OTL Logfile: Code:
OTL logfile created on: 12.06.2013 07:31:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\benni\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 1,50 Gb Available Physical Memory | 50,16% Memory free
5,99 Gb Paging File | 4,39 Gb Available in Paging File | 73,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 445,75 Gb Total Space | 395,47 Gb Free Space | 88,72% Space Free | Partition Type: NTFS
Drive D: | 19,99 Gb Total Space | 11,44 Gb Free Space | 57,23% Space Free | Partition Type: FAT32
Drive J: | 465,65 Gb Total Space | 268,53 Gb Free Space | 57,67% Space Free | Partition Type: FAT32
Computer Name: BENNY | User Name: benni | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - File not found
PRC - C:\Users\benni\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
PRC - C:\Users\benni\AppData\Roaming\Yontoo\YontooDesktop.exe (Yontoo LLC)
PRC - C:\Programme\Yontoo\Y2Desktop.Updater.exe (Microsoft)
PRC - C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Programme\Google\Update\1.3.21.145\GoogleCrashHandler.exe (Google Inc.)
PRC - C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_7_700_169.exe (Adobe Systems, Inc.)
PRC - C:\Programme\McAfee Security Scan\3.0.318\SSScheduler.exe (McAfee, Inc.)
PRC - C:\Programme\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\Display\nvtray.exe (NVIDIA Corporation)
PRC - C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Programme\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - c:\Programme\Windows Defender\MpCmdRun.exe (Microsoft Corporation)
========== Modules (No Company Name) ==========
MOD - C:\Users\benni\AppData\Roaming\Yontoo\dat\Desktop.OS.Plugin.dll ()
MOD - C:\Programme\Mozilla Firefox\mozjs.dll ()
MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\05682429807d34d6ff05a77ea153935f\System.Windows.Forms.ni.dll ()
MOD - C:\Programme\Common Files\Apple\Apple Application Support\zlib1.dll ()
MOD - C:\Programme\Common Files\Apple\Apple Application Support\libxml2.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e2ee5d77ebe0bd025e7a7a317a43d677\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\10aba2c167cc1119b80159fd9ac71ca8\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c54750e64ba10d0fb7b6a636fb3695ca\System.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\96a3b737db1e72adaf32d2b350e50c23\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b0b8554c05f194f546a8ed531320760b\mscorlib.ni.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System\2.0.0.0__b77a5c561934e089\System.dll ()
MOD - C:\Windows\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Xml\2.0.0.0__b77a5c561934e089\System.Xml.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.ServiceProcess\2.0.0.0__b03f5f7f11d50a3a\System.ServiceProcess.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\System.Management.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Configuration\2.0.0.0__b03f5f7f11d50a3a\System.Configuration.dll ()
========== Services (SafeList) ==========
SRV - (Yontoo Desktop Updater) -- C:\Program Files\Yontoo\Y2Desktop.Updater.exe C:\Users\benni\AppData\Roaming\Yontoo\YontooDesktop.exe File not found
SRV - (MozillaMaintenance) -- C:\Programme\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (SkypeUpdate) -- C:\Programme\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (MBAMService) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (MBAMScheduler) -- C:\Programme\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
SRV - (nvUpdatusService) -- C:\Programme\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
SRV - (McComponentHostService) -- C:\Programme\McAfee Security Scan\3.0.318\McCHSvc.exe (McAfee, Inc.)
SRV - (Stereo Service) -- C:\Programme\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (UMVPFSrv) -- C:\Programme\Common Files\logishrd\LVMVFM\UMVPFSrv.exe (Logitech Inc.)
SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Programme\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (WMPNetworkSvc) -- C:\Programme\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
========== Driver Services (SafeList) ==========
DRV - (XDva401) -- C:\Windows\system32\XDva401.sys File not found
DRV - (USBPNPA) -- system32\drivers\CM108.sys File not found
DRV - (tbhsd) -- C:\Windows\System32\drivers\tbhsd.sys (RapidSolution Software AG)
DRV - (RRNetCapMP) -- C:\Windows\System32\drivers\rrnetcap.sys (RapidSolution Software AG)
DRV - (RRNetCap) -- C:\Windows\System32\drivers\rrnetcap.sys (RapidSolution Software AG)
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (LVUVC) -- C:\Windows\System32\drivers\lvuvc.sys (Logitech Inc.)
DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
DRV - (Ph3xIB32) -- C:\Windows\System32\drivers\Ph3xIB32.sys (NXP Semiconductors)
DRV - (netr28u) -- C:\Windows\System32\drivers\netr28u.sys (Ralink Technology Corp.)
DRV - (e1express) -- C:\Windows\System32\drivers\e1e6032.sys (Intel Corporation)
DRV - (XUIF) -- C:\Windows\System32\drivers\x10ufx2.sys (X10 Wireless Technology, Inc.)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Delta Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Deutschland: Aktuelle Nachrichten, Outlook.com Email und Skype Login.
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 1C E9 77 55 B7 54 CE 01 [binary data]
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = hxxp://www1.delta-search.com/?q={searchTerms}&affID=119781&tt=gc_&babsrc=SP_ss&mntrId=C8A70015AFB836C9
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>;*.local
========== FireFox ==========
FF - prefs.js..extensions.enabledAddons: %7B42e0ced7-806f-4983-af54-92bdeefee519%7D:2.0
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:21.0
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@mcafee.com/McAfeeMssPlugin: C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 21.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
[2012.09.20 15:52:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\benni\AppData\Roaming\mozilla\Extensions
[2013.06.08 17:44:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\benni\AppData\Roaming\mozilla\Firefox\Profiles\ih6aj79k.default\extensions
[2013.05.27 01:56:06 | 000,000,000 | ---D | M] (DealPly Shopping) -- C:\Users\benni\AppData\Roaming\mozilla\Firefox\Profiles\ih6aj79k.default\extensions\{42e0ced7-806f-4983-af54-92bdeefee519}
[2013.05.29 20:10:10 | 000,000,000 | ---D | M] (FoxyDeal) -- C:\Users\benni\AppData\Roaming\mozilla\Firefox\Profiles\ih6aj79k.default\extensions\{F58A62EB-38DC-43C4-A539-DC52E135208D}
[2013.05.27 01:56:17 | 000,000,000 | ---D | M] (Yontoo) -- C:\Users\benni\AppData\Roaming\mozilla\Firefox\Profiles\ih6aj79k.default\extensions\plugin@yontoo.com
[2013.06.08 17:44:42 | 000,004,525 | ---- | M] () (No name found) -- C:\Users\benni\AppData\Roaming\mozilla\firefox\profiles\ih6aj79k.default\extensions\youtubeunblocker@unblocker.yt.xpi
[2013.05.21 07:39:41 | 000,006,505 | ---- | M] () -- C:\Users\benni\AppData\Roaming\mozilla\firefox\profiles\ih6aj79k.default\searchplugins\babylon.xml
[2013.05.21 07:39:44 | 000,001,294 | ---- | M] () -- C:\Users\benni\AppData\Roaming\mozilla\firefox\profiles\ih6aj79k.default\searchplugins\delta.xml
[2013.05.21 07:39:53 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\Extensions
[2013.05.21 05:30:51 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\browser\extensions
[2013.05.21 05:30:51 | 000,000,000 | ---D | M] (Default) -- C:\Programme\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
========== Chrome ==========
CHR - default_search_provider: Delta Search (Enabled)
CHR - default_search_provider: search_url = hxxp://www1.delta-search.com/?q={searchTerms}&affID=119781&tt=gc_&babsrc=SP_ss&mntrId=C8A70015AFB836C9
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
CHR - homepage: Delta Search
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\PepperFlash\pepflashplayer.dll
CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files\Google\Chrome\Application\27.0.1453.94\pdf.dll
CHR - plugin: Google Update (Enabled) = C:\Program Files\Google\Update\1.3.21.145\npGoogleUpdate3.dll
CHR - plugin: McAfee Security Scanner + (Enabled) = C:\Program Files\McAfee Security Scan\3.0.318\npMcAfeeMss.dll
CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll
CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_169.dll
O1 HOSTS File: ([2009.06.10 23:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (MSS+ Identifier) - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Programme\McAfee Security Scan\3.0.318\McAfeeMSS_IE.dll (McAfee, Inc.)
O2 - BHO: (DealPly Shopping) - {a6c63b7f-2171-47fa-ab34-e64c4737169d} - C:\Programme\DealPly\DealPlyIE.dll (DealPly)
O2 - BHO: (Yontoo) - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Programme\Yontoo\YontooIEClient.dll (Yontoo LLC)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKCU..\Run: [Akamai NetSession Interface] "C:\Users\benni\AppData\Local\Akamai\netsession_win.exe" File not found
O4 - HKCU..\Run: [Skymonk2] C:\Users\benni\AppData\Local\Skymonk2\skymonk2.exe ()
O4 - HKCU..\Run: [Spotify] C:\Users\benni\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
O4 - HKCU..\Run: [Spotify Web Helper] C:\Users\benni\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe (Spotify Ltd)
O4 - HKCU..\Run: [Yontoo Desktop] C:\Users\benni\AppData\Roaming\Yontoo\YontooDesktop.exe (Yontoo LLC)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Programme\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.178.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2A6FBCB3-85DE-4379-91B8-97C443230DDC}: DhcpNameServer = 192.168.178.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{d1ccb62f-028b-11e2-bcce-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{d1ccb62f-028b-11e2-bcce-806e6f6e6963}\Shell\AutoRun\command - "" = E:\web.exe html\index.html
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
========== Files/Folders - Created Within 30 Days ==========
[2013.06.12 07:29:21 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\benni\Desktop\OTL.exe
[2013.06.12 03:29:39 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Malwarebytes
[2013.06.12 03:29:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2013.06.12 03:29:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2013.06.12 03:29:26 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2013.06.12 03:29:26 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2013.06.12 03:29:19 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Local\Programs
[2013.05.27 01:56:26 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Local\Skymonk2
[2013.05.27 01:56:26 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Skymonk 2
[2013.05.27 01:56:16 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Yontoo
[2013.05.27 01:56:16 | 000,000,000 | ---D | C] -- C:\Program Files\Yontoo
[2013.05.27 01:56:11 | 000,000,000 | ---D | C] -- C:\Program Files\FoxyDeal
[2013.05.27 01:56:08 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Dealply
[2013.05.27 01:56:05 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DealPly
[2013.05.27 01:56:05 | 000,000,000 | ---D | C] -- C:\Program Files\DealPly
[2013.05.27 01:56:03 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Local\SwvUpdater
[2013.05.27 01:14:32 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
[2013.05.27 01:14:32 | 000,000,000 | ---D | C] -- C:\Program Files\ASIO4ALL v2
[2013.05.27 01:14:14 | 001,431,552 | ---- | C] (Propellerhead Software AB) -- C:\Windows\System32\rewire.dll
[2013.05.27 01:14:14 | 000,000,000 | ---D | C] -- C:\Program Files\VstPlugins
[2013.05.27 01:14:03 | 000,000,000 | ---D | C] -- C:\Users\benni\Documents\Image-Line
[2013.05.27 01:14:03 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
[2013.05.27 01:14:03 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Image-Line
[2013.05.27 01:14:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image-Line
[2013.05.27 01:13:53 | 001,554,944 | ---- | C] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) -- C:\Windows\System32\vorbis.acm
[2013.05.27 01:13:51 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\FlowStone
[2013.05.27 01:13:51 | 000,000,000 | ---D | C] -- C:\Program Files\DSPRobotics
[2013.05.27 01:11:35 | 000,000,000 | ---D | C] -- C:\Program Files\Image-Line
[2013.05.27 01:10:06 | 000,000,000 | ---D | C] -- C:\Users\benni\Desktop\Image-Line FL Studio Producer Edition v11.0.2 + Update
[2013.05.26 19:16:49 | 000,000,000 | ---D | C] -- C:\5610d54f511c15fc48d44221250b5c
[2013.05.24 09:45:52 | 000,000,000 | -HSD | C] -- C:\Windows\System32\AI_RecycleBin
[2013.05.24 09:45:38 | 000,000,000 | ---D | C] -- C:\ProgramData\RapidSolution
[2013.05.24 09:45:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audials 10
[2013.05.24 09:45:38 | 000,000,000 | ---D | C] -- C:\Program Files\Audials
[2013.05.24 09:32:24 | 000,000,000 | ---D | C] -- C:\Program Files\K-Lite Codec Pack
[2013.05.24 09:32:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YouTube Song Downloader
[2013.05.24 09:32:23 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Local\Abelssoft
[2013.05.24 09:32:21 | 000,000,000 | ---D | C] -- C:\Program Files\YouTube Song Downloader
[2013.05.23 15:46:11 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013.05.23 15:46:11 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013.05.23 15:46:11 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013.05.23 11:46:09 | 000,039,048 | ---- | C] (RapidSolution Software AG) -- C:\Windows\System32\drivers\tbhsd.sys
[2013.05.23 11:46:02 | 000,031,848 | ---- | C] (RapidSolution Software AG) -- C:\Windows\System32\drivers\rrnetcap.sys
[2013.05.21 07:39:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2013.05.21 07:39:31 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Babylon
[2013.05.21 07:39:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Tarma Installer
[2013.05.21 07:39:10 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Local\PutLockerDownloader
[2013.05.21 07:39:05 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movie2KDownloader.com
[2013.05.21 05:30:47 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013.05.21 02:24:12 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Local\Spotify
[2013.05.21 02:24:01 | 000,000,000 | ---D | C] -- C:\Users\benni\AppData\Roaming\Spotify
[2013.05.19 16:16:34 | 000,000,000 | ---D | C] -- C:\Program Files\MegaLC
[2013.05.19 15:33:16 | 1841,288,368 | ---- | C] (MegaLC ) -- C:\Users\benni\Desktop\MegaLC.exe
[2013.05.16 01:07:42 | 000,041,472 | ---- | C] (Hemplord14) -- C:\Users\benni\Documents\Chat Spammer.exe
========== Files - Modified Within 30 Days ==========
[2013.06.12 07:29:23 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\benni\Desktop\OTL.exe
[2013.06.12 07:23:52 | 000,012,368 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013.06.12 07:23:52 | 000,012,368 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013.06.12 07:18:00 | 000,000,290 | ---- | M] () -- C:\Windows\tasks\Dealply.job
[2013.06.12 07:10:00 | 000,001,096 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2013.06.12 04:33:50 | 000,002,083 | ---- | M] () -- C:\Users\benni\Desktop\Screen Cap 1.6 Setup.lnk
[2013.06.12 03:43:02 | 000,000,356 | ---- | M] () -- C:\Windows\tasks\AmiUpdXp.job
[2013.06.12 03:29:27 | 000,001,071 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.06.12 03:23:48 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2013.06.12 03:23:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013.06.12 03:23:35 | 2414,481,408 | -HS- | M] () -- C:\hiberfil.sys
[2013.06.08 17:34:48 | 000,696,620 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2013.06.08 17:34:48 | 000,651,938 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013.06.08 17:34:48 | 000,147,916 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2013.06.08 17:34:48 | 000,120,870 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013.06.07 06:13:50 | 000,002,133 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
[2013.06.05 13:35:51 | 003,563,838 | ---- | M] () -- C:\Users\benni\Desktop\JokA - Immer Dann (16bars.de Videopremiere).mp3
[2013.06.05 13:35:43 | 003,697,716 | ---- | M] () -- C:\Users\benni\Desktop\Bushido - Theorie & Praxis feat. Joka.mp3
[2013.06.05 13:35:26 | 002,810,389 | ---- | M] () -- C:\Users\benni\Desktop\Timeless - Kame-ha-me-ha! (prod. Jumpa).mp3
[2013.06.01 10:27:31 | 003,857,377 | ---- | M] () -- C:\Users\benni\Desktop\Kaisaschnitt - Leichen im Keller.mp3
[2013.05.28 02:22:09 | 003,831,171 | ---- | M] () -- C:\Users\benni\Desktop\Kaisaschnitt - Warmes Blut (#Dörpi).mp3
[2013.05.27 01:57:21 | 000,003,103 | ---- | M] () -- C:\Users\benni\Desktop\FLRegKey(1).rar
[2013.05.27 01:56:49 | 000,003,103 | ---- | M] () -- C:\Users\benni\Desktop\FLRegKey.rar
[2013.05.27 01:14:14 | 000,001,990 | ---- | M] () -- C:\Users\Public\Desktop\FL Studio 11.lnk
[2013.05.27 01:09:53 | 350,450,085 | ---- | M] () -- C:\Users\benni\Desktop\oddi.rar
[2013.05.26 19:18:05 | 348,945,532 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2013.05.24 10:07:21 | 002,987,730 | ---- | M] () -- C:\Users\benni\Desktop\AchtVier - Abstand.mp3
[2013.05.24 09:57:07 | 005,625,321 | ---- | M] () -- C:\Users\benni\Desktop\09 Giftgas.m4a
[2013.05.24 09:45:52 | 000,000,908 | ---- | M] () -- C:\Users\Public\Desktop\Audials 10.lnk
[2013.05.24 09:32:23 | 000,001,139 | ---- | M] () -- C:\Users\Public\Desktop\YouTube Song Downloader.lnk
[2013.05.23 16:53:12 | 004,860,761 | ---- | M] () -- C:\Users\benni\Desktop\187 Allstars 2013 feat. Kontra K & Faruk 111er.mp3
[2013.05.23 15:46:11 | 000,002,505 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk
[2013.05.23 13:03:26 | 000,006,861 | ---- | M] () -- C:\Users\benni\Desktop\Dr.mehdi.swensen.nfo
[2013.05.23 11:46:09 | 000,039,048 | ---- | M] (RapidSolution Software AG) -- C:\Windows\System32\drivers\tbhsd.sys
[2013.05.23 11:46:02 | 000,031,848 | ---- | M] (RapidSolution Software AG) -- C:\Windows\System32\drivers\rrnetcap.sys
[2013.05.22 17:46:26 | 003,700,924 | ---- | M] () -- C:\Users\benni\Desktop\GENETIKK - D.N.A. (Official HD Video).mp3
[2013.05.22 17:45:56 | 004,124,161 | ---- | M] () -- C:\Users\benni\Desktop\GENETIKK - Champions (Official HD Video).mp3
[2013.05.21 02:24:12 | 000,001,771 | ---- | M] () -- C:\Users\benni\Desktop\Spotify.lnk
[2013.05.20 17:30:48 | 002,678,178 | ---- | M] () -- C:\Users\benni\Desktop\Marsimoto - Ich bin dein Vater JUICE EP.mp3
[2013.05.19 16:24:49 | 000,001,909 | ---- | M] () -- C:\Users\benni\Desktop\Mega LC!.lnk
[2013.05.19 16:14:31 | 1841,288,368 | ---- | M] (MegaLC ) -- C:\Users\benni\Desktop\MegaLC.exe
[2013.05.17 02:35:42 | 002,938,514 | ---- | M] () -- C:\Users\benni\Desktop\Timeless - Scheissegal (prod. Joshimixu).mp3
========== Files Created - No Company Name ==========
[2013.06.12 04:32:51 | 000,002,083 | ---- | C] () -- C:\Users\benni\Desktop\Screen Cap 1.6 Setup.lnk
[2013.06.12 03:29:27 | 000,001,071 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2013.06.05 13:35:48 | 003,563,838 | ---- | C] () -- C:\Users\benni\Desktop\JokA - Immer Dann (16bars.de Videopremiere).mp3
[2013.06.05 13:35:39 | 003,697,716 | ---- | C] () -- C:\Users\benni\Desktop\Bushido - Theorie & Praxis feat. Joka.mp3
[2013.06.05 13:35:24 | 002,810,389 | ---- | C] () -- C:\Users\benni\Desktop\Timeless - Kame-ha-me-ha! (prod. Jumpa).mp3
[2013.06.01 10:27:28 | 003,857,377 | ---- | C] () -- C:\Users\benni\Desktop\Kaisaschnitt - Leichen im Keller.mp3
[2013.05.28 02:22:00 | 003,831,171 | ---- | C] () -- C:\Users\benni\Desktop\Kaisaschnitt - Warmes Blut (#Dörpi).mp3
[2013.05.27 01:57:59 | 000,006,861 | ---- | C] () -- C:\Users\benni\Desktop\Dr.mehdi.swensen.nfo
[2013.05.27 01:57:59 | 000,004,086 | ---- | C] () -- C:\Users\benni\Desktop\FLRegKey.reg
[2013.05.27 01:57:17 | 000,003,103 | ---- | C] () -- C:\Users\benni\Desktop\FLRegKey(1).rar
[2013.05.27 01:56:47 | 000,003,103 | ---- | C] () -- C:\Users\benni\Desktop\FLRegKey.rar
[2013.05.27 01:56:08 | 000,000,290 | ---- | C] () -- C:\Windows\tasks\Dealply.job
[2013.05.27 01:56:03 | 000,000,356 | ---- | C] () -- C:\Windows\tasks\AmiUpdXp.job
[2013.05.27 01:14:14 | 000,001,990 | ---- | C] () -- C:\Users\Public\Desktop\FL Studio 11.lnk
[2013.05.27 01:14:02 | 000,002,002 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FL Studio 11.lnk
[2013.05.26 23:10:32 | 350,450,085 | ---- | C] () -- C:\Users\benni\Desktop\oddi.rar
[2013.05.26 19:18:05 | 348,945,532 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2013.05.24 10:07:20 | 002,987,730 | ---- | C] () -- C:\Users\benni\Desktop\AchtVier - Abstand.mp3
[2013.05.24 10:05:53 | 004,017,476 | ---- | C] () -- C:\Users\benni\Desktop\www187ersde präsentiert 187 AllStars 2012 feat Capuz.mp3
[2013.05.24 10:05:43 | 003,178,193 | ---- | C] () -- C:\Users\benni\Desktop\187 Strassenbande präsentiert_ AchtVier - FIZZLE (Aufstand 2013).mp3
[2013.05.24 10:00:07 | 005,625,321 | ---- | C] () -- C:\Users\benni\Desktop\09 Giftgas.m4a
[2013.05.24 09:45:52 | 000,000,908 | ---- | C] () -- C:\Users\Public\Desktop\Audials 10.lnk
[2013.05.24 09:32:23 | 000,001,139 | ---- | C] () -- C:\Users\Public\Desktop\YouTube Song Downloader.lnk
[2013.05.23 16:53:11 | 004,860,761 | ---- | C] () -- C:\Users\benni\Desktop\187 Allstars 2013 feat. Kontra K & Faruk 111er.mp3
[2013.05.23 15:46:11 | 000,002,505 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk
[2013.05.22 17:46:24 | 003,700,924 | ---- | C] () -- C:\Users\benni\Desktop\GENETIKK - D.N.A. (Official HD Video).mp3
[2013.05.22 17:45:49 | 004,124,161 | ---- | C] () -- C:\Users\benni\Desktop\GENETIKK - Champions (Official HD Video).mp3
[2013.05.21 02:24:12 | 000,001,771 | ---- | C] () -- C:\Users\benni\Desktop\Spotify.lnk
[2013.05.21 02:24:12 | 000,001,757 | ---- | C] () -- C:\Users\benni\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
[2013.05.20 17:30:23 | 002,678,178 | ---- | C] () -- C:\Users\benni\Desktop\Marsimoto - Ich bin dein Vater JUICE EP.mp3
[2013.05.19 16:24:49 | 000,001,909 | ---- | C] () -- C:\Users\benni\Desktop\Mega LC!.lnk
[2013.05.17 02:34:30 | 002,938,514 | ---- | C] () -- C:\Users\benni\Desktop\Timeless - Scheissegal (prod. Joshimixu).mp3
[2013.04.25 02:51:47 | 001,589,248 | ---- | C] () -- C:\Windows\System32\libmysql_d.dll
[2012.11.27 22:05:39 | 000,303,104 | ---- | C] () -- C:\Windows\System32\CmiInstallResAll.dll
[2012.09.26 14:53:06 | 000,021,532 | ---- | C] () -- C:\Windows\System32\emptyregdb.dat
[2012.07.02 22:11:02 | 000,016,384 | ---- | C] () -- C:\Windows\System32\theowl.dll
[2012.02.03 05:00:58 | 000,139,264 | ---- | C] () -- C:\Windows\System32\TCPClient.dll
[2012.01.18 07:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\System32\LogiDPP.dll
[2012.01.18 07:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\System32\DevManagerCore.dll
[2012.01.18 07:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\System32\LogiDPPApp.exe
[2012.01.18 07:22:54 | 000,028,418 | ---- | C] () -- C:\Windows\System32\lvcoinst.ini
[2011.06.15 13:37:00 | 001,108,992 | ---- | C] () -- C:\Windows\System32\phidget21.dll
========== ZeroAccess Check ==========
[2009.07.14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012.06.09 06:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2009.07.14 03:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009.07.14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
< End of report > --- --- ---
OTL EXTRAS Logfile: Code:
OTL Extras logfile created on: 12.06.2013 07:31:03 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\benni\Downloads
Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
3,00 Gb Total Physical Memory | 1,50 Gb Available Physical Memory | 50,16% Memory free
5,99 Gb Paging File | 4,39 Gb Available in Paging File | 73,18% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 445,75 Gb Total Space | 395,47 Gb Free Space | 88,72% Space Free | Partition Type: NTFS
Drive D: | 19,99 Gb Total Space | 11,44 Gb Free Space | 57,23% Space Free | Partition Type: FAT32
Drive J: | 465,65 Gb Total Space | 268,53 Gb Free Space | 57,67% Space Free | Partition Type: FAT32
Computer Name: BENNY | User Name: benni | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
htmlfile [edit] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== Vista Active Open Ports Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0688F5D7-A993-476F-99D8-C9B63E84B937}" = lport=3702 | protocol=17 | dir=in | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{3B81DF52-837C-456F-A817-BE9883337E1B}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{7FCAAE09-4B7C-4D6F-83E8-6CE51FFDF8CA}" = lport=3702 | protocol=17 | dir=in | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{9FD6642D-1B5A-42A0-9389-DB3853E33D17}" = lport=14714 | protocol=6 | dir=in | name=audials localhttpserver 14714 |
"{A47947CF-7502-444A-AD55-BB24BDE47EAB}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{B681AFAD-0DE3-4EBF-9503-7C5A1C3899F0}" = rport=3702 | protocol=17 | dir=out | svc=fdrespub | app=%systemroot%\system32\svchost.exe |
"{C106D6D9-DB0A-43B4-9588-0D1D7DC0CA75}" = rport=3702 | protocol=17 | dir=out | svc=fdphost | app=%systemroot%\system32\svchost.exe |
"{D085F843-628E-48B5-AEDA-2FD304FDF3B6}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe |
"{D313EAA9-5B54-403F-B88D-CFE22B5C384B}" = lport=12972 | protocol=6 | dir=in | name=audials localhttpserver 12972 |
"{D5CFDC38-F720-4EA2-8B44-9DB8FD90A618}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe |
"{DCAC463C-073B-4C1B-A5E4-B6E1F9985192}" = lport=31931 | protocol=6 | dir=in | name=audials localhttpserver 31931 |
========== Vista Active Application Exception List ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0C212F6A-31FB-4F21-972A-FFBE94960607}" = dir=in | app=c:\program files\common files\apple\apple application support\webkit2webprocess.exe |
"{263A87D3-1EA6-488F-95C2-E64113919738}" = protocol=17 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{3289F310-859C-4F9E-B2AE-104E7D42208B}" = protocol=17 | dir=in | app=c:\users\benni\appdata\roaming\spotify\spotify.exe |
"{42EE7CB5-9F5F-4828-B64E-35E6E578AC59}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe |
"{4924C59F-66F1-427C-8F51-FD68DE52CF67}" = dir=in | app=c:\program files\audials\audials 10\audials.exe |
"{C5F23C44-67F3-4989-925C-7D07A21D4DEF}" = dir=in | app=c:\program files\skype\phone\skype.exe |
"{CAF4128B-8358-4FA4-A6BC-6F623F009C2A}" = protocol=6 | dir=in | app=c:\users\benni\appdata\roaming\spotify\spotify.exe |
"{DF447BB4-D783-4599-B305-1F78B668F05B}" = protocol=6 | dir=in | app=c:\program files\bonjour\mdnsresponder.exe |
"{E5243DEC-095B-4774-9A66-74D5236D6753}" = protocol=17 | dir=in | app=c:\users\benni\appdata\roaming\spotify\spotify.exe |
"{E5FCB10C-787B-44F4-A96C-01E5749DE959}" = dir=in | app=c:\program files\itunes\itunes.exe |
"{E86B475D-B16D-4363-859E-8E7DF4594F06}" = protocol=6 | dir=in | app=c:\users\benni\appdata\roaming\spotify\spotify.exe |
"TCP Query User{0B76A569-B220-475D-B310-E9CC7FE88451}C:\xampp\apache\bin\httpd.exe" = protocol=6 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
"TCP Query User{1FFA9D58-17E9-45F7-95FE-3F73F42EB90D}C:\users\benni\desktop\valon2 3.0\valon2 starter.exe" = protocol=6 | dir=in | app=c:\users\benni\desktop\valon2 3.0\valon2 starter.exe |
"TCP Query User{345EA823-88AA-456F-878D-1401927CB46F}C:\program files\jdownloader\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\jdownloader\jre\bin\javaw.exe |
"TCP Query User{46CEF75C-5C3C-489F-899D-3EBC8C0525B5}C:\program files\jdownloader\jre\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\jdownloader\jre\bin\javaw.exe |
"TCP Query User{4AA323EF-CFDD-43A7-90EA-177299623AEE}C:\users\benni\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\benni\appdata\local\akamai\netsession_win.exe |
"TCP Query User{BEF31EAB-8396-4819-B10F-359D8B025144}C:\xampp\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"UDP Query User{40F9B6E9-CDCC-4BBE-90AD-8BDDD0527EDD}C:\users\benni\desktop\valon2 3.0\valon2 starter.exe" = protocol=17 | dir=in | app=c:\users\benni\desktop\valon2 3.0\valon2 starter.exe |
"UDP Query User{4408DB1F-CC4D-42D5-B21F-A3CD9B47762B}C:\program files\jdownloader\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\jdownloader\jre\bin\javaw.exe |
"UDP Query User{74B151CD-4FD6-44A3-8B5D-79EAE0689564}C:\xampp\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=c:\xampp\mysql\bin\mysqld.exe |
"UDP Query User{7AD16D21-F281-44E8-AEBC-BC0BCAE6F878}C:\users\benni\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\benni\appdata\local\akamai\netsession_win.exe |
"UDP Query User{9B8CE05A-C12F-455A-A9EE-E0D9559F0C45}C:\program files\jdownloader\jre\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\jdownloader\jre\bin\javaw.exe |
"UDP Query User{ABC9B151-554E-46F3-B1F5-6FBE1C6D83E5}C:\xampp\apache\bin\httpd.exe" = protocol=17 | dir=in | app=c:\xampp\apache\bin\httpd.exe |
========== HKEY_LOCAL_MACHINE Uninstall List ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{268278CF-FB69-4D98-B70E-BFEC1CDCA225}" = iTunes
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{4281435C-AD1D-4C8A-B9C0-3961C11EF142}_is1" = YouTube Song Downloader
"{45C56AA7-ED1B-4800-A97F-EDDF3F3520B1}" = Apple Application Support
"{4E76FF7E-AEBA-4C87-B788-CD47E5425B9D}" = Skype™ 6.3
"{6AFCA4E1-9B78-3640-8F72-A7BF33448200}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
"{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}" = Apple Software Update
"{79155F2B-9895-49D7-8612-D92580E0DE5B}" = Bonjour
"{889DF117-14D1-44EE-9F31-C5FB5D47F68B}" = Yontoo 2.053
"{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}" = Software Version Updater
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 311.06
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 311.06
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 311.06
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 1.11.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{C911A0C2-2236-3164-AA47-F2566C01AE5E}" = Microsoft .NET Framework 4 Extended DEU Language Pack
"{D32F0E2C-282C-4B0F-98F7-AE3AB9E6D1BB}" = Audials
"{E14ADE0E-75F3-4A46-87E5-26692DD626EC}" = Apple Mobile Device Support
"{F750C986-5310-3A5A-95F8-4EC71C8AC01C}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"1ClickDownload" = Movie2KDownloader
"5513-1208-7298-9440" = JDownloader 0.9
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"ASIO4ALL" = ASIO4ALL
"DealPly" = DealPly (remove only)
"FL Studio 11" = FL Studio 11
"FlowStone" = FlowStone FL 3.0
"FoxyDeal" = FoxyDeal
"Google Chrome" = Google Chrome
"IL Download Manager" = IL Download Manager
"IL Shared Libraries" = IL Shared Libraries
"KLiteCodecPack_is1" = K-Lite Codec Pack 6.0.4 (Basic)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.75.0.1300
"McAfee Security Scan" = McAfee Security Scan Plus
"Mega LC 1.0" = Mega LC 1.0
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft .NET Framework 4 Extended DEU Language Pack" = Microsoft .NET Framework 4 Extended DEU Language Pack
"Mozilla Firefox 21.0 (x86 de)" = Mozilla Firefox 21.0 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"WinRAR archiver" = WinRAR 4.20 (32-Bit)
"Wisdom-soft AutoScreenRecorder 3.1 Pro" = Wisdom-soft AutoScreenRecorder 3.1 Pro
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Dealply" = Update_DealPly
"Skymonk2" = Skymonk 2
"Spotify" = Spotify
========== Last 20 Event Log Errors ==========
[ Application Events ]
Error - 09.06.2013 01:08:45 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 09.06.2013 21:00:22 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 09.06.2013 21:00:23 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 10.06.2013 01:36:13 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 10.06.2013 01:36:14 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 10.06.2013 16:43:38 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 10.06.2013 16:43:39 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 10.06.2013 21:00:23 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 10.06.2013 21:00:23 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 11.06.2013 21:27:15 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
Error - 11.06.2013 21:27:16 | Computer Name = benny | Source = Microsoft-Windows-CAPI2 | ID = 513
Description = Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts
"System Writer". Details: AddCoreCsiFiles : GetNextFileMapContent() failed. System
Error: Falscher Parameter. .
[ System Events ]
Error - 04.06.2013 14:51:44 | Computer Name = benny | Source = Service Control Manager | ID = 7038
Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"
mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern
Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
Management Console (MMC).
Error - 04.06.2013 14:51:44 | Computer Name = benny | Source = Service Control Manager | ID = 7000
Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden
Fehlers nicht gestartet: %%1069
Error - 04.06.2013 21:00:45 | Computer Name = benny | Source = Microsoft-Windows-Service Pack Installer | ID = 8
Description = Fehler bei der Service Pack-Installation. Fehlercode: 0x800b0100.
Error - 04.06.2013 21:00:53 | Computer Name = benny | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Windows 7 Service Pack 1 (KB976932)
Error - 04.06.2013 23:42:11 | Computer Name = benny | Source = Microsoft-Windows-Service Pack Installer | ID = 8
Description = Fehler bei der Service Pack-Installation. Fehlercode: 0x800b0100.
Error - 04.06.2013 23:42:18 | Computer Name = benny | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Windows 7 Service Pack 1 (KB976932)
Error - 05.06.2013 06:11:37 | Computer Name = benny | Source = Service Control Manager | ID = 7038
Description = Der Dienst "nvUpdatusService" konnte sich nicht als ".\UpdatusUser"
mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: %%1330 Vergewissern
Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft
Management Console (MMC).
Error - 05.06.2013 06:11:37 | Computer Name = benny | Source = Service Control Manager | ID = 7000
Description = Der Dienst "NVIDIA Update Service Daemon" wurde aufgrund folgenden
Fehlers nicht gestartet: %%1069
Error - 05.06.2013 08:43:43 | Computer Name = benny | Source = Microsoft-Windows-Service Pack Installer | ID = 8
Description = Fehler bei der Service Pack-Installation. Fehlercode: 0x800b0100.
Error - 05.06.2013 08:43:44 | Computer Name = benny | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
Fehler 0x80070643 fehlgeschlagen: Windows 7 Service Pack 1 (KB976932)
< End of report > --- --- --- |