Sorry das ich erst so spät antworte
aswMBR: Code:
aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2012-11-25 11:09:49
-----------------------------
11:09:49.478 OS Version: Windows x64 6.1.7601 Service Pack 1
11:09:49.478 Number of processors: 4 586 0x403
11:09:49.478 ComputerName: GIANNI-PC UserName: Gianni
11:09:52.284 Initialize success
11:09:52.392 AVAST engine defs: 12112500
11:10:47.459 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\0000005d
11:10:47.465 Disk 0 Vendor: ST1000DM 1AJ1 Size: 953869MB BusType: 11
11:10:47.488 Disk 0 MBR read successfully
11:10:47.493 Disk 0 MBR scan
11:10:47.500 Disk 0 Windows 7 default MBR code
11:10:47.509 Disk 0 Partition 1 80 (A) 07 HPFS/NTFS NTFS 953868 MB offset 2048
11:10:47.528 Disk 0 scanning C:\Windows\system32\drivers
11:10:53.402 Service scanning
11:11:09.991 Modules scanning
11:11:09.996 Disk 0 trace - called modules:
11:11:10.073 ntoskrnl.exe CLASSPNP.SYS disk.sys amdxata.sys ACPI.sys storport.sys hal.dll amdsata.sys
11:11:10.082 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0xfffffa8007ad8060]
11:11:10.090 3 CLASSPNP.SYS[fffff8800160143f] -> nt!IofCallDriver -> [0xfffffa8006b1cb80]
11:11:10.424 5 amdxata.sys[fffff880011557a8] -> nt!IofCallDriver -> [0xfffffa8006b1ed00]
11:11:10.428 7 ACPI.sys[fffff88000f407a1] -> nt!IofCallDriver -> \Device\0000005d[0xfffffa8006b1b420]
11:11:11.761 AVAST engine scan C:\Windows
11:11:16.224 AVAST engine scan C:\Windows\system32
11:13:09.922 AVAST engine scan C:\Windows\system32\drivers
11:13:39.489 AVAST engine scan C:\Users\Gianni
11:15:39.769 AVAST engine scan C:\ProgramData
11:16:04.341 Scan finished successfully
11:17:25.815 Disk 0 MBR has been saved successfully to "C:\Users\Gianni\Desktop\MBR.dat"
11:17:25.818 The log file has been saved successfully to "C:\Users\Gianni\Desktop\log1.txt"
OTL: Code:
OTL logfile created on: 25.11.2012 11:21:13 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gianni\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
8,00 Gb Total Physical Memory | 6,33 Gb Available Physical Memory | 79,19% Memory free
15,99 Gb Paging File | 14,05 Gb Available in Paging File | 87,88% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,51 Gb Total Space | 866,80 Gb Free Space | 93,05% Space Free | Partition Type: NTFS
Computer Name: GIANNI-PC | User Name: Gianni | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2012.11.25 11:08:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gianni\Desktop\OTL.exe
PRC - [2012.11.19 21:48:16 | 002,254,768 | ---- | M] (LogMeIn Inc.) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
PRC - [2012.10.30 23:50:59 | 004,297,136 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastUI.exe
PRC - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe
PRC - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
PRC - [2009.01.26 15:31:16 | 002,144,088 | RHS- | M] (Safer Networking Limited) -- C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
PRC - [2009.01.26 15:31:10 | 001,153,368 | ---- | M] (Safer Networking Ltd.) -- C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
========== Modules (No Company Name) ==========
========== Services (SafeList) ==========
SRV:64bit: - [2012.09.28 15:43:40 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:64bit: - [2012.09.28 02:38:16 | 000,239,616 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2010.04.06 16:30:38 | 000,031,272 | ---- | M] () [On_Demand | Stopped] -- C:\Windows\SysNative\AppleChargerSrv.exe -- (AppleChargerSrv)
SRV - [2012.11.19 21:48:16 | 002,462,128 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc)
SRV - [2012.11.09 11:21:24 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012.10.30 23:50:59 | 000,044,808 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Programme\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.08.24 14:38:06 | 000,068,136 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE -- (ES lite Service)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
========== Driver Services (SafeList) ==========
DRV:64bit: - [2012.10.30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2012.10.30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2012.10.30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2012.10.30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2012.10.30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2012.10.15 17:59:28 | 000,054,072 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2012.09.28 03:21:20 | 010,697,216 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.09.28 02:12:52 | 000,460,288 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012.08.23 15:10:20 | 000,019,456 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV:64bit: - [2012.08.23 15:08:26 | 000,030,208 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2012.08.23 15:07:35 | 000,057,856 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2012.03.01 07:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2011.11.02 10:48:26 | 000,021,616 | ---- | M] () [Kernel | System | Running] -- C:\Windows\SysNative\drivers\AppleCharger.sys -- (AppleCharger)
DRV:64bit: - [2011.08.23 14:57:24 | 000,565,352 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.07.29 04:40:00 | 000,079,104 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronXHCI.sys -- (EtronXHCI)
DRV:64bit: - [2011.07.29 04:40:00 | 000,056,960 | ---- | M] (Etron Technology Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\EtronHub3.sys -- (EtronHub3)
DRV:64bit: - [2011.07.06 11:12:50 | 000,367,976 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService)
DRV:64bit: - [2010.11.21 04:23:47 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.12.22 02:26:36 | 000,038,456 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2009.10.07 11:13:34 | 000,070,200 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.10.07 11:13:34 | 000,028,728 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2009.05.06 08:01:12 | 000,015,872 | ---- | M] (ROCCAT Development, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ArvoFltr.sys -- (ArvoFltr)
DRV:64bit: - [2009.03.18 16:35:42 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi)
DRV - [2012.11.25 11:06:06 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\gdrv.sys -- (gdrv)
DRV - [2012.11.17 16:11:13 | 000,030,528 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\GVTDrv64.sys -- (GVTDrv64)
DRV - [2012.04.09 10:13:58 | 000,057,472 | ---- | M] (Advanced Micro Devices) [Kernel | Auto | Running] -- C:\Programme\ATI Technologies\ATI.ACE\Fuel\amd64\aoddriver2.sys -- (AODDriver4.2)
DRV - [2010.03.12 05:40:48 | 000,052,280 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Program Files (x86)\Gigabyte\ET6\amd64\AODDriver.sys -- (AODDriver)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 75 6B 79 5F C2 C4 CD 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {2D0922E9-70CC-4fe9-8233-FE8AE66B61A1}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{2D0922E9-70CC-4fe9-8233-FE8AE66B61A1}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=SPLBR1&pc=SPLH
IE - HKCU\..\SearchScopes\{6E16EA4D-F005-4cb2-A033-9E5B323CC839}: "URL" = hxxp://www.google.com/cse?cx=partner-pub-3794288947762788%3A7941509802&ie=UTF-8&sa=Search&siteurl=www.google.com%2Fcse%2Fhome%3Fcx%3Dpartner-pub-3794288947762788%3A7941509802&q={searchTerms}
IE - HKCU\..\SearchScopes\{BDBC1C92-F2B0-4211-BC17-9D6A3598CACF}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBDSV
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.9.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.9.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll (Google Inc.)
========== Chrome ==========
CHR - homepage:
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms}&sugkey={google:suggestAPIKeyParameter}
CHR - homepage:
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\23.0.1271.64\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.123\npGoogleUpdate3.dll
CHR - Extension: Click to activate/deactivate ProxTube = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek\1.1.5_0\
CHR - Extension: Google Drive = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: Google-Suche = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: avast! WebRep = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1474_0\
CHR - Extension: Google Mail = C:\Users\Gianni\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\
O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - Startup: C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{3B14880B-2D53-48DA-8ADC-74E2CC5D30C8}: DhcpNameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
========== Files/Folders - Created Within 30 Days ==========
[2012.11.25 11:08:54 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Gianni\Desktop\OTL.exe
[2012.11.25 11:08:45 | 004,732,416 | ---- | C] (AVAST Software) -- C:\Users\Gianni\Desktop\aswMBR.exe
[2012.11.20 12:51:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2012.11.20 12:51:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi
[2012.11.17 23:36:04 | 000,033,856 | -H-- | C] (LogMeIn, Inc.) -- C:\Windows\SysNative\hamachi.sys
[2012.11.17 23:35:32 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\LogMeIn Hamachi
[2012.11.17 23:28:44 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\.minecraft
[2012.11.17 23:00:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun
[2012.11.17 23:00:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2012.11.17 22:59:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java
[2012.11.17 22:56:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mojang
[2012.11.17 18:52:02 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\TS3Client
[2012.11.17 18:50:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012.11.17 18:23:04 | 000,000,000 | ---D | C] -- C:\Users\Gianni\Documents\My Curse
[2012.11.17 18:22:55 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
[2012.11.17 18:13:42 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Skype
[2012.11.17 18:13:34 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2012.11.17 18:13:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2012.11.17 18:13:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2012.11.17 18:13:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2012.11.17 18:04:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
[2012.11.17 18:04:26 | 000,000,000 | ---D | C] -- C:\Program Files\TeamSpeak 3 Client
[2012.11.17 16:53:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment
[2012.11.17 16:52:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Battle.net
[2012.11.17 16:36:32 | 000,025,232 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.11.17 16:36:31 | 000,370,288 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.11.17 16:36:28 | 000,054,072 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012.11.17 16:36:27 | 000,059,728 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.11.17 16:36:26 | 000,984,144 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.11.17 16:36:20 | 000,285,328 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012.11.17 16:36:20 | 000,071,600 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.11.17 16:35:11 | 000,041,224 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.11.17 16:35:10 | 000,227,648 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.11.17 16:35:02 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2012.11.17 16:35:02 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012.11.17 16:34:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
[2012.11.17 16:34:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2012.11.17 16:34:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2012.11.17 16:11:28 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\AMD
[2012.11.17 16:11:12 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\ATI
[2012.11.17 16:11:12 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\ATI
[2012.11.17 16:11:12 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI
[2012.11.17 14:48:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD AVT
[2012.11.17 14:48:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2012.11.17 14:48:25 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2012.11.17 14:48:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2012.11.17 14:48:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2012.11.17 14:47:31 | 000,000,000 | ---D | C] -- C:\ProgramData\AMD
[2012.11.17 14:46:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2012.11.17 14:07:44 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Microsoft Games
[2012.11.17 14:07:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\World of Warcraft
[2012.11.17 14:01:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET
[2012.11.17 13:59:56 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2012.11.17 13:54:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2012.11.17 13:53:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2012.11.17 13:53:11 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Google
[2012.11.17 13:52:53 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Deployment
[2012.11.17 13:52:53 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Apps
[2012.11.17 13:47:33 | 000,000,000 | ---D | C] -- C:\Program Files\GIGABYTE
[2012.11.17 13:47:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Etron Technology
[2012.11.17 13:46:20 | 000,000,000 | ---D | C] -- C:\Program Files\ATI
[2012.11.17 13:46:17 | 000,000,000 | ---D | C] -- C:\Program Files\DIFX
[2012.11.17 13:46:12 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE
[2012.11.17 13:46:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD
[2012.11.17 13:44:32 | 000,565,352 | ---- | C] (Realtek ) -- C:\Windows\SysNative\drivers\Rt64win7.sys
[2012.11.17 13:43:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Splashtop
[2012.11.17 13:41:44 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2012.11.17 13:41:44 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2012.11.17 13:41:26 | 000,372,056 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64H.dll
[2012.11.17 13:41:26 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DHT64.dll
[2012.11.17 13:41:26 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DAA64.dll
[2012.11.17 13:41:26 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64H.dll
[2012.11.17 13:41:26 | 000,097,624 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64H.dll
[2012.11.17 13:41:26 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64H.dll
[2012.11.17 13:41:25 | 003,308,376 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64H.dll
[2012.11.17 13:41:25 | 000,426,328 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64H.dll
[2012.11.17 13:41:25 | 000,136,024 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64H.dll
[2012.11.17 13:41:25 | 000,118,104 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64H.dll
[2012.11.17 13:41:25 | 000,074,072 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64H.dll
[2012.11.17 13:41:21 | 002,604,376 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2012.11.17 13:41:20 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2012.11.17 13:41:20 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2012.11.17 13:41:20 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2012.11.17 13:41:20 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2012.11.17 13:41:14 | 000,375,128 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2012.11.17 13:41:14 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2012.11.17 13:41:14 | 000,204,120 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2012.11.17 13:41:14 | 000,101,208 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2012.11.17 13:41:14 | 000,078,680 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2012.11.17 13:41:13 | 000,310,104 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2012.11.17 13:41:07 | 002,132,824 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2012.11.17 13:41:07 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2012.11.17 13:41:00 | 002,085,440 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2012.11.17 13:40:55 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2012.11.17 13:40:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2012.11.17 13:40:02 | 000,000,000 | -H-D | C] -- C:\ProgramData\{8533ADFA-85F0-4dc1-946A-2A0BA58E78E3}
[2012.11.17 13:39:59 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Splashtop
[2012.11.17 13:38:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE
[2012.11.17 13:38:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gigabyte
[2012.11.17 13:38:54 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2012.11.17 13:38:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2012.11.17 13:35:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2012.11.17 13:35:05 | 000,000,000 | R--D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012.11.17 13:35:05 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Searches
[2012.11.17 13:35:05 | 000,000,000 | R--D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012.11.17 13:34:53 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Identities
[2012.11.17 13:34:47 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Contacts
[2012.11.17 13:34:46 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2012.11.17 13:34:44 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\VirtualStore
[2012.11.17 13:34:22 | 000,000,000 | --SD | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Videos
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Saved Games
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Pictures
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Music
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Links
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Favorites
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Downloads
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Documents
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\Desktop
[2012.11.17 13:34:22 | 000,000,000 | R--D | C] -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Vorlagen
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\AppData\Local\Verlauf
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\AppData\Local\Temporary Internet Files
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Startmenü
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\SendTo
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Recent
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Netzwerkumgebung
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Lokale Einstellungen
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Documents\Eigene Videos
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Documents\Eigene Musik
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Eigene Dateien
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Documents\Eigene Bilder
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Druckumgebung
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Cookies
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\AppData\Local\Anwendungsdaten
[2012.11.17 13:34:22 | 000,000,000 | -HSD | C] -- C:\Users\Gianni\Anwendungsdaten
[2012.11.17 13:34:22 | 000,000,000 | -H-D | C] -- C:\Users\Gianni\AppData
[2012.11.17 13:34:22 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Temp
[2012.11.17 13:34:22 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Local\Microsoft
[2012.11.17 13:34:22 | 000,000,000 | ---D | C] -- C:\Users\Gianni\AppData\Roaming\Media Center Programs
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2012.11.17 13:34:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2012.11.17 13:22:04 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2012.11.17 13:19:22 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2012.11.17 13:17:18 | 000,000,000 | ---D | C] -- C:\Program Files\INTERNET_EXPLORER
[2012.11.17 13:17:17 | 000,000,000 | ---D | C] -- C:\Windows\PANTHER
========== Files - Modified Within 30 Days ==========
[2012.11.25 11:17:25 | 000,000,512 | ---- | M] () -- C:\Users\Gianni\Desktop\MBR.dat
[2012.11.25 11:14:10 | 000,021,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.11.25 11:14:10 | 000,021,664 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.11.25 11:09:26 | 004,732,416 | ---- | M] (AVAST Software) -- C:\Users\Gianni\Desktop\aswMBR.exe
[2012.11.25 11:08:58 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Gianni\Desktop\OTL.exe
[2012.11.25 11:06:28 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.25 11:05:56 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.11.25 11:05:51 | 2145,296,383 | -HS- | M] () -- C:\hiberfil.sys
[2012.11.25 00:58:10 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.11.20 07:07:20 | 003,974,166 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.11.20 07:07:20 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.11.20 07:07:20 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.11.20 07:07:20 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.11.20 07:07:20 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.11.19 00:11:18 | 000,072,822 | ---- | M] () -- C:\Windows\SysWow64\ieuinit.inf
[2012.11.19 00:11:18 | 000,072,822 | ---- | M] () -- C:\Windows\SysNative\ieuinit.inf
[2012.11.18 11:26:06 | 000,275,856 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.11.17 18:50:20 | 000,001,967 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.11.17 18:50:16 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012.11.17 18:23:02 | 000,000,000 | ---- | M] () -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
[2012.11.17 18:22:55 | 000,000,318 | ---- | M] () -- C:\Users\Gianni\Desktop\Curse Client.appref-ms
[2012.11.17 18:13:34 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2012.11.17 18:04:28 | 000,000,976 | ---- | M] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012.11.17 16:34:39 | 000,001,267 | ---- | M] () -- C:\Users\Gianni\Desktop\Spybot - Search & Destroy.lnk
[2012.11.17 16:11:13 | 000,030,528 | ---- | M] () -- C:\Windows\GVTDrv64.sys
[2012.11.17 16:11:13 | 000,000,004 | ---- | M] () -- C:\Windows\SysWow64\GVTunner.ref
[2012.11.17 15:40:01 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin
[2012.11.17 13:54:19 | 000,002,290 | ---- | M] () -- C:\Users\Gianni\Desktop\Google Chrome.lnk
[2012.11.17 13:52:26 | 000,002,021 | ---- | M] () -- C:\Users\Public\Desktop\ET6.lnk
[2012.11.17 13:43:37 | 000,000,010 | ---- | M] () -- C:\Windows\GSetup.ini
[2012.11.17 13:24:11 | 000,207,887 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2012.11.17 13:24:11 | 000,207,887 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2012.11.17 13:17:49 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
[2012.10.30 23:51:56 | 000,059,728 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.10.30 23:51:55 | 000,984,144 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.10.30 23:51:55 | 000,370,288 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.10.30 23:51:55 | 000,071,600 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.10.30 23:51:53 | 000,025,232 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.10.30 23:51:07 | 000,041,224 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.10.30 23:50:59 | 000,227,648 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.10.30 23:50:30 | 000,285,328 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
========== Files Created - No Company Name ==========
[2012.11.25 11:17:25 | 000,000,512 | ---- | C] () -- C:\Users\Gianni\Desktop\MBR.dat
[2012.11.19 00:11:18 | 000,072,822 | ---- | C] () -- C:\Windows\SysWow64\ieuinit.inf
[2012.11.19 00:11:18 | 000,072,822 | ---- | C] () -- C:\Windows\SysNative\ieuinit.inf
[2012.11.18 03:45:36 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2012.11.18 03:37:42 | 000,000,003 | ---- | C] () -- C:\Windows\SysNative\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2012.11.17 18:23:02 | 000,000,000 | ---- | C] () -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip
[2012.11.17 18:22:55 | 000,000,318 | ---- | C] () -- C:\Users\Gianni\Desktop\Curse Client.appref-ms
[2012.11.17 18:13:34 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2012.11.17 18:04:28 | 000,000,976 | ---- | C] () -- C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
[2012.11.17 16:36:33 | 000,001,967 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.11.17 16:36:20 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2012.11.17 16:34:39 | 000,001,267 | ---- | C] () -- C:\Users\Gianni\Desktop\Spybot - Search & Destroy.lnk
[2012.11.17 15:40:01 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012.11.17 14:50:11 | 000,030,528 | ---- | C] () -- C:\Windows\GVTDrv64.sys
[2012.11.17 14:50:11 | 000,000,004 | ---- | C] () -- C:\Windows\SysWow64\GVTunner.ref
[2012.11.17 13:54:19 | 000,002,290 | ---- | C] () -- C:\Users\Gianni\Desktop\Google Chrome.lnk
[2012.11.17 13:53:18 | 000,001,110 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.11.17 13:53:16 | 000,001,106 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.11.17 13:52:26 | 000,002,021 | ---- | C] () -- C:\Users\Public\Desktop\ET6.lnk
[2012.11.17 13:47:34 | 000,031,272 | ---- | C] () -- C:\Windows\SysNative\AppleChargerSrv.exe
[2012.11.17 13:47:33 | 000,021,616 | ---- | C] () -- C:\Windows\SysNative\drivers\AppleCharger.sys
[2012.11.17 13:44:32 | 000,074,272 | ---- | C] () -- C:\Windows\SysNative\RtNicProp64.dll
[2012.11.17 13:41:14 | 000,150,996 | ---- | C] () -- C:\Windows\SysNative\drivers\RTAIODAT.DAT
[2012.11.17 13:38:11 | 000,000,010 | ---- | C] () -- C:\Windows\GSetup.ini
[2012.11.17 13:35:45 | 000,002,435 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2010.lnk
[2012.11.17 13:35:15 | 000,001,414 | ---- | C] () -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012.11.17 13:35:08 | 000,001,448 | ---- | C] () -- C:\Users\Gianni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012.11.17 13:23:46 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012.11.17 13:23:35 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2012.09.28 02:29:54 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.09.28 02:29:54 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.05.02 14:58:10 | 000,029,184 | ---- | C] () -- C:\Windows\SysWow64\kdbsdk32.dll
[2011.09.12 23:06:16 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
========== ZeroAccess Check ==========
[2009.07.14 05:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\shell32.dll -- [2012.06.09 06:43:10 | 014,172,672 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009.07.14 02:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010.11.21 04:24:25 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009.07.14 02:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
========== LOP Check ==========
[2012.11.19 17:00:02 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Roaming\.minecraft
[2012.11.17 13:55:05 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Roaming\Splashtop
[2012.11.25 01:36:27 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Roaming\TS3Client
========== Purity Check ==========
========== Custom Scans ==========
< %SYSTEMDRIVE%\*. >
[2012.07.31 16:46:28 | 000,000,000 | -H-D | M] -- C:\$AVG
[2012.11.17 13:34:46 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin
[2012.11.17 14:02:37 | 000,000,000 | ---D | M] -- C:\AMD
[2012.08.05 15:01:58 | 000,000,000 | ---D | M] -- C:\ATI
[2012.11.17 13:17:46 | 000,000,000 | -HSD | M] -- C:\Boot
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2012.07.31 16:03:07 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2012.09.13 17:59:52 | 000,000,000 | ---D | M] -- C:\Ka was der mist ist
[2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs
[2012.11.17 18:04:26 | 000,000,000 | R--D | M] -- C:\Program Files
[2012.11.20 12:51:01 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2012.11.17 23:00:25 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2012.07.31 16:03:07 | 000,000,000 | -HSD | M] -- C:\Programme
[2012.11.17 13:34:12 | 000,000,000 | -HSD | M] -- C:\Recovery
[2012.11.25 11:22:34 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2012.11.17 13:34:21 | 000,000,000 | R--D | M] -- C:\Users
[2012.11.19 06:15:35 | 000,000,000 | ---D | M] -- C:\Windows
< %PROGRAMFILES%\*.exe >
< %LOCALAPPDATA%\*.exe >
< %systemroot%\*. /mp /s >
< %windir%\installer\*. /5 >
[2012.11.20 12:51:01 | 000,000,000 | ---D | M] -- C:\Windows\installer\{CAE017F8-C238-4397-879B-7FBB915D9457}
< %localappdata%\*. /5 >
[2012.11.25 11:08:50 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Local\Deployment
[2012.11.25 11:20:52 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Local\LogMeIn Hamachi
[2012.11.25 11:20:48 | 000,000,000 | ---D | M] -- C:\Users\Gianni\AppData\Local\Temp
< End of report >
Extras: Code:
OTL Extras logfile created on: 25.11.2012 11:21:13 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Gianni\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
8,00 Gb Total Physical Memory | 6,33 Gb Available Physical Memory | 79,19% Memory free
15,99 Gb Paging File | 14,05 Gb Available in Paging File | 87,88% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 931,51 Gb Total Space | 866,80 Gb Free Space | 93,05% Space Free | Partition Type: NTFS
Computer Name: GIANNI-PC | User Name: Gianni | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 1
"DisableNotifications" = 0
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{044E2629-E48B-4AC8-9A23-D93E1DBDF4F6}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe |
"{08D020DC-88C5-4094-8977-47DA5C659781}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{1268852B-AFAB-4D94-B272-505D3F6CB1B8}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{1BB86A31-23F7-450E-84F0-F81746AADB53}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{24CF12AC-412F-4CCE-847D-6AB15B828733}" = rport=10243 | protocol=6 | dir=out | app=system |
"{2FA47885-3192-46CA-BA67-E2C4DED2F56B}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{336226F7-AC7B-4D1C-AC29-34BC62A80DD1}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{4286BC9F-B07B-4B6C-B2DD-314212856CF7}" = rport=137 | protocol=17 | dir=out | app=system |
"{4B38E97A-87D8-47F6-BC74-9693F040757C}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{5AB6DF97-5A17-4A76-AF92-F0ED0D7E754F}" = rport=139 | protocol=6 | dir=out | app=system |
"{7EE92416-1044-4355-A675-F56405CB986A}" = lport=10243 | protocol=6 | dir=in | app=system |
"{949403B6-E150-4BD9-AFAD-5912F9A47306}" = lport=445 | protocol=6 | dir=in | app=system |
"{9F272ACB-9954-4FCC-8AD2-88D114CD9FC9}" = lport=138 | protocol=17 | dir=in | app=system |
"{A1AFAC52-6B87-4AEB-9ACF-A075EBAB97E7}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 |
"{A3AC83E6-71E2-4A6C-855B-24925D450654}" = lport=139 | protocol=6 | dir=in | app=system |
"{A63096C0-6942-41E8-A089-D5C356DE07C8}" = lport=137 | protocol=17 | dir=in | app=system |
"{B7EFA817-C913-431D-9F68-B14B4572262D}" = rport=445 | protocol=6 | dir=out | app=system |
"{C26BA906-06AC-4F16-A11D-99C94D7FEE83}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
"{E8A045C1-7083-4EEC-A245-0CB6E62FE5EA}" = rport=138 | protocol=17 | dir=out | app=system |
"{E9428AB1-4DFE-43E3-A6BF-727AF348AB60}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{EC106D1E-77D4-4CEF-B748-D335919E6BF4}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{F523C5D7-4056-48FF-AEDB-AB107B970DA5}" = lport=2869 | protocol=6 | dir=in | app=system |
"{F663E512-3FD0-4A0E-AAFA-7CD1BE289810}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0375A27C-ED03-4FBC-9777-A58D8481F9FA}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 |
"{0DC909A9-53DE-4AD0-8E5D-081E9277B782}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe |
"{1E263E3E-F655-4013-8E77-9841C404EF6D}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{215A554A-298A-4AFE-AFE2-FB7219D3BE3E}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{32CD4055-1430-4CA4-BF4A-E8D2F39448AE}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{3636A916-E60C-4576-9574-E645B74CDE1D}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{38BF1345-7301-4AF8-AE68-2D6DA1FCF814}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{427456A6-792E-49E2-8B54-60FEC47178FA}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{44BEDAD2-B455-4729-8BFB-B3EFE8AA5197}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{4E11072C-13E9-4D78-BEC2-E7D3CB28BECA}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{5457E747-D1DF-4B20-94C6-6F7AE25DC2A7}" = protocol=6 | dir=out | app=system |
"{5F3F106F-5965-4571-AF78-BE82BA7DCE87}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe |
"{6A34616A-0387-4A6F-B594-86522D832E17}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe |
"{752EA464-DAA2-4347-BE92-F669E728E63C}" = protocol=58 | dir=in | app=system |
"{7AFF48DC-6100-4C05-B594-BE2EEA9F6693}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 |
"{8199C8D0-17D5-49F1-A70A-2380BA61DC5E}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{9D4BEF4E-69E9-409C-A012-C69A5CB581DE}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 |
"{A0A2FDD7-4059-44FF-8D4E-CA5900B7CE86}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{A95D5F42-090A-4BA4-A233-510EADBF34A8}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{B835A3A3-196C-47D5-A7F4-9D7302BC46AF}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{BD8BA983-F916-4756-93F0-9A13CF78BBFD}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe |
"{D626133D-11E0-416A-B9E6-6E5B3941F95E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1363\agent.exe |
"{D812FCF9-B795-4C09-942D-99240377C8AA}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 |
"{DA9AA5C6-ED10-4555-AFEC-C37B573B3E84}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe |
"{E3425EDE-1833-4CA1-826B-B1D1AE5904EF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe |
"{FEE4E232-B315-4053-81E5-0842C1DE5127}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 |
"TCP Query User{19E61260-C6F6-42BD-A174-7902F3C1AC26}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
"TCP Query User{A79A8C4F-EA16-4880-A38B-5DDC8F4C2BD0}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"UDP Query User{60359492-5B78-4591-AF13-2A17DE9BE456}C:\programdata\battle.net\agent\agent.1040\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.1040\agent.exe |
"UDP Query User{D41AE460-EA92-4A79-BAFB-26E8C717BA23}C:\program files (x86)\java\jre7\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\javaw.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0407893F-352C-B182-E04A-A8C3333DA29B}" = AMD Drag and Drop Transcoding
"{042B10AA-8233-A9E0-4DEB-B7253C686DBB}" = AMD Fuel
"{0DCAB5DD-CC69-271A-CF03-F2BD6B60BD8A}" = AMD Media Foundation Decoders
"{46DA7FD9-8BC1-7BA8-98D1-27F46647871B}" = AMD Catalyst Install Manager
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{504184A2-1B0E-5D93-603A-517E93E7EDB3}" = AMD Accelerated Video Transcoding
"{57580625-C673-7FEA-8791-E84B7AAF5069}" = ccc-utility64
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"TeamSpeak 3 Client" = TeamSpeak 3 Client
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.1214.1
"{0F7A6FD0-87F5-FB5D-973C-CF604DE1BC6B}" = CCC Help Polish
"{1A9BE3D6-4D53-2C9D-B77D-562D85936B91}" = CCC Help Norwegian
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{210DFA65-F805-1A2B-4F83-8E27279AE385}" = Catalyst Control Center Graphics Previews Common
"{26A24AE4-039D-4CA4-87B4-2F83217009FF}" = Java 7 Update 9
"{29822CAD-C76A-0BEE-55F5-AAA524DA814F}" = CCC Help Greek
"{3A1293DF-7D09-BB0F-9576-EC47EE4A9362}" = CCC Help Italian
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B11.1102.1
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.1124.1
"{47416F0B-6589-591E-C6F8-4235D2230B14}" = Catalyst Control Center InstallProxy
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{625FC7D1-656D-1BEC-F86F-3EACAFDAA8FE}" = CCC Help English
"{7351EEF8-9D6C-5F46-5A19-F2C7456CE132}" = CCC Help German
"{7F172E34-4107-8964-6AEA-5051FFD265FF}" = CCC Help Portuguese
"{86095E92-1959-8364-920E-82E81F64F8FB}" = AMD VISION Engine Control Center
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89D05F35-933A-89C0-B935-C92BEE4229BD}" = CCC Help French
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{959E4378-CCA1-E4E4-2425-793DA92E8D95}" = CCC Help Czech
"{96BB3C67-4EB4-9757-E0C2-C0D2FE9053B1}" = CCC Help Turkish
"{974F4B73-2017-E174-9070-3F58F01B341F}" = CCC Help Danish
"{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver
"{98E20A18-3C29-86FA-50B4-918C2B34A082}" = CCC Help Hungarian
"{9E2E5EB3-DC6E-9277-E9DB-13175E7DDA39}" = CCC Help Dutch
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AAACC0A5-4382-04D0-C75E-0669C7B949B6}" = CCC Help Japanese
"{ACEF4078-9B86-2455-E18D-34D52D37D9D5}" = CCC Help Chinese Standard
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B55FB422-B803-11F5-5582-B3666EA1B9AC}" = Catalyst Control Center Localization All
"{B8010864-15F8-613B-20EF-AC35B14B3E0D}" = CCC Help Russian
"{C1342411-5A98-DE8A-5629-D0C518E1C280}" = CCC Help Finnish
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"{CAE017F8-C238-4397-879B-7FBB915D9457}" = LogMeIn Hamachi
"{D08B4177-5160-6B66-8934-2F9012134D61}" = CCC Help Thai
"{D34A6029-FB1A-9EA8-A938-5393F82A3A00}" = CCC Help Korean
"{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}" = Etron USB3.0 Host Controller
"{E2F0AF23-FE2F-4222-9A43-55E63CC41EF1}" = Catalyst Control Center - Branding
"{E3A09D13-4D40-3CF8-7D32-8BD55F8D1533}" = CCC Help Spanish
"{EA17F4FC-FDBF-4CF8-A529-2D983132D053}" = Skype™ 6.0
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2C35491-9323-3AE7-6023-6B4128045153}" = CCC Help Swedish
"{FC66A32F-1A57-AC5C-4F12-DAC2F4CB77A0}" = CCC Help Chinese Traditional
"avast" = avast! Free Antivirus
"Google Chrome" = Google Chrome
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B11.1124.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.1021.1
"LogMeIn Hamachi" = LogMeIn Hamachi
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"101a9f93b8f0bb6f" = Curse Client
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 23.11.2012 08:40:22 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description =
Error - 23.11.2012 09:26:20 | Computer Name = Gianni-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 23.11.2012 15:14:37 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description =
Error - 23.11.2012 16:07:35 | Computer Name = Gianni-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "c:\program files
(x86)\spybot - search & destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei
"c:\program files (x86)\spybot - search & destroy\DelZip179.dll" in Zeile 8. Der
Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 23.11.2012 16:07:52 | Computer Name = Gianni-PC | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files
(x86)\Spybot - Search & Destroy\DelZip179.dll". Fehler in Manifest- oder Richtliniendatei
"C:\Program Files (x86)\Spybot - Search & Destroy\DelZip179.dll" in Zeile 8. Der
Wert "*" des "language"-Attributs im assemblyIdentity-Element ist ungültig.
Error - 24.11.2012 09:37:49 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description =
Error - 24.11.2012 09:50:56 | Computer Name = Gianni-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 24.11.2012 14:06:33 | Computer Name = Gianni-PC | Source = Customer Experience Improvement Program | ID = 1008
Description =
Error - 24.11.2012 17:47:50 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description =
Error - 25.11.2012 06:06:29 | Computer Name = Gianni-PC | Source = WinMgmt | ID = 10
Description =
[ System Events ]
Error - 18.11.2012 06:24:47 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "Skype Updater" wurde unerwartet beendet. Dies ist bereits
1 Mal passiert.
Error - 18.11.2012 06:24:49 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "SBSD Security Center Service" wurde unerwartet beendet. Dies
ist bereits 1 Mal passiert.
Error - 18.11.2012 06:24:50 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7038
Description = Der Dienst "avast! Antivirus" konnte sich nicht als "NT AUTHORITY\SYSTEM"
mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%50 Vergewissern
Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
Management Console (MMC).
Error - 18.11.2012 06:24:50 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "avast! Antivirus" wurde aufgrund folgenden Fehlers nicht
gestartet: %%1069
Error - 18.11.2012 06:51:53 | Computer Name = Gianni-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?18.?11.?2012 um 11:50:43 unerwartet heruntergefahren.
Error - 19.11.2012 01:19:27 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler
beendet: %%16405
Error - 20.11.2012 07:51:08 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7030
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" ist als interaktiver
Dienst gekennzeichnet. Das System wurde jedoch so konfiguriert, dass interaktive
Dienste nicht möglich sind. Der Dienst wird möglicherweise nicht richtig funktionieren.
Error - 20.11.2012 07:51:13 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7009
Description = Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst
LogMeIn Hamachi Tunneling Engine erreicht.
Error - 20.11.2012 07:51:13 | Computer Name = Gianni-PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "LogMeIn Hamachi Tunneling Engine" wurde aufgrund folgenden
Fehlers nicht gestartet: %%1053
Error - 24.11.2012 17:47:06 | Computer Name = Gianni-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?24.?11.?2012 um 22:42:13 unerwartet heruntergefahren.
< End of report >
|
