Dorthonion | 08.03.2012 13:48 | Habe ich gemacht, hier ist das Ergebnis. Code:
OTL logfile created on: 08.03.2012 12:51:39 - Run 1
OTL by OldTimer - Version 3.2.35.0 Folder = D:\CD
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1023,48 Mb Total Physical Memory | 666,90 Mb Available Physical Memory | 65,16% Memory free
2,40 Gb Paging File | 2,03 Gb Available in Paging File | 84,64% Paging File free
Paging file location(s): E:\pagefile.sys 1536 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 38,28 Gb Total Space | 28,06 Gb Free Space | 73,28% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 327,06 Gb Free Space | 70,22% Space Free | Partition Type: NTFS
Drive E: | 200,01 Gb Total Space | 193,09 Gb Free Space | 96,54% Space Free | Partition Type: NTFS
Drive G: | 286,47 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: DESKTOP-BVW | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.03.03 21:22:57 | 000,585,216 | ---- | M] (OldTimer Tools) -- D:\CD\OTL.exe
PRC - [2012.02.07 14:04:57 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\system32\bgsvcgen.exe
PRC - [2012.01.31 09:11:51 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Systools\Avira\AntiVir Desktop\avshadow.exe
PRC - [2012.01.31 09:11:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Systools\Avira\AntiVir Desktop\sched.exe
PRC - [2012.01.31 09:11:01 | 000,463,824 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Systools\Avira\AntiVir Desktop\avwebgrd.exe
PRC - [2012.01.31 09:10:56 | 000,342,480 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Systools\Avira\AntiVir Desktop\avmailc.exe
PRC - [2012.01.31 09:10:56 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Systools\Avira\AntiVir Desktop\avgnt.exe
PRC - [2012.01.31 09:10:56 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- E:\Systools\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.10.24 21:32:00 | 000,055,144 | ---- | M] (Apple Inc.) -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2008.04.14 06:52:46 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2007.12.03 11:26:02 | 000,498,792 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe
PRC - [2007.12.03 11:09:42 | 000,911,184 | ---- | M] (Acronis) -- E:\Systools\Acronis.TI\TimounterMonitor.exe
PRC - [2007.12.03 11:06:38 | 000,140,568 | ---- | M] (Acronis) -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe
PRC - [2007.12.03 11:06:36 | 000,427,288 | ---- | M] (Acronis) -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe
PRC - [2007.12.03 11:06:08 | 002,622,104 | ---- | M] (Acronis) -- E:\Systools\Acronis.TI\TrueImageMonitor.exe
PRC - [2007.10.25 17:09:18 | 000,087,344 | ---- | M] (AVM Berlin) -- E:\Systools\Fritz.box\IGDCTRL.EXE
========== Modules (No Company Name) ==========
MOD - [2012.01.31 09:11:17 | 000,398,288 | ---- | M] () -- E:\Systools\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2011.09.27 07:23:00 | 000,087,912 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\zlib1.dll
MOD - [2011.09.27 07:22:40 | 001,242,472 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\libxml2.dll
MOD - [2007.12.03 11:26:02 | 000,498,792 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe
========== Win32 Services (SafeList) ==========
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2012.02.07 14:04:57 | 000,145,504 | ---- | M] (B.H.A Corporation) [Auto | Running] -- C:\WINDOWS\System32\bgsvcgen.exe -- (bgsvcgen)
SRV - [2012.01.31 09:11:15 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Systools\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2012.01.31 09:11:01 | 000,463,824 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Systools\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService)
SRV - [2012.01.31 09:10:56 | 000,342,480 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Systools\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService)
SRV - [2012.01.31 09:10:56 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- E:\Systools\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.10.24 21:32:00 | 000,055,144 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device)
SRV - [2011.07.20 05:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2007.12.03 11:26:02 | 000,498,792 | ---- | M] () [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Acronis\Fomatik\TrueImageTryStartService.exe -- (TryAndDecideService)
SRV - [2007.12.03 11:06:36 | 000,427,288 | ---- | M] (Acronis) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedul2.exe -- (AcrSch2Svc)
SRV - [2007.10.25 17:09:18 | 000,087,344 | ---- | M] (AVM Berlin) [Auto | Running] -- E:\Systools\Fritz.box\IGDCTRL.EXE -- (IGDCTRL)
SRV - [2006.10.26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Programme\Gemeinsame Dateien\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
========== Driver Services (SafeList) ==========
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2012.02.16 20:56:01 | 000,137,416 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2012.02.09 02:25:48 | 000,441,760 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\timntr.sys -- (timounter)
DRV - [2012.02.09 02:25:48 | 000,044,384 | ---- | M] (Acronis) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\tifsfilt.sys -- (tifsfilter)
DRV - [2012.02.09 02:25:39 | 000,129,248 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\snapman.sys -- (snapman)
DRV - [2012.02.09 02:25:33 | 000,368,480 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\tdrpman.sys -- (tdrpman)
DRV - [2012.02.09 01:06:52 | 000,083,392 | ---- | M] (Acronis) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\vsflt53.sys -- (vidsflt53) Acronis Disk Storage Filter (53)
DRV - [2012.02.07 14:04:57 | 000,033,408 | ---- | M] (B.H.A Corporation) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\CDRBSDRV.SYS -- (cdrbsdrv)
DRV - [2012.01.29 21:22:55 | 000,121,208 | ---- | M] (SlySoft, Inc.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\AnyDVD.sys -- (AnyDVD)
DRV - [2011.12.15 15:00:00 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.12.15 15:00:00 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2010.06.17 14:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2008.04.14 00:15:30 | 000,010,624 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\gameenum.sys -- (gameenum)
DRV - [2008.04.13 22:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\RTL8139.sys -- (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C)
DRV - [2004.08.04 13:00:00 | 000,012,288 | ---- | M] (Microsoft Corporation) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\fsvga.sys -- (FsVga)
DRV - [2002.09.28 02:17:18 | 000,054,272 | ---- | M] () [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\AvidXPSerial.sys -- (Serial)
DRV - [2002.06.11 19:55:08 | 000,013,780 | ---- | M] (Padus, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\pfc.sys -- (pfc)
DRV - [2001.06.22 05:39:02 | 000,073,728 | ---- | M] (Rainbow Technologies, Inc.) [Kernel | Auto | Running] -- C:\WINDOWS\System32\Drivers\SENTINEL.SYS -- (Sentinel)
DRV - [2001.02.01 16:10:12 | 000,025,244 | ---- | M] (Adaptec) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aspi32.sys -- (Aspi32)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
IE - HKU\S-1-5-21-1614895754-823518204-1606980848-500\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.update: false
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: D:\Audio\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Programme\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Components: E:\Internet\Firefox\components [2012.03.04 23:14:29 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0.2\extensions\\Plugins: E:\Internet\Firefox\plugins [2012.02.07 02:54:24 | 000,000,000 | ---D | M]
[2012.02.26 15:22:57 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla\Extensions
O1 HOSTS File: ([2004.08.04 13:00:00 | 000,000,820 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - E:\Programme\Adobe\Acrobat.6\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - E:\Programme\Adobe\Acrobat.6\Acrobat\AcroIEFavClient.dll ()
O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Programme\Adobe\Acrobat.6\Acrobat\AcroIEFavClient.dll ()
O3 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - E:\Programme\Adobe\Acrobat.6\Acrobat\AcroIEFavClient.dll ()
O4 - HKLM..\Run: [Acronis Scheduler2 Service] C:\Programme\Gemeinsame Dateien\Acronis\Schedule2\schedhlp.exe (Acronis)
O4 - HKLM..\Run: [AcronisTimounterMonitor] E:\Systools\Acronis.TI\TimounterMonitor.exe (Acronis)
O4 - HKLM..\Run: [APSDaemon] C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [avgnt] E:\Systools\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd File not found
O4 - HKLM..\Run: [IMJPMIG8.1] C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [PHIME2002A] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [PHIME2002ASync] C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE (Microsoft Corporation)
O4 - HKLM..\Run: [TrueImageMonitor.exe] E:\Systools\Acronis.TI\TrueImageMonitor.exe (Acronis)
O4 - HKU\S-1-5-21-1614895754-823518204-1606980848-500..\Run: [{D67F16B2-510B-11E1-897F-806D6172696F}] C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\Microsoft\torrent.exe File not found
O4 - HKU\S-1-5-21-1614895754-823518204-1606980848-500..\Run: [AnyDVD] E:\Programme\Video\Any.DVD\AnyDVDtray.exe (SlySoft, Inc.)
O4 - HKLM..\RunOnce: [KB976002-v5] C:\WINDOWS\system32\browserchoice.exe (Microsoft Corporation)
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Gamma Loader.lnk = C:\Programme\Gemeinsame Dateien\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 181
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoToolbarCustomize = 0
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 02 00 00 00 [binary data]
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoWinKeys = 01 00 00 00 [binary data]
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoComputersNearMe = 01 00 00 00 [binary data]
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 02 00 00 00 [binary data]
O7 - HKU\S-1-5-21-1614895754-823518204-1606980848-500\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - E:\Systools\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - E:\Systools\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - E:\Systools\Avira\AntiVir Desktop\avsda.dll (Avira Operations GmbH & Co. KG)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.37.37.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{6103AD00-64ED-49F0-B906-DF8426C0FEF5}: DhcpNameServer = 10.37.37.1
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Orbit.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Orbit.bmp
O30 - LSA: Authentication Packages - (relog_ap) - C:\WINDOWS\System32\relog_ap.dll (Acronis)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.02.07 01:07:22 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
NetSvcs: 6to4 - File not found
NetSvcs: HidServ - File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found
MsConfig - StartUpReg: {B6139525-9EEE-15A2-877D-EE4B9C9FA582} - hkey= - key= - File not found
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 0
SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: sermouse.sys - Driver
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: vga.sys - Driver
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: sermouse.sys - Driver
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TDI - Driver Group
SafeBootNet: vga.sys - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {10072CEC-8CC1-11D1-986E-00A0C955B42F} - Vektorgrafik-Rendering (VML)
ActiveX: {2179C5D3-EBFF-11CF-B6FD-00AA00B4E220} - NetShow
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 6.4
ActiveX: {283807B5-2C60-11D0-A31D-00AA00B92C03} - DirectAnimation
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {36f8ec70-c29a-11d1-b5c7-0000f8051515} - Dynamic HTML-Datenbindung für Java
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offlinebrowsingpaket
ActiveX: {3bf42070-b3b1-11d1-b5c5-0000f8051515} - Uniscribe
ActiveX: {4278c270-a269-11d1-b5bf-0000f8051515} - Erweitertes Authoring
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install
ActiveX: {44BBA842-CC51-11CF-AAFA-00AA00B6015B} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT
ActiveX: {44BBA848-CC51-11CF-AAFA-00AA00B6015C} - DirectShow
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer-Hilfe
ActiveX: {4f216970-c90c-11d1-b5c7-0000f8051515} - DirectAnimation Java Classes
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.7
ActiveX: {5945c046-1e7d-11d1-bc44-00c04fd912be} - rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser
ActiveX: {5A8D6EE0-3E18-11D0-821E-444553540000} - ICW
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsererweiterungen
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - Zugang zu MSN Site
ActiveX: {73fa19d0-2d75-11d2-995d-00c04f98bbc9} - Web Folders
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - "%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - %SystemRoot%\system32\ie4uinit.exe
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML-Datenbindung
ActiveX: {ACC563BC-4266-43f0-B6ED-9D38C4202C7E} -
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer-Hauptschriftarten
ActiveX: {CC2A9BA0-3BDD-11D0-821E-444553540000} - Taskplaner
ActiveX: {CDD7975E-60F8-41d5-8149-19E51D6F71D0} - Windows Movie Maker v2.1
ActiveX: {D27CDB6E-AE6D-11cf-96B8-444553540000} - Macromedia Shockwave Flash
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML-Hilfe
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - C:\WINDOWS\inf\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigIE
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS - RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP
ActiveX: >{881dd1c5-3dcf-431b-b061-f3f88e8be88a} - %systemroot%\system32\shmgrate.exe OCInstallUserConfigOE
Drivers32: msacm.iac2 - C:\WINDOWS\system32\iac25_32.ax (Intel Corporation)
Drivers32: msacm.l3acm - C:\WINDOWS\system32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.sl_anet - C:\WINDOWS\System32\sl_anet.acm (Sipro Lab Telecom Inc.)
Drivers32: msacm.trspch - C:\WINDOWS\System32\tssoft32.acm (DSP GROUP, INC.)
Drivers32: MSVideo8 - C:\WINDOWS\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: SENTINEL - C:\WINDOWS\System32\snti386.dll (Rainbow Technologies, Inc.)
Drivers32: vidc.AVRn - C:\WINDOWS\System32\AvidAVICodec.dll (Avid Technology, Inc)
Drivers32: vidc.cvid - C:\WINDOWS\System32\iccvid.dll (Radius Inc.)
Drivers32: vidc.iv31 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv32 - C:\WINDOWS\System32\ir32_32.dll ()
Drivers32: vidc.iv41 - C:\WINDOWS\System32\ir41_32.ax (Intel Corporation)
Drivers32: vidc.iv50 - C:\WINDOWS\System32\ir50_32.dll (Intel Corporation)
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012.03.08 00:00:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\X-Setup Pro
[2012.03.08 00:00:56 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\X-Setup Pro
[2012.03.07 18:56:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2012.03.07 18:56:12 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2012.03.07 01:30:52 | 000,000,000 | ---D | C] -- C:\Programme\ESET
[2012.03.05 23:20:49 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Verwaltung
[2012.03.05 21:16:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Malwarebytes
[2012.03.05 18:41:40 | 000,000,000 | R--D | C] -- D:\Daten\Axialis Librarian
[2012.03.02 13:58:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Avira
[2012.03.02 13:44:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2012.03.01 21:43:56 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner
[2012.03.01 18:18:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2012.03.01 18:18:51 | 000,020,464 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2012.02.26 15:44:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Pegasys Inc
[2012.02.26 15:21:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Mozilla
[2012.02.26 15:21:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Mozilla
[2012.02.26 15:21:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Macromedia
[2012.02.26 15:21:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Adobe
[2012.02.26 14:55:49 | 000,000,000 | ---D | C] -- D:\Daten\AnyDVDHD
[2012.02.26 14:33:26 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft
[2012.02.26 14:33:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\SlySoft
[2012.02.26 14:21:11 | 002,063,920 | ---- | C] (Kaspersky Lab ZAO) -- C:\Dokumente und Einstellungen\Administrator\Desktop\TDSSKiller.exe
[2012.02.26 13:56:05 | 000,000,000 | R--D | C] -- D:\Daten\Eigene Bilder
[2012.02.26 05:07:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Avira
[2012.02.26 05:02:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Apple Computer
[2012.02.26 05:02:24 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Identities
[2012.02.26 05:02:20 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Eigene Dateien
[2012.02.26 05:02:13 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Microsoft
[2012.02.26 05:02:13 | 000,000,000 | --SD | C] -- C:\Dokumente und Einstellungen\Administrator\Cookies
[2012.02.26 05:02:13 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\SendTo
[2012.02.26 05:02:13 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\Recent
[2012.02.26 05:02:13 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten
[2012.02.26 05:02:13 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Zubehör
[2012.02.26 05:02:13 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü
[2012.02.26 05:02:13 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Favoriten
[2012.02.26 05:02:13 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Autostart
[2012.02.26 05:02:13 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Vorlagen
[2012.02.26 05:02:13 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Netzwerkumgebung
[2012.02.26 05:02:13 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen
[2012.02.26 05:02:13 | 000,000,000 | -H-D | C] -- C:\Dokumente und Einstellungen\Administrator\Druckumgebung
[2012.02.26 05:02:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Lokale Einstellungen\Anwendungsdaten\Microsoft
[2012.02.26 05:02:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\Administrator\Desktop
[2012.02.25 17:22:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\CATraxx
[2012.02.24 04:41:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2012.02.23 01:21:32 | 000,000,000 | R--D | C] -- D:\Daten\Eigene Videos
[2012.02.22 13:02:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\SHELLNEW
[2012.02.22 12:56:02 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Application Data
[2012.02.22 12:54:32 | 000,606,208 | ---- | C] (hxxp://www.xvid.org) -- C:\WINDOWS\System32\xvidcore.dll
[2012.02.22 12:54:32 | 000,438,272 | ---- | C] (Gabest) -- C:\WINDOWS\System32\Mpeg2DecFilter.ax
[2012.02.22 12:54:32 | 000,139,264 | ---- | C] (hxxp://www.xvid.org) -- C:\WINDOWS\System32\xvid.ax
[2012.02.22 12:49:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2012.02.20 13:28:54 | 000,000,000 | ---D | C] -- D:\Daten\Avid
[2012.02.18 20:23:43 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Backup
[2012.02.18 20:14:50 | 000,466,944 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\ommclient.dll
[2012.02.18 20:14:50 | 000,073,728 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\xmltok.dll
[2012.02.18 20:14:50 | 000,061,440 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\libjpegV4.dll
[2012.02.18 20:14:49 | 000,614,400 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\AvOmfToolkit.dll
[2012.02.18 20:14:49 | 000,040,960 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\INETTransportLibrary.dll
[2012.02.18 20:14:49 | 000,036,864 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\xmlparse.dll
[2012.02.18 20:14:48 | 000,307,200 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\mmclient.dll
[2012.02.18 20:14:47 | 000,000,000 | ---D | C] -- C:\Programme\Digidesign
[2012.02.18 20:14:45 | 007,962,624 | ---- | C] (Pinnacle Systems Inc.) -- C:\WINDOWS\System32\SVI.dll
[2012.02.18 20:14:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MEDIA
[2012.02.18 20:14:44 | 000,421,888 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\AvidDVCodec.dll
[2012.02.18 20:14:44 | 000,092,160 | ---- | C] (Avid Technology, Inc) -- C:\WINDOWS\System32\AvidQTAVUICodec.qtx
[2012.02.18 20:14:44 | 000,057,344 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\AvidQTUpdater.dll
[2012.02.18 20:14:43 | 001,912,832 | ---- | C] (Avid Technology, Inc.) -- C:\WINDOWS\System32\SAULanguage.DLL
[2012.02.18 20:14:43 | 000,208,384 | ---- | C] (Avid Technology, Inc) -- C:\WINDOWS\System32\AvidQTAVJICodec.qtx
[2012.02.18 20:14:43 | 000,141,312 | ---- | C] (ForeFront Incorporated) -- C:\WINDOWS\System32\FFBTN32.dll
[2012.02.18 20:14:42 | 000,155,648 | ---- | C] (Avid Technology, Inc) -- C:\WINDOWS\System32\AvidAVICodec.dll
[2012.02.18 20:14:41 | 000,102,400 | ---- | C] (CASH) -- C:\WINDOWS\System32\Dac32.dll
[2012.02.18 20:14:07 | 000,045,056 | ---- | C] (Adaptec) -- C:\WINDOWS\System32\wnaspi32.dll
[2012.02.18 20:14:07 | 000,025,244 | ---- | C] (Adaptec) -- C:\WINDOWS\System32\drivers\aspi32.sys
[2012.02.18 20:14:06 | 000,005,600 | ---- | C] (Adaptec) -- C:\WINDOWS\System\winaspi.dll
[2012.02.18 20:14:06 | 000,004,672 | ---- | C] (Adaptec) -- C:\WINDOWS\System\wowpost.exe
[2012.02.18 20:13:36 | 000,000,000 | ---D | C] -- C:\Programme\Rainbow Technologies
[2012.02.18 20:12:28 | 000,086,016 | ---- | C] (MindVision) -- C:\WINDOWS\unvise32qt.exe
[2012.02.18 20:12:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QuickTime
[2012.02.18 20:12:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\QuickTime
[2012.02.18 20:12:07 | 000,000,000 | ---D | C] -- C:\Programme\QuickTime
[2012.02.17 00:37:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Audio
[2012.02.10 20:06:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2012.02.09 12:45:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Acronis
[2012.02.09 02:26:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
[2012.02.09 02:24:59 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Acronis
[2012.02.08 21:11:59 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft-Tastatur
[2012.02.08 21:11:45 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft IntelliType Pro
[2012.02.08 20:46:00 | 000,000,000 | -HSD | C] -- C:\WINDOWS\CSC
[2012.02.08 02:38:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\nView_Profiles
[2012.02.07 23:43:39 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview
[2012.02.07 23:43:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2012.02.07 23:41:59 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\LogiShrd
[2012.02.07 23:05:18 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Works
[2012.02.07 23:04:24 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\DESIGNER
[2012.02.07 22:56:31 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office
[2012.02.07 22:55:35 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2012.02.07 21:33:04 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\ssmdrv.sys
[2012.02.07 21:33:02 | 000,137,416 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2012.02.07 21:33:02 | 000,074,640 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avgntflt.sys
[2012.02.07 21:33:02 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avkmgr.sys
[2012.02.07 21:33:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Avira
[2012.02.07 20:06:55 | 000,216,064 | ---- | C] (Indigo Rose Corporation) -- C:\WINDOWS\iun3405.exe
[2012.02.07 20:06:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\desktop
[2012.02.07 15:10:18 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sun
[2012.02.07 15:10:17 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Java
[2012.02.07 15:09:40 | 000,000,000 | ---D | C] -- C:\Programme\Java
[2012.02.07 14:10:55 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\appmgmt
[2012.02.07 14:06:23 | 000,145,504 | ---- | C] (B.H.A Corporation) -- C:\WINDOWS\System32\bgsvcgen.exe
[2012.02.07 14:06:23 | 000,059,488 | ---- | C] (B.H.A Corporation) -- C:\WINDOWS\System32\GenSvcInst.exe
[2012.02.07 14:06:23 | 000,033,408 | ---- | C] (B.H.A Corporation) -- C:\WINDOWS\System32\drivers\CDRBSDRV.SYS
[2012.02.07 14:01:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Media
[2012.02.07 14:01:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\CyberLink
[2012.02.07 14:01:31 | 000,000,000 | ---D | C] -- C:\Programme\CyberLink
[2012.02.07 14:01:30 | 000,000,000 | -H-D | C] -- C:\Programme\InstallShield Installation Information
[2012.02.07 14:00:31 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\InstallShield
[2012.02.07 13:47:46 | 000,424,960 | ---- | C] (Voxware, Inc.) -- C:\WINDOWS\System32\msms001.vwp
[2012.02.07 13:47:46 | 000,281,600 | ---- | C] (Voxware, Inc.) -- C:\WINDOWS\System32\mvoice.vwp
[2012.02.07 13:47:45 | 000,278,016 | ---- | C] (Voxware, Inc.) -- C:\WINDOWS\System32\vct3216.dll
[2012.02.07 13:47:45 | 000,082,944 | ---- | C] (Voxware, Inc.) -- C:\WINDOWS\System32\vct3216.acm
[2012.02.07 13:47:45 | 000,029,184 | ---- | C] (Blue Sky Software) -- C:\WINDOWS\System32\popup.ocx
[2012.02.07 13:44:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\DVD Shrink
[2012.02.07 13:38:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\PrintMe Internet Printing
[2012.02.07 13:38:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Adobe
[2012.02.07 13:38:14 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Adobe PDF 6.0
[2012.02.07 13:38:08 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Adobe
[2012.02.07 13:33:04 | 000,569,344 | ---- | C] (Pegasus Software,LLC) -- C:\WINDOWS\System32\imagr5.dll
[2012.02.07 13:33:04 | 000,544,768 | ---- | C] (Pegasus Software, LLC) -- C:\WINDOWS\System32\imagx5.dll
[2012.02.07 13:33:04 | 000,283,920 | ---- | C] (Pegasus Software, LLC) -- C:\WINDOWS\System32\ImagXpr5.dll
[2012.02.07 13:33:04 | 000,106,496 | ---- | C] (Pegasus Software) -- C:\WINDOWS\System32\TwnLib20.dll
[2012.02.07 13:33:04 | 000,038,912 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\picn20.dll
[2012.02.07 13:33:03 | 000,155,648 | ---- | C] (Ahead Software Gmbh) -- C:\WINDOWS\System32\NeroCheck.exe
[2012.02.07 13:33:03 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Ahead
[2012.02.07 13:30:58 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WS_FTP Pro
[2012.02.07 13:29:21 | 000,451,888 | ---- | C] (Blue Sky Software Corporation.) -- C:\WINDOWS\System32\HHActiveX.dll
[2012.02.07 13:29:21 | 000,054,576 | ---- | C] (AVM Berlin GmbH) -- C:\WINDOWS\System32\FritzPort.dll
[2012.02.07 13:29:21 | 000,054,576 | ---- | C] (AVM Berlin GmbH) -- C:\WINDOWS\System32\FritzColorPort.dll
[2012.02.07 13:29:21 | 000,050,480 | ---- | C] (AVM Berlin) -- C:\WINDOWS\System32\AvmColorFaxRender.dll
[2012.02.07 13:29:21 | 000,046,384 | ---- | C] (AVM Berlin) -- C:\WINDOWS\System32\AvmFaxRender.dll
[2012.02.07 13:29:21 | 000,042,288 | ---- | C] (AVM Berlin GmbH) -- C:\WINDOWS\System32\Fridru32.dll
[2012.02.07 13:29:21 | 000,024,880 | ---- | C] (AVM Berlin) -- C:\WINDOWS\System32\FritzVistaMon.dll
[2012.02.07 13:29:21 | 000,024,880 | ---- | C] (AVM Berlin) -- C:\WINDOWS\System32\FritzVistaColorMon.dll
[2012.02.07 13:29:21 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ISDNWatch
[2012.02.07 13:26:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\FRITZ!DSL
[2012.02.07 13:26:35 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\AVM
[2012.02.07 13:25:31 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard
[2012.02.07 13:19:43 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Systools
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2012.03.08 04:10:39 | 000,000,129 | ---- | M] () -- C:\WINDOWS\winamp.ini
[2012.03.08 03:11:03 | 000,027,403 | ---- | M] () -- C:\WINDOWS\System32\nvwsapps.xml
[2012.03.07 23:22:51 | 000,320,434 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat
[2012.03.07 23:22:51 | 000,314,644 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012.03.07 23:22:51 | 000,049,364 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat
[2012.03.07 23:22:51 | 000,040,972 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012.03.07 23:17:58 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012.03.07 23:17:52 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012.03.07 23:17:47 | 1073,270,784 | -HS- | M] () -- C:\hiberfil.sys
[2012.03.07 23:17:47 | 000,261,432 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.03.07 22:59:06 | 000,001,355 | ---- | M] () -- C:\WINDOWS\imsins.BAK
[2012.03.07 19:02:04 | 000,000,049 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2012.03.07 18:53:05 | 000,000,080 | -HS- | M] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
[2012.03.07 17:51:33 | 000,000,807 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Gamma Loader.lnk
[2012.03.07 17:51:32 | 000,000,691 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Photoshop Elements 2.0.lnk
[2012.03.05 21:47:00 | 000,054,156 | -H-- | M] () -- C:\WINDOWS\QTFont.qfn
[2012.03.05 21:47:00 | 000,001,409 | ---- | M] () -- C:\WINDOWS\QTFont.for
[2012.03.05 20:09:53 | 098,981,227 | ---- | M] (Axialis Software) -- D:\Daten\MARK BRANDIS.scr
[2012.03.05 11:24:00 | 002,063,920 | ---- | M] (Kaspersky Lab ZAO) -- C:\Dokumente und Einstellungen\Administrator\Desktop\TDSSKiller.exe
[2012.03.05 01:57:37 | 000,000,330 | ---- | M] () -- C:\WINDOWS\System\cmicnfg.ini
[2012.03.04 23:04:19 | 000,688,715 | ---- | M] () -- D:\Daten\KinoImHaus.odp
[2012.03.02 13:58:49 | 000,000,761 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012.02.29 03:56:01 | 000,056,896 | -H-- | M] () -- C:\WINDOWS\System32\mlfcache.dat
[2012.02.27 20:36:04 | 000,008,192 | ---- | M] () -- C:\WINDOWS\d3dx.dat
[2012.02.27 01:15:54 | 005,577,083 | ---- | M] () -- D:\Daten\Nacht.tda3
[2012.02.26 14:33:09 | 000,000,622 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\AnyDVD.lnk
[2012.02.26 13:57:29 | 000,000,276 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Dateien.lnk
[2012.02.26 05:09:05 | 007,864,374 | ---- | M] () -- C:\WINDOWS\Orbit.bmp
[2012.02.26 05:03:01 | 000,000,211 | -HS- | M] () -- C:\boot.ini
[2012.02.26 05:01:05 | 007,864,374 | ---- | M] () -- C:\WINDOWS\snowpath.bmp
[2012.02.25 23:26:40 | 007,864,374 | ---- | M] () -- C:\WINDOWS\PlanetEris.bmp
[2012.02.25 22:00:18 | 000,000,318 | ---- | M] () -- C:\WINDOWS\PowerReg.dat
[2012.02.23 00:43:48 | 000,000,711 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avid Xpress DV.lnk
[2012.02.18 20:23:44 | 000,421,888 | ---- | M] (Avid Technology, Inc.) -- C:\WINDOWS\System32\AvidDVCodec.dll
[2012.02.18 20:12:18 | 000,000,361 | ---- | M] () -- C:\WINDOWS\System32\QuickTime.qtp
[2012.02.17 00:37:50 | 000,000,694 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\FLAC Frontend.lnk
[2012.02.16 20:56:01 | 000,137,416 | ---- | M] (Avira GmbH) -- C:\WINDOWS\System32\drivers\avipbb.sys
[2012.02.11 19:25:19 | 000,002,729 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Microsoft-Tastatur.lnk
[2012.02.09 02:25:31 | 000,000,577 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Acronis*True*Image*Home 11.0.lnk
[2012.02.08 02:53:03 | 000,000,008 | ---- | M] () -- C:\WINDOWS\System32\nvModes.dat
[2012.02.07 21:29:13 | 000,000,726 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\PowerDVD.lnk
[2012.02.07 20:06:19 | 000,216,064 | ---- | M] (Indigo Rose Corporation) -- C:\WINDOWS\iun3405.exe
[2012.02.07 15:34:24 | 000,002,067 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\FRITZ!Box starter.lnk
[2012.02.07 15:12:39 | 000,000,703 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\OpenOffice.org 3.3.lnk
[2012.02.07 14:23:05 | 000,001,630 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\TMPGEnc DVD Author 3 with DivX Authoring.lnk
[2012.02.07 14:04:57 | 000,145,504 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\System32\bgsvcgen.exe
[2012.02.07 14:04:57 | 000,059,488 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\System32\GenSvcInst.exe
[2012.02.07 14:04:57 | 000,033,408 | ---- | M] (B.H.A Corporation) -- C:\WINDOWS\System32\drivers\CDRBSDRV.SYS
[2012.02.07 13:53:46 | 000,000,548 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2012.02.07 13:48:02 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2012.02.07 13:38:23 | 000,001,591 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Acrobat 6.0 Professional.lnk
[2012.02.07 13:29:34 | 000,000,637 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\FRITZ!fax.lnk
[2012.02.07 13:23:24 | 000,000,034 | ---- | M] () -- C:\WINDOWS\System32\oeminfo.ini
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2012.03.07 19:02:11 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\iacenc.dll
[2012.03.07 19:02:11 | 000,003,072 | ---- | C] () -- C:\WINDOWS\System32\dllcache\iacenc.dll
[2012.03.07 17:51:33 | 000,000,807 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Adobe Gamma Loader.lnk
[2012.03.07 17:51:32 | 000,000,691 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Photoshop Elements 2.0.lnk
[2012.03.07 17:51:32 | 000,000,691 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Photoshop Elements 2.0.lnk
[2012.03.05 21:47:00 | 000,054,156 | -H-- | C] () -- C:\WINDOWS\QTFont.qfn
[2012.03.05 21:47:00 | 000,001,409 | ---- | C] () -- C:\WINDOWS\QTFont.for
[2012.03.03 20:56:57 | 1073,270,784 | -HS- | C] () -- C:\hiberfil.sys
[2012.02.27 20:41:39 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\korwbrkr.lex
[2012.02.27 20:41:39 | 001,158,818 | ---- | C] () -- C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2012.02.27 20:41:39 | 000,001,486 | ---- | C] () -- C:\WINDOWS\System32\noise.kor
[2012.02.27 20:41:38 | 000,002,060 | ---- | C] () -- C:\WINDOWS\System32\noise.jpn
[2012.02.27 20:41:28 | 000,211,938 | ---- | C] () -- C:\WINDOWS\System32\lcphrase.tbl
[2012.02.27 20:41:28 | 000,146,126 | ---- | C] () -- C:\WINDOWS\System32\array30.tab
[2012.02.27 20:41:28 | 000,110,566 | ---- | C] () -- C:\WINDOWS\System32\arphr.tbl
[2012.02.27 20:41:28 | 000,018,600 | ---- | C] () -- C:\WINDOWS\System32\arrayhw.tab
[2012.02.27 20:41:28 | 000,016,312 | ---- | C] () -- C:\WINDOWS\System32\arptr.tbl
[2012.02.27 20:41:27 | 000,043,242 | ---- | C] () -- C:\WINDOWS\System32\phoncode.tbl
[2012.02.27 20:41:27 | 000,024,114 | ---- | C] () -- C:\WINDOWS\System32\lcptr.tbl
[2012.02.27 20:41:27 | 000,004,071 | ---- | C] () -- C:\WINDOWS\System32\phon.tbl
[2012.02.27 20:41:27 | 000,002,714 | ---- | C] () -- C:\WINDOWS\System32\phonptr.tbl
[2012.02.27 20:41:26 | 000,116,285 | ---- | C] () -- C:\WINDOWS\System32\msdayi.tbl
[2012.02.27 20:41:26 | 000,000,700 | ---- | C] () -- C:\WINDOWS\System32\dayiptr.tbl
[2012.02.27 20:41:26 | 000,000,520 | ---- | C] () -- C:\WINDOWS\System32\dayiphr.tbl
[2012.02.27 20:41:25 | 000,044,370 | ---- | C] () -- C:\WINDOWS\System32\acode.tbl
[2012.02.27 20:41:25 | 000,044,370 | ---- | C] () -- C:\WINDOWS\System32\a234.tbl
[2012.02.27 20:41:25 | 000,001,460 | ---- | C] () -- C:\WINDOWS\System32\a15.tbl
[2012.02.27 20:41:21 | 001,223,500 | ---- | C] () -- C:\WINDOWS\System32\WINZM.MB
[2012.02.27 20:41:20 | 001,783,864 | ---- | C] () -- C:\WINDOWS\System32\WINPY.MB
[2012.02.27 20:41:20 | 001,564,868 | ---- | C] () -- C:\WINDOWS\System32\WINSP.MB
[2012.02.27 20:41:17 | 000,134,339 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imekr.lex
[2012.02.27 20:41:17 | 000,108,827 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hanja.lex
[2012.02.27 20:40:36 | 000,173,568 | ---- | C] () -- C:\WINDOWS\System32\dllcache\chtskf.dll
[2012.02.27 20:40:31 | 000,175,104 | ---- | C] () -- C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2012.02.27 20:40:26 | 000,059,392 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imscinst.exe
[2012.02.27 20:40:11 | 013,463,552 | ---- | C] () -- C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2012.02.27 20:40:10 | 000,196,665 | ---- | C] () -- C:\WINDOWS\System32\dllcache\imjpinst.exe
[2012.02.27 20:36:04 | 000,008,192 | ---- | C] () -- C:\WINDOWS\d3dx.dat
[2012.02.27 20:13:48 | 000,002,205 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe After Effects 5.5.lnk
[2012.02.27 16:40:26 | 000,056,896 | -H-- | C] () -- C:\WINDOWS\System32\mlfcache.dat
[2012.02.26 17:10:26 | 005,577,083 | ---- | C] () -- D:\Daten\Nacht.tda3
[2012.02.26 14:33:09 | 000,000,622 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\AnyDVD.lnk
[2012.02.26 14:06:54 | 000,000,080 | -HS- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\.zreglib
[2012.02.26 13:57:29 | 000,000,276 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Dokumente\Eigene Dateien.lnk
[2012.02.26 05:09:04 | 007,864,374 | ---- | C] () -- C:\WINDOWS\Orbit.bmp
[2012.02.26 05:04:02 | 007,864,374 | ---- | C] () -- C:\WINDOWS\snowpath.bmp
[2012.02.26 05:02:14 | 000,001,599 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Remoteunterstützung.lnk
[2012.02.26 05:02:14 | 000,000,778 | ---- | C] () -- C:\Dokumente und Einstellungen\Administrator\Startmenü\Programme\Windows Media Player.lnk
[2012.02.25 23:26:36 | 007,864,374 | ---- | C] () -- C:\WINDOWS\PlanetEris.bmp
[2012.02.25 21:59:57 | 000,000,318 | ---- | C] () -- C:\WINDOWS\PowerReg.dat
[2012.02.18 20:17:45 | 000,000,711 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avid Xpress DV.lnk
[2012.02.18 20:14:45 | 000,054,272 | ---- | C] () -- C:\WINDOWS\System32\drivers\AvidXPSerial.sys
[2012.02.18 20:14:44 | 000,237,568 | ---- | C] () -- C:\WINDOWS\System32\AvidStartup.exe
[2012.02.18 20:14:44 | 000,019,968 | ---- | C] () -- C:\WINDOWS\System32\Cpuinf32.dll
[2012.02.18 20:14:43 | 000,066,560 | ---- | C] () -- C:\WINDOWS\System32\AvidQTAVdvCodec.qtx
[2012.02.18 20:14:42 | 000,289,280 | ---- | C] () -- C:\WINDOWS\System32\AvidQTCodec.qtx
[2012.02.18 20:12:17 | 000,000,361 | ---- | C] () -- C:\WINDOWS\System32\QuickTime.qtp
[2012.02.18 19:49:50 | 000,074,240 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2012.02.17 00:37:49 | 000,000,694 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\FLAC Frontend.lnk
[2012.02.13 02:15:21 | 000,160,217 | ---- | C] () -- C:\WINDOWS\System32\PowerToysLicense.rtf
[2012.02.09 02:25:31 | 000,000,577 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Acronis*True*Image*Home 11.0.lnk
[2012.02.08 21:11:59 | 000,002,729 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Microsoft-Tastatur.lnk
[2012.02.08 02:40:28 | 000,000,008 | ---- | C] () -- C:\WINDOWS\System32\nvModes.dat
[2012.02.07 23:43:41 | 000,186,407 | ---- | C] () -- C:\WINDOWS\System32\nvapps.xml
[2012.02.07 23:43:41 | 000,027,403 | ---- | C] () -- C:\WINDOWS\System32\nvwsapps.xml
[2012.02.07 23:43:39 | 000,018,070 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu
[2012.02.07 21:33:21 | 000,000,761 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Avira Control Center.lnk
[2012.02.07 21:15:33 | 000,000,049 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2012.02.07 18:09:36 | 000,000,704 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\JDownloader.lnk
[2012.02.07 18:09:36 | 000,000,664 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\JDownloader Deinstallationsprogramm.lnk
[2012.02.07 18:09:36 | 000,000,649 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\JDownloader Update.lnk
[2012.02.07 15:12:39 | 000,000,703 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\OpenOffice.org 3.3.lnk
[2012.02.07 14:32:33 | 000,000,129 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2012.02.07 14:23:05 | 000,001,630 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\TMPGEnc DVD Author 3 with DivX Authoring.lnk
[2012.02.07 14:01:32 | 000,000,726 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\PowerDVD.lnk
[2012.02.07 13:57:34 | 000,000,668 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Final Draft 6.lnk
[2012.02.07 13:53:46 | 000,000,548 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Mozilla Firefox.lnk
[2012.02.07 13:53:46 | 000,000,548 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Firefox.lnk
[2012.02.07 13:47:45 | 000,028,160 | ---- | C] () -- C:\WINDOWS\System32\regcodec.exe
[2012.02.07 13:38:23 | 000,001,818 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Adobe Acrobat 6.0 Professional.lnk
[2012.02.07 13:38:23 | 000,001,818 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Acrobat Distiller 6.0.lnk
[2012.02.07 13:38:23 | 000,001,591 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Adobe Acrobat 6.0 Professional.lnk
[2012.02.07 13:29:34 | 000,000,637 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\FRITZ!fax.lnk
[2012.02.07 13:26:37 | 000,002,067 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\FRITZ!Box starter.lnk
[2012.02.07 13:23:24 | 000,000,034 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2012.02.07 02:47:40 | 000,993,347 | ---- | C] () -- C:\WINDOWS\unins000.exe
[2012.02.07 02:47:40 | 000,020,426 | ---- | C] () -- C:\WINDOWS\unins000.dat
[2012.02.07 01:10:52 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012.02.07 01:02:36 | 000,021,740 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012.02.06 23:13:55 | 000,004,161 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012.02.06 23:11:53 | 000,261,432 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2012.02.01 01:13:03 | 000,233,472 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.exe
[2012.02.01 01:13:03 | 000,028,672 | ---- | C] () -- C:\WINDOWS\System32\cmirmdrv.dll
========== LOP Check ==========
[2012.02.26 15:44:53 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\Pegasys Inc
[2012.03.08 00:00:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Administrator\Anwendungsdaten\X-Setup Pro
[2012.02.09 02:26:28 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Acronis
[2012.02.07 13:29:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\ISDNWatch
[2012.02.26 14:33:26 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SlySoft
[2012.03.08 00:00:56 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\X-Setup Pro
[2012.02.07 04:09:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.02.07 01:40:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\Acronis
[2012.03.05 21:05:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\Axialis
[2012.02.07 13:59:52 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\Final Draft
[2012.02.07 13:29:21 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\FRITZ!fax für FRITZ!Box
[2012.02.07 14:27:19 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\LEAPS
[2012.02.07 17:11:46 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\OpenOffice.org
[2012.03.05 21:05:04 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\Papyrus Autor
[2012.02.07 03:19:22 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\Pegasus Mail
[2012.02.07 14:06:42 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\Pegasys Inc
[2012.02.22 13:55:11 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\Dorthonion\Anwendungsdaten\PPT2DVD
[2012.02.09 12:45:30 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Acronis
========== Purity Check ==========
========== Custom Scans ==========
< %ALLUSERSPROFILE%\Application Data\*. >
[2012.02.22 12:56:02 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\All Users\Application Data\Moyea
< %ALLUSERSPROFILE%\Application Data\*.exe /s >
Invalid Environment Variable: APPDATA
Invalid Environment Variable: APPDATA
< %SYSTEMDRIVE%\*.exe >
< MD5 for: AGP440.SYS >
[2008.04.14 07:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
< MD5 for: ATAPI.SYS >
[2008.04.14 07:03:54 | 020,108,202 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008.04.13 23:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
< MD5 for: EVENTLOG.DLL >
[2008.04.14 06:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\dllcache\eventlog.dll
[2008.04.14 06:52:12 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=04955AA695448C181B367D964AF158AA -- C:\WINDOWS\system32\eventlog.dll
< MD5 for: NETLOGON.DLL >
[2008.04.14 06:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008.04.14 06:52:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=0098D35F91DEAB9C127360A877F2CF84 -- C:\WINDOWS\system32\netlogon.dll
< MD5 for: SCECLI.DLL >
[2008.04.14 06:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\dllcache\scecli.dll
[2008.04.14 06:52:24 | 000,187,904 | ---- | M] (Microsoft Corporation) MD5=5132443DF6FC3771A17AB4AE55DCBC28 -- C:\WINDOWS\system32\scecli.dll
< MD5 for: USER32.DLL >
[2008.04.14 06:52:32 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\dllcache\user32.dll
[2008.04.14 06:52:32 | 000,580,096 | ---- | M] (Microsoft Corporation) MD5=B0050CC5340E3A0760DD8B417FF7AEBD -- C:\WINDOWS\system32\user32.dll
< MD5 for: USERINIT.EXE >
[2008.04.14 06:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\dllcache\userinit.exe
[2008.04.14 06:53:04 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=788F95312E26389D596C0FA55834E106 -- C:\WINDOWS\system32\userinit.exe
< MD5 for: WINLOGON.EXE >
[2008.04.14 06:53:06 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\dllcache\winlogon.exe
[2008.04.14 06:53:06 | 000,513,024 | ---- | M] (Microsoft Corporation) MD5=F09A527B422E25C478E38CAA0E44417A -- C:\WINDOWS\system32\winlogon.exe
< MD5 for: WS2IFSL.SYS >
[2004.08.04 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\dllcache\ws2ifsl.sys
[2004.08.04 13:00:00 | 000,012,032 | ---- | M] (Microsoft Corporation) MD5=6ABE6E225ADB5A751622A9CC3BC19CE8 -- C:\WINDOWS\system32\drivers\ws2ifsl.sys
< %systemroot%\system32\drivers\*.sys /lockedfiles >
< %systemroot%\System32\config\*.sav >
[2012.02.07 00:10:36 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2012.02.07 00:10:36 | 001,089,536 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2012.02.07 00:10:35 | 000,442,368 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav
< %systemroot%\*. /mp /s >
< %systemroot%\system32\*.dll /lockedfiles >
[1 C:\WINDOWS\system32\*.tmp files -> C:\WINDOWS\system32\*.tmp -> ]
< End of report > Die "Extras" sind hier: Code:
OTL Extras logfile created on: 08.03.2012 12:51:39 - Run 1
OTL by OldTimer - Version 3.2.35.0 Folder = D:\CD
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
1023,48 Mb Total Physical Memory | 666,90 Mb Available Physical Memory | 65,16% Memory free
2,40 Gb Paging File | 2,03 Gb Available in Paging File | 84,64% Paging File free
Paging file location(s): E:\pagefile.sys 1536 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 38,28 Gb Total Space | 28,06 Gb Free Space | 73,28% Space Free | Partition Type: NTFS
Drive D: | 465,76 Gb Total Space | 327,06 Gb Free Space | 70,22% Space Free | Partition Type: NTFS
Drive E: | 200,01 Gb Total Space | 193,09 Gb Free Space | 96,54% Space Free | Partition Type: NTFS
Drive G: | 286,47 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS
Computer Name: DESKTOP-BVW | User Name: Administrator | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] -- rundll32.exe shdocvw.dll,OpenURL %l
[HKEY_USERS\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- E:\Internet\Firefox\firefox.exe (Mozilla Corporation)
[HKEY_USERS\S-1-5-21-1614895754-823518204-1606980848-500\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- E:\Internet\Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
InternetShortcut [open] -- rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
========== System Restore Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
========== Authorized Applications List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"%windir%\explorer.exe" = %windir%\explorer.exe -- (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe" = C:\Programme\Gemeinsame Dateien\Apple\Apple Application Support\WebKit2WebProcess.exe:*:Enabled:WebKit -- (Apple Inc.)
"E:\Systools\Fritz.box\IGDCTRL.EXE" = E:\Systools\Fritz.box\IGDCTRL.EXE:*:Enabled:FRITZ!Box starter - igdctrl.exe -- (AVM Berlin)
"E:\Systools\Fritz.box\FBoxUpd.exe" = E:\Systools\Fritz.box\FBoxUpd.exe:*:Enabled:FRITZ!Box starter - fboxupd.exe -- (AVM Berlin)
"E:\Systools\Fritz.box\WebwaIgd.exe" = E:\Systools\Fritz.box\WebwaIgd.exe:*:Enabled:FRITZ!Box starter - webwaigd.exe -- (AVM Berlin)
"E:\Systools\Fritz.box\Setup\igd_finder.exe" = E:\Systools\Fritz.box\Setup\igd_finder.exe:LocalSubNet:Enabled:AVM FRITZ!fax for FRITZ!Box - igd_finder.exe -- ()
"E:\Internet\WS_FTP\ftp95pro.exe" = E:\Internet\WS_FTP\ftp95pro.exe:*:Enabled:WS_FTP 95 -- (Ipswitch, Inc. 81 Hartwell Ave. Lexington, MA)
"%windir%\explorer.exe" = %windir%\explorer.exe -- (Microsoft Corporation)
"C:\Programme\Java\jre6\bin\javaw.exe" = C:\Programme\Java\jre6\bin\javaw.exe:*:Disabled:Java(TM) Platform SE binary -- (Sun Microsystems, Inc.)
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{11E94FDB-C895-45F1-B756-1C9B8C36C8F1}" = Microsoft IntelliType Pro 7.1
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83216022FF}" = Java(TM) 6 Update 22
"{3127F76D-5335-4AC7-BD1E-2F5247A23C24}" = iTunes
"{31851B85-C98E-44DE-8750-9843BCD63963}" = Adobe After Effects 5.5
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3E9F2540-DD55-42FB-8EB6-5508EEC54013}" = TMPGEnc DVD Author 3 with DivX Authoring
"{4286716B-1287-48E7-9078-3DC8248DBA96}" = OpenOffice.org 3.3
"{4E9F7AD8-E3EC-4636-BD25-A5AD97E73C64}" = FRITZ!Box starter
"{633A06C3-B709-479A-AAB3-5EE94AD9EE4B}" = Acronis*True*Image*Home
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{791CAF6C-90A3-11D4-8306-00D0B72E1DB9}" = Sentinel System Driver
"{8153ED9A-C94A-426E-9880-5E6775C08B62}" = Apple Mobile Device Support
"{90120000-0010-0407-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (German) 12
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{2D93D6D2-CA5B-4767-91DA-3E8F60E81664}" =
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = 2007 Microsoft Office Suite Service Pack 3 (SP3)
"{A83279FD-CA4B-4206-9535-90974DE76654}" = Apple Application Support
"{A9F5E1E1-1281-4862-90B4-6CF8E6AF83CE}_is1" = Pegasus Mail HTML Renderer 2.4.7.2
"{AAF4238F-7C29-451D-9925-C753271A5728}" = Microsoft Visual C++ Run Time Lib Setup
"{AC76BA86-1033-0000-7760-000000000001}" = Adobe Acrobat 6.0 Professional
"{CC8B19D1-91D2-4D5B-B331-F885F432745E}" = Final Draft 6
"{EEA444D5-3CCF-47F7-AAB9-A05CA3CF97D8}" = Avid Xpress DV
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop Elements 2.0" = Adobe Photoshop Elements 2.0
"AnyDVD" = AnyDVD
"Avira AntiVir Desktop" = Avira Antivirus Premium 2012
"CCleaner" = CCleaner
"CDex" = CDex extraction audio
"C-Media Audio Driver" = C-Media WDM Audio Driver
"Customizer XP_is1" = Customizer XP
"Dramatica Pro 4.0" = Dramatica Pro 4.0
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ESET Online Scanner" = ESET Online Scanner v3
"Final Draft v6.0.2.5 Update" = Final Draft v6.0.2.5 Update
"FLAC" = FLAC 1.2.1b (remove only)
"FRITZ! 2.0" = AVM FRITZ!fax für FRITZ!Box
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.1.1000
"Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition
"NVIDIA Drivers" = NVIDIA Drivers
"Papyrus Autor" = Papyrus Autor -- from R.O.M. logicware GmbH
"Pegasus Mail" = Pegasus Mail
"Pegasus Mail, Deutsche Komplettversion_is1" = Pegasus Mail v4.63 Release 1, Build 325 (Deutsche Komplettversi
"QuickTime" = QuickTime
"Sound Forge 5.0" = Sound Forge 5.0
"Tweak UI 2.10" = Tweak UI
"WS_FTPPro" = Ipswitch WS_FTP Pro Uninstall
"xqdcXSP_is1" = XQDC X-Setup Pro 9.2.100
========== HKEY_USERS Uninstall List ==========
[HKEY_USERS\S-1-5-21-1614895754-823518204-1606980848-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Mozilla Firefox 10.0.2 (x86 de)" = Mozilla Firefox 10.0.2 (x86 de)
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 21.02.2012 12:24:02 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 51813672
Error - 21.02.2012 12:24:04 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 21.02.2012 12:24:04 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 51815625
Error - 21.02.2012 12:24:04 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 51815625
Error - 21.02.2012 12:24:06 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 21.02.2012 12:24:06 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 51817594
Error - 21.02.2012 12:24:06 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 51817594
Error - 21.02.2012 12:24:08 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: Continuously busy for more than a second
Error - 21.02.2012 12:24:08 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledEvent 51819563
Error - 21.02.2012 12:24:08 | Computer Name = DESKTOP-BVW | Source = Bonjour Service | ID = 100
Description = Task Scheduling Error: m->NextScheduledSPRetry 51819563
[ System Events ]
Error - 04.03.2012 21:02:17 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Avira Echtzeit Scanner" wurde unerwartet beendet. Dies
ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
durchgeführt: Starten Sie den Dienst neu..
Error - 04.03.2012 21:02:17 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem
Fehler beendet: 1 (0x1).
Error - 05.03.2012 12:12:52 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Avira Email Schutz" ist vom Dienst "Avira Echtzeit Scanner"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1066
Error - 05.03.2012 12:12:52 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Avira Echtzeit Scanner" wurde mit folgendem dienstspezifischem
Fehler beendet: 306 (0x132).
Error - 05.03.2012 12:12:52 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Avira Browser Schutz" ist vom Dienst "Avira Echtzeit Scanner"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1066
Error - 07.03.2012 12:36:31 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7011
Description = Zeitüberschreitung (30000 ms) beim Warten auf eine Transaktionsrückmeldung
von Dienst AntiVirSchedulerService.
Error - 07.03.2012 13:20:58 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Avira Browser Schutz" wurde mit folgendem dienstspezifischem
Fehler beendet: 1 (0x1).
Error - 07.03.2012 13:21:01 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Avira Echtzeit Scanner" wurde unerwartet beendet. Dies
ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden
durchgeführt: Starten Sie den Dienst neu..
Error - 07.03.2012 13:21:01 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Avira Email Schutz" wurde mit folgendem dienstspezifischem
Fehler beendet: 1 (0x1).
Error - 07.03.2012 13:21:05 | Computer Name = DESKTOP-BVW | Source = Service Control Manager | ID = 7024
Description = Der Dienst "Avira Echtzeit Scanner" wurde mit folgendem dienstspezifischem
Fehler beendet: 306 (0x132).
< End of report > |