Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Bundespolizei - Trojaner, natoinal crime unit (https://www.trojaner-board.de/107635-bundespolizei-trojaner-natoinal-crime-unit.html)

bender391 05.01.2012 21:20
Bundespolizei - Trojaner, natoinal crime unit
 
Hallo Trojaner-Board Team,

ersteimal finde ich es toll das es so eine Seite überhapt gibt! Das ist nicht selbstverständlich. Macht weiter so!

ZU MEINEM PROBLEM:

ich habe mir heute auch einen nervigen BKA-Trojaner eingefangen. Ich war ganz normal im I-net unterwegs, allerdings lief eine Java Anwendung neben bei...vll ist das ja der Auslöser gewesen.

Nun zu dem was ich bisher gemacht habe.

-Strg.+Alt+Entf. Benutzer abgemeldet wieder neu angemeldet (dann hatte ich wieder eine normalen Desktop)
- in Regestry den Taskmanager wieder verfügbar gemacht
- Dann habe ich mich an eure Anleitung gehalten (>Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?<)

1.Malwarebytes: Scan durchgeführt (dabei wurden 4 Dateien gefunden > Entfernt > Neustart)
2 Defogger
3 OLT > Quuickscan (die Logs liegen bei)
4 bei Gmer musste ich abbrechen, der Scan ging nicht mehr weiter...er war fast eine Stunde bei der gleichen Datei...

hmmm... jetzt weis ich nicht ob der Trojaner weg ist oder noch Reste davon da sind. Der Rechner läuft bis jetzt eigentlich normal...bis jetzt getestet: Firefox Word Excel...

Vielen Dank schon mal für die Hilfe
Viele Grüße

mbam log
Code:
Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Datenbank Version: v2012.01.05.02

Windows 7 x86 NTFS
Internet Explorer 8.0.7600.16385
Max Power :: TU-144 [Administrator]

05.01.2012 16:22:49
mbam-log-2012-01-05 (17-55-07).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 458257
Laufzeit: 1 Stunde(n), 31 Minute(n), 54 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 4
C:\Program Files\HD Tune Pro\hd.tune.pro.4.60-patch.exe (Malware.Packer.Gen) -> Keine Aktion durchgeführt.
C:\Users\Max Power\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7ZHYP3RB\Testbundle23w_1254[1].exe (Adware.Agent) -> Keine Aktion durchgeführt.
C:\Users\Max Power\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\36\47fd24-6e11de96 (Trojan.Ransom.Gen) -> Keine Aktion durchgeführt.
C:\Users\Max Power\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0.20829944830510494.exe.lnk (Backdoor.Agent) -> Keine Aktion durchgeführt.

(Ende)
OTL
Code:
OTL logfile created on: 05.01.2012 18:51:50 - Run 1
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\Max Power\Desktop
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,50 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 63,59% Memory free
7,00 Gb Paging File | 5,57 Gb Available in Paging File | 79,66% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 78,12 Gb Total Space | 17,77 Gb Free Space | 22,75% Space Free | Partition Type: NTFS
Drive D: | 390,62 Gb Total Space | 122,89 Gb Free Space | 31,46% Space Free | Partition Type: NTFS
Drive E: | 462,66 Gb Total Space | 243,92 Gb Free Space | 52,72% Space Free | Partition Type: NTFS
Drive I: | 931,51 Gb Total Space | 130,74 Gb Free Space | 14,04% Space Free | Partition Type: NTFS
 
Computer Name: TU-144 | User Name: Max Power | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Max Power\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Users\Max Power\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
PRC - C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\Display\NvXDSync.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Windows\System32\conhost.exe (Microsoft Corporation)
PRC - C:\Programme\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Programme\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Autodesk\Content Service\Connect.Service.ContentService.exe ()
PRC - C:\Programme\DAEMON Tools Lite\DTShellHlp.exe (DT Soft Ltd)
PRC - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
PRC - C:\Programme\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
PRC - C:\Programme\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
PRC - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Sidebar\sidebar.exe (Microsoft Corporation)
 
 
========== Modules (No Company Name) ==========
 
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a72ed18d2df70f09c57cf914ce591306\Microsoft.VisualBasic.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\cc6713be0e405d5a89a2783103f7e771\System.Management.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll ()
MOD - C:\Users\Max Power\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.7.gadget\GetCoreTempInfoNET.dll ()
MOD - C:\Users\Max Power\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.7.gadget\SystemInfo.dll ()
MOD - C:\Users\Max Power\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.7.gadget\CoreTempReader.dll ()
MOD - C:\Programme\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Programme\WinRAR\RarExt.dll ()
MOD - C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
 
 
========== Win32 Services (SafeList) ==========
 
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (FLEXnet Licensing Service) -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Flexera Software, Inc.)
SRV - (nvUpdatusService) -- C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (Microsoft SharePoint Workspace Audit Service) -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE (Microsoft Corporation)
SRV - (AdobeARMservice) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (TomTomHOMEService) -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe (TomTom)
SRV - (AntiVirSchedulerService) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (Autodesk Content Service) -- C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe ()
SRV - (CVPND) -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe (Cisco Systems, Inc.)
SRV - (SwitchBoard) -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (Autodesk Network Licensing Service) -- C:\Programme\Common Files\Autodesk Shared\Service\AdskNetSrv.exe (Autodesk, Inc.)
 
 
========== Driver Services (SafeList) ==========
 
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Windows\System32\drivers\avgntflt.sys (Avira GmbH)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (atksgt) -- C:\Windows\System32\drivers\atksgt.sys ()
DRV - (lirsgt) -- C:\Windows\System32\drivers\lirsgt.sys ()
DRV - (dtsoftbus01) -- C:\Windows\System32\drivers\dtsoftbus01.sys (DT Soft Ltd)
DRV - (netr73) -- C:\Windows\System32\drivers\netr73.sys (Ralink Technology, Corp.)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (CVPNDRVA) -- C:\Windows\System32\drivers\CVPNDRVA.sys (Cisco Systems, Inc.)
DRV - (SSPORT) -- C:\Windows\System32\drivers\SSPORT.SYS (Samsung Electronics)
DRV - (vmbus) -- C:\Windows\system32\DRIVERS\vmbus.sys (Microsoft Corporation)
DRV - (storflt) -- C:\Windows\system32\DRIVERS\vmstorfl.sys (Microsoft Corporation)
DRV - (storvsc) -- C:\Windows\system32\DRIVERS\storvsc.sys (Microsoft Corporation)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (s3cap) -- C:\Windows\system32\DRIVERS\vms3cap.sys (Microsoft Corporation)
DRV - (VMBusHID) -- C:\Windows\system32\DRIVERS\VMBusHID.sys (Microsoft Corporation)
DRV - (DNE) -- C:\Windows\System32\drivers\dne2000.sys (Deterministic Networks, Inc.)
DRV - (JRAID) -- C:\Windows\system32\DRIVERS\jraid.sys (JMicron Technology Corp.)
DRV - (CVirtA) -- C:\Windows\System32\drivers\CVirtA.sys (Cisco Systems, Inc.)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 29 3B E7 18 1F AC CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}: C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2011.11.23 17:39:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.03 14:29:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.12.01 19:35:02 | 000,000,000 | ---D | M]
 
[2011.08.08 17:12:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Max Power\AppData\Roaming\mozilla\Extensions
[2011.08.08 17:12:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Max Power\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2011.11.09 16:01:35 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.01.03 14:29:52 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.02 17:06:12 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.10.02 17:06:12 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.10.02 17:06:12 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.10.02 17:06:12 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.10.02 17:06:12 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.10.02 17:06:12 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - HKCU..\Run: [AdobeBridge]  File not found
O4 - Startup: C:\Users\Max Power\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Max Power\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{43EF6A6E-3A35-4BE6-8FC5-DF5E88DA7480}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011.11.29 11:59:21 | 000,000,000 | ---D | M] - E:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2011.11.29 12:01:26 | 000,000,000 | ---D | M] - E:\Autodesk_Quantity_Takeoff_2012_German_SLD_Win_32Bit -- [ NTFS ]
O32 - Unable to obtain root file information for disk I:\
O33 - MountPoints2\{8b54bf35-77f3-11e0-8e27-001d7d994e06}\Shell - "" = AutoRun
O33 - MountPoints2\{8b54bf35-77f3-11e0-8e27-001d7d994e06}\Shell\AutoRun\command - "" = G:\setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {1F328098-A75B-1B55-7BB8-2986F742CBEE} - Microsoft Windows Media Player 12.0
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {461CA3C8-8626-1FB2-6FD4-052C63ACF99B} - Microsoft Windows Media Player
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6AAF4060-1422-F817-6DB7-7A66BB3C295B} - Microsoft Windows Media Player 12.0
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {798847DE-C78F-0C72-F42B-0B7EEA96EEE5} - Internet Explorer
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {A1045333-80E1-86EB-20E3-002D4160422D} - Microsoft Windows Media Player
ActiveX: {A68881CF-D41D-51A6-BF59-9BEF9A73D444} - Java (Sun)
ActiveX: {B140B037-ED73-CB7F-899F-EF71DE16BAA0} - Browser Customizations
ActiveX: {B7C0EB59-8B4C-D4A6-4D82-37CD48DC9E35} - Browser Customizations
ActiveX: {BDF4E42D-EE42-FF29-2BE0-909255349F8B} - Java (Sun)
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E0F04CB4-4B3D-ABDD-D264-52465EEE8AA3} - Browser Customizations
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: 6de2ed6f-0b56-4d57-b0f0-551ec8cbb27f - C:\ProgramData\Duden\dkreg.exe /dktray=on /csapi=on /ALLUSERS
 
NetSvcs: FastUserSwitchingCompatibility -  File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla -  File not found
NetSvcs: Ntmssvc -  File not found
NetSvcs: NWCWorkstation -  File not found
NetSvcs: Nwsapagent -  File not found
NetSvcs: SRService -  File not found
NetSvcs: WmdmPmSp -  File not found
NetSvcs: LogonHours -  File not found
NetSvcs: PCAudit -  File not found
NetSvcs: helpsvc -  File not found
NetSvcs: uploadmgr -  File not found
 
MsConfig - StartUpReg: Adobe Acrobat Speed Launcher - hkey= - key= -  File not found
MsConfig - StartUpReg: AdobeCS5ServiceManager - hkey= - key= - C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: ICQ - hkey= - key= - C:\Program Files\ICQ7.5\ICQ.exe (ICQ, LLC.)
MsConfig - StartUpReg: PDFPrint - hkey= - key= - E:\Programme\PDF24\pdf24.exe (Geek Software GmbH)
MsConfig - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
MsConfig - StartUpReg: SunJavaUpdateSched - hkey= - key= - C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
MsConfig - StartUpReg: SwitchBoard - hkey= - key= - C:\Programme\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: TomTomHOME.exe - hkey= - key= - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
MsConfig - State: "services" - 2
MsConfig - State: "startup" - 2
 
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.01.05 18:46:45 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Max Power\Desktop\OTL.exe
[2012.01.05 16:00:40 | 000,000,000 | ---D | C] -- C:\Users\Max Power\AppData\Roaming\Malwarebytes
[2012.01.05 16:00:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.01.05 16:00:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.01.05 16:00:33 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.01.05 16:00:33 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.01.04 11:15:37 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\Windows\System32\devil.dll
[2012.01.04 11:15:37 | 000,369,152 | ---- | C] (The Public) -- C:\Windows\System32\avisynth.dll
[2012.01.04 11:15:37 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\System32\yv12vfw.dll
[2012.01.04 11:15:37 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\System32\i420vfw.dll
[2012.01.04 11:15:36 | 000,000,000 | ---D | C] -- C:\Program Files\AviSynth 2.5
[2012.01.04 11:12:56 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\Windows\System32\pncrt.dll
[2012.01.04 11:12:56 | 000,216,064 | RHS- | C] (MONOGRAM Multimedia, s.r.o.) -- C:\Windows\System32\nbDX.dll
[2012.01.04 11:12:56 | 000,031,232 | RHS- | C] (Hans Mayerl) -- C:\Windows\System32\msfDX.dll
[2012.01.04 11:12:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER © - by eRightSoft
[2012.01.04 11:12:55 | 000,186,880 | RHS- | C] (RadLight) -- C:\Windows\System32\RLOgg.ax
[2012.01.04 11:12:55 | 000,179,200 | RHS- | C] (Gabest) -- C:\Windows\System32\DiracSplitter.ax
[2012.01.04 11:12:55 | 000,169,472 | RHS- | C] (Gabest) -- C:\Windows\System32\MatroskaDX.ax
[2012.01.04 11:12:55 | 000,163,328 | RHS- | C] (Gabest) -- C:\Windows\System32\flvDX.dll
[2012.01.04 11:12:55 | 000,161,792 | RHS- | C] (Gabest) -- C:\Windows\System32\RealMediaDX.ax
[2012.01.04 11:12:55 | 000,092,672 | RHS- | C] (RadLight) -- C:\Windows\System32\RLVorbisDec.ax
[2012.01.04 11:12:55 | 000,090,112 | RHS- | C] (-) -- C:\Windows\System32\TTADSSplitter.ax
[2012.01.04 11:12:55 | 000,090,112 | RHS- | C] (-) -- C:\Windows\System32\TTADSDecoder.ax
[2012.01.04 11:12:55 | 000,067,584 | RHS- | C] (RadLight, LLC) -- C:\Windows\System32\RLTheoraDec.ax
[2012.01.04 11:12:54 | 000,123,904 | RHS- | C] (CoreCodec) -- C:\Windows\System32\AVCDX.ax
[2012.01.04 11:11:48 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft
[2012.01.03 23:28:41 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Desktop\Ansichten
[2012.01.02 12:30:01 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Desktop\Bewerbung Leipzig
[2011.12.21 23:42:57 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Documents\dvd
[2011.12.21 23:40:36 | 000,000,000 | ---D | C] -- C:\Users\Max Power\AppData\Roaming\DVD Flick
[2011.12.21 23:40:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Flick
[2011.12.21 23:40:27 | 000,040,960 | ---- | C] (vbAccelerator) -- C:\Windows\System32\ssubtmr6.dll
[2011.12.21 23:40:27 | 000,036,864 | ---- | C] (Robdogg Inc.) -- C:\Windows\System32\trayicon_handler.ocx
[2011.12.21 23:40:27 | 000,028,672 | ---- | C] (-) -- C:\Windows\System32\mousewheel.ocx
[2011.12.15 20:17:28 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Documents\FIFA 12
[2011.12.15 16:24:25 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Desktop\Neuer Ordner
[2011.12.11 22:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Navisworks 2012
[2011.12.11 22:17:48 | 000,000,000 | ---D | C] -- C:\Users\Max Power\AppData\Roaming\Autodesk Navisworks Exporters 2012
[2011.12.11 22:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Autodesk Navisworks Exporters 2012
[2011.10.24 16:21:19 | 000,024,920 | ---- | C] ( ) -- C:\Windows\System32\implode.dll
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Max Power\Documents\*.tmp files -> C:\Users\Max Power\Documents\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.01.05 18:50:01 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.01.05 18:48:09 | 000,000,000 | ---- | M] () -- C:\Users\Max Power\defogger_reenable
[2012.01.05 18:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Max Power\Desktop\OTL.exe
[2012.01.05 18:46:15 | 000,050,477 | ---- | M] () -- C:\Users\Max Power\Desktop\Defogger.exe
[2012.01.05 18:03:28 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.01.05 18:03:28 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.05 17:57:33 | 000,000,472 | ---- | M] () -- C:\Windows\tasks\SDMsgUpdate (TE).job
[2012.01.05 17:57:28 | 000,000,888 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.01.05 17:57:10 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.01.05 17:56:59 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.05 16:00:34 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.01.05 15:47:35 | 000,138,192 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2012.01.05 15:47:35 | 000,066,616 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2012.01.05 15:44:51 | 000,700,342 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.01.05 15:44:51 | 000,655,054 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.01.05 15:44:51 | 000,149,138 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.01.05 15:44:51 | 000,121,926 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.01.03 23:24:29 | 008,523,776 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt3BS.rvt
[2012.01.03 23:22:38 | 000,066,823 | ---- | M] () -- C:\Users\Max Power\Documents\Variante1.dwg
[2012.01.03 23:21:44 | 000,061,464 | ---- | M] () -- C:\Users\Max Power\Documents\Variante1.bak
[2012.01.03 23:19:37 | 000,062,424 | ---- | M] () -- C:\Users\Max Power\Documents\Variante2.dwg
[2012.01.03 23:17:13 | 000,001,935 | ---- | M] () -- C:\Users\Max Power\Documents\Variante2.pdf
[2012.01.03 23:10:45 | 000,067,672 | ---- | M] () -- C:\Users\Max Power\Documents\Variante3.dwg
[2012.01.03 22:58:23 | 000,067,160 | ---- | M] () -- C:\Users\Max Power\Documents\Variante2.bak
[2012.01.03 22:42:53 | 000,000,202 | -H-- | M] () -- C:\Users\Max Power\Documents\Zeichnung1.dwl2
[2012.01.03 22:42:53 | 000,000,052 | -H-- | M] () -- C:\Users\Max Power\Documents\Zeichnung1.dwl
[2012.01.03 22:17:01 | 008,523,776 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt3BS.0001.rvt
[2012.01.03 22:16:44 | 003,711,271 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwg
[2012.01.03 22:16:44 | 000,000,202 | -H-- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwl2
[2012.01.03 22:16:44 | 000,000,052 | -H-- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwl
[2012.01.03 21:00:32 | 001,255,379 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen_neu.xml
[2012.01.03 17:39:41 | 003,164,939 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.bak
[2012.01.03 16:50:22 | 000,083,366 | ---- | M] () -- C:\Users\Max Power\Desktop\pj_22889707.pdf
[2012.01.03 16:49:57 | 000,083,524 | ---- | M] () -- C:\Users\Max Power\Desktop\pj_22114942.pdf
[2012.01.03 16:49:04 | 000,082,118 | ---- | M] () -- C:\Users\Max Power\Desktop\pj_22492949.pdf
[2012.01.03 16:48:00 | 000,083,390 | ---- | M] () -- C:\Users\Max Power\Desktop\pj_23325498.pdf
[2012.01.02 13:02:44 | 000,000,059 | ---- | M] () -- C:\Windows\wpd99.drv
[2011.12.28 16:31:26 | 000,001,456 | ---- | M] () -- C:\Users\Max Power\AppData\Local\Adobe Für Web speichern 12.0 Prefs
[2011.12.25 09:47:27 | 003,899,616 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.12.16 13:52:46 | 000,578,820 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen1.xml
[2011.12.16 13:10:05 | 000,000,727 | ---- | M] () -- C:\Users\Max Power\Documents\acad.err
[2011.12.16 08:31:45 | 000,000,500 | ---- | M] () -- C:\Windows\tasks\Allplan AutoUpdate 2011-1.job
[2011.12.15 20:14:23 | 000,000,713 | ---- | M] () -- C:\Users\Public\Desktop\Fifa 12.lnk
[2011.12.14 22:49:25 | 000,413,696 | ---- | M] () -- C:\Users\Max Power\Documents\D_Roadway.rfa
[2011.12.14 22:49:21 | 000,573,440 | ---- | M] () -- C:\Users\Max Power\Documents\D_Deck.rfa
[2011.12.14 22:49:18 | 000,397,312 | ---- | M] () -- C:\Users\Max Power\Documents\D_Barrier Right.rfa
[2011.12.14 22:49:13 | 000,548,864 | ---- | M] () -- C:\Users\Max Power\Documents\D_Barrier Left.rfa
[2011.12.14 22:49:08 | 000,442,368 | ---- | M] () -- C:\Users\Max Power\Documents\D_Road.rfa
[2011.12.14 22:48:55 | 011,358,208 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt1.rvt
[2011.12.14 22:24:03 | 011,296,768 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt1.0003.rvt
[2011.12.14 21:50:33 | 010,891,264 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt1.0002.rvt
[2011.12.14 20:47:43 | 008,880,128 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt1.0001.rvt
[2011.12.14 19:45:52 | 000,650,245 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.xml
[2011.12.12 00:08:00 | 009,031,680 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_sachsen1.rvt
[2011.12.11 21:41:49 | 000,003,424 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen_recover.dwg
[2011.12.10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.12.07 22:02:25 | 000,276,460 | ---- | M] () -- C:\Users\Max Power\Documents\Elbbrücke.xml
[2011.12.07 21:50:09 | 002,138,942 | ---- | M] () -- C:\Users\Max Power\Documents\Elbbrücke.dwg
[2011.12.07 21:30:29 | 000,124,123 | ---- | M] () -- C:\Users\Max Power\Documents\Elbbrücke_1_1_2606.sv$.xml
[2011.12.07 20:32:50 | 002,138,798 | ---- | M] () -- C:\Users\Max Power\Documents\Elbbrücke.bak
[4 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Max Power\Documents\*.tmp files -> C:\Users\Max Power\Documents\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.01.05 18:48:09 | 000,000,000 | ---- | C] () -- C:\Users\Max Power\defogger_reenable
[2012.01.05 18:46:09 | 000,050,477 | ---- | C] () -- C:\Users\Max Power\Desktop\Defogger.exe
[2012.01.05 16:00:34 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.01.04 11:15:37 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2012.01.04 11:12:55 | 000,175,104 | RHS- | C] () -- C:\Windows\System32\CoreAAC.ax
[2012.01.04 11:12:55 | 000,121,344 | RHS- | C] () -- C:\Windows\System32\TAKDSDecoder.ax
[2012.01.04 11:12:55 | 000,120,832 | RHS- | C] () -- C:\Windows\System32\MPCDx.ax
[2012.01.04 11:12:55 | 000,107,520 | RHS- | C] () -- C:\Windows\System32\TAKDSDecoder.dll
[2012.01.04 11:12:55 | 000,107,520 | RHS- | C] () -- C:\Windows\System32\RLMPCDec.ax
[2012.01.04 11:12:55 | 000,097,280 | RHS- | C] () -- C:\Windows\System32\FLACDX.ax
[2012.01.04 11:12:55 | 000,070,656 | RHS- | C] () -- C:\Windows\System32\RLAPEDec.ax
[2012.01.04 11:12:55 | 000,051,712 | RHS- | C] () -- C:\Windows\System32\RLSpeexDec.ax
[2012.01.04 11:12:54 | 000,227,328 | RHS- | C] () -- C:\Windows\System32\ac3DX.ax
[2012.01.04 11:12:54 | 000,081,920 | RHS- | C] () -- C:\Windows\System32\aac_parser.ax
[2012.01.03 23:17:13 | 000,001,935 | ---- | C] () -- C:\Users\Max Power\Documents\Variante2.pdf
[2012.01.03 22:42:53 | 000,067,672 | ---- | C] () -- C:\Users\Max Power\Documents\Variante3.dwg
[2012.01.03 22:42:53 | 000,067,160 | ---- | C] () -- C:\Users\Max Power\Documents\Variante2.bak
[2012.01.03 22:42:53 | 000,066,823 | ---- | C] () -- C:\Users\Max Power\Documents\Variante1.dwg
[2012.01.03 22:42:53 | 000,062,424 | ---- | C] () -- C:\Users\Max Power\Documents\Variante2.dwg
[2012.01.03 22:42:53 | 000,061,464 | ---- | C] () -- C:\Users\Max Power\Documents\Variante1.bak
[2012.01.03 22:42:53 | 000,000,202 | -H-- | C] () -- C:\Users\Max Power\Documents\Zeichnung1.dwl2
[2012.01.03 22:42:53 | 000,000,052 | -H-- | C] () -- C:\Users\Max Power\Documents\Zeichnung1.dwl
[2012.01.03 22:16:56 | 008,523,776 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt3BS.rvt
[2012.01.03 22:16:56 | 008,523,776 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt3BS.0001.rvt
[2012.01.03 21:00:30 | 001,255,379 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen_neu.xml
[2012.01.03 20:43:52 | 000,000,202 | -H-- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwl2
[2012.01.03 20:43:52 | 000,000,052 | -H-- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwl
[2012.01.03 16:50:22 | 000,083,366 | ---- | C] () -- C:\Users\Max Power\Desktop\pj_22889707.pdf
[2012.01.03 16:49:57 | 000,083,524 | ---- | C] () -- C:\Users\Max Power\Desktop\pj_22114942.pdf
[2012.01.03 16:49:04 | 000,082,118 | ---- | C] () -- C:\Users\Max Power\Desktop\pj_22492949.pdf
[2012.01.03 16:48:00 | 000,083,390 | ---- | C] () -- C:\Users\Max Power\Desktop\pj_23325498.pdf
[2011.12.16 13:52:45 | 000,578,820 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen1.xml
[2011.12.15 20:14:23 | 000,000,713 | ---- | C] () -- C:\Users\Public\Desktop\Fifa 12.lnk
[2011.12.15 20:14:23 | 000,000,713 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fifa 12.lnk
[2011.12.14 22:49:24 | 000,413,696 | ---- | C] () -- C:\Users\Max Power\Documents\D_Roadway.rfa
[2011.12.14 22:49:20 | 000,573,440 | ---- | C] () -- C:\Users\Max Power\Documents\D_Deck.rfa
[2011.12.14 22:49:17 | 000,397,312 | ---- | C] () -- C:\Users\Max Power\Documents\D_Barrier Right.rfa
[2011.12.14 22:49:12 | 000,548,864 | ---- | C] () -- C:\Users\Max Power\Documents\D_Barrier Left.rfa
[2011.12.14 22:49:07 | 000,442,368 | ---- | C] () -- C:\Users\Max Power\Documents\D_Road.rfa
[2011.12.14 20:47:37 | 011,358,208 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt1.rvt
[2011.12.14 20:47:37 | 011,296,768 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt1.0003.rvt
[2011.12.14 20:47:37 | 010,891,264 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt1.0002.rvt
[2011.12.14 20:47:37 | 008,880,128 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt1.0001.rvt
[2011.12.12 00:07:54 | 009,031,680 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_sachsen1.rvt
[2011.12.11 22:08:24 | 000,650,245 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.xml
[2011.12.11 21:41:49 | 000,003,424 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen_recover.dwg
[2011.12.11 13:56:52 | 003,711,271 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwg
[2011.12.11 13:56:52 | 003,164,939 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.bak
[2011.12.07 21:24:58 | 000,124,123 | ---- | C] () -- C:\Users\Max Power\Documents\Elbbrücke_1_1_2606.sv$.xml
[2011.12.07 20:46:34 | 000,276,460 | ---- | C] () -- C:\Users\Max Power\Documents\Elbbrücke.xml
[2011.11.23 18:33:07 | 000,000,412 | ---- | C] () -- C:\Users\Max Power\AppData\Roaming\All CPU Meter_Settings.ini
[2011.11.13 15:37:44 | 000,005,120 | ---- | C] () -- C:\Users\Max Power\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.11.13 14:46:00 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011.11.09 20:56:00 | 000,086,016 | ---- | C] () -- C:\Windows\System32\custmon32.dll
[2011.10.15 00:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2011.09.25 09:28:41 | 000,002,828 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys
[2011.09.01 17:04:13 | 000,000,132 | ---- | C] () -- C:\Users\Max Power\AppData\Roaming\Adobe BMP Format CS5 Prefs
[2011.07.26 20:30:17 | 000,000,088 | RHS- | C] () -- C:\ProgramData\A107F471DF.sys
[2011.07.26 20:30:16 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2011.07.23 07:33:44 | 000,197,120 | ---- | C] () -- C:\Windows\patchw32.dll
[2011.07.22 13:57:35 | 000,484,656 | ---- | C] () -- C:\Windows\ssndii.exe
[2011.07.10 19:38:32 | 000,000,072 | ---- | C] () -- C:\Windows\QFP.ini
[2011.06.15 21:18:48 | 000,000,028 | ---- | C] () -- C:\Windows\pdf995.ini
[2011.06.15 21:16:17 | 000,000,059 | ---- | C] () -- C:\Windows\wpd99.drv
[2011.06.15 21:16:16 | 000,051,716 | ---- | C] () -- C:\Windows\System32\pdf995mon.dll
[2011.06.13 21:12:01 | 000,000,090 | -HS- | C] () -- C:\Windows\cnerolf.bin
[2011.05.28 16:30:16 | 000,001,456 | ---- | C] () -- C:\Users\Max Power\AppData\Local\Adobe Für Web speichern 12.0 Prefs
[2011.05.21 10:45:15 | 000,000,057 | ---- | C] () -- C:\Windows\fs9configurator.ini
[2011.05.13 19:36:25 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2011.05.13 19:36:24 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2011.05.10 21:24:35 | 000,000,090 | -HS- | C] () -- C:\Windows\cnerolf.dat
[2011.05.06 15:58:31 | 000,200,704 | ---- | C] () -- C:\Windows\System32\UpdateDriver.exe
[2011.05.06 15:58:26 | 000,005,224 | ---- | C] () -- C:\Windows\System32\ucuiinfo.ini
[2011.05.06 15:56:43 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.03.23 12:26:48 | 000,201,512 | ---- | C] () -- C:\Windows\System32\vpnapi.dll
[2009.07.14 09:47:43 | 000,700,342 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009.07.14 09:47:43 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009.07.14 09:47:43 | 000,149,138 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009.07.14 09:47:43 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 05:33:53 | 003,899,616 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 03:05:48 | 000,655,054 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 03:05:48 | 000,121,926 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 01:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2008.06.04 09:23:14 | 000,026,624 | ---- | C] () -- C:\Windows\System32\ssp7ml3.dll
[2005.02.25 00:59:49 | 000,318,014 | ---- | C] () -- C:\Windows\System32\flt1chk4.dll
[2002.03.13 23:46:46 | 000,053,248 | ---- | C] () -- C:\Windows\System32\zlib.dll
[1997.06.14 01:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
 
========== LOP Check ==========
 
[2011.06.21 15:39:31 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\4X_DATA
[2011.07.23 07:53:54 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Atari
[2011.11.30 18:43:21 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Autodesk
[2011.12.11 22:17:48 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Autodesk Navisworks Exporters 2012
[2011.12.18 22:20:48 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Azureus
[2011.10.09 20:15:43 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Bridge!
[2011.08.09 18:40:25 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Canneverbe Limited
[2011.07.26 21:06:50 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011.11.29 09:44:42 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\DAEMON Tools Lite
[2012.01.05 18:38:28 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Dropbox
[2011.11.13 17:24:40 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Duden
[2011.08.09 18:35:42 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\DVDVideoSoft
[2011.07.13 21:02:20 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Graphisoft
[2011.06.08 08:52:24 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\HD Tune Pro
[2011.12.16 14:45:36 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\ICQ
[2011.09.18 16:29:12 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\iJoysoft
[2011.11.27 19:56:32 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Nemetschek
[2011.06.15 21:18:48 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\pdf995
[2011.11.09 13:45:46 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\SmartDraw
[2011.08.01 16:14:42 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\SPORE
[2011.05.27 23:33:41 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011.11.23 18:01:54 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Swiss Academic Software
[2011.08.08 17:12:15 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\TomTom
[2011.11.23 15:16:00 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Ubisoft
[2011.11.13 15:37:25 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Video DVD Maker FREE
[2011.12.16 08:31:45 | 000,000,500 | ---- | M] () -- C:\Windows\Tasks\Allplan AutoUpdate 2011-1.job
[2011.12.26 16:26:41 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.01.05 17:57:33 | 000,000,472 | ---- | M] () -- C:\Windows\Tasks\SDMsgUpdate (TE).job
[2011.10.24 16:25:26 | 000,000,646 | ---- | M] () -- C:\Windows\Tasks\WebContent AutoUpdate 2011.job
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.05.06 15:39:57 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2011.11.25 14:10:20 | 000,000,000 | ---D | M] -- C:\Civil 3D Project Templates
[2011.11.25 14:10:20 | 000,000,000 | ---D | M] -- C:\Civil 3D Projects
[2011.05.06 15:36:48 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2011.09.01 16:55:50 | 000,000,000 | ---D | M] -- C:\Graphics
[2011.05.10 09:56:06 | 000,000,000 | ---D | M] -- C:\iFly Development Team
[2011.05.06 15:42:13 | 000,000,000 | ---D | M] -- C:\Intel
[2011.05.07 08:55:35 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2011.05.06 16:11:08 | 000,000,000 | ---D | M] -- C:\NVIDIA
[2009.07.14 03:37:05 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.01.05 16:00:33 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.01.05 16:00:34 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.05.06 15:36:48 | 000,000,000 | -HSD | M] -- C:\Programme
[2011.05.06 15:45:33 | 000,000,000 | ---D | M] -- C:\RaidTool
[2011.05.06 15:36:48 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012.01.05 18:53:19 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.06.16 11:10:19 | 000,000,000 | R--D | M] -- C:\Users
[2011.11.13 15:37:25 | 000,000,000 | ---D | M] -- C:\videodvdmaker
[2012.01.04 11:13:31 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
< %systemroot%\system32\*.manifest /3 >
 
 
< MD5 for: AFD.SYS  >
[2011.04.25 03:35:40 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=0DB7A48388D54D154EBEC120461A0FCD -- C:\Windows\System32\drivers\afd.sys
[2011.04.25 03:35:40 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=0DB7A48388D54D154EBEC120461A0FCD -- C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16802_none_d81220b5bf827af7\afd.sys
[2010.11.20 09:40:03 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=1151FD4FB0216CFED887BFDE29EBD516 -- C:\Windows\SoftwareDistribution\Download\18e2c83e42cc8f0cc17b5dbfaf982690\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_d9efac7dbcaf385b\afd.sys
[2011.04.25 03:18:03 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=9EBBBA55060F786F0FCAA3893BFA2806 -- C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_d9f97e05bca8003a\afd.sys
[2011.04.25 03:27:23 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=C114AB7A1550D42EA1700FFD4179CF5A -- C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.20951_none_d864ad9ad8c98d1f\afd.sys
[2011.04.25 04:24:09 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=C427F91A748CD342A2B3F9278D9FD6A5 -- C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_da774a9ad5cea29e\afd.sys
[2009.07.14 00:12:38 | 000,338,944 | ---- | M] (Microsoft Corporation) MD5=DDC040FDB01EF1712A6B13E52AFB104C -- C:\Windows\winsxs\x86_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_d7be98b5bfc0b4c1\afd.sys
 
< MD5 for: EXPLORER.EXE  >
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_525b5180f3f95373\explorer.exe
[2009.10.31 06:45:39 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_51a3a583dafd0cef\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\18e2c83e42cc8f0cc17b5dbfaf982690\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe
[2009.08.03 06:49:47 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6\explorer.exe
[2009.08.03 06:35:50 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878\explorer.exe
[2009.10.31 07:00:51 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691\explorer.exe
 
< MD5 for: REGEDIT.EXE  >
[2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\regedit.exe
[2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\winsxs\x86_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_f4050b883d2c3c08\regedit.exe
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\18e2c83e42cc8f0cc17b5dbfaf982690\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\System32\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
 
< MD5 for: WININIT.EXE  >
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe
[2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe
 
< MD5 for: WINLOGON.EXE  >
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\System32\winlogon.exe
[2009.10.28 07:17:59 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=37CDB7E72EB66BA85A87CBE37E7F03FD -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177\winlogon.exe
[2009.10.28 06:52:08 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=3BABE6767C78FBF5FB8435FEED187F30 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2\winlogon.exe
[2010.11.20 13:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\SoftwareDistribution\Download\18e2c83e42cc8f0cc17b5dbfaf982690\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2009.07.14 02:14:45 | 000,285,696 | ---- | M] (Microsoft Corporation) MD5=8EC6A4AB12B8F3759E21F8E3A388F2CF -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166\winlogon.exe
[2011.12.24 17:50:20 | 000,182,856 | ---- | M] () MD5=B382935AB01B27D0E14F267DBF288896 -- C:\Program Files\Malwarebytes' Anti-Malware\Chameleon\winlogon.exe
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,12288,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU >
 
< HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs >
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install\\LastSuccessTime: 2012-01-05 14:45:35
 
<          >

< End of report >
Extras
Code:
OTL Extras logfile created on: 05.01.2012 18:51:50 - Run 1
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\Max Power\Desktop
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,50 Gb Total Physical Memory | 2,22 Gb Available Physical Memory | 63,59% Memory free
7,00 Gb Paging File | 5,57 Gb Available in Paging File | 79,66% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 78,12 Gb Total Space | 17,77 Gb Free Space | 22,75% Space Free | Partition Type: NTFS
Drive D: | 390,62 Gb Total Space | 122,89 Gb Free Space | 31,46% Space Free | Partition Type: NTFS
Drive E: | 462,66 Gb Total Space | 243,92 Gb Free Space | 52,72% Space Free | Partition Type: NTFS
Drive I: | 931,51 Gb Total Space | 130,74 Gb Free Space | 14,04% Space Free | Partition Type: NTFS
 
Computer Name: TU-144 | User Name: Max Power | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- E:\Programme\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02250F8E-3EF9-41D3-9215-889DDA4A414B}_is1" = EIRESIM - Alicante Ultimate
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}" = Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729
"{0513EE35-E0FB-4166-B663-BD1AE3A803DE}" = Anno 1404
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}" = Autodesk Content Service
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0976C02C-0F73-447D-9657-5318C0C45A05}" = aerosoft's - Budapest 2007 - FS2004
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0D9CF86F-BA43-4159-A8AA-3A7C5FF5B00A}" = Bridge Modeler for AutoCAD® Civil 3D® 2012 on AutoCAD Civil 3D 2012 - German (Standard)
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1296225E-030B-4979-B515-323CE0FC7582}" = aerosoft's - Mallorca X for FS2004
"{14866AAD-1F23-39AC-A62B-7091ED1ADE64}" = Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729
"{15FA5ED6-2F98-4B5E-AF0B-18E5F4723FAD}_is1" = Cities In Motion
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{164360E5-0AAD-48AD-8A36-3F8A859FAB6F}" = PMDG747_400F
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{1EC65D1D-3911-4F7D-8B6A-63C69EDBFC6E}" = EditVoicepack
"{1F121516-E175-4E0B-AC4D-42DD5164E396}_is1" = Need for Speed: The Run
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}" = Autodesk Material Library Low Resolution Image Library 2012
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java(TM) 6 Update 25
"{27AA1674-74F1-43BB-8491-CB5C048541E2}" = GeoMedia Professional
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{2F17C376-EDB7-455B-BC79-171F02F30CAE}" = Skysoft Simulation ZPMS 2011
"{33A2107C-7189-40B4-8AF3-043E016AE49B}" = aerosoft's - Keflavik
"{34BDC9DA-9320-491C-AA40-B0D98A0EBA9C}" = aerosoft's - Mega Airport Frankfurt - FS2004
"{36E015FF-26E3-470A-9631-0786D402D6C0}" = Autodesk Quantity Takeoff 2012
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = Gigabyte Raid Configurer
"{3A778807-F7E8-4829-973F-733B2277A67A}" = Skysoft Simulation ZUJZ - Jiuzhai Huanglong Airport
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3ABDFABB-FA48-4BCA-9ECC-3EFC1E5143D2}" = aerosoft's - German Airports 2 - Dortmund
"{3B0DBBE5-89F3-4F12-87D8-A5A24E98A402}" = Revit Extensions
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404
"{3F48E4DD-08FB-4B2A-9100-EEA4EFBB77F6}" = Revit Extensions for Autodesk Revit Structure 2010
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{434D0820-3AA6-493A-80B9-301000028501}" = DiRT2
"{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"{434D0FA0-AB8C-497F-B30A-7A1000018201}" = DiRT 3
"{45C5C113-AD43-414B-867D-7C0AF54276CB}" = Duden-Rechtschreibprüfung PLUS
"{46464A5D-7D14-41E3-9C26-E3C186F37D84}" = aerosoft's - German Airports 2 - Cologne-Bonn  - FS2004
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}" = Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729
"{4C4494AC-E3E4-4675-8973-1B6403429C02}" = aerosoft's - Lissabon 2008
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CFCC6FD-AEA2-4208-99A6-45CBF9DFFD82}" = Real Environment Xtreme
"{50AE4FAB-3A8B-4640-A607-987BDB8FB863}" = aerosoft's - Nice Cote dAzur
"{51D199F4-5593-4BC9-B2A5-BB1CDE0C894A}" = aerosoft's - Mega Airport Paris CDG
"{55255E60-CD59-11DF-BD3B-0800200C9A66}" = Übungsprojekt Tutorial Architektur (mit Modell)
"{555C7DA8-8A43-4A5B-A5FB-137C07AA81D0}" = aerosoft's - Approaching Innsbruck 2004
"{5783F2D7-0111-0409-0010-0060B0CE6BBA}" = Autodesk CAD Manager Tools
"{5783F2D7-A000-0407-0002-0060B0CE6BBA}" = AutoCAD Civil 3D 2012
"{5783F2D7-A000-0407-1002-0060B0CE6BBA}" = AutoCAD Civil 3D 2012 Language Pack - Deutsch
"{5783F2D7-A001-0407-0002-0060B0CE6BBA}" = AutoCAD 2012 - Deutsch
"{5783F2D7-A001-0407-1002-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - Deutsch
"{5783F2D7-A028-0409-0000-0060B0CE6BBA}" = DWG TrueView 2012
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5C81B189-5456-40C4-9313-7FE6FA6DD64C}" = Duden-Bibliothek
"{5EDF1B95-251E-0409-8232-38B90D666EE2}" = Autodesk Navisworks 2012 32 bit Exporter Plug-ins English Language Pack
"{5EDF1B95-251E-406A-8232-38B90D666EE2}" = Autodesk Navisworks 2012 32 bit Exporter Plug-ins
"{608B7A43-D176-4309-8999-D772F9A01CD4}" = aerosoft's - German Airports 2 - Muenster-Osnabrueck
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012
"{65C68BC0-5F5D-4470-8E04-00CA4606C26C}" = Revit Extensions
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B2207AE-45BA-40AF-A9FF-7866C8611ED5}" = PMDGMD11_FS9_GEF_WOF1
"{6C06AC26-DBD1-46E5-9863-33E7633566E5}" = ActiveSky Version 6 and ActiveSky Graphics
"{705F27B3-5B35-4EC4-A258-BF16D83BE22B}" = aerosoft's - German Airports 2 - Leipzig  - FS2004
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{7262D0C8-41CC-4F75-8383-A6C7C61D7FC6}" = Nemetschek SoftLock 2006
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7346B4A0-1200-0100-0409-705C0D862004}" = Revit Architecture 2012
"{7346B4A0-1200-0101-0409-705C0D862004}" = Revit Architecture 2012 Language Pack - English
"{7346B4A0-1200-0200-0407-705C0D862004}" = Revit Structure 2012
"{7346B4A0-1200-0201-0407-705C0D862004}" = Revit Structure 2012 Language Pack - Deutsch
"{7543FC90-B258-46C5-8238-507BB14D5139}" = Skysoft Simulation ZULZ - Luzhou Lantian Airport
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{76DAEC83-AF7B-333C-8A53-83D7C7D39199}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}" = Microsoft Visual Basic Power Packs 3.0
"{7D606567-5047-451A-B49E-29FCB6012B4E}" = Microsoft Flight Simulator X: Acceleration
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 3.3.0
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8440C171-F033-4410-B099-5BE38273A13B}" = CLOUD9 LosAngeles 1.01
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B7917E0-AF55-4E8A-9473-017F0AA03AC8}" = QuickTime
"{8BA8CE06-0C92-4A44-9924-2614DCD77F20}" = PMDG MD-11 FS9
"{8E87B944-4815-3C5E-947F-5035C9F64362}" = Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU
"{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{907B4640-266B-4A21-92FB-CD1A86CD0F63}" = RollerCoaster Tycoon 3
"{92617838-E49F-4184-B96C-64815B9B4697}" = PMDGMD11_FS9_GEF_GRF2
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{939D29FC-B82D-42A7-BB1E-8E3F121505CC}" = Autodesk Revit Structure 2010
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"{96879817-0731-44B2-952A-E2D64C9BFDED}" = Aerosoft's - Discus Glider X
"{974518D4-7C04-4B2D-AADC-0D4F303E275F}" = Crystal Reports Runtime
"{97679567-0095-464E-B5F2-E218A1CF3421}" = PMDG747_400 Queen of the Skies
"{9A0906C7-D472-4C22-8D12-11D6AB2819E4}" = aerosoft's - German Airports 3 - Bremen
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™
"{A0663B00-3376-42C1-B719-995B9CB44DEF}" = Aerosoft's - Hawaii Dillingham X
"{A07B2C21-863B-47AB-AE7E-20BB00BD7D33}" = ANNO 1404 - Venedig
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}" = Autodesk Design Review 2012
"{A624F5D8-DEBF-4827-86E9-7DE67BC750C4}" = Skysoft Simulation ZSOF - Hefei Luogang Int'l
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A91EDDC0-CD59-11DF-BD3B-0800200C9A66}" = Übungsprojekt Tutorial Ingenieurbau (mit Modell)
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A981F05D-AFD4-4E7C-B4DB-FF6EE33F8DCE}" = PMDGMD11_FS9_PWF_FXF
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Deutsch
"{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}" = Cisco Systems VPN Client 5.0.07.0290
"{B2BDE61B-0407-47F5-8890-8328102F0E3B}" = Autodesk QTO Language Pack - Deutsch
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 285.62
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.11.0621
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.2.24.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}" = Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729
"{B48E264C-C8CD-4617-B0BE-46E977BAD694}" = ANNO 2070
"{B5751715-EC10-43D9-8C95-62E1368433EF}" = Autodesk Material Library Medium Resolution Image Library 2012
"{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1" = SUPER © v2011.build.49 (July 1st, 2011) Version v2011.build.49
"{C2FBA9F9-4942-4254-877C-3EB2B731DD0C}_is1" = Bridge Repack by Der Jok3r Version 1.00
"{C732C76D-0010-1033-99BD-DDB8254216B8}" = Autodesk Showcase 2012 32-bit - English
"{C732C76D-7C3D-4DEB-99BD-DDB8254216B8}" = Autodesk Showcase 2012 32-bit - English
"{C8948D5A-ECB5-4EF0-AEA0-8564E3094DC4}" = Revit Extensions
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{CB131247-7869-47E1-9969-B29567C9B106}_is1" = LatinVFR - Crown Point Update v1
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D1D50FD9-9867-4139-858E-0C0448CECBA9}" = aerosoft's - German Airports 1 - Stuttgart
"{D234EAC0-7D49-492F-97EC-8FA09FD7C1C4}" = aerosoft's - German Airports 3 - Hamburg
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D41CAD6D-DB4C-4D7C-BABA-D1A4B1599741}" = aerosoft's - German Airports 3-Berlin Tegel
"{D4FB2856-E6EB-4864-A241-4587ED21A11B}" = aerosoft's - Brussels 2007
"{D641BAA9-0070-46A5-A313-21933A211851}" = Revit Extensions
"{D86B6E8D-F224-4BB6-B959-C8EDC5300B5D}" = aerosoft's - Mega Airport Stockholm Arlanda
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{DF71C8D1-9258-4504-89AF-BA80748CC0D2}" = Nemetschek Allplan 2011
"{E12C6653-1FF0-4686-ADB8-589C13AE761F}" = Citavi
"{E552C39C-C70E-464F-9733-8311331BDD90}" = Autodesk Inventor Fusion Plugin Language Pack for AutoCAD 2012
"{EA926717-CE5A-4CB4-AB21-9E6E9565A458}" = RCT3 Soaked
"{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}" = Autodesk Inventor Fusion Plugin for AutoCAD 2012
"{EAB8A41D-FABA-4569-A0A1-60A8B358D6F1}" = Autodesk Network License Manager
"{ED654F5D-5DC9-46EA-9D10-621231527F98}" = FS9 Configurator
"{EE46B5D5-E62B-41CA-A2E1-2B4811F23E3B}" = Revit Extensions for Autodesk Revit Structure 2012
"{EE7D2735-9566-4E60-95AD-44282A7362BE}_is1" = Aerosoft - Gibraltar FS2004
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F19BB7D3-FB87-4C96-A28B-45C59A0F5229}" = RPC Plug-in for Autodesk 3ds Max Design 2012 32-bit
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F3759A9F-7AFA-4FB4-8DF1-53F26B979DEE}" = Belkin 54Mbps Wireless Network Adapter
"{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}" = Update Manager
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FA61FF86-2479-D620-9F6B-655ADD4225B4}" = General Runtime Files for Allplan 2011-1 Release
"{FCEBDFA6-EED5-4B0B-8187-46AC14F96E57}" = PMDGMD11_FS9_PWF_WOF
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"763v2" = Level-D Simulations 767-300
"763v21" = Level-D Simulations 767-300 Update
"Active Camera 2004 patch for FS 9.1" = Active Camera 2004 patch for FS 9.1
"Active Camera 2004 update to version 2.1 (FS 9.1)" = Active Camera 2004 update to version 2.1 (FS 9.1)
"Active Camera 2004 version 2.0" = Active Camera 2004 version 2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion
"AKESOFT FORONDA-X FS9 1.00" = AKESOFT FORONDA-X FS9 1.00
"AutoCAD 2012 - Deutsch" = AutoCAD 2012 - Deutsch
"AutoCAD Civil 3D 2012" = AutoCAD Civil 3D 2012
"Autodesk Design Review 2012" = Autodesk Design Review 2012
"Autodesk Inventor Fusion 2012" = Autodesk Inventor Fusion 2012
"Autodesk Inventor Fusion Plugin for AutoCAD 2012" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"Autodesk Navisworks 2012 32 bit Exporter Plug-ins" = Autodesk Navisworks 2012 32 bit Exporter Plug-ins
"Autodesk Quantity Takeoff 2012" = Autodesk Quantity Takeoff 2012
"Autodesk Revit Architecture 2012" = Autodesk Revit Architecture 2012
"Autodesk Revit Structure 2010" = Autodesk Revit Structure 2010
"Autodesk Revit Structure 2010 SP2" = Autodesk Revit Structure 2010 x86 Update 2
"Autodesk Revit Structure 2012" = Autodesk Revit Structure 2012
"Autodesk Showcase 2012 32-bit - English" = Autodesk Showcase 2012 32-bit - English
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BG9_is1" = Ben Gurion Airport for FS2004
"Bridge Building Game" = Bridge Building Game
"C337H SKYMASTER HD SERIES FSX" = C337H SKYMASTER HD SERIES FSX
"Carenado - C185F Skywagon FSX" = Carenado - C185F Skywagon FSX
"Carenado C208B Grand Caravan" = Carenado C208B Grand Caravan
"Carenado Commander 114 FSX" = Carenado Commander 114 FSX
"Carenado F33A Bonanza" = Carenado F33A Bonanza
"CCleaner" = CCleaner
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Cities XL 2012" = Cities XL 2012
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DAEMON Tools Lite" = DAEMON Tools Lite
"Debrecen LHDC scenery v1.1 (FS2004)" = Debrecen LHDC scenery v1.1 (FS2004)
"DVD Flick_is1" = DVD Flick 1.3.0.7
"DWG TrueView 2012" = DWG TrueView 2012
"Fifa 12 (c) Electronic Arts_is1" = Fifa 12 (c) Electronic Arts version 1
"Flight Simulator 9.0" = Microsoft Flight Simulator 2004 A Century of Flight
"FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Microsoft Flight Simulator X: Acceleration
"FlightZone 02: Portland" = FlightZone 02: Portland
"Fraps" = Fraps (remove only)
"FSDreamTeam Geneva FS9_is1" = FSDreamTeam Geneva FS9 1.1
"FSDreamTeam Zurich9_is1" = FSDreamTeam Zurich9 1.3.1
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"GT4AES" = GT4AES
"HD Tune Pro_is1" = HD Tune Pro 4.60
"iFly Jets - The 737NG for FS2004" = iFly Jets - The 737NG for FS2004
"InstallShield_{2F17C376-EDB7-455B-BC79-171F02F30CAE}" = Skysoft Simulation ZPMS 2011
"InstallShield_{3A778807-F7E8-4829-973F-733B2277A67A}" = Skysoft Simulation ZUJZ - Jiuzhai Huanglong Airport
"InstallShield_{7543FC90-B258-46C5-8238-507BB14D5139}" = Skysoft Simulation ZULZ - Luzhou Lantian Airport
"InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"InstallShield_{A624F5D8-DEBF-4827-86E9-7DE67BC750C4}" = Skysoft Simulation ZSOF - Hefei Luogang Int'l
"Klinn's ElectroSet (RCT3)_is1" = Klinn's ElectroSet Version 2
"Klinn's Framework (RCT3)_is1" = Klinn's Framework Version 2
"KPHL FS9" = KPHL FS9
"KSJC San Jose FS2004" = KSJC San Jose FS2004
"LatinVFR MKJS" = LatinVFR MKJS
"LatinVFRMKJPFS9_is1" = Latin VFR MKJP FS9
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.0.1800
"MegaSceneryX_is1" = Hawaii Oahu
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"OpenAL" = OpenAL
"PA32R SARATOGA SP FSX" = PA32R SARATOGA SP FSX
"ParoInternationalAirport_is1" = Paro International Airport FS2004
"Pdf995" = Pdf995
"Railworks 3 Train Simulator 2012 Deluxe_is1" = Railworks 3 Train Simulator 2012 Deluxe
"RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Flight Simulator X
"Samsung ML-1660 Series" = Wartung Samsung ML-1660 Series
"SmartDraw PDF Filter" = SmartDraw PDF Filter
"SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Flight Simulator X Service Pack 1
"SystemRequirementsLab" = System Requirements Lab
"TJSJ San Juan" = TJSJ San Juan
"TomTom HOME" = TomTom HOME 2.8.2.2264
"UK2000 Belfast Xtreme" = Remove UK2000 Belfast Xtreme files
"UK2000 Birmingham Xtreme" = Remove UK2000 Birmingham Xtreme files
"UK2000 Bristol Xtreme FS9" = UK2000 Bristol Xtreme FS9
"UK2000 Edinburgh Xtreme" = Remove UK2000 Edinburgh Xtreme files
"UK2000 Glasgow Xtreme" = Remove UK2000 Glasgow Xtreme files
"UK2000 Liverpool Xtreme FS9" = UK2000 Liverpool Xtreme FS9
"UK2000 London City Xtreme FS9" = UK2000 London City Xtreme FS9
"UK2000 Manchester Xtreme %simname%" = UK2000 Manchester Xtreme %simname% Uninstall
"UK2000 Stansted Xtreme" = Remove UK2000 Stansted Xtreme files
"VHHH Hong Kong FS2004" = VHHH Hong Kong FS2004
"VLC media player" = VLC media player 1.1.11
"WinRAR archiver" = WinRAR 4.00 (32-Bit)
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Aerosoft Mega Airport Munich" = Aerosoft Mega Airport Munich
"af745cb3dc09e441" = Boeing 767-300ER Fuel Planner
"Carenado's C SKYLANE II RG R182" = Carenado's C SKYLANE II RG R182
"Dropbox" = Dropbox
"Mantex3.0" = Mantex3.0
"Newport - Kalaupapa Hawaii X" = Newport - Kalaupapa Hawaii X
"PA-28-181 ARCHER II FSX" = PA-28-181 ARCHER II FSX
"SmartDraw 2010" = SmartDraw 2010
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 24.12.2011 09:06:23 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:36 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:39 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:41 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:41 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:42 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:43 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:44 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:45 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:06:45 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
[ Autodesk REX Events ]
Error - 11.12.2011 19:07:19 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - : Der Objektverweis wurde nicht auf eine Objektinstanz
 festgelegt.; StackTrace:    bei REX.AREXC3DStart.AREXC3DProxy.RemoveRibbon()   
bei REX.AREXC3DStart.AREXC3DProxy.OnShutdown()    bei REX.Common.Start.REXStart.OnShutdown()

  bei REX.AREXC3DStart.REXC3DStart.Terminate()
 
Error - 14.12.2011 13:08:03 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 16.12.2011 08:07:03 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 16.12.2011 08:10:20 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 16.12.2011 09:41:03 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - : Der Objektverweis wurde nicht auf eine Objektinstanz
 festgelegt.; StackTrace:    bei REX.AREXC3DStart.AREXC3DProxy.RemoveRibbon()   
bei REX.AREXC3DStart.AREXC3DProxy.OnShutdown()    bei REX.Common.Start.REXStart.OnShutdown()

  bei REX.AREXC3DStart.REXC3DStart.Terminate()
 
Error - 17.12.2011 07:24:04 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 17.12.2011 08:05:42 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - : Der Objektverweis wurde nicht auf eine Objektinstanz
 festgelegt.; StackTrace:    bei REX.AREXC3DStart.AREXC3DProxy.RemoveRibbon()   
bei REX.AREXC3DStart.AREXC3DProxy.OnShutdown()    bei REX.Common.Start.REXStart.OnShutdown()

  bei REX.AREXC3DStart.REXC3DStart.Terminate()
 
Error - 03.01.2012 10:11:58 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 03.01.2012 10:49:58 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 03.01.2012 12:39:57 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - : Der Objektverweis wurde nicht auf eine Objektinstanz
 festgelegt.; StackTrace:    bei REX.AREXC3DStart.AREXC3DProxy.RemoveRibbon()   
bei REX.AREXC3DStart.AREXC3DProxy.OnShutdown()    bei REX.Common.Start.REXStart.OnShutdown()

  bei REX.AREXC3DStart.REXC3DStart.Terminate()
 
[ System Events ]
Error - 02.01.2012 10:44:37 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 02.01.2012 11:05:51 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 02.01.2012 13:27:35 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 03.01.2012 04:27:46 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 03.01.2012 08:22:06 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 03.01.2012 15:36:35 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 04.01.2012 03:19:04 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 05.01.2012 03:40:25 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 05.01.2012 11:21:39 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 05.01.2012 12:57:50 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
 
< End of report >
Noch ein Screen des Trojaners (in eurem Board)
hxxp://www.trojaner-board.de/106261-habe-schon-bundestrojaner-bka-virus.html

kira 06.01.2012 07:51
Hallo und Herzlich Willkommen! :)

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:
Zitat:
  • "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
    - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
    - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
  • Charakteristische Merkmale/Profilinformationen:
    - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] ersetzen
  • Die Systemprüfung und Bereinigung:
    - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
  • Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
  • Innerhalb der Betreuungszeit:
    - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
  • Die Reihenfolge:
    - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
  • GECRACKTE SOFTWARE werden hier nicht geduldet!!!!
  • Ansonsten unsere Forumsregeln:
    - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
  • Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen:)
► woher hast Du das programm "hd.tune.pro"?
Beachte bitte folgendes:-> Cracks, Keygens und andere illegale Software

gruß
kira

bender391 06.01.2012 09:35
Hallo kira,

vielen Dank für die Antwort.

ich hatte mir eine Free Trail vom HD Tune auf deren Homepage runtergeladen. Ich wollte den Datendurchsatz meiner Festplatte messen, da Sie mir irgendwie langsam vorkam.

Aber das ist schon ewig her, mindestens ein Jahr. Ich weis auch nicht warum er das als Malware idendifiziert hat. Auf jeden Fall ist es nichts illegales gewesen...

kira 07.01.2012 08:42
► Frage dich, wieso hast Du nicht schon dein System aufgrüstet?!:
Code:
Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Win7 Service Pack 1 (SP1):-> umfasst die neuesten Aktualisierungen, wie z.B wichtige Sicherheits-, Stabilitäts- und Leistungsverbesserungen. Der Internet Explorer auch veraltet, Version 9 ist schon aktuell!
Allerdings in diesem Zustand (der Rechner aktuell durch Malware befallen ist), der alten Version eine Aufrüstung auf die nächste NICHT erfolgen darf, sonst schadet es mehr als es nutzt! Soll nun die Festplatte erst bereinigt werden, also absolut malwarefrei sein!
Nur am Ende der Reinigung der aktuelle Version installieren! - ich werde Dir Bescheid sagen wann!

1.
Code:
Azureus
die Nutzung der von Filesharing (Filesharing (deutsch "Dateifreigabe" oder "gemeinsamer Dateizugriff", wörtlich "Dateien teilen") )- Plattformen ...
Zitat:
Internet-Tauschbörsen gehören leider zu den unseriösesten Anbietern, und dort werden sehr viele Schädlinge verbreitet, hierbei sollte deshalb, wenn überhaupt, nur ganz besonders vorsichtig umgegangen werden ! Laut Studien sind bei den Tauschbörsen bei 45% der zum Download angebotenen Dateien, Viren oder Würmer und sonstige Schädlinge enthalten!
Hinzu kommt noch, dass die meisten Downloads von diesen Tauschbörsen eh illegal sind, und damit die Nutzer verleitet werden, „Straftaten“ zu begehen!
Selbst wenn du glaubst, dass Du ein „sicheres“ P2P Programm verwendest, nicht mal das Programm selbst sicher, da Du wirst Daten von "uncertified Quellen" teilen, und diese werden häufig angesteckt...
Ausserdem nicht nur trojanische Pferde oder andere Virentypen eine direkt Verbindung brauchen, sondern der Verwendung von µtorrent & Co, "telefonieren auch nach Hause", wenn auch noch keine Beweise vorliegen (zumindest teilweise nicht) und solchen Clients erlaubt, würde ich nicht empfehlen!http://www.world-of-smilies.com/wos_teufel/teu96.gif
Solange du solche Programme auf dein PC hast, wirst Du Dich laufend mit etwas Problematik konfrontieren müssen!

2.
Zitat:
Achtung wichtig!:
Falls Du selber im Logfile Änderungen vorgenommen hast, musst Du durch die Originalbezeichnung ersetzen und so in Script einfügen! sonst funktioniert nicht!
(Benutzerordner, dein Name oder sonstige Änderungen durch X, Stern oder andere Namen ersetzt)
Fixen mit OTL
  • Starte die OTL.exe.
  • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
  • Kopiere folgendes Skript:
Code:
:OTL
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
[2011.10.02 17:06:12 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.10.02 17:06:12 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No CLSID value found.
O4 - HKCU..\Run: [AdobeBridge]  File not found
O8 - Extra context menu item: An vorhandene PDF-Datei anfügen - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html File not found
O8 - Extra context menu item: Linkziel an vorhandene PDF-Datei anhängen - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html File not found
O8 - Extra context menu item: Linkziel in Adobe PDF konvertieren - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - Unable to obtain root file information for disk I:\
O33 - MountPoints2\{8b54bf35-77f3-11e0-8e27-001d7d994e06}\Shell - "" = AutoRun
O33 - MountPoints2\{8b54bf35-77f3-11e0-8e27-001d7d994e06}\Shell\AutoRun\command - "" = G:\setup.exe
[2012.01.05 18:50:01 | 000,000,892 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.01.05 17:57:28 | 000,000,888 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.12.18 22:20:48 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Azureus

:Commands
[purity]
[emptytemp]

3.
erneut einen Scan mit OTL:
  • Doppelklick auf die OTL.exe
  • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
  • Oben findest Du ein Kästchen mit Ausgabe.
    Wähle bitte Standard-Ausgabe
  • Unter Extra-Registrierung wähle bitte Benutze SafeList.
  • Mache Häckchen bei LOP- und Purity-Prüfung.
  • Klicke nun auf Scan links oben.
  • Wenn der Scan beendet wurde werden zwei Logfiles erstellt.
    Du findest die Logfiles auf Deinem Desktop => OTL.txt und Extras.txt
  • Poste die Logfiles in Code-Tags hier in den Thread.

4.
Ich würde gerne noch all deine installierten Programme sehen:
Lade dir das Tool CCleaner herunter
→ Download
installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ Sprache → Deutsch auswählen
dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..."
wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein

Zitat:
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B OTL-Logfile o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]
gruß
kira

bender391 07.01.2012 12:29
Hey Kira,

vielen Dank für deine Antwort

Den I-Explorer habe ich nicht aktuallisiert. Ich nutzt Firefox und kümmere mich desshalb nicht um den I-Explorer.
Das SP1 Update werde ich wohl dann mal machen müssen... Ich bin eigentlich immer nach der Devise vorgegangen "never change a running system". Natürlich habe ich die Sicherheitsupdates immer gemacht, aber mit dem SP1... da gibt es ja nicht nur positive Stimmen.

habe alles nach deine Anleitung gemacht, hier die Log-Files:

Code:
All processes killed
========== OTL ==========
HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache| /E : value set successfully!
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=3\ deleted successfully.
C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll moved successfully.
Registry key HKEY_LOCAL_MACHINE\Software\MozillaPlugins\@tools.google.com/Google Update;version=9\ deleted successfully.
File C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll not found.
C:\Programme\Mozilla Firefox\searchplugins\bing.xml moved successfully.
C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\An vorhandene PDF-Datei anfügen\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Linkziel an vorhandene PDF-Datei anhängen\ deleted successfully.
Registry key HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\Linkziel in Adobe PDF konvertieren\ deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
File  not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b54bf35-77f3-11e0-8e27-001d7d994e06}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8b54bf35-77f3-11e0-8e27-001d7d994e06}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b54bf35-77f3-11e0-8e27-001d7d994e06}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{8b54bf35-77f3-11e0-8e27-001d7d994e06}\ not found.
File G:\setup.exe not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\torrents folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\tmp\AZU1112662638737117700.tmp folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\tmp folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\subs folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\shares folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\rss folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\plugins\mlab folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\plugins\azupnpav folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\plugins\aefeatman_v folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\plugins folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\net folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\logs\save folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\logs folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\dht folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\devices folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus\active folder moved successfully.
C:\Users\Max Power\AppData\Roaming\Azureus folder moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Flash cache emptied: 41620 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Max Power
->Temp folder emptied: 1033332720 bytes
->Java cache emptied: 8823 bytes
->FireFox cache emptied: 657577911 bytes
->Flash cache emptied: 72800 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 3238112 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 937961 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 1.617,00 mb
 
 
OTL by OldTimer - Version 3.2.31.0 log created on 01072012_104732

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...
OLT
Code:
OTL logfile created on: 07.01.2012 10:54:58 - Run 2
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\Max Power\Desktop
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,50 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 65,14% Memory free
7,00 Gb Paging File | 5,64 Gb Available in Paging File | 80,62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 78,12 Gb Total Space | 20,04 Gb Free Space | 25,65% Space Free | Partition Type: NTFS
Drive D: | 390,62 Gb Total Space | 147,66 Gb Free Space | 37,80% Space Free | Partition Type: NTFS
Drive E: | 462,66 Gb Total Space | 243,92 Gb Free Space | 52,72% Space Free | Partition Type: NTFS
Drive I: | 931,51 Gb Total Space | 109,63 Gb Free Space | 11,77% Space Free | Partition Type: NTFS
 
Computer Name: TU-144 | User Name: Max Power | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.01.05 18:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Max Power\Desktop\OTL.exe
PRC - [2012.01.05 15:47:35 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2012.01.03 14:29:52 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Programme\Mozilla Firefox\firefox.exe
PRC - [2011.12.05 20:17:44 | 024,242,056 | ---- | M] (Dropbox, Inc.) -- C:\Users\Max Power\AppData\Roaming\Dropbox\bin\Dropbox.exe
PRC - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.10.15 09:53:00 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\nvtray.exe
PRC - [2011.10.15 09:53:00 | 001,328,960 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\Display\NvXDSync.exe
PRC - [2011.10.15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.07.16 05:31:12 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.03.28 15:15:17 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.03.28 15:15:04 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2011.03.28 15:14:56 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011.02.02 14:08:16 | 000,018,656 | ---- | M] () -- C:\Programme\Autodesk\Content Service\Connect.Service.ContentService.exe
PRC - [2011.01.20 10:20:04 | 000,313,152 | ---- | M] (DT Soft Ltd) -- C:\Programme\DAEMON Tools Lite\DTShellHlp.exe
PRC - [2010.06.07 11:35:35 | 000,618,496 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
PRC - [2010.03.23 12:19:32 | 001,528,616 | ---- | M] (Cisco Systems, Inc.) -- C:\Programme\Cisco Systems\VPN Client\cvpnd.exe
PRC - [2009.08.18 10:29:22 | 001,529,728 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
PRC - [2009.08.18 10:29:22 | 000,183,152 | ---- | M] (Microsoft Corporation) -- C:\Programme\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
PRC - [2009.07.14 02:14:47 | 001,121,280 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2009.07.14 02:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.07.14 02:14:38 | 001,173,504 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Sidebar\sidebar.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.01.05 16:40:12 | 001,670,144 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\a72ed18d2df70f09c57cf914ce591306\Microsoft.VisualBasic.ni.dll
MOD - [2012.01.03 14:29:52 | 002,124,760 | ---- | M] () -- C:\Programme\Mozilla Firefox\mozjs.dll
MOD - [2011.12.24 14:09:00 | 000,997,888 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\cc6713be0e405d5a89a2783103f7e771\System.Management.ni.dll
MOD - [2011.12.24 14:04:43 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll
MOD - [2011.12.24 14:04:40 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll
MOD - [2011.12.24 14:04:38 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll
MOD - [2011.12.24 14:04:34 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll
MOD - [2011.11.23 18:29:26 | 000,008,704 | ---- | M] () -- C:\Users\Max Power\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.7.gadget\GetCoreTempInfoNET.dll
MOD - [2011.11.23 18:29:26 | 000,007,680 | ---- | M] () -- C:\Users\Max Power\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.7.gadget\SystemInfo.dll
MOD - [2011.11.23 18:29:26 | 000,006,144 | ---- | M] () -- C:\Users\Max Power\AppData\Local\Microsoft\Windows Sidebar\Gadgets\All_CPU_Meter_V3.7.gadget\CoreTempReader.dll
MOD - [2011.11.16 09:24:02 | 008,527,008 | ---- | M] () -- C:\Windows\System32\Macromed\Flash\NPSWF32.dll
MOD - [2011.10.15 00:54:26 | 000,265,536 | ---- | M] () -- C:\Programme\NVIDIA Corporation\3D Vision\Nv3DVStreaming.dll
MOD - [2011.03.15 06:13:46 | 004,254,560 | ---- | M] () -- C:\Programme\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
MOD - [2011.03.02 11:40:51 | 000,140,288 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll
MOD - [2010.06.07 11:35:35 | 000,618,496 | ---- | M] () -- C:\Windows\Samsung\PanelMgr\SSMMgr.exe
MOD - [2009.07.14 09:47:12 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2012.01.05 15:47:35 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.11.20 09:58:10 | 001,044,816 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.10.15 00:54:40 | 000,381,248 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2011.06.12 11:15:00 | 031,125,880 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.04.22 13:21:10 | 000,092,592 | ---- | M] (TomTom) [Disabled | Stopped] -- C:\Programme\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2011.03.28 15:15:04 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.02.02 14:08:16 | 000,018,656 | ---- | M] () [Auto | Running] -- C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service)
SRV - [2010.03.23 12:19:32 | 001,528,616 | ---- | M] (Cisco Systems, Inc.) [Auto | Running] -- C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe -- (CVPND)
SRV - [2010.02.19 12:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009.07.14 02:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 02:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2008.06.05 23:41:12 | 001,322,648 | ---- | M] (Autodesk, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Autodesk Shared\Service\AdskNetSrv.exe -- (Autodesk Network Licensing Service)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2012.01.05 15:47:35 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.01.05 15:47:35 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.10.15 09:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011.07.08 00:21:28 | 000,139,880 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2011.05.13 19:36:25 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2011.05.13 19:36:24 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2011.05.06 16:19:01 | 000,218,688 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011.05.06 15:58:13 | 000,464,384 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\netr73.sys -- (netr73)
DRV - [2010.06.17 14:27:02 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.03.23 12:15:36 | 000,308,859 | ---- | M] (Cisco Systems, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\CVPNDRVA.sys -- (CVPNDRVA)
DRV - [2009.07.29 01:55:38 | 000,005,120 | ---- | M] (Samsung Electronics) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\SSPORT.SYS -- (SSPORT)
DRV - [2009.07.14 02:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vmbus.sys -- (vmbus)
DRV - [2009.07.14 02:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\vmstorfl.sys -- (storflt)
DRV - [2009.07.14 02:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\storvsc.sys -- (storvsc)
DRV - [2009.07.14 00:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\vms3cap.sys -- (s3cap)
DRV - [2009.07.14 00:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\VMBusHID.sys -- (VMBusHID)
DRV - [2008.11.16 17:39:44 | 000,131,984 | ---- | M] (Deterministic Networks, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dne2000.sys -- (DNE)
DRV - [2008.11.04 19:21:04 | 000,083,296 | ---- | M] (JMicron Technology Corp.) [Kernel | Boot | Running] -- C:\Windows\system32\DRIVERS\jraid.sys -- (JRAID)
DRV - [2007.01.18 19:28:02 | 000,005,275 | ---- | M] (Cisco Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\CVirtA.sys -- (CVirtA)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 29 3B E7 18 1F AC CC 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}: C:\ProgramData\Swiss Academic Software\Citavi Picker\Firefox [2011.11.23 17:39:58 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.01.03 14:29:53 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 9.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.12.01 19:35:02 | 000,000,000 | ---D | M]
 
[2011.08.08 17:12:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Max Power\AppData\Roaming\mozilla\Extensions
[2011.08.08 17:12:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Max Power\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2011.11.09 16:01:35 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2012.01.03 14:29:52 | 000,121,816 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2011.10.02 17:06:12 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.10.02 17:06:12 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.10.02 17:06:12 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.10.02 17:06:12 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
 
O1 HOSTS File: ([2009.06.10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [Samsung PanelMgr] C:\Windows\Samsung\PanelMgr\SSMMgr.exe ()
O4 - Startup: C:\Users\Max Power\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Max Power\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8 - Extra context menu item: An OneNote s&enden - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - C:\Programme\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Programme\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Programme\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{43EF6A6E-3A35-4BE6-8FC5-DF5E88DA7480}: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Programme\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2011.11.29 11:59:21 | 000,000,000 | ---D | M] - E:\Autodesk -- [ NTFS ]
O32 - AutoRun File - [2011.11.29 12:01:26 | 000,000,000 | ---D | M] - E:\Autodesk_Quantity_Takeoff_2012_German_SLD_Win_32Bit -- [ NTFS ]
O32 - Unable to obtain root file information for disk I:\
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.01.07 10:47:32 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.01.07 10:18:43 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Documents\Autodesk Showcase 2012
[2012.01.07 00:54:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
[2012.01.07 00:54:07 | 000,000,000 | ---D | C] -- C:\Program Files\Defraggler
[2012.01.05 18:46:45 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\Max Power\Desktop\OTL.exe
[2012.01.05 16:00:40 | 000,000,000 | ---D | C] -- C:\Users\Max Power\AppData\Roaming\Malwarebytes
[2012.01.05 16:00:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.01.05 16:00:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.01.05 16:00:33 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012.01.05 16:00:33 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.01.05 15:40:49 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzres.dll
[2012.01.04 11:15:37 | 000,719,872 | ---- | C] (Abysmal Software) -- C:\Windows\System32\devil.dll
[2012.01.04 11:15:37 | 000,369,152 | ---- | C] (The Public) -- C:\Windows\System32\avisynth.dll
[2012.01.04 11:15:37 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\System32\yv12vfw.dll
[2012.01.04 11:15:37 | 000,070,656 | ---- | C] (www.helixcommunity.org) -- C:\Windows\System32\i420vfw.dll
[2012.01.04 11:15:36 | 000,000,000 | ---D | C] -- C:\Program Files\AviSynth 2.5
[2012.01.04 11:12:56 | 000,278,528 | ---- | C] (Real Networks, Inc) -- C:\Windows\System32\pncrt.dll
[2012.01.04 11:12:56 | 000,216,064 | RHS- | C] (MONOGRAM Multimedia, s.r.o.) -- C:\Windows\System32\nbDX.dll
[2012.01.04 11:12:56 | 000,031,232 | RHS- | C] (Hans Mayerl) -- C:\Windows\System32\msfDX.dll
[2012.01.04 11:12:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPER © - by eRightSoft
[2012.01.04 11:12:55 | 000,186,880 | RHS- | C] (RadLight) -- C:\Windows\System32\RLOgg.ax
[2012.01.04 11:12:55 | 000,179,200 | RHS- | C] (Gabest) -- C:\Windows\System32\DiracSplitter.ax
[2012.01.04 11:12:55 | 000,169,472 | RHS- | C] (Gabest) -- C:\Windows\System32\MatroskaDX.ax
[2012.01.04 11:12:55 | 000,163,328 | RHS- | C] (Gabest) -- C:\Windows\System32\flvDX.dll
[2012.01.04 11:12:55 | 000,161,792 | RHS- | C] (Gabest) -- C:\Windows\System32\RealMediaDX.ax
[2012.01.04 11:12:55 | 000,092,672 | RHS- | C] (RadLight) -- C:\Windows\System32\RLVorbisDec.ax
[2012.01.04 11:12:55 | 000,090,112 | RHS- | C] (-) -- C:\Windows\System32\TTADSSplitter.ax
[2012.01.04 11:12:55 | 000,090,112 | RHS- | C] (-) -- C:\Windows\System32\TTADSDecoder.ax
[2012.01.04 11:12:55 | 000,067,584 | RHS- | C] (RadLight, LLC) -- C:\Windows\System32\RLTheoraDec.ax
[2012.01.04 11:12:54 | 000,123,904 | RHS- | C] (CoreCodec) -- C:\Windows\System32\AVCDX.ax
[2012.01.04 11:11:48 | 000,000,000 | ---D | C] -- C:\Program Files\eRightSoft
[2012.01.03 23:28:41 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Desktop\Ansichten
[2012.01.02 12:30:01 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Desktop\Bewerbung Leipzig
[2011.12.24 13:38:36 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mstime.dll
[2011.12.24 13:38:36 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2011.12.24 13:38:36 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2011.12.24 13:38:36 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2011.12.24 13:38:36 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2011.12.24 13:38:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2011.12.24 13:38:36 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2011.12.24 13:38:36 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2011.12.24 13:38:36 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2011.12.24 13:38:36 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2011.12.24 13:38:36 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2011.12.24 13:38:35 | 001,638,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2011.12.24 13:37:15 | 003,957,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2011.12.24 13:37:15 | 003,901,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2011.12.24 13:37:13 | 002,340,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2011.12.24 13:37:10 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EncDec.dll
[2011.12.24 13:37:04 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2011.12.21 23:42:57 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Documents\dvd
[2011.12.21 23:40:36 | 000,000,000 | ---D | C] -- C:\Users\Max Power\AppData\Roaming\DVD Flick
[2011.12.21 23:40:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVD Flick
[2011.12.21 23:40:27 | 000,040,960 | ---- | C] (vbAccelerator) -- C:\Windows\System32\ssubtmr6.dll
[2011.12.21 23:40:27 | 000,036,864 | ---- | C] (Robdogg Inc.) -- C:\Windows\System32\trayicon_handler.ocx
[2011.12.21 23:40:27 | 000,028,672 | ---- | C] (-) -- C:\Windows\System32\mousewheel.ocx
[2011.12.15 20:17:28 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Documents\FIFA 12
[2011.12.15 16:24:25 | 000,000,000 | ---D | C] -- C:\Users\Max Power\Desktop\Neuer Ordner
[2011.12.11 22:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Navisworks 2012
[2011.12.11 22:17:48 | 000,000,000 | ---D | C] -- C:\Users\Max Power\AppData\Roaming\Autodesk Navisworks Exporters 2012
[2011.12.11 22:17:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Autodesk Navisworks Exporters 2012
[2011.10.24 16:21:19 | 000,024,920 | ---- | C] ( ) -- C:\Windows\System32\implode.dll
[1 C:\Users\Max Power\Documents\*.tmp files -> C:\Users\Max Power\Documents\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.01.07 10:55:02 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.01.07 10:55:02 | 000,014,016 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.07 10:49:55 | 000,000,472 | ---- | M] () -- C:\Windows\tasks\SDMsgUpdate (TE).job
[2012.01.07 10:49:46 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.01.07 10:49:39 | 2817,384,448 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.07 08:31:28 | 000,000,500 | ---- | M] () -- C:\Windows\tasks\Allplan AutoUpdate 2011-1.job
[2012.01.05 21:14:26 | 000,000,458 | RHS- | M] () -- C:\ProgramData\ntuser.pol
[2012.01.05 19:05:16 | 000,302,592 | ---- | M] () -- C:\Users\Max Power\Desktop\325sw5ii.exe
[2012.01.05 18:48:09 | 000,000,000 | ---- | M] () -- C:\Users\Max Power\defogger_reenable
[2012.01.05 18:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Max Power\Desktop\OTL.exe
[2012.01.05 18:46:15 | 000,050,477 | ---- | M] () -- C:\Users\Max Power\Desktop\Defogger.exe
[2012.01.05 16:00:34 | 000,001,067 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.01.05 15:47:35 | 000,138,192 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2012.01.05 15:47:35 | 000,066,616 | ---- | M] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2012.01.05 15:44:51 | 000,700,342 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.01.05 15:44:51 | 000,655,054 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.01.05 15:44:51 | 000,149,138 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.01.05 15:44:51 | 000,121,926 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.01.03 23:24:29 | 008,523,776 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt3BS.rvt
[2012.01.03 23:22:38 | 000,066,823 | ---- | M] () -- C:\Users\Max Power\Documents\Variante1.dwg
[2012.01.03 23:21:44 | 000,061,464 | ---- | M] () -- C:\Users\Max Power\Documents\Variante1.bak
[2012.01.03 23:19:37 | 000,062,424 | ---- | M] () -- C:\Users\Max Power\Documents\Variante2.dwg
[2012.01.03 23:17:13 | 000,001,935 | ---- | M] () -- C:\Users\Max Power\Documents\Variante2.pdf
[2012.01.03 23:10:45 | 000,067,672 | ---- | M] () -- C:\Users\Max Power\Documents\Variante3.dwg
[2012.01.03 22:58:23 | 000,067,160 | ---- | M] () -- C:\Users\Max Power\Documents\Variante2.bak
[2012.01.03 22:42:53 | 000,000,202 | -H-- | M] () -- C:\Users\Max Power\Documents\Zeichnung1.dwl2
[2012.01.03 22:42:53 | 000,000,052 | -H-- | M] () -- C:\Users\Max Power\Documents\Zeichnung1.dwl
[2012.01.03 22:17:01 | 008,523,776 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt3BS.0001.rvt
[2012.01.03 22:16:44 | 003,711,271 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwg
[2012.01.03 22:16:44 | 000,000,202 | -H-- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwl2
[2012.01.03 22:16:44 | 000,000,052 | -H-- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwl
[2012.01.03 21:00:32 | 001,255,379 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen_neu.xml
[2012.01.03 17:39:41 | 003,164,939 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.bak
[2012.01.03 16:50:22 | 000,083,366 | ---- | M] () -- C:\Users\Max Power\Desktop\pj_22889707.pdf
[2012.01.03 16:49:57 | 000,083,524 | ---- | M] () -- C:\Users\Max Power\Desktop\pj_22114942.pdf
[2012.01.03 16:49:04 | 000,082,118 | ---- | M] () -- C:\Users\Max Power\Desktop\pj_22492949.pdf
[2012.01.03 16:48:00 | 000,083,390 | ---- | M] () -- C:\Users\Max Power\Desktop\pj_23325498.pdf
[2012.01.02 13:02:44 | 000,000,059 | ---- | M] () -- C:\Windows\wpd99.drv
[2011.12.28 16:31:26 | 000,001,456 | ---- | M] () -- C:\Users\Max Power\AppData\Local\Adobe Für Web speichern 12.0 Prefs
[2011.12.25 09:47:27 | 003,899,616 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.12.16 13:52:46 | 000,578,820 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen1.xml
[2011.12.16 13:10:05 | 000,000,727 | ---- | M] () -- C:\Users\Max Power\Documents\acad.err
[2011.12.15 20:14:23 | 000,000,713 | ---- | M] () -- C:\Users\Public\Desktop\Fifa 12.lnk
[2011.12.14 22:49:25 | 000,413,696 | ---- | M] () -- C:\Users\Max Power\Documents\D_Roadway.rfa
[2011.12.14 22:49:21 | 000,573,440 | ---- | M] () -- C:\Users\Max Power\Documents\D_Deck.rfa
[2011.12.14 22:49:18 | 000,397,312 | ---- | M] () -- C:\Users\Max Power\Documents\D_Barrier Right.rfa
[2011.12.14 22:49:13 | 000,548,864 | ---- | M] () -- C:\Users\Max Power\Documents\D_Barrier Left.rfa
[2011.12.14 22:49:08 | 000,442,368 | ---- | M] () -- C:\Users\Max Power\Documents\D_Road.rfa
[2011.12.14 22:48:55 | 011,358,208 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt1.rvt
[2011.12.14 22:24:03 | 011,296,768 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt1.0003.rvt
[2011.12.14 21:50:33 | 010,891,264 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt1.0002.rvt
[2011.12.14 20:47:43 | 008,880,128 | ---- | M] () -- C:\Users\Max Power\Documents\Projekt1.0001.rvt
[2011.12.14 19:45:52 | 000,650,245 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.xml
[2011.12.12 00:08:00 | 009,031,680 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_sachsen1.rvt
[2011.12.11 21:41:49 | 000,003,424 | ---- | M] () -- C:\Users\Max Power\Documents\Brücke_Sachsen_recover.dwg
[2011.12.10 15:24:06 | 000,020,464 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[1 C:\Users\Max Power\Documents\*.tmp files -> C:\Users\Max Power\Documents\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.01.05 21:14:26 | 000,000,458 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2012.01.05 19:05:13 | 000,302,592 | ---- | C] () -- C:\Users\Max Power\Desktop\325sw5ii.exe
[2012.01.05 18:48:09 | 000,000,000 | ---- | C] () -- C:\Users\Max Power\defogger_reenable
[2012.01.05 18:46:09 | 000,050,477 | ---- | C] () -- C:\Users\Max Power\Desktop\Defogger.exe
[2012.01.05 16:00:34 | 000,001,067 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012.01.04 11:15:37 | 000,032,256 | ---- | C] () -- C:\Windows\System32\AVSredirect.dll
[2012.01.04 11:12:55 | 000,175,104 | RHS- | C] () -- C:\Windows\System32\CoreAAC.ax
[2012.01.04 11:12:55 | 000,121,344 | RHS- | C] () -- C:\Windows\System32\TAKDSDecoder.ax
[2012.01.04 11:12:55 | 000,120,832 | RHS- | C] () -- C:\Windows\System32\MPCDx.ax
[2012.01.04 11:12:55 | 000,107,520 | RHS- | C] () -- C:\Windows\System32\TAKDSDecoder.dll
[2012.01.04 11:12:55 | 000,107,520 | RHS- | C] () -- C:\Windows\System32\RLMPCDec.ax
[2012.01.04 11:12:55 | 000,097,280 | RHS- | C] () -- C:\Windows\System32\FLACDX.ax
[2012.01.04 11:12:55 | 000,070,656 | RHS- | C] () -- C:\Windows\System32\RLAPEDec.ax
[2012.01.04 11:12:55 | 000,051,712 | RHS- | C] () -- C:\Windows\System32\RLSpeexDec.ax
[2012.01.04 11:12:54 | 000,227,328 | RHS- | C] () -- C:\Windows\System32\ac3DX.ax
[2012.01.04 11:12:54 | 000,081,920 | RHS- | C] () -- C:\Windows\System32\aac_parser.ax
[2012.01.03 23:17:13 | 000,001,935 | ---- | C] () -- C:\Users\Max Power\Documents\Variante2.pdf
[2012.01.03 22:42:53 | 000,067,672 | ---- | C] () -- C:\Users\Max Power\Documents\Variante3.dwg
[2012.01.03 22:42:53 | 000,067,160 | ---- | C] () -- C:\Users\Max Power\Documents\Variante2.bak
[2012.01.03 22:42:53 | 000,066,823 | ---- | C] () -- C:\Users\Max Power\Documents\Variante1.dwg
[2012.01.03 22:42:53 | 000,062,424 | ---- | C] () -- C:\Users\Max Power\Documents\Variante2.dwg
[2012.01.03 22:42:53 | 000,061,464 | ---- | C] () -- C:\Users\Max Power\Documents\Variante1.bak
[2012.01.03 22:42:53 | 000,000,202 | -H-- | C] () -- C:\Users\Max Power\Documents\Zeichnung1.dwl2
[2012.01.03 22:42:53 | 000,000,052 | -H-- | C] () -- C:\Users\Max Power\Documents\Zeichnung1.dwl
[2012.01.03 22:16:56 | 008,523,776 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt3BS.rvt
[2012.01.03 22:16:56 | 008,523,776 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt3BS.0001.rvt
[2012.01.03 21:00:30 | 001,255,379 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen_neu.xml
[2012.01.03 20:43:52 | 000,000,202 | -H-- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwl2
[2012.01.03 20:43:52 | 000,000,052 | -H-- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwl
[2012.01.03 16:50:22 | 000,083,366 | ---- | C] () -- C:\Users\Max Power\Desktop\pj_22889707.pdf
[2012.01.03 16:49:57 | 000,083,524 | ---- | C] () -- C:\Users\Max Power\Desktop\pj_22114942.pdf
[2012.01.03 16:49:04 | 000,082,118 | ---- | C] () -- C:\Users\Max Power\Desktop\pj_22492949.pdf
[2012.01.03 16:48:00 | 000,083,390 | ---- | C] () -- C:\Users\Max Power\Desktop\pj_23325498.pdf
[2011.12.16 13:52:45 | 000,578,820 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen1.xml
[2011.12.15 20:14:23 | 000,000,713 | ---- | C] () -- C:\Users\Public\Desktop\Fifa 12.lnk
[2011.12.15 20:14:23 | 000,000,713 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fifa 12.lnk
[2011.12.14 22:49:24 | 000,413,696 | ---- | C] () -- C:\Users\Max Power\Documents\D_Roadway.rfa
[2011.12.14 22:49:20 | 000,573,440 | ---- | C] () -- C:\Users\Max Power\Documents\D_Deck.rfa
[2011.12.14 22:49:17 | 000,397,312 | ---- | C] () -- C:\Users\Max Power\Documents\D_Barrier Right.rfa
[2011.12.14 22:49:12 | 000,548,864 | ---- | C] () -- C:\Users\Max Power\Documents\D_Barrier Left.rfa
[2011.12.14 22:49:07 | 000,442,368 | ---- | C] () -- C:\Users\Max Power\Documents\D_Road.rfa
[2011.12.14 20:47:37 | 011,358,208 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt1.rvt
[2011.12.14 20:47:37 | 011,296,768 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt1.0003.rvt
[2011.12.14 20:47:37 | 010,891,264 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt1.0002.rvt
[2011.12.14 20:47:37 | 008,880,128 | ---- | C] () -- C:\Users\Max Power\Documents\Projekt1.0001.rvt
[2011.12.12 00:07:54 | 009,031,680 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_sachsen1.rvt
[2011.12.11 22:08:24 | 000,650,245 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.xml
[2011.12.11 21:41:49 | 000,003,424 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen_recover.dwg
[2011.12.11 13:56:52 | 003,711,271 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.dwg
[2011.12.11 13:56:52 | 003,164,939 | ---- | C] () -- C:\Users\Max Power\Documents\Brücke_Sachsen.bak
[2011.11.23 18:33:07 | 000,000,412 | ---- | C] () -- C:\Users\Max Power\AppData\Roaming\All CPU Meter_Settings.ini
[2011.11.13 15:37:44 | 000,005,120 | ---- | C] () -- C:\Users\Max Power\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.11.13 14:46:00 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2011.11.09 20:56:00 | 000,086,016 | ---- | C] () -- C:\Windows\System32\custmon32.dll
[2011.10.15 00:54:52 | 000,321,856 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2011.09.25 09:28:41 | 000,002,828 | -HS- | C] () -- C:\Windows\System32\KGyGaAvL.sys
[2011.09.01 17:04:13 | 000,000,132 | ---- | C] () -- C:\Users\Max Power\AppData\Roaming\Adobe BMP Format CS5 Prefs
[2011.07.26 20:30:17 | 000,000,088 | RHS- | C] () -- C:\ProgramData\A107F471DF.sys
[2011.07.26 20:30:16 | 000,002,828 | -HS- | C] () -- C:\ProgramData\KGyGaAvL.sys
[2011.07.23 07:33:44 | 000,197,120 | ---- | C] () -- C:\Windows\patchw32.dll
[2011.07.22 13:57:35 | 000,484,656 | ---- | C] () -- C:\Windows\ssndii.exe
[2011.07.10 19:38:32 | 000,000,072 | ---- | C] () -- C:\Windows\QFP.ini
[2011.06.15 21:18:48 | 000,000,028 | ---- | C] () -- C:\Windows\pdf995.ini
[2011.06.15 21:16:17 | 000,000,059 | ---- | C] () -- C:\Windows\wpd99.drv
[2011.06.15 21:16:16 | 000,051,716 | ---- | C] () -- C:\Windows\System32\pdf995mon.dll
[2011.06.13 21:12:01 | 000,000,090 | -HS- | C] () -- C:\Windows\cnerolf.bin
[2011.05.28 16:30:16 | 000,001,456 | ---- | C] () -- C:\Users\Max Power\AppData\Local\Adobe Für Web speichern 12.0 Prefs
[2011.05.21 10:45:15 | 000,000,057 | ---- | C] () -- C:\Windows\fs9configurator.ini
[2011.05.13 19:36:25 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2011.05.13 19:36:24 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys
[2011.05.10 21:24:35 | 000,000,090 | -HS- | C] () -- C:\Windows\cnerolf.dat
[2011.05.06 15:58:31 | 000,200,704 | ---- | C] () -- C:\Windows\System32\UpdateDriver.exe
[2011.05.06 15:58:26 | 000,005,224 | ---- | C] () -- C:\Windows\System32\ucuiinfo.ini
[2011.05.06 15:56:43 | 000,080,416 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2011.04.09 17:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\System32\xlive.dll.cat
[2010.03.23 12:26:48 | 000,201,512 | ---- | C] () -- C:\Windows\System32\vpnapi.dll
[2009.07.14 09:47:43 | 000,700,342 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009.07.14 09:47:43 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009.07.14 09:47:43 | 000,149,138 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009.07.14 09:47:43 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 05:33:53 | 003,899,616 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 03:05:48 | 000,655,054 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 03:05:48 | 000,121,926 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 01:19:49 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
[2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2008.06.04 09:23:14 | 000,026,624 | ---- | C] () -- C:\Windows\System32\ssp7ml3.dll
[2005.02.25 00:59:49 | 000,318,014 | ---- | C] () -- C:\Windows\System32\flt1chk4.dll
[2002.03.13 23:46:46 | 000,053,248 | ---- | C] () -- C:\Windows\System32\zlib.dll
[1997.06.14 01:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\System32\iyvu9_32.dll
 
========== LOP Check ==========
 
[2011.06.21 15:39:31 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\4X_DATA
[2011.07.23 07:53:54 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Atari
[2012.01.07 10:18:50 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Autodesk
[2011.12.11 22:17:48 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Autodesk Navisworks Exporters 2012
[2011.10.09 20:15:43 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Bridge!
[2011.08.09 18:40:25 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Canneverbe Limited
[2011.07.26 21:06:50 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
[2011.11.29 09:44:42 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\DAEMON Tools Lite
[2012.01.07 10:50:53 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Dropbox
[2011.11.13 17:24:40 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Duden
[2011.08.09 18:35:42 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\DVDVideoSoft
[2011.07.13 21:02:20 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Graphisoft
[2011.06.08 08:52:24 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\HD Tune Pro
[2011.12.16 14:45:36 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\ICQ
[2011.09.18 16:29:12 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\iJoysoft
[2011.11.27 19:56:32 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Nemetschek
[2011.06.15 21:18:48 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\pdf995
[2011.11.09 13:45:46 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\SmartDraw
[2011.08.01 16:14:42 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\SPORE
[2011.05.27 23:33:41 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2011.11.23 18:01:54 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Swiss Academic Software
[2011.08.08 17:12:15 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\TomTom
[2011.11.23 15:16:00 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Ubisoft
[2011.11.13 15:37:25 | 000,000,000 | ---D | M] -- C:\Users\Max Power\AppData\Roaming\Video DVD Maker FREE
[2012.01.07 08:31:28 | 000,000,500 | ---- | M] () -- C:\Windows\Tasks\Allplan AutoUpdate 2011-1.job
[2011.12.26 16:26:41 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2012.01.07 10:49:55 | 000,000,472 | ---- | M] () -- C:\Windows\Tasks\SDMsgUpdate (TE).job
[2011.10.24 16:25:26 | 000,000,646 | ---- | M] () -- C:\Windows\Tasks\WebContent AutoUpdate 2011.job
 
========== Purity Check ==========
 
 

< End of report >
Extras
Code:
OTL Extras logfile created on: 07.01.2012 10:54:58 - Run 2
OTL by OldTimer - Version 3.2.31.0    Folder = C:\Users\Max Power\Desktop
 Ultimate Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,50 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 65,14% Memory free
7,00 Gb Paging File | 5,64 Gb Available in Paging File | 80,62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 78,12 Gb Total Space | 20,04 Gb Free Space | 25,65% Space Free | Partition Type: NTFS
Drive D: | 390,62 Gb Total Space | 147,66 Gb Free Space | 37,80% Space Free | Partition Type: NTFS
Drive E: | 462,66 Gb Total Space | 243,92 Gb Free Space | 52,72% Space Free | Partition Type: NTFS
Drive I: | 931,51 Gb Total Space | 109,63 Gb Free Space | 11,77% Space Free | Partition Type: NTFS
 
Computer Name: TU-144 | User Name: Max Power | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "C:\Program Files\Microsoft Office\Office14\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" ()
Directory [Bridge] -- E:\Programme\Adobe\Adobe Bridge CS5\Bridge.exe "%L" (Adobe Systems, Inc.)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" ()
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{02250F8E-3EF9-41D3-9215-889DDA4A414B}_is1" = EIRESIM - Alicante Ultimate
"{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86
"{04B34E21-5BEE-3D2B-8D3D-E3E80D253F64}" = Microsoft Visual C++ 2008 x86 ATL Runtime 9.0.30729
"{0513EE35-E0FB-4166-B663-BD1AE3A803DE}" = Anno 1404
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Windows Live ID Sign-in Assistant
"{086F9A69-CD39-4893-A9FB-D3A0634CE3F7}" = Autodesk Content Service
"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86
"{0976C02C-0F73-447D-9657-5318C0C45A05}" = aerosoft's - Budapest 2007 - FS2004
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{0D2DBE8A-43D0-7830-7AE7-CA6C99A832E7}" = Adobe Community Help
"{0D9CF86F-BA43-4159-A8AA-3A7C5FF5B00A}" = Bridge Modeler for AutoCAD® Civil 3D® 2012 on AutoCAD Civil 3D 2012 - German (Standard)
"{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86
"{1296225E-030B-4979-B515-323CE0FC7582}" = aerosoft's - Mallorca X for FS2004
"{14866AAD-1F23-39AC-A62B-7091ED1ADE64}" = Microsoft Visual C++ 2008 x86 CRT Runtime 9.0.30729
"{15FA5ED6-2F98-4B5E-AF0B-18E5F4723FAD}_is1" = Cities In Motion
"{15FEDA5F-141C-4127-8D7E-B962D1742728}" = Adobe Photoshop CS5
"{164360E5-0AAD-48AD-8A36-3F8A859FAB6F}" = PMDG747_400F
"{196BB40D-1578-3D01-B289-BEFC77A11A1E}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
"{1EC65D1D-3911-4F7D-8B6A-63C69EDBFC6E}" = EditVoicepack
"{1F121516-E175-4E0B-AC4D-42DD5164E396}_is1" = Need for Speed: The Run
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{24FF088D-CDCF-480C-8A4B-98F14A54CAA8}" = Autodesk Material Library Low Resolution Image Library 2012
"{26A24AE4-039D-4CA4-87B4-2F83216025FF}" = Java(TM) 6 Update 25
"{27AA1674-74F1-43BB-8491-CB5C048541E2}" = GeoMedia Professional
"{299C0434-4F4E-341F-A916-4E07AEB35E79}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime
"{2F17C376-EDB7-455B-BC79-171F02F30CAE}" = Skysoft Simulation ZPMS 2011
"{33A2107C-7189-40B4-8AF3-043E016AE49B}" = aerosoft's - Keflavik
"{34BDC9DA-9320-491C-AA40-B0D98A0EBA9C}" = aerosoft's - Mega Airport Frankfurt - FS2004
"{36E015FF-26E3-470A-9631-0786D402D6C0}" = Autodesk Quantity Takeoff 2012
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = Gigabyte Raid Configurer
"{3A778807-F7E8-4829-973F-733B2277A67A}" = Skysoft Simulation ZUJZ - Jiuzhai Huanglong Airport
"{3A9FC03D-C685-4831-94CF-4EDFD3749497}" = Microsoft SQL Server Compact 3.5 SP2 ENU
"{3ABDFABB-FA48-4BCA-9ECC-3EFC1E5143D2}" = aerosoft's - German Airports 2 - Dortmund
"{3B0DBBE5-89F3-4F12-87D8-A5A24E98A402}" = Revit Extensions
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{3D9CF3CA-3AB0-4A82-9853-D7C43FD1D775}" = ANNO 1404
"{3F48E4DD-08FB-4B2A-9100-EEA4EFBB77F6}" = Revit Extensions for Autodesk Revit Structure 2010
"{3FA365DF-2D68-45ED-8F83-8C8A33E65143}" = Apple Application Support
"{434D0820-3AA6-493A-80B9-301000028501}" = DiRT2
"{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"{434D0FA0-AB8C-497F-B30A-7A1000018201}" = DiRT 3
"{45C5C113-AD43-414B-867D-7C0AF54276CB}" = Duden-Rechtschreibprüfung PLUS
"{46464A5D-7D14-41E3-9C26-E3C186F37D84}" = aerosoft's - German Airports 2 - Cologne-Bonn  - FS2004
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B90093A-5D9C-3956-8ABB-95848BE6EFAD}" = Microsoft Visual C++ 2008 x86 OpenMP Runtime 9.0.30729
"{4C4494AC-E3E4-4675-8973-1B6403429C02}" = aerosoft's - Lissabon 2008
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{4CFCC6FD-AEA2-4208-99A6-45CBF9DFFD82}" = Real Environment Xtreme
"{50AE4FAB-3A8B-4640-A607-987BDB8FB863}" = aerosoft's - Nice Cote dAzur
"{51D199F4-5593-4BC9-B2A5-BB1CDE0C894A}" = aerosoft's - Mega Airport Paris CDG
"{55255E60-CD59-11DF-BD3B-0800200C9A66}" = Übungsprojekt Tutorial Architektur (mit Modell)
"{555C7DA8-8A43-4A5B-A5FB-137C07AA81D0}" = aerosoft's - Approaching Innsbruck 2004
"{5783F2D7-0111-0409-0010-0060B0CE6BBA}" = Autodesk CAD Manager Tools
"{5783F2D7-A000-0407-0002-0060B0CE6BBA}" = AutoCAD Civil 3D 2012
"{5783F2D7-A000-0407-1002-0060B0CE6BBA}" = AutoCAD Civil 3D 2012 Language Pack - Deutsch
"{5783F2D7-A001-0407-0002-0060B0CE6BBA}" = AutoCAD 2012 - Deutsch
"{5783F2D7-A001-0407-1002-0060B0CE6BBA}" = AutoCAD 2012 Language Pack - Deutsch
"{5783F2D7-A028-0409-0000-0060B0CE6BBA}" = DWG TrueView 2012
"{5A3C1721-F8ED-11E0-8AFB-B8AC6F97B88E}" = Google Earth
"{5C81B189-5456-40C4-9313-7FE6FA6DD64C}" = Duden-Bibliothek
"{5EDF1B95-251E-0409-8232-38B90D666EE2}" = Autodesk Navisworks 2012 32 bit Exporter Plug-ins English Language Pack
"{5EDF1B95-251E-406A-8232-38B90D666EE2}" = Autodesk Navisworks 2012 32 bit Exporter Plug-ins
"{608B7A43-D176-4309-8999-D772F9A01CD4}" = aerosoft's - German Airports 2 - Muenster-Osnabrueck
"{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86
"{65420DC9-306E-4371-905F-F4DC3B418E52}" = Autodesk Material Library Base Resolution Image Library 2012
"{65C68BC0-5F5D-4470-8E04-00CA4606C26C}" = Revit Extensions
"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6B2207AE-45BA-40AF-A9FF-7866C8611ED5}" = PMDGMD11_FS9_GEF_WOF1
"{6C06AC26-DBD1-46E5-9863-33E7633566E5}" = ActiveSky Version 6 and ActiveSky Graphics
"{705F27B3-5B35-4EC4-A258-BF16D83BE22B}" = aerosoft's - German Airports 2 - Leipzig  - FS2004
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser und SDK
"{7262D0C8-41CC-4F75-8383-A6C7C61D7FC6}" = Nemetschek SoftLock 2006
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7346B4A0-1200-0100-0409-705C0D862004}" = Revit Architecture 2012
"{7346B4A0-1200-0101-0409-705C0D862004}" = Revit Architecture 2012 Language Pack - English
"{7346B4A0-1200-0200-0407-705C0D862004}" = Revit Structure 2012
"{7346B4A0-1200-0201-0407-705C0D862004}" = Revit Structure 2012 Language Pack - Deutsch
"{7543FC90-B258-46C5-8238-507BB14D5139}" = Skysoft Simulation ZULZ - Luzhou Lantian Airport
"{7578ADEA-D65F-4C89-A249-B1C88B6FFC20}" = ICQ7.5
"{76285C16-411A-488A-BCE3-C83CB933D8CF}" = Battlefield 3™
"{76DAEC83-AF7B-333C-8A53-83D7C7D39199}" = Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}" = Microsoft Visual Basic Power Packs 3.0
"{7D606567-5047-451A-B49E-29FCB6012B4E}" = Microsoft Flight Simulator X: Acceleration
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7F6D7FD9-648D-4DD9-BB6E-3990C675ECA4}" = NVIDIA PhysX
"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 3.3.0
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8440C171-F033-4410-B099-5BE38273A13B}" = CLOUD9 LosAngeles 1.01
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8B7917E0-AF55-4E8A-9473-017F0AA03AC8}" = QuickTime
"{8BA8CE06-0C92-4A44-9924-2614DCD77F20}" = PMDG MD-11 FS9
"{8E87B944-4815-3C5E-947F-5035C9F64362}" = Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU
"{8F0837C2-EE09-4903-88F3-1976FE7FFF4E}" = Autodesk Material Library 2012
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90140000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2010
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2010
"{907B4640-266B-4A21-92FB-CD1A86CD0F63}" = RollerCoaster Tycoon 3
"{92617838-E49F-4184-B96C-64815B9B4697}" = PMDGMD11_FS9_GEF_GRF2
"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86
"{939D29FC-B82D-42A7-BB1E-8E3F121505CC}" = Autodesk Revit Structure 2010
"{951B0F30-9F1A-4BF6-B3DA-99EB0E917B1C}" = FARO LS 1.1.406.58
"{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"{96879817-0731-44B2-952A-E2D64C9BFDED}" = Aerosoft's - Discus Glider X
"{974518D4-7C04-4B2D-AADC-0D4F303E275F}" = Crystal Reports Runtime
"{97679567-0095-464E-B5F2-E218A1CF3421}" = PMDG747_400 Queen of the Skies
"{9A0906C7-D472-4C22-8D12-11D6AB2819E4}" = aerosoft's - German Airports 3 - Bremen
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DF0196F-B6B8-4C3A-8790-DE42AA530101}" = SPORE™
"{A0663B00-3376-42C1-B719-995B9CB44DEF}" = Aerosoft's - Hawaii Dillingham X
"{A07B2C21-863B-47AB-AE7E-20BB00BD7D33}" = ANNO 1404 - Venedig
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A49BDCBE-590E-43A6-AB77-7C40E499B7C1}" = Autodesk Design Review 2012
"{A624F5D8-DEBF-4827-86E9-7DE67BC750C4}" = Skysoft Simulation ZSOF - Hefei Luogang Int'l
"{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5
"{A91EDDC0-CD59-11DF-BD3B-0800200C9A66}" = Übungsprojekt Tutorial Ingenieurbau (mit Modell)
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A981F05D-AFD4-4E7C-B4DB-FF6EE33F8DCE}" = PMDGMD11_FS9_PWF_FXF
"{AA4A4B2C-0465-3CF8-BA76-27A027D8ACAB}" = Microsoft Visual Studio Tools for Applications 2.0 - ENU
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Deutsch
"{B0BF7057-6869-4E4B-920C-EA2A58DA07F0}" = Cisco Systems VPN Client 5.0.07.0290
"{B2BDE61B-0407-47F5-8890-8328102F0E3B}" = Autodesk QTO Language Pack - Deutsch
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 285.62
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 285.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.11.0621
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.2.24.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B42E259C-E4D4-37F1-A1B2-EB9C4FC5A04D}" = Microsoft Visual C++ 2008 x86 MFC Runtime 9.0.30729
"{B48E264C-C8CD-4617-B0BE-46E977BAD694}" = ANNO 2070
"{B5751715-EC10-43D9-8C95-62E1368433EF}" = Autodesk Material Library Medium Resolution Image Library 2012
"{B93DCF58-AA57-41EC-8D69-B05C66C6312D}_is1" = SUPER © v2011.build.49 (July 1st, 2011) Version v2011.build.49
"{C2FBA9F9-4942-4254-877C-3EB2B731DD0C}_is1" = Bridge Repack by Der Jok3r Version 1.00
"{C732C76D-0010-1033-99BD-DDB8254216B8}" = Autodesk Showcase 2012 32-bit - English
"{C732C76D-7C3D-4DEB-99BD-DDB8254216B8}" = Autodesk Showcase 2012 32-bit - English
"{C8948D5A-ECB5-4EF0-AEA0-8564E3094DC4}" = Revit Extensions
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{CB131247-7869-47E1-9969-B29567C9B106}_is1" = LatinVFR - Crown Point Update v1
"{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86
"{D1D50FD9-9867-4139-858E-0C0448CECBA9}" = aerosoft's - German Airports 1 - Stuttgart
"{D234EAC0-7D49-492F-97EC-8FA09FD7C1C4}" = aerosoft's - German Airports 3 - Hamburg
"{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1" = Rapture3D 2.4.8 Game
"{D41CAD6D-DB4C-4D7C-BABA-D1A4B1599741}" = aerosoft's - German Airports 3-Berlin Tegel
"{D4FB2856-E6EB-4864-A241-4587ED21A11B}" = aerosoft's - Brussels 2007
"{D641BAA9-0070-46A5-A313-21933A211851}" = Revit Extensions
"{D86B6E8D-F224-4BB6-B959-C8EDC5300B5D}" = aerosoft's - Mega Airport Stockholm Arlanda
"{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86
"{DE3A9DC5-9A5D-6485-9662-347162C7E4CA}" = Adobe Media Player
"{DF71C8D1-9258-4504-89AF-BA80748CC0D2}" = Nemetschek Allplan 2011
"{E12C6653-1FF0-4686-ADB8-589C13AE761F}" = Citavi
"{E552C39C-C70E-464F-9733-8311331BDD90}" = Autodesk Inventor Fusion Plugin Language Pack for AutoCAD 2012
"{EA926717-CE5A-4CB4-AB21-9E6E9565A458}" = RCT3 Soaked
"{EAB3AC1A-68FF-486B-9C6B-E48EBB4B05CC}" = Autodesk Inventor Fusion Plugin for AutoCAD 2012
"{EAB8A41D-FABA-4569-A0A1-60A8B358D6F1}" = Autodesk Network License Manager
"{ED654F5D-5DC9-46EA-9D10-621231527F98}" = FS9 Configurator
"{EE46B5D5-E62B-41CA-A2E1-2B4811F23E3B}" = Revit Extensions for Autodesk Revit Structure 2012
"{EE7D2735-9566-4E60-95AD-44282A7362BE}_is1" = Aerosoft - Gibraltar FS2004
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F19BB7D3-FB87-4C96-A28B-45C59A0F5229}" = RPC Plug-in for Autodesk 3ds Max Design 2012 32-bit
"{F2508213-9989-4E85-A078-72BE483917EF}" = Microsoft Games for Windows - LIVE Redistributable
"{F3759A9F-7AFA-4FB4-8DF1-53F26B979DEE}" = Belkin 54Mbps Wireless Network Adapter
"{F428D0FB-765D-40EB-BDD8-A1E7F5C597FA}" = Update Manager
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{FA61FF86-2479-D620-9F6B-655ADD4225B4}" = General Runtime Files for Allplan 2011-1 Release
"{FCEBDFA6-EED5-4B0B-8187-46AC14F96E57}" = PMDGMD11_FS9_PWF_WOF
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"{FFF5619F-6669-4EC5-A85E-9994F70A9E5D}" = Autodesk Inventor Fusion 2012
"{FFF7F80F-929E-497F-A112-B070DE816128}" = Autodesk Inventor Fusion 2012 Language Pack
"763v2" = Level-D Simulations 767-300
"763v21" = Level-D Simulations 767-300 Update
"Active Camera 2004 patch for FS 9.1" = Active Camera 2004 patch for FS 9.1
"Active Camera 2004 update to version 2.1 (FS 9.1)" = Active Camera 2004 update to version 2.1 (FS 9.1)
"Active Camera 2004 version 2.0" = Active Camera 2004 version 2.0
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion
"AKESOFT FORONDA-X FS9 1.00" = AKESOFT FORONDA-X FS9 1.00
"AutoCAD 2012 - Deutsch" = AutoCAD 2012 - Deutsch
"AutoCAD Civil 3D 2012" = AutoCAD Civil 3D 2012
"Autodesk Design Review 2012" = Autodesk Design Review 2012
"Autodesk Inventor Fusion 2012" = Autodesk Inventor Fusion 2012
"Autodesk Inventor Fusion Plugin for AutoCAD 2012" = Autodesk Inventor Fusion plug-in for AutoCAD 2012
"Autodesk Navisworks 2012 32 bit Exporter Plug-ins" = Autodesk Navisworks 2012 32 bit Exporter Plug-ins
"Autodesk Quantity Takeoff 2012" = Autodesk Quantity Takeoff 2012
"Autodesk Revit Architecture 2012" = Autodesk Revit Architecture 2012
"Autodesk Revit Structure 2010" = Autodesk Revit Structure 2010
"Autodesk Revit Structure 2010 SP2" = Autodesk Revit Structure 2010 x86 Update 2
"Autodesk Revit Structure 2012" = Autodesk Revit Structure 2012
"Autodesk Showcase 2012 32-bit - English" = Autodesk Showcase 2012 32-bit - English
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"BG9_is1" = Ben Gurion Airport for FS2004
"Bridge Building Game" = Bridge Building Game
"C337H SKYMASTER HD SERIES FSX" = C337H SKYMASTER HD SERIES FSX
"Carenado - C185F Skywagon FSX" = Carenado - C185F Skywagon FSX
"Carenado C208B Grand Caravan" = Carenado C208B Grand Caravan
"Carenado Commander 114 FSX" = Carenado Commander 114 FSX
"Carenado F33A Bonanza" = Carenado F33A Bonanza
"CCleaner" = CCleaner
"chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Community Help
"Cities XL 2012" = Cities XL 2012
"com.adobe.amp.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1" = Adobe Media Player
"DAEMON Tools Lite" = DAEMON Tools Lite
"Debrecen LHDC scenery v1.1 (FS2004)" = Debrecen LHDC scenery v1.1 (FS2004)
"Defraggler" = Defraggler
"DVD Flick_is1" = DVD Flick 1.3.0.7
"DWG TrueView 2012" = DWG TrueView 2012
"Fifa 12 (c) Electronic Arts_is1" = Fifa 12 (c) Electronic Arts version 1
"Flight Simulator 9.0" = Microsoft Flight Simulator 2004 A Century of Flight
"FlightSim_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Microsoft Flight Simulator X: Acceleration
"FlightZone 02: Portland" = FlightZone 02: Portland
"Fraps" = Fraps (remove only)
"FSDreamTeam Geneva FS9_is1" = FSDreamTeam Geneva FS9 1.1
"FSDreamTeam Zurich9_is1" = FSDreamTeam Zurich9 1.3.1
"GFWL_{434D0FA0-1558-4D8E-AC3D-BD1000008200}" = DiRT 3
"GT4AES" = GT4AES
"HD Tune Pro_is1" = HD Tune Pro 4.60
"iFly Jets - The 737NG for FS2004" = iFly Jets - The 737NG for FS2004
"InstallShield_{2F17C376-EDB7-455B-BC79-171F02F30CAE}" = Skysoft Simulation ZPMS 2011
"InstallShield_{3A778807-F7E8-4829-973F-733B2277A67A}" = Skysoft Simulation ZUJZ - Jiuzhai Huanglong Airport
"InstallShield_{7543FC90-B258-46C5-8238-507BB14D5139}" = Skysoft Simulation ZULZ - Luzhou Lantian Airport
"InstallShield_{9527A496-5DF9-412A-ADC7-168BA5379CA6}" = Microsoft Flight Simulator X
"InstallShield_{A624F5D8-DEBF-4827-86E9-7DE67BC750C4}" = Skysoft Simulation ZSOF - Hefei Luogang Int'l
"Klinn's ElectroSet (RCT3)_is1" = Klinn's ElectroSet Version 2
"Klinn's Framework (RCT3)_is1" = Klinn's Framework Version 2
"KPHL FS9" = KPHL FS9
"KSJC San Jose FS2004" = KSJC San Jose FS2004
"LatinVFR MKJS" = LatinVFR MKJS
"LatinVFRMKJPFS9_is1" = Latin VFR MKJP FS9
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.0.1800
"MegaSceneryX_is1" = Hawaii Oahu
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Mozilla Firefox 9.0.1 (x86 de)" = Mozilla Firefox 9.0.1 (x86 de)
"NVIDIA StereoUSB Driver" = NVIDIA 3D Vision Controller Driver
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"Office14.PROPLUS" = Microsoft Office Professional Plus 2010
"OpenAL" = OpenAL
"PA32R SARATOGA SP FSX" = PA32R SARATOGA SP FSX
"ParoInternationalAirport_is1" = Paro International Airport FS2004
"Pdf995" = Pdf995
"Railworks 3 Train Simulator 2012 Deluxe_is1" = Railworks 3 Train Simulator 2012 Deluxe
"RTMshadow_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Flight Simulator X
"Samsung ML-1660 Series" = Wartung Samsung ML-1660 Series
"SmartDraw PDF Filter" = SmartDraw PDF Filter
"SP1shadow_{7D606567-5047-451A-B49E-29FCB6012B4E}" = Flight Simulator X Service Pack 1
"SystemRequirementsLab" = System Requirements Lab
"TJSJ San Juan" = TJSJ San Juan
"TomTom HOME" = TomTom HOME 2.8.2.2264
"UK2000 Belfast Xtreme" = Remove UK2000 Belfast Xtreme files
"UK2000 Birmingham Xtreme" = Remove UK2000 Birmingham Xtreme files
"UK2000 Bristol Xtreme FS9" = UK2000 Bristol Xtreme FS9
"UK2000 Edinburgh Xtreme" = Remove UK2000 Edinburgh Xtreme files
"UK2000 Glasgow Xtreme" = Remove UK2000 Glasgow Xtreme files
"UK2000 Liverpool Xtreme FS9" = UK2000 Liverpool Xtreme FS9
"UK2000 London City Xtreme FS9" = UK2000 London City Xtreme FS9
"UK2000 Manchester Xtreme %simname%" = UK2000 Manchester Xtreme %simname% Uninstall
"UK2000 Stansted Xtreme" = Remove UK2000 Stansted Xtreme files
"VHHH Hong Kong FS2004" = VHHH Hong Kong FS2004
"VLC media player" = VLC media player 1.1.11
"WinRAR archiver" = WinRAR 4.00 (32-Bit)
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Aerosoft Mega Airport Munich" = Aerosoft Mega Airport Munich
"af745cb3dc09e441" = Boeing 767-300ER Fuel Planner
"Carenado's C SKYLANE II RG R182" = Carenado's C SKYLANE II RG R182
"Dropbox" = Dropbox
"Mantex3.0" = Mantex3.0
"Newport - Kalaupapa Hawaii X" = Newport - Kalaupapa Hawaii X
"PA-28-181 ARCHER II FSX" = PA-28-181 ARCHER II FSX
"SmartDraw 2010" = SmartDraw 2010
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 24.12.2011 04:34:59 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:04:45 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:04:53 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:04:54 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:04:55 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:04:55 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:04:55 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:04:55 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:05:50 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
Error - 24.12.2011 09:05:50 | Computer Name = TU-144 | Source = Microsoft-Windows-CAPI2 | ID = 4107
Description = Fehler beim Extrahieren der Drittanbieterstammliste aus der automatischen
 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>.
 Fehler: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum
 gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei.
.
 
[ Autodesk REX Events ]
Error - 11.12.2011 19:07:19 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - : Der Objektverweis wurde nicht auf eine Objektinstanz
 festgelegt.; StackTrace:    bei REX.AREXC3DStart.AREXC3DProxy.RemoveRibbon()   
bei REX.AREXC3DStart.AREXC3DProxy.OnShutdown()    bei REX.Common.Start.REXStart.OnShutdown()

  bei REX.AREXC3DStart.REXC3DStart.Terminate()
 
Error - 14.12.2011 13:08:03 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 16.12.2011 08:07:03 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 16.12.2011 08:10:20 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 16.12.2011 09:41:03 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - : Der Objektverweis wurde nicht auf eine Objektinstanz
 festgelegt.; StackTrace:    bei REX.AREXC3DStart.AREXC3DProxy.RemoveRibbon()   
bei REX.AREXC3DStart.AREXC3DProxy.OnShutdown()    bei REX.Common.Start.REXStart.OnShutdown()

  bei REX.AREXC3DStart.REXC3DStart.Terminate()
 
Error - 17.12.2011 07:24:04 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 17.12.2011 08:05:42 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - : Der Objektverweis wurde nicht auf eine Objektinstanz
 festgelegt.; StackTrace:    bei REX.AREXC3DStart.AREXC3DProxy.RemoveRibbon()   
bei REX.AREXC3DStart.AREXC3DProxy.OnShutdown()    bei REX.Common.Start.REXStart.OnShutdown()

  bei REX.AREXC3DStart.REXC3DStart.Terminate()
 
Error - 03.01.2012 10:11:58 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 03.01.2012 10:49:58 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - REX startup failed: Die Datei "C:\Program Files\Common
 Files\Autodesk Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml"
 konnte nicht gefunden werden.: Die Datei "C:\Program Files\Common Files\Autodesk
 Shared\Extensions 2012\Products\Civil3D\de-DE\\tree_Civil3D.xml" konnte nicht gefunden
 werden.; StackTrace:    bei System.IO.__Error.WinIOError(Int32 errorCode, String
 maybeFullPath)    bei System.IO.File.InternalCopy(String sourceFileName, String
destFileName, Boolean overwrite)    bei System.IO.File.Copy(String sourceFileName,
 String destFileName, Boolean overwrite)    bei REX.Manager.Settings.9REaR2BLp() 
  bei REX.Manager.Settings.CheckModulesFilenameVer()    bei REX.Common.Start.REXStartProxy.2314pfjGK(Dictionary`2&
 , List`1& )    bei REX.Common.Start.REXStartProxy.OnStartup()
 
Error - 03.01.2012 12:39:57 | Computer Name = TU-144 | Source = AREX | ID = 0
Description = AREX.Revit - : Der Objektverweis wurde nicht auf eine Objektinstanz
 festgelegt.; StackTrace:    bei REX.AREXC3DStart.AREXC3DProxy.RemoveRibbon()   
bei REX.AREXC3DStart.AREXC3DProxy.OnShutdown()    bei REX.Common.Start.REXStart.OnShutdown()

  bei REX.AREXC3DStart.REXC3DStart.Terminate()
 
[ System Events ]
Error - 05.01.2012 03:40:25 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 05.01.2012 11:21:39 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 05.01.2012 12:57:50 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 06.01.2012 05:16:21 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 06.01.2012 18:52:10 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 06.01.2012 19:51:25 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 06.01.2012 19:57:36 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
Error - 06.01.2012 20:07:52 | Computer Name = TU-144 | Source = volsnap | ID = 393252
Description = Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher
 nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 
Error - 07.01.2012 05:47:32 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7034
Description = Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies
 ist bereits 1 Mal passiert.
 
Error - 07.01.2012 05:49:59 | Computer Name = TU-144 | Source = Service Control Manager | ID = 7000
Description = Der Dienst "DgiVecp" wurde aufgrund folgenden Fehlers nicht gestartet:
  %%2
 
 
< End of report >

bender391 07.01.2012 12:35
CC
Code:
Active Camera 2004 patch for FS 9.1                10.05.2011               
Active Camera 2004 update to version 2.1 (FS 9.1)                10.05.2011               
Active Camera 2004 version 2.0                10.05.2011               
ActiveSky Version 6 and ActiveSky Graphics        HiFi Simulation Software        08.05.2011        258MB        0.6.6442
Adobe AIR        Adobe Systems Inc.        26.05.2011                1.5.3.9120
Adobe Community Help        Adobe Systems Incorporated        26.05.2011                3.0.0.400
Adobe Flash Player 10 ActiveX        Adobe Systems Incorporated        05.05.2011        6,00MB        10.2.159.1
Adobe Flash Player 11 Plugin        Adobe Systems Incorporated        15.11.2011        6,00MB        11.1.102.55
Adobe Media Player        Adobe Systems Incorporated        26.05.2011                1.8
Adobe Photoshop CS5        Adobe Systems Incorporated        26.05.2011        1.559MB        12.0
Adobe Reader X (10.1.0) - Deutsch        Adobe Systems Incorporated        06.07.2011        118,4MB        10.1.0
Aerosoft - Gibraltar FS2004        Aerosoft - Gibraltar FS2004        20.07.2011        196,1MB        1
Aerosoft Mega Airport Munich                09.05.2011               
aerosoft's - Approaching Innsbruck 2004        aerosoft        08.05.2011                1.00
aerosoft's - Brussels 2007        aerosoft        09.05.2011                1.10
aerosoft's - Budapest 2007 - FS2004                09.05.2011               
Aerosoft's - Discus Glider X        Aerosoft        23.09.2011                1.00
aerosoft's - German Airports 1 - Stuttgart        aerosoft        10.05.2011                1.00
aerosoft's - German Airports 2 - Cologne-Bonn  - FS2004                08.05.2011               
aerosoft's - German Airports 2 - Dortmund        aerosoft        08.05.2011                1.00
aerosoft's - German Airports 2 - Leipzig  - FS2004                09.05.2011               
aerosoft's - German Airports 2 - Muenster-Osnabrueck        aerosoft        09.05.2011                1.00
aerosoft's - German Airports 3 - Bremen        aerosoft        08.05.2011                1.00
aerosoft's - German Airports 3 - Hamburg        aerosoft        09.05.2011                1.00
aerosoft's - German Airports 3-Berlin Tegel        aerosoft        09.05.2011                1.00
Aerosoft's - Hawaii Dillingham X        Aerosoft        23.09.2011                1.00
aerosoft's - Keflavik        aerosoft        10.10.2011                1.00
aerosoft's - Lissabon 2008        aerosoft        08.05.2011                1.00
aerosoft's - Mallorca X for FS2004        aerosoft        09.05.2011                1.00
aerosoft's - Mega Airport Frankfurt - FS2004                09.05.2011               
aerosoft's - Mega Airport Paris CDG        aerosoft        09.05.2011                1.00
aerosoft's - Mega Airport Stockholm Arlanda        aerosoft        08.05.2011                1.10
aerosoft's - Nice Cote dAzur        aerosoft        07.06.2011                1.00
AKESOFT FORONDA-X FS9 1.00                02.10.2011               
ANNO 1404        Ubisoft        13.05.2011                1.02.0000
ANNO 1404 - Venedig        Ubisoft        13.05.2011                2.0.5008.0
ANNO 2070        Ubisoft        22.11.2011                1.0.0.0
Apple Application Support        Apple Inc.        12.07.2011        32,4MB        1.1.0
Apple Software Update        Apple Inc.        12.07.2011        2,16MB        2.1.1.116
AutoCAD 2012 - Deutsch        Autodesk        24.11.2011                18.2.51.0
AutoCAD Civil 3D 2012        Autodesk        24.11.2011                9.0.1619.0
Autodesk CAD Manager Tools        Autodesk        19.11.2011        1,29MB        16.0.0.65
Autodesk Content Service        Autodesk        19.11.2011        95,9MB        2.0.90
Autodesk Design Review 2012        Autodesk, Inc.        28.11.2011                12.0.0.93
Autodesk Inventor Fusion 2012        Autodesk, Inc.        19.11.2011                1.0.0.79
Autodesk Inventor Fusion plug-in for AutoCAD 2012        Autodesk        24.11.2011                0.0.1.138
Autodesk Material Library 2012        Autodesk        19.11.2011        97,9MB        2.5.0.8
Autodesk Material Library Base Resolution Image Library 2012        Autodesk        19.11.2011        71,4MB        2.5.0.8
Autodesk Material Library Low Resolution Image Library 2012        Autodesk        19.11.2011        245MB        2.5.0.8
Autodesk Material Library Medium Resolution Image Library 2012        Autodesk        19.11.2011        740MB        2.5.0.8
Autodesk Navisworks 2012 32 bit Exporter Plug-ins        Autodesk        19.11.2011                9.0.69.686
Autodesk Navisworks 2012 32 bit Exporter Plug-ins English Language Pack        Autodesk        19.11.2011        8,85MB        9.0.69.686
Autodesk Network License Manager        Autodesk        19.11.2011        8,08MB        1.0.0
Autodesk Quantity Takeoff 2012        Autodesk        28.11.2011                5.0.16.0
Autodesk Revit Architecture 2012        Autodesk        19.11.2011                11.03.09231
Autodesk Revit Structure 2010        Autodesk, Inc.        24.11.2011                09.09.17151
Autodesk Revit Structure 2012        Autodesk        28.11.2011                11.03.09231
Autodesk Showcase 2012 32-bit - English        Autodesk        19.11.2011                6.0.0.0
Avira AntiVir Personal - Free Antivirus        Avira GmbH        04.01.2012        70,6MB        10.2.0.704
Battlefield 3™        Electronic Arts        29.10.2011                1.0.0.0
Belkin 54Mbps Wireless Network Adapter        Belkin        05.05.2011                1.00.01
Ben Gurion Airport for FS2004        FSAddon        15.11.2011        156,5MB       
Boeing 767-300ER Fuel Planner        Boeing 767-300ER Fuel Planner        09.07.2011                2.0.0.38
Bridge Building Game                24.05.2011               
Bridge Modeler for AutoCAD® Civil 3D® 2012 on AutoCAD Civil 3D 2012 - German (Standard)        Autodesk, Inc.        28.11.2011        111,7MB        17.0
Bridge Repack by Der Jok3r Version 1.00        Der Jok3r        08.10.2011        387MB        1.00
C337H SKYMASTER HD SERIES FSX        Carenado        24.09.2011                1.00.00.00
Carenado - C185F Skywagon FSX                23.09.2011               
Carenado C208B Grand Caravan        Carenado        23.09.2011                1.00.00.00
Carenado Commander 114 FSX        Carenado        23.09.2011                1.00.00.00
Carenado F33A Bonanza        Carenado        23.09.2011                1.00.00.00
Carenado's C SKYLANE II RG R182                23.09.2011               
CCleaner        Piriform        25.11.2011                3.12
CDBurnerXP        CDBurnerXP        08.08.2011        11,9MB        4.3.8.2568
Cisco Systems VPN Client 5.0.07.0290        Cisco Systems, Inc.        09.05.2011        11,6MB        5.0.6
Citavi        Swiss Academic Software        22.11.2011        62,9MB        3.1.15.0
Cities In Motion                02.12.2011        410MB       
Cities XL 2012        Focus Home Interactive        25.10.2011                1.0.0
CLOUD9 LosAngeles 1.01                10.05.2011                1.01
Crystal Reports Runtime        Autodesk        28.11.2011        91,9MB        1.00.0000
DAEMON Tools Lite        DT Soft Ltd        05.05.2011                4.40.2.0131
Debrecen LHDC scenery v1.1 (FS2004)                19.08.2011               
Defraggler        Piriform        06.01.2012                2.08
DiRT 3        Codemasters        06.06.2011                1.0.0000.130
Dropbox        Dropbox, Inc.        05.12.2011                1.2.49
Duden-Bibliothek        Bibliographisches Institut GmbH        11.05.2011        68,1MB        5.1.0
Duden-Rechtschreibprüfung PLUS        Bibliographisches Institut GmbH        12.11.2011        807MB        8.01
DVD Flick 1.3.0.7        Dennis Meuwissen        20.12.2011                1.3.0.7
DWG TrueView 2012        Autodesk        28.11.2011                18.2.51.0
EditVoicepack        Bevelstone Production        11.05.2011        2,26MB        3.1.0
EIRESIM - Alicante Ultimate        EIRESIM - Alicante Ultimate        10.05.2011        543MB        1
FARO LS 1.1.406.58        FARO Scanner Production        19.11.2011        21,5MB        4.6.58.2
Fifa 12 (c) Electronic Arts version 1                14.12.2011                1
FlightZone 02: Portland                09.05.2011               
Fraps (remove only)                20.05.2011               
FS9 Configurator        Ken Salter        20.05.2011        0,41MB        1.6.0
FSDreamTeam Geneva FS9 1.1                10.05.2011               
FSDreamTeam Zurich9 1.3.1                10.05.2011               
GeoMedia Professional        Intergraph Corporation        28.06.2011        418MB        06.01.02.04
Gigabyte Raid Configurer        Gigabyte Technology Corp.        05.05.2011                1.00.0000
Google Earth        Google        21.11.2011        92,7MB        6.1.0.5001
GT4AES                22.05.2011               
Hawaii Oahu        PC Aviator Inc.        23.09.2011                1
HD Tune Pro 4.60        EFD Software        07.06.2011        2,67MB       
ICQ7.5        ICQ        19.05.2011                7.5
iFly Jets - The 737NG for FS2004                09.05.2011               
Java(TM) 6 Update 25        Oracle        08.05.2011        94,7MB        6.0.250
Klinn's ElectroSet Version 2                26.07.2011               
Klinn's Framework Version 2                26.07.2011               
KPHL FS9                23.05.2011               
KSJC San Jose FS2004                09.05.2011               
Latin VFR MKJP FS9        SimMarket        10.05.2011               
LatinVFR - Crown Point Update v1        LatinVFR - Crown Point Update v1        10.05.2011        8,07MB        1
LatinVFR MKJS        LatinVFR        10.05.2011                1.0
Level-D Simulations 767-300                10.05.2011               
Level-D Simulations 767-300 Update                10.05.2011               
Malwarebytes Anti-Malware Version 1.60.0.1800        Malwarebytes Corporation        04.01.2012        18,6MB        1.60.0.1800
Mantex3.0                10.05.2011               
Microsoft .NET Framework 4 Client Profile        Microsoft Corporation        08.05.2011        38,8MB        4.0.30319
Microsoft .NET Framework 4 Client Profile DEU Language Pack        Microsoft Corporation        08.05.2011        2,94MB        4.0.30319
Microsoft .NET Framework 4 Extended        Microsoft Corporation        19.11.2011        52,0MB        4.0.30319
Microsoft .NET Framework 4 Extended DEU Language Pack        Microsoft Corporation        19.11.2011        10,7MB        4.0.30319
Microsoft Age of Empires II                26.08.2011               
Microsoft Age of Empires II: The Conquerors Expansion                26.08.2011               
Microsoft Flight Simulator 2004 A Century of Flight        Microsoft        08.05.2011                9.0
Microsoft Flight Simulator X: Acceleration        Microsoft Game Studios        23.09.2011                10.0.61637.0
Microsoft Games for Windows - LIVE Redistributable        Microsoft Corporation        13.05.2011        31,3MB        3.5.88.0
Microsoft Games for Windows Marketplace        Microsoft Corporation        13.05.2011        6,04MB        3.5.50.0
Microsoft Office Professional Plus 2010        Microsoft Corporation        06.05.2011                14.0.4763.1000
Microsoft Report Viewer Redistributable 2008 (KB971119)        Microsoft Corporation        15.11.2011               
Microsoft Silverlight        Microsoft Corporation        15.11.2011        60,4MB        4.0.60831.0
Microsoft SQL Server Compact 3.5 SP2 ENU        Microsoft Corporation        24.11.2011        3,39MB        3.5.8080.0
Microsoft Visual Basic Power Packs 3.0        Microsoft        24.11.2011        5,28MB        9.0.30214
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053        Microsoft Corporation        12.05.2011        0,24MB        8.0.50727.4053
Microsoft Visual C++ 2005 Redistributable        Microsoft Corporation        15.06.2011        0,29MB        8.0.59193
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022        Microsoft Corporation        26.05.2011        2,87MB        9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17        Microsoft Corporation        11.07.2011        0,23MB        9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148        Microsoft Corporation        05.05.2011        0,58MB        9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161        Microsoft Corporation        15.06.2011        0,59MB        9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319        Microsoft Corporation        23.12.2011        11,1MB        10.0.30319
Microsoft Visual Studio Tools for Applications 2.0 - ENU        Microsoft Corporation        15.11.2011        211MB        9.0.30729
Microsoft Visual Studio Tools for Applications 2.0 Language Pack - DEU        Microsoft Corporation        28.11.2011        95,8MB        9.0.30729
Microsoft Visual Studio Tools for Applications 2.0 Runtime        Microsoft Corporation        23.09.2011        0,15MB        9.0.30729
Microsoft Visual Studio Tools for Applications 2.0 Runtime Language Pack - DEU        Microsoft Corporation        28.11.2011        0,22MB        9.0.30729
Mozilla Firefox 9.0.1 (x86 de)        Mozilla        02.01.2012        36,8MB        9.0.1
MSXML 4.0 SP2 (KB954430)        Microsoft Corporation        11.05.2011        1,28MB        4.20.9870.0
MSXML 4.0 SP2 (KB973688)        Microsoft Corporation        12.05.2011        1,34MB        4.20.9876.0
MSXML 4.0 SP2 Parser und SDK        Microsoft Corporation        12.06.2011        49,00KB        4.20.9818.0
Need for Speed: The Run        RAF        20.11.2011                1.0
Nemetschek Allplan 2011        Nemetschek Allplan GmbH        23.10.2011                2011.0
Nemetschek SoftLock 2006        Nemetschek Allplan GmbH        23.10.2011                1.0.52
Newport - Kalaupapa Hawaii X                24.09.2011               
NVIDIA 3D Vision Controller-Treiber 285.62        NVIDIA Corporation        29.10.2011                285.62
NVIDIA 3D Vision Treiber 285.62        NVIDIA Corporation        29.10.2011                285.62
NVIDIA Grafiktreiber 285.62        NVIDIA Corporation        29.10.2011                285.62
NVIDIA HD-Audiotreiber 1.2.24.0        NVIDIA Corporation        29.10.2011                1.2.24.0
NVIDIA PhysX-Systemsoftware 9.11.0621        NVIDIA Corporation        29.10.2011                9.11.0621
NVIDIA Update 1.5.20        NVIDIA Corporation        29.10.2011                1.5.20
OpenAL                12.05.2011               
PA-28-181 ARCHER II FSX                23.09.2011               
PA32R SARATOGA SP FSX        Carenado        23.09.2011                1.00.00.00
Paro International Airport FS2004        SimMarket        20.06.2011        85,1MB       
PDF24 Creator 3.3.0        PDF24.org        13.07.2011        33,2MB       
Pdf995                14.06.2011               
PMDG MD-11 FS9        PMDG Simulations        11.07.2011                1.20.0055
PMDG747_400 Queen of the Skies        Precision Manuals Development Group        26.05.2011                1.10.0000
PMDG747_400F        Precision Manuals Development Group        26.05.2011                1.01.0000
PMDGMD11_FS9_GEF_GRF2        Precision Manuals Development Group        11.07.2011                1.00.0000
PMDGMD11_FS9_GEF_WOF1        Precision Manuals Development Group        11.07.2011                1.00.0000
PMDGMD11_FS9_PWF_FXF        Precision Manuals Development Group        11.07.2011                1.00.0000
PMDGMD11_FS9_PWF_WOF        Precision Manuals Development Group        11.07.2011                1.00.0000
QuickTime        Apple Inc.        12.07.2011        77,3MB        7.65.17.80
Railworks 3 Train Simulator 2012 Deluxe                05.12.2011               
Rapture3D 2.4.8 Game        Blue Ripple Sound        06.06.2011               
RCT3 Soaked                22.07.2011                1.00.000
Real Environment Xtreme        Real Environment Xtreme        23.09.2011        978MB        1.0.2008.1128
Realtek Ethernet Controller Driver        Realtek        05.05.2011                7.38.113.2011
Realtek High Definition Audio Driver        Realtek Semiconductor Corp.        05.05.2011                6.0.1.6235
Remove UK2000 Belfast Xtreme files                10.05.2011               
Remove UK2000 Birmingham Xtreme files                10.05.2011               
Remove UK2000 Edinburgh Xtreme files                10.05.2011               
Remove UK2000 Glasgow Xtreme files                10.05.2011               
Remove UK2000 Stansted Xtreme files                10.05.2011               
Revit Extensions for Autodesk Revit Structure 2010        Autodesk, Inc.        25.11.2011                2010.1
Revit Extensions for Autodesk Revit Structure 2012        Autodesk        28.11.2011        1.113MB        1.0.0.0
RollerCoaster Tycoon 3                22.07.2011                1.00.000
RPC Plug-in for Autodesk 3ds Max Design 2012 32-bit        ArchVision, Inc.        19.11.2011        11,7MB        3.16.0.0
Skype™ 5.5        Skype Technologies S.A.        07.11.2011        17,0MB        5.5.124
Skysoft Simulation ZPMS 2011        Skysoft Simulation        01.01.2012        81,3MB        1.00.0000
Skysoft Simulation ZSOF - Hefei Luogang Int'l        Skysoft Simulation        01.10.2011        158,1MB        1.02.0928
Skysoft Simulation ZUJZ - Jiuzhai Huanglong Airport        Skysoft Simulation        01.01.2012        90,6MB        1.00.0000
Skysoft Simulation ZULZ - Luzhou Lantian Airport        Skysoft Simulation        01.01.2012        48,2MB        1.01.0930
SmartDraw 2010                08.11.2011               
SmartDraw PDF Filter                08.11.2011               
SPORE™        Electronic Arts        31.07.2011                1.00.0000
SUPER © v2011.build.49 (July 1st, 2011) Version v2011.build.49        eRightSoft        03.01.2012        42,7MB        v2011.build.49
System Requirements Lab                03.10.2011               
TJSJ San Juan                10.05.2011               
TomTom HOME 2.8.2.2264        TomTom        08.08.2011                2.8.2.2264
TomTom HOME Visual Studio Merge Modules        TomTom International B.V.        07.08.2011        1,88MB        1.0.2
Ubisoft Game Launcher        UBISOFT        22.11.2011                1.0.0.0
UK2000 Bristol Xtreme FS9        UK2000 Scenery        11.05.2011                3.04
UK2000 Liverpool Xtreme FS9        UK2000 Scenery        11.05.2011                1.00
UK2000 London City Xtreme FS9        UK2000 Scenery        30.11.2011                1.00
UK2000 Manchester Xtreme %simname% Uninstall                10.05.2011               
VHHH Hong Kong FS2004                09.05.2011               
VLC media player 1.1.11        VideoLAN        17.09.2011                1.1.11
Wartung Samsung ML-1660 Series        Samsung Electronics Co., Ltd.        21.07.2011               
Windows Live ID Sign-in Assistant        Microsoft Corporation        13.05.2011        5,52MB        6.500.3165.0
Windows Media Player Firefox Plugin        Microsoft Corp        30.11.2011        0,29MB        1.0.0.8
WinRAR 4.00 (32-Bit)        win.rar GmbH        05.05.2011                4.00.0
beste Grüße

kira 07.01.2012 16:41
Zitat:
Zitat von bender391 (Beitrag 749891)
Ich nutzt Firefox und kümmere mich desshalb nicht um den I-Explorer.
Der Internet Explorer von Microsoft gehört zur Grundausstattung unter Windows! Du musst ihn nicht verwenden, aber updaten schon! Alle auf einem Windows-PC installierten Programme, müssen Sicherheitshalber regelmäßig aktualisiert werden!

Zitat:
Zitat von bender391 (Beitrag 749891)
... aber mit dem SP1... da gibt es ja nicht nur positive Stimmen.
Software wie Betriebssysteme, Browser und E-Mail Clients werden laufend weiterentwickelt. Gleichzeitig arbeiten jedoch auch Hacker daran, ständig neue Sicherheitslücken zu finden und auszunutzen. Was heute noch keine Schlupflücke für Viren und Würmer ist, kann morgen bereits zur Gefahr werden, wenn der entsprechende Schädling programmiert wurde. Das führt dazu, dass es relativ häufig zu Meldungen über neue Sicherheitsanfälligkeiten kommt, auch wenn diese noch nicht durch Hacker entdeckt wurden. Denn selbstverständlich suchen auch Sicherheitsspezialisten nach potenziellen Angriffsmöglichkeiten. Updates der Softwareentwickler sorgen dafür, dass der User immer die aktuellste und sicherste Version des Betriebssystems und der installierten Software nutzen kann.

1.
Deine Javaversion ist nicht aktuell!
→ Downloade nun die Offline-Version von Java Version 6 Update 30 von Oracle herunter
Achte darauf, eventuell angebotene Toolbars abwählen (den Haken bei der Toolbar entfernen)!

2.
reinige dein System mit CCleaner:
  • "Cleaner"→ "Analysieren"→ Klick auf den Button "Start CCleaner"
  • "Registry""Fehler suchen"→ "Fehler beheben"→ "Alle beheben"
  • Starte dein System neu auf

3.
  • lade Dir falls nicht vorhanden SUPERAntiSpyware FREE Edition herunter.
  • installiere das Programm und update online.
  • starte SUPERAntiSpyware und klicke auf "Ihren Computer durchsuchen"
  • setze ein Häkchen bei "Kompletter Scan" und klicke auf "Weiter"
  • anschließend alle gefundenen Schadprogramme werden aufgelistet, bei alle Funde Häkchen setzen und mit "OK" bestätigen
  • auf "Weiter" klicken dann "OK" und auf "Fertig stellen"
  • um die Ergebnisse anzuzeigen: auf "Präferenzen" dann auf den "Statistiken und Protokolle" klicken
  • drücke auf "Protokoll anzeigen" - anschließend diesen Bericht bitte speichern und hier posten

4.
Auch auf USB-Sticks, selbstgebrannten Datenträgern, externen Festplatten und anderen Datenträgern können Viren transportiert werden. Man muss daher durch regelmäßige Prüfungen auf Schäden, die durch Malware ("Worm.Win32.Autorun") verursacht worden sein können, überwacht werden. Hierfür sind ser gut geegnet und empfohlen, die auf dem Speichermedium gesicherten Daten, mit Hilfe des kostenlosen Online Scanners zu prüfen.
Schließe jetzt alle externe Datenträgeran (USB Sticks etc) Deinen Rechner an, dabei die Hochstell-Taste [Shift-Taste] gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. (So verhindest Du die Ausführung der AUTORUN-Funktion) - Man kann die AUTORUN-Funktion aber auch generell abschalten.►Anleitung

5.
-> Führe dann einen Komplett-Systemcheck mit Eset Online Scanner (NOD32)Kostenlose Online Scanner durch
Achtung!: >>Du sollst nicht die Antivirus-Sicherheitssoftware installieren, sondern dein System nur online scannen<<

► berichte erneut über den Zustand des Computers. Ob noch Probleme auftreten, wenn ja, welche?


Alle Zeitangaben in WEZ +1. Es ist jetzt 04:34 Uhr.

Copyright ©2000-2024, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129