driver\nvatabus \Device\NvAta2 8A7231D8
Device \Driver\nvatabus \Device\NvAta2 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\nvatabus \Device\0000007d 8A7231D8
Device \Driver\nvatabus \Device\0000007d prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\Ftdisk \Device\FtControl 8A7241D8
Device \Driver\nvatabus \Device\0000007f 8A7231D8
Device \Driver\nvatabus \Device\0000007f prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\Si3114r5 \Device\Scsi\Si3114r51 8A7911D8
Device \Driver\Si3114r5 \Device\Scsi\Si3114r51 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\Si3114r5 \Device\Scsi\Si3114r51Port3Path2Target10Lun0 8A7911D8
Device \Driver\Si3114r5 \Device\Scsi\Si3114r51Port3Path2Target10Lun0 prosync1.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\arez3u4m \Device\Scsi\arez3u4m1 8A175980
Device \Driver\arez3u4m \Device\Scsi\arez3u4m1 sfsync02.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \Driver\arez3u4m \Device\Scsi\arez3u4m1Port4Path0Target0Lun0 8A175980
Device \Driver\arez3u4m \Device\Scsi\arez3u4m1Port4Path0Target0Lun0 sfsync02.sys (StarForce Protection Synchronization Driver/Protection Technology)
Device \FileSystem\Cdfs \Cdfs 890441D8
---- Registry - GMER 1.0.15 ----
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x30 0xD6 0x93 0xA3 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet001\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xEF 0xE4 0xDF 0x58 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x30 0xD6 0x93 0xA3 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xEF 0xE4 0xDF 0x58 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x30 0xD6 0x93 0xA3 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xEF 0xE4 0xDF 0x58 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x30 0xD6 0x93 0xA3 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet004\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xEF 0xE4 0xDF 0x58 ...
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x30 0xD6 0x93 0xA3 ...
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet005\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xEF 0xE4 0xDF 0x58 ...
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xB7 0xF7 0xA6 0x93 ...
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet006\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x6F 0x42 0x0D 0x29 ...
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xB7 0xF7 0xA6 0x93 ...
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet007\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x6F 0x42 0x0D 0x29 ...
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xB7 0xF7 0xA6 0x93 ...
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet008\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x6F 0x42 0x0D 0x29 ...
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xB7 0xF7 0xA6 0x93 ...
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet009\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x6F 0x42 0x0D 0x29 ...
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xB7 0xF7 0xA6 0x93 ...
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet010\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x6F 0x42 0x0D 0x29 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 1282968998
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 -664695999
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xB7 0xF7 0xA6 0x93 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x80 0x23 0x1D 0x49 ...
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xB7 0xF7 0xA6 0x93 ...
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet012\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0xF8 0xDD 0x7B 0x2B ...
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0xB7 0xF7 0xA6 0x93 ...
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Programme\DAEMON Tools\
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0x4C 0x4D 0x90 0x44 ...
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet013\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x80 0x23 0x1D 0x49 ...
---- EOF - GMER 1.0.15 ----
|
