Trojaner-Board - TR/Banker.MultiBanker.VT und TR/Dropper.Gen, Malwarebytes Auswertung

ups gar nicht gesehn, hatte ja gleich neustart,
hier der remover log:

Code:

.\debug.cpp(238) : Debug log started at 16.09.2010 - 19:44:42

.\boot_cleaner.cpp(527) : Bootkit Remover

.\boot_cleaner.cpp(528) : (c) 2009 eSage Lab

.\boot_cleaner.cpp(529) : www.esagelab.com

.\boot_cleaner.cpp(533) : Program version: 1.2.0.0

.\boot_cleaner.cpp(540) : OS Version: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)

.\debug.cpp(248) : **********************************************

.\debug.cpp(249) : *** [ LOADED MODULES INFORMATION ] ***********

.\debug.cpp(250) : **********************************************

.\debug.cpp(256) : 0x804d7000 0x001f9280 "\WINDOWS\system32\ntkrnlpa.exe"

.\debug.cpp(256) : 0x806d1000 0x00020300 "\WINDOWS\system32\hal.dll"

.\debug.cpp(256) : 0xf7b1c000 0x00002000 "\WINDOWS\system32\KDCOM.DLL"

.\debug.cpp(256) : 0xf7a2c000 0x00003000 "\WINDOWS\system32\BOOTVID.dll"

.\debug.cpp(256) : 0xf74ec000 0x0002f000 "ACPI.sys"

.\debug.cpp(256) : 0xf7b1e000 0x00002000 "\WINDOWS\system32\DRIVERS\WMILIB.SYS"

.\debug.cpp(256) : 0xf74db000 0x00011000 "pci.sys"

.\debug.cpp(256) : 0xf761c000 0x0000a000 "isapnp.sys"

.\debug.cpp(256) : 0xf762c000 0x00010000 "ohci1394.sys"

.\debug.cpp(256) : 0xf763c000 0x0000e000 "\WINDOWS\system32\DRIVERS\1394BUS.SYS"

.\debug.cpp(256) : 0xf7be4000 0x00001000 "pciide.sys"

.\debug.cpp(256) : 0xf789c000 0x00007000 "\WINDOWS\system32\DRIVERS\PCIIDEX.SYS"

.\debug.cpp(256) : 0xf7b20000 0x00002000 "viaide.sys"

.\debug.cpp(256) : 0xf7b22000 0x00002000 "intelide.sys"

.\debug.cpp(256) : 0xf764c000 0x0000b000 "MountMgr.sys"

.\debug.cpp(256) : 0xf74bc000 0x0001f000 "ftdisk.sys"

.\debug.cpp(256) : 0xf78a4000 0x00005000 "PartMgr.sys"

.\debug.cpp(256) : 0xf765c000 0x0000e000 "VolSnap.sys"

.\debug.cpp(256) : 0xf74a4000 0x00018000 "atapi.sys"

.\debug.cpp(256) : 0xf766c000 0x00009000 "disk.sys"

.\debug.cpp(256) : 0xf767c000 0x0000d000 "\WINDOWS\system32\DRIVERS\CLASSPNP.SYS"

.\debug.cpp(256) : 0xf7484000 0x00020000 "fltmgr.sys"

.\debug.cpp(256) : 0xf7472000 0x00012000 "sr.sys"

.\debug.cpp(256) : 0xf78ac000 0x00005000 "PxHelp20.sys"

.\debug.cpp(256) : 0xf745b000 0x00017000 "KSecDD.sys"

.\debug.cpp(256) : 0xf73ce000 0x0008d000 "Ntfs.sys"

.\debug.cpp(256) : 0xf73a1000 0x0002d000 "NDIS.sys"

.\debug.cpp(256) : 0xf7387000 0x0001a000 "Mup.sys"

.\debug.cpp(256) : 0xf783c000 0x00010000 "\SystemRoot\system32\DRIVERS\AmdK8.sys"

.\debug.cpp(256) : 0xf71f1000 0x0014e000 "\SystemRoot\system32\DRIVERS\ati2mtag.sys"

.\debug.cpp(256) : 0xf71dd000 0x00014000 "\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS"

.\debug.cpp(256) : 0xf7994000 0x00005000 "\SystemRoot\system32\DRIVERS\usbohci.sys"

.\debug.cpp(256) : 0xf71b9000 0x00024000 "\SystemRoot\system32\DRIVERS\USBPORT.SYS"

.\debug.cpp(256) : 0xf799c000 0x00008000 "\SystemRoot\system32\DRIVERS\usbehci.sys"

.\debug.cpp(256) : 0xf784c000 0x0000b000 "\SystemRoot\system32\DRIVERS\imapi.sys"

.\debug.cpp(256) : 0xf785c000 0x00010000 "\SystemRoot\system32\DRIVERS\cdrom.sys"

.\debug.cpp(256) : 0xf786c000 0x0000f000 "\SystemRoot\system32\DRIVERS\redbook.sys"

.\debug.cpp(256) : 0xf7196000 0x00023000 "\SystemRoot\system32\DRIVERS\ks.sys"

.\debug.cpp(256) : 0xf7182000 0x00014000 "\SystemRoot\system32\DRIVERS\Rtnicxp.sys"

.\debug.cpp(256) : 0xf787c000 0x00010000 "\SystemRoot\system32\DRIVERS\nic1394.sys"

.\debug.cpp(256) : 0xf6e08000 0x0037a000 "\SystemRoot\system32\drivers\ALCXWDM.SYS"

.\debug.cpp(256) : 0xf6de4000 0x00024000 "\SystemRoot\system32\drivers\portcls.sys"

.\debug.cpp(256) : 0xf788c000 0x0000f000 "\SystemRoot\system32\drivers\drmk.sys"

.\debug.cpp(256) : 0xf6dd0000 0x00014000 "\SystemRoot\system32\DRIVERS\parport.sys"

.\debug.cpp(256) : 0xf76ac000 0x0000d000 "\SystemRoot\system32\DRIVERS\i8042prt.sys"

.\debug.cpp(256) : 0xf79a4000 0x00006000 "\SystemRoot\system32\DRIVERS\mouclass.sys"

.\debug.cpp(256) : 0xf79ac000 0x00005000 "\SystemRoot\system32\DRIVERS\PS2.sys"

.\debug.cpp(256) : 0xf79b4000 0x00007000 "\SystemRoot\system32\DRIVERS\kbdclass.sys"

.\debug.cpp(256) : 0xf7cd5000 0x00001000 "\SystemRoot\system32\DRIVERS\audstub.sys"

.\debug.cpp(256) : 0xf76bc000 0x0000d000 "\SystemRoot\system32\DRIVERS\rasl2tp.sys"

.\debug.cpp(256) : 0xf7b04000 0x00003000 "\SystemRoot\system32\DRIVERS\ndistapi.sys"

.\debug.cpp(256) : 0xf6d8b000 0x00017000 "\SystemRoot\system32\DRIVERS\ndiswan.sys"

.\debug.cpp(256) : 0xf76cc000 0x0000b000 "\SystemRoot\system32\DRIVERS\raspppoe.sys"

.\debug.cpp(256) : 0xf76dc000 0x0000c000 "\SystemRoot\system32\DRIVERS\raspptp.sys"

.\debug.cpp(256) : 0xf79bc000 0x00005000 "\SystemRoot\system32\DRIVERS\TDI.SYS"

.\debug.cpp(256) : 0xf6d7a000 0x00011000 "\SystemRoot\system32\DRIVERS\psched.sys"

.\debug.cpp(256) : 0xf76ec000 0x00009000 "\SystemRoot\system32\DRIVERS\msgpc.sys"

.\debug.cpp(256) : 0xf79cc000 0x00005000 "\SystemRoot\system32\DRIVERS\ptilink.sys"

.\debug.cpp(256) : 0xf79d4000 0x00005000 "\SystemRoot\system32\DRIVERS\raspti.sys"

.\debug.cpp(256) : 0xf76fc000 0x0000a000 "\SystemRoot\system32\DRIVERS\termdd.sys"

.\debug.cpp(256) : 0xf7b4c000 0x00002000 "\SystemRoot\system32\DRIVERS\swenum.sys"

.\debug.cpp(256) : 0xf6c7c000 0x0005e000 "\SystemRoot\system32\DRIVERS\update.sys"

.\debug.cpp(256) : 0xf7b18000 0x00004000 "\SystemRoot\system32\DRIVERS\mssmbios.sys"

.\debug.cpp(256) : 0xf770c000 0x0000a000 "\SystemRoot\System32\Drivers\NDProxy.SYS"

.\debug.cpp(256) : 0xf773c000 0x0000f000 "\SystemRoot\system32\DRIVERS\usbhub.sys"

.\debug.cpp(256) : 0xf7b4e000 0x00002000 "\SystemRoot\system32\DRIVERS\USBD.SYS"

.\debug.cpp(256) : 0xf7b50000 0x00002000 "\SystemRoot\System32\Drivers\Fs_Rec.SYS"

.\debug.cpp(256) : 0xf7d2a000 0x00001000 "\SystemRoot\System32\Drivers\Null.SYS"

.\debug.cpp(256) : 0xf7b52000 0x00002000 "\SystemRoot\System32\Drivers\Beep.SYS"

.\debug.cpp(256) : 0xf7d2b000 0x00001000 "\SystemRoot\System32\DRIVERS\AvgArCln.sys"

.\debug.cpp(256) : 0xf79e4000 0x00007000 "\SystemRoot\system32\DRIVERS\HIDPARSE.SYS"

.\debug.cpp(256) : 0xf79ec000 0x00006000 "\SystemRoot\System32\drivers\vga.sys"

.\debug.cpp(256) : 0xf7b54000 0x00002000 "\SystemRoot\System32\Drivers\mnmdd.SYS"

.\debug.cpp(256) : 0xf7b56000 0x00002000 "\SystemRoot\System32\DRIVERS\RDPCDD.sys"

.\debug.cpp(256) : 0xf79f4000 0x00005000 "\SystemRoot\System32\Drivers\Msfs.SYS"

.\debug.cpp(256) : 0xf79fc000 0x00008000 "\SystemRoot\System32\Drivers\Npfs.SYS"

.\debug.cpp(256) : 0xf7ab8000 0x00003000 "\SystemRoot\system32\DRIVERS\rasacd.sys"

.\debug.cpp(256) : 0xf2c01000 0x00013000 "\SystemRoot\system32\DRIVERS\ipsec.sys"

.\debug.cpp(256) : 0xf2ba8000 0x00059000 "\SystemRoot\system32\DRIVERS\tcpip.sys"

.\debug.cpp(256) : 0xf2b80000 0x00028000 "\SystemRoot\system32\DRIVERS\netbt.sys"

.\debug.cpp(256) : 0xf2b5e000 0x00022000 "\SystemRoot\System32\drivers\afd.sys"

.\debug.cpp(256) : 0xf774c000 0x00009000 "\SystemRoot\system32\DRIVERS\netbios.sys"

.\debug.cpp(256) : 0xf7a04000 0x00006000 "\SystemRoot\system32\DRIVERS\ssmdrv.sys"

.\debug.cpp(256) : 0xf2b33000 0x0002b000 "\SystemRoot\system32\DRIVERS\rdbss.sys"

.\debug.cpp(256) : 0xf2a9b000 0x00070000 "\SystemRoot\system32\DRIVERS\mrxsmb.sys"

.\debug.cpp(256) : 0xf777c000 0x0000b000 "\SystemRoot\System32\Drivers\Fips.SYS"

.\debug.cpp(256) : 0xf2a75000 0x00026000 "\SystemRoot\system32\DRIVERS\ipnat.sys"

.\debug.cpp(256) : 0xf778c000 0x00009000 "\SystemRoot\system32\DRIVERS\wanarp.sys"

.\debug.cpp(256) : 0xf779c000 0x0000f000 "\SystemRoot\system32\DRIVERS\arp1394.sys"

.\debug.cpp(256) : 0xf29c4000 0x00011000 "\SystemRoot\system32\DRIVERS\avipbb.sys"

.\debug.cpp(256) : 0xf7b5e000 0x00002000 "\??\C:\Programme\Avira\AntiVir PersonalEdition Classic\avgio.sys"

.\debug.cpp(256) : 0xf29a0000 0x00024000 "\SystemRoot\System32\Drivers\Fastfat.SYS"

.\debug.cpp(256) : 0xf7a1c000 0x00007000 "\SystemRoot\system32\DRIVERS\USBSTOR.SYS"

.\debug.cpp(256) : 0xf2943000 0x0005d000 "\SystemRoot\system32\DRIVERS\SE4501D.sys"

.\debug.cpp(256) : 0xf292b000 0x00018000 "\SystemRoot\System32\Drivers\dump_atapi.sys"

.\debug.cpp(256) : 0xf7b76000 0x00002000 "\SystemRoot\System32\Drivers\dump_WMILIB.SYS"

.\debug.cpp(256) : 0xbf800000 0x001c5000 "\SystemRoot\System32\win32k.sys"

.\debug.cpp(256) : 0xf6c70000 0x00003000 "\SystemRoot\System32\drivers\Dxapi.sys"

.\debug.cpp(256) : 0xf78dc000 0x00005000 "\SystemRoot\System32\watchdog.sys"

.\debug.cpp(256) : 0xbf000000 0x00012000 "\SystemRoot\System32\drivers\dxg.sys"

.\debug.cpp(256) : 0xf7c59000 0x00001000 "\SystemRoot\System32\drivers\dxgthk.sys"

.\debug.cpp(256) : 0xbf012000 0x0003f000 "\SystemRoot\System32\ati2dvag.dll"

.\debug.cpp(256) : 0xbf051000 0x00039000 "\SystemRoot\System32\ati2cqag.dll"

.\debug.cpp(256) : 0xbf08a000 0x00035000 "\SystemRoot\System32\atikvmag.dll"

.\debug.cpp(256) : 0xbf0bf000 0x0024d000 "\SystemRoot\System32\ati3duag.dll"

.\debug.cpp(256) : 0xbf30c000 0x00093000 "\SystemRoot\System32\ativvaxx.dll"

.\debug.cpp(256) : 0xf0827000 0x00004000 "\SystemRoot\system32\DRIVERS\ndisuio.sys"

.\debug.cpp(256) : 0xf040f000 0x00014000 "\??\C:\Programme\Avira\AntiVir PersonalEdition Classic\avgntflt.sys"

.\debug.cpp(256) : 0xf0390000 0x00057000 "\SystemRoot\system32\DRIVERS\srv.sys"

.\debug.cpp(256) : 0xf028b000 0x00015000 "\SystemRoot\system32\drivers\wdmaud.sys"

.\debug.cpp(256) : 0xf0693000 0x0000f000 "\SystemRoot\system32\drivers\sysaudio.sys"

.\debug.cpp(256) : 0xf01c5000 0x00010000 "\SystemRoot\System32\Drivers\Cdfs.SYS"

.\debug.cpp(256) : 0xefe27000 0x00041000 "\SystemRoot\System32\Drivers\HTTP.sys"

.\debug.cpp(256) : 0x7c910000 0x000b9000 "\WINDOWS\system32\ntdll.dll"

.\debug.cpp(263) : **********************************************

.\debug.cpp(307) : *** [ DEVICE OBJECTS INFORMATION ] ***********

.\debug.cpp(308) : **********************************************

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\D:"

.\debug.cpp(400) :  Destination "\Device\HarddiskVolume2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\NDIS"

.\debug.cpp(400) :  Destination "\Device\Ndis"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_4370&SUBSYS_2A25103C&REV_02#3&61aaa01&0&A5#{dda54a40-1e4c-11d1-a050-405705c10000}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0010"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi3:"

.\debug.cpp(400) :  Destination "\Device\Ide\IdePort2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY1"

.\debug.cpp(400) :  Destination "\Device\Video0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{ffbb6e3f-ccfe-4d84-90d9-421418b03a8e}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY2"

.\debug.cpp(400) :  Destination "\Device\Video1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PPPOEMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\0000002c"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#PNP0C0C#2&daba3ff&0#{4afa3d53-74a7-11d0-be5e-00a0c9062857}"

.\debug.cpp(400) :  Destination "\Device\0000003b"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Ip"

.\debug.cpp(400) :  Destination "\Device\Ip"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{ad0e75ca-f51a-11dd-87ea-806d6172696f}"

.\debug.cpp(400) :  Destination "\Device\Harddisk2\DP(1)0-0+8"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USBSTOR#Disk&Ven_Generic&Prod_USB_SD_Reader&Rev_1.00#2004888&0#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\00000063"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY3"

.\debug.cpp(400) :  Destination "\Device\Video2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB20#4&d786f6a&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"

.\debug.cpp(400) :  Destination "\Device\USBPDO-2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\E:"

.\debug.cpp(400) :  Destination "\Device\CdRom0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\IPSECDev"

.\debug.cpp(400) :  Destination "\Device\IPSEC"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PSCHEDMP#0003#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\00000031"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\avgio"

.\debug.cpp(400) :  Destination "\Device\avgio"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY4"

.\debug.cpp(400) :  Destination "\Device\Video3"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_NDISWANIP#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\0000002b"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{ad0e75cb-f51a-11dd-87ea-806d6172696f}"

.\debug.cpp(400) :  Destination "\Device\Harddisk3\DP(1)0-0+9"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#RemovableMedia#7&343598db&0&RM#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Harddisk3\DP(1)0-0+9"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#RemovableMedia#7&255493f1&0&RM#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Harddisk4\DP(1)0-0+a"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\NDPROXY"

.\debug.cpp(400) :  Destination "\Device\NDProxy"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#CdRomTSSTcorp_CD#DVDW_TS-H552D_______________hp07____#5&1c5c6e99&0&0.0.0#{53f56308-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Ide\IdeDeviceP3T0L0-10"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\DISPLAY5"

.\debug.cpp(400) :  Destination "\Device\Video4"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_083a&Pid_4521#083a-4521#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\USBPDO-4"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{3c0d501a-140b-11d1-b40f-00a0c9223196}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\WMIDataDevice"

.\debug.cpp(400) :  Destination "\Device\WMIDataDevice"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\F:"

.\debug.cpp(400) :  Destination "\Device\Harddisk1\DP(1)0-0+7"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#PNP0F13#3&61aaa01&0#{378de44c-56ef-11d1-bc8c-00a0c91405dd}"

.\debug.cpp(400) :  Destination "\Device\00000041"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{dff220f3-f70f-11d0-b917-00a0c9223196}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\avgntflt"

.\debug.cpp(400) :  Destination "\FileSystem\Filters\avgntflt"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PIPE"

.\debug.cpp(400) :  Destination "\Device\NamedPipe"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#CdRomTSSTcorp_CD#DVDW_TS-H552D_______________hp07____#5&1c5c6e99&0&0.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Ide\IdeDeviceP3T0L0-10"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c5066e-72c1-11d2-9755-0000f8004788}"

.\debug.cpp(400) :  Destination "\Device\KSENUM#00000002"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{2eb07ea0-7e70-11d0-a5d6-28db04c10000}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#RemovableMedia#7&59a1a41&0&RM#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Harddisk2\DP(1)0-0+8"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#RemovableMedia#7&19d12bf5&0&RM#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Harddisk1\DP(1)0-0+7"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\G:"

.\debug.cpp(400) :  Destination "\Device\Harddisk2\DP(1)0-0+8"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PSched"

.\debug.cpp(400) :  Destination "\Device\PSched"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\UNC"

.\debug.cpp(400) :  Destination "\Device\Mup"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\IPNAT"

.\debug.cpp(400) :  Destination "\Device\IPNAT"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB#4&777fc23&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"

.\debug.cpp(400) :  Destination "\Device\USBPDO-0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{6994ad04-93ef-11d0-a3cc-00a0c9223196}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#CdRomTSSTcorp_CD#DVDW_TS-H552D_______________hp07____#5&1c5c6e99&0&0.0.0#{1186654d-47b8-48b9-beb9-7df113ae3c67}"

.\debug.cpp(400) :  Destination "\Device\Ide\IdeDeviceP3T0L0-10"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\FltMgrMsg"

.\debug.cpp(400) :  Destination "\FileSystem\Filters\FltMgrMsg"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD0"

.\debug.cpp(400) :  Destination "\Device\USBFDO-0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\IDE#DiskSAMSUNG_HD160JJ#P_______________________ZM100-36#30534644314a4c4c303338333434202020202020#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Ide\IdeDeviceP0T0L0-3"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Tcp"

.\debug.cpp(400) :  Destination "\Device\Tcp"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_4375&SUBSYS_2A24103C&REV_00#3&61aaa01&0&99#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0004"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_4374&SUBSYS_2A24103C&REV_00#3&61aaa01&0&98#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0003"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\LCD"

.\debug.cpp(400) :  Destination "\Device\VideoPdo0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_058f&Pid_9360#2004888#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"

.\debug.cpp(400) :  Destination "\Device\USBPDO-3"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_4373&SUBSYS_2A24103C&REV_00#3&61aaa01&0&9A#{3abf6f2d-71c4-462a-8a92-1e6861e6af27}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0005"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD1"

.\debug.cpp(400) :  Destination "\Device\USBFDO-1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PTIMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\00000032"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PhysicalDrive0"

.\debug.cpp(400) :  Destination "\Device\Harddisk0\DR0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#RemovableMedia#7&343598db&0&RM#{53f5630a-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Harddisk3\DP(1)0-0+9"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PRN"

.\debug.cpp(400) :  Destination "\DosDevices\LPT1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\HCD2"

.\debug.cpp(400) :  Destination "\Device\USBFDO-2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{53172480-4791-11d0-a5d6-28db04c10000}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PSCHEDMP#0001#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\0000002f"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{5BDFA431-22ED-4E47-BF65-951D1CF79944}"

.\debug.cpp(400) :  Destination "\Device\{5BDFA431-22ED-4E47-BF65-951D1CF79944}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{ad0e75c7-f51a-11dd-87ea-806d6172696f}"

.\debug.cpp(400) :  Destination "\Device\HarddiskVolume2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#Volume#1&30a96598&0&SignatureCAB10BEEOffset23DC870000Length166872000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\HarddiskVolume2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\H:"

.\debug.cpp(400) :  Destination "\Device\Harddisk3\DP(1)0-0+9"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PhysicalDrive1"

.\debug.cpp(400) :  Destination "\Device\Harddisk1\DR3"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\sysaudio"

.\debug.cpp(400) :  Destination "\Device\sysaudio"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#RemovableMedia#7&59a1a41&0&RM#{53f5630a-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Harddisk2\DP(1)0-0+8"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#Vid_083a&Pid_4521#083a-4521#{a5dcbf10-6530-11d2-901f-00c04fb951ed}"

.\debug.cpp(400) :  Destination "\Device\USBPDO-4"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\fsWrap"

.\debug.cpp(400) :  Destination "\Device\FsWrap"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PSCHEDMP#0002#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\00000030"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{97ebaacb-95bd-11d0-a3ea-00a0c9223196}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\CdRom0"

.\debug.cpp(400) :  Destination "\Device\CdRom0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PhysicalDrive2"

.\debug.cpp(400) :  Destination "\Device\Harddisk2\DR4"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{38FE8EB8-7D3C-4A91-943A-DFCDFCD8C6D3}"

.\debug.cpp(400) :  Destination "\Device\{38FE8EB8-7D3C-4A91-943A-DFCDFCD8C6D3}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{7EA1D9EA-25EB-4E5E-B554-E4B089DE3C32}"

.\debug.cpp(400) :  Destination "\Device\{7EA1D9EA-25EB-4E5E-B554-E4B089DE3C32}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PhysicalDrive3"

.\debug.cpp(400) :  Destination "\Device\Harddisk3\DR5"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_10EC&DEV_8139&SUBSYS_2A24103C&REV_10#4&1c88b56&0&18A4#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0015"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{91C349D8-C3BC-4331-BE67-B82CCBE94DE2}"

.\debug.cpp(400) :  Destination "\Device\{91C349D8-C3BC-4331-BE67-B82CCBE94DE2}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USB#ROOT_HUB#4&6f8ff81&0#{f18a0e88-c30c-11d0-8815-00a0c906bed8}"

.\debug.cpp(400) :  Destination "\Device\USBPDO-1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{E0503C2A-5871-446A-A9C7-F7CC290C9BEF}"

.\debug.cpp(400) :  Destination "\Device\{E0503C2A-5871-446A-A9C7-F7CC290C9BEF}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#FixedButton#2&daba3ff&0#{4afa3d53-74a7-11d0-be5e-00a0c9062857}"

.\debug.cpp(400) :  Destination "\Device\0000003e"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Global"

.\debug.cpp(400) :  Destination "\GLOBAL??"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_4370&SUBSYS_2A25103C&REV_02#3&61aaa01&0&A5#{6994ad04-93ef-11d0-a3cc-00a0c9223196}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0010"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{ad0e75cc-f51a-11dd-87ea-806d6172696f}"

.\debug.cpp(400) :  Destination "\Device\Harddisk4\DP(1)0-0+a"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\I:"

.\debug.cpp(400) :  Destination "\Device\Harddisk4\DP(1)0-0+a"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PhysicalDrive4"

.\debug.cpp(400) :  Destination "\Device\Harddisk4\DR6"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PxHelperDevice0"

.\debug.cpp(400) :  Destination "\Device\PxHelperDevice0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50671-72c1-11d2-9755-0000f8004788}"

.\debug.cpp(400) :  Destination "\Device\KSENUM#00000002"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_4370&SUBSYS_2A25103C&REV_02#3&61aaa01&0&A5#{65e8773e-8f56-11d0-a3b9-00a0c9223196}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0010"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#RemovableMedia#7&255493f1&0&RM#{53f5630a-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Harddisk4\DP(1)0-0+a"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{3e227e76-690d-11d2-8161-0000f8775bf1}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{ad809c00-7b88-11d0-a5d6-28db04c10000}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{9ea331fa-b91b-45f8-9285-bd2bc77afcde}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USBSTOR#Disk&Ven_Generic&Prod_USB_CF_Reader&Rev_1.01#2004888&1#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\00000064"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\ARP1394"

.\debug.cpp(400) :  Destination "\Device\ARP1394"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{509E6AB8-8600-4452-949A-951E44191668}"

.\debug.cpp(400) :  Destination "\Device\{509E6AB8-8600-4452-949A-951E44191668}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#Volume#1&30a96598&0&SignatureCAB10BEEOffset7E00Length23DC868200#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\HarddiskVolume1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#PNP0303#3&61aaa01&0#{884b96c3-56ef-11d1-bc8c-00a0c91405dd}"

.\debug.cpp(400) :  Destination "\Device\00000042"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1106&DEV_3044&SUBSYS_2A24103C&REV_80#4&1c88b56&0&20A4#{6bdd1fc1-810f-11d0-bec7-08002be2092f}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0016"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\MountPointManager"

.\debug.cpp(400) :  Destination "\Device\MountPointManager"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{d6c50674-72c1-11d2-9755-0000f8004788}"

.\debug.cpp(400) :  Destination "\Device\KSENUM#00000002"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\ssmctl"

.\debug.cpp(400) :  Destination "\Device\ssmctl"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_L2TPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\0000002a"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\WanArp"

.\debug.cpp(400) :  Destination "\Device\WANARP"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{040F5AF2-3D23-4E5C-BD86-E07E7F94318D}"

.\debug.cpp(400) :  Destination "\Device\{040F5AF2-3D23-4E5C-BD86-E07E7F94318D}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_5954&SUBSYS_2A24103C&REV_00#4&1c9eb71f&0&2808#{5b45201d-f2f2-4f3b-85bb-30ff1f953599}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0017"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#ftdisk#0000#{53f5630e-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\00000002"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Ps2"

.\debug.cpp(400) :  Destination "\Device\Ps2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USBSTOR#Disk&Ven_Generic&Prod_USB_MS_Reader&Rev_1.03#2004888&3#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\00000066"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\NDISWANIP"

.\debug.cpp(400) :  Destination "\Device\NdisWanIp"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\SW#{a7c7a5b0-5af3-11d1-9ced-00a024bf0407}#{9B365890-165F-11D0-A195-0020AFD156E4}#{fbf6f530-07b9-11d2-a71e-0000f8004788}"

.\debug.cpp(400) :  Destination "\Device\KSENUM#00000002"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{bf963d80-c559-11d0-8a2b-00a0c9255ac1}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PCI#VEN_1002&DEV_4370&SUBSYS_2A25103C&REV_02#3&61aaa01&0&A5#{65e8773d-8f56-11d0-a3b9-00a0c9223196}"

.\debug.cpp(400) :  Destination "\Device\NTPNP_PCI0010"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi0:"

.\debug.cpp(400) :  Destination "\Device\Ide\IdePort0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{ad0e75c9-f51a-11dd-87ea-806d6172696f}"

.\debug.cpp(400) :  Destination "\Device\Harddisk1\DP(1)0-0+7"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\STORAGE#RemovableMedia#7&19d12bf5&0&RM#{53f5630a-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\Harddisk1\DP(1)0-0+7"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\1394BUS0"

.\debug.cpp(400) :  Destination "\Device\1394BUS0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{ad0e75c6-f51a-11dd-87ea-806d6172696f}"

.\debug.cpp(400) :  Destination "\Device\HarddiskVolume1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Volume{ad0e75c8-f51a-11dd-87ea-806d6172696f}"

.\debug.cpp(400) :  Destination "\Device\CdRom0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{4747b320-62ce-11cf-a5d6-28db04c10000}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#MS_PPTPMINIPORT#0000#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\0000002d"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PTILINK1"

.\debug.cpp(400) :  Destination "\Device\ParTechInc0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#SYSTEM#0000#{a7c7a5b1-5af3-11d1-9ced-00a024bf0407}"

.\debug.cpp(400) :  Destination "\Device\00000035"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\LPT1"

.\debug.cpp(400) :  Destination "\Device\NamedPipe\Spooler\LPT1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\NDISTAPI"

.\debug.cpp(400) :  Destination "\Device\NdisTapi"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\NdisWan"

.\debug.cpp(400) :  Destination "\Device\NdisWan"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi1:"

.\debug.cpp(400) :  Destination "\Device\Ide\IdePort1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\IPMULTICAST"

.\debug.cpp(400) :  Destination "\Device\IPMULTICAST"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#PNP0401#3&61aaa01&0#{97f76ef0-f883-11d0-af1f-0000f800845c}"

.\debug.cpp(400) :  Destination "\Device\00000040"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{48184079-61FF-4CEE-8BEE-0B7241F1F295}"

.\debug.cpp(400) :  Destination "\Device\{48184079-61FF-4CEE-8BEE-0B7241F1F295}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PTILINK2"

.\debug.cpp(400) :  Destination "\Device\ParTechInc1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Shadow"

.\debug.cpp(400) :  Destination "\Device\LanmanRedirector"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\V1394#NIC1394#e0900410dc00#{ad498944-762f-11d0-8dcb-00c04fc3358c}"

.\debug.cpp(400) :  Destination "\Device\00000056"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\ACPI#AuthenticAMD_-_x86_Family_15_Model_47#_0#{97fadb10-4e33-40ae-359c-8bef029dbdd0}"

.\debug.cpp(400) :  Destination "\Device\0000003a"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\PTILINK3"

.\debug.cpp(400) :  Destination "\Device\ParTechInc2"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\FltMgr"

.\debug.cpp(400) :  Destination "\FileSystem\Filters\FltMgr"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\LPTENUM#MicrosoftRawPort#4&11086fbe&0&LPT1#{811fc6a5-f728-11d0-a537-0000f8753ed1}"

.\debug.cpp(400) :  Destination "\Device\Parallel0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\FtControl"

.\debug.cpp(400) :  Destination "\Device\FtControl"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\C:"

.\debug.cpp(400) :  Destination "\Device\HarddiskVolume1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\MAILSLOT"

.\debug.cpp(400) :  Destination "\Device\MailSlot"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\AUX"

.\debug.cpp(400) :  Destination "\DosDevices\COM1"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{1EC7FC63-522C-46F7-B08B-88A3C736BA74}"

.\debug.cpp(400) :  Destination "\Device\{1EC7FC63-522C-46F7-B08B-88A3C736BA74}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\{4AA30258-B517-4058-9889-2BDDD4605C1A}"

.\debug.cpp(400) :  Destination "\Device\{4AA30258-B517-4058-9889-2BDDD4605C1A}"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\GLOBALROOT"

.\debug.cpp(400) :  Destination ""

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Ndisuio"

.\debug.cpp(400) :  Destination "\Device\Ndisuio"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\USBSTOR#Disk&Ven_Generic&Prod_USB_SM_Reader&Rev_1.02#2004888&2#{53f56307-b6bf-11d0-94f2-00a0c91efb8b}"

.\debug.cpp(400) :  Destination "\Device\00000065"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#RDP_MOU#0000#{378de44c-56ef-11d1-bc8c-00a0c91405dd}"

.\debug.cpp(400) :  Destination "\Device\00000034"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Scsi2:"

.\debug.cpp(400) :  Destination "\Device\Ide\IdePort3"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\NUL"

.\debug.cpp(400) :  Destination "\Device\Null"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\NONSPOOLED_LPT1"

.\debug.cpp(400) :  Destination "\Device\Parallel0"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\Root#RDP_KBD#0000#{884b96c3-56ef-11d1-bc8c-00a0c91405dd}"

.\debug.cpp(400) :  Destination "\Device\00000033"

.\debug.cpp(409) :  --

.\debug.cpp(369) : SymbolicLink "\GLOBAL??\avipbb"

.\debug.cpp(400) :  Destination "\Device\avipbb"

.\debug.cpp(409) :  --

.\debug.cpp(453) : **********************************************

.\boot_cleaner.cpp(565) : System volume is \\.\C:

.\boot_cleaner.cpp(600) : \\.\C: -> \\.\PhysicalDrive0 at offset 0x00000000`00007e00

.\boot_cleaner.cpp(793) : Restoring boot code at \\.\PhysicalDrive0...

.\boot_cleaner.cpp(880) : OK

soll ich jetzt trotzdem den mbr check machen?

otl:

Code:

OTL logfile created on: 19.09.2010 16:50:34 - Run 4

OTL by OldTimer - Version 3.2.11.0     Folder = C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop

Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

446,00 Mb Total Physical Memory | 241,00 Mb Available Physical Memory | 54,00% Memory free

1,00 Gb Paging File | 1,00 Gb Available in Paging File | 70,00% Paging File free

Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 143,45 Gb Total Space | 124,64 Gb Free Space | 86,89% Space Free | Partition Type: NTFS

Drive D: | 5,59 Gb Total Space | 0,50 Gb Free Space | 9,03% Space Free | Partition Type: FAT32

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

 

Computer Name: NAME-CD5FDA878D

Current User Name: HP_Besitzer

Logged in as Administrator.

 

Current Boot Mode: Normal

Scan Mode: Current user

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Minimal

 
 ========== Processes (SafeList) ==========

 

PRC - C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.)

PRC - C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\OTL.exe (OldTimer Tools)

PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

PRC - C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe (Avira GmbH)

PRC - C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe (Avira GmbH)

PRC - C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH)

PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)

PRC - C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)

PRC - C:\Programme\Symantec\LiveUpdate\AluSchedulerSvc.exe (Symantec Corporation)

PRC - C:\Programme\Siemens\Gigaset USB Adapter 54\GigasetUSBMonitor.exe ()

 

 
 ========== Modules (SafeList) ==========

 

MOD - C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\OTL.exe (OldTimer Tools)

MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)

 

 
 ========== Win32 Services (SafeList) ==========

 

SRV - (AppMgmt) -- C:\WINDOWS\System32\appmgmts.dll File not found

SRV - (AntiVirScheduler) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\sched.exe (Avira GmbH)

SRV - (AntiVirService) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avguard.exe (Avira GmbH)

SRV - (LiveUpdate Notice Service) -- C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)

SRV - (LiveUpdate) -- C:\Programme\Symantec\LiveUpdate\LuComServer_3_0.EXE (Symantec Corporation)

SRV - (Automatisches LiveUpdate - Scheduler) -- C:\Programme\Symantec\LiveUpdate\ALUSchedulerSvc.exe (Symantec Corporation)

SRV - (IDriverT) -- C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe (Macrovision Corporation)

SRV - (Pml Driver HPZ12) -- C:\WINDOWS\system32\HPZipm12.exe (HP)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV - (catchme) -- C:\DOKUME~1\HP_BES~1.NAM\LOKALE~1\Temp\catchme.sys File not found

DRV - (PSI) -- C:\WINDOWS\system32\drivers\psi_mf.sys (Secunia)

DRV - (avipbb) -- C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)

DRV - (avgntflt) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avgntflt.sys (Avira GmbH)

DRV - (avgio) -- C:\Programme\Avira\AntiVir PersonalEdition Classic\avgio.sys (Avira GmbH)

DRV - (ssmdrv) -- C:\WINDOWS\system32\drivers\ssmdrv.sys (AVIRA GmbH)

DRV - (AvgArCln) -- C:\WINDOWS\system32\drivers\AvgArCln.sys (GRISOFT, s.r.o.)

DRV - (Ps2) -- C:\WINDOWS\system32\drivers\PS2.sys (Hewlett-Packard Company)

DRV - (RTL8023xp) -- C:\WINDOWS\system32\drivers\Rtnicxp.sys (Realtek Semiconductor Corporation                           )

DRV - (ALCXWDM) Service for Realtek AC97 Audio (WDM) -- C:\WINDOWS\system32\drivers\ALCXWDM.SYS (Realtek Semiconductor Corp.)

DRV - (ati2mtag) -- C:\WINDOWS\system32\drivers\ati2mtag.sys (ATI Technologies Inc.)

DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)

DRV - (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C) -- C:\WINDOWS\system32\drivers\RTL8139.sys (Realtek Semiconductor Corporation)

DRV - (SE4501D) -- C:\WINDOWS\system32\drivers\SE4501D.sys (Siemens AG)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

 

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

FF - prefs.js..browser.startup.homepage: "hxxp://erotik.freenet.de/freenet/index.html"

FF - prefs.js..extensions.enabledItems: {9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD}:3.0.5

FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0

FF - prefs.js..extensions.enabledItems: {ED0CF0C8-62F1-4865-A3FD-2E2A2B50FAFA}:1.0

FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20

 

FF - HKLM\software\mozilla\Firefox\extensions\\{ED0CF0C8-62F1-4865-A3FD-2E2A2B50FAFA}: C:\WINDOWS\system32\5005 [2010.07.01 22:12:52 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.9\extensions\\Components: C:\Programme\Mozilla Firefox\components [2010.09.08 21:38:13 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.9\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2010.09.08 21:38:13 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Components: C:\Programme\Mozilla Thunderbird\components [2010.09.04 20:24:08 | 000,000,000 | ---D | M]

FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.2\extensions\\Plugins: C:\Programme\Mozilla Thunderbird\plugins

 

[2010.09.04 20:06:40 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Anwendungsdaten\Mozilla\Extensions

[2010.09.04 20:06:40 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Anwendungsdaten\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}

[2010.09.18 20:28:16 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Anwendungsdaten\Mozilla\Firefox\Profiles\qcaul68r.default\extensions

[2009.02.07 21:01:51 | 000,000,000 | ---D | M] (CookieSafe) -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Anwendungsdaten\Mozilla\Firefox\Profiles\qcaul68r.default\extensions\{9D23D0AA-D8F5-11DA-B3FC-0928ABF316DD}

[2010.09.18 20:28:17 | 000,000,000 | ---D | M] -- C:\Programme\Mozilla Firefox\extensions

[2010.09.04 19:16:29 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}

[2010.09.04 19:16:13 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll

[2010.03.16 19:41:21 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml

[2010.03.16 19:41:21 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml

[2010.03.16 19:41:21 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml

[2010.03.16 19:41:21 | 000,001,178 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml

[2010.03.16 19:41:21 | 000,001,105 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml

 

O1 HOSTS File: ([2010.09.03 19:05:08 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       localhost

O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.

O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)

O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\Programme\Google\GoogleToolbar1.dll (Google Inc.)

O3 - HKLM\..\Toolbar: (&Google) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\Programme\Google\GoogleToolbar1.dll (Google Inc.)

O3 - HKCU\..\Toolbar\WebBrowser: (&Google) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\Programme\Google\GoogleToolbar1.dll (Google Inc.)

O4 - HKLM..\Run: [avgnt] C:\Programme\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH)

O4 - HKLM..\Run: [HPBootOp] C:\Programme\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe (Hewlett-Packard Company)

O4 - HKLM..\Run: [HPHUPD08] c:\Programme\HP\Digital Imaging\{33D6CC28-9F75-4d1b-A11D-98895B3A3729}\hphupd08.exe (Hewlett-Packard)

O4 - HKLM..\Run: [Recguard] C:\WINDOWS\SMINST\Recguard.exe ()

O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)

O4 - HKLM..\Run: [Symantec PIF AlertEng] C:\Programme\Gemeinsame Dateien\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe (Symantec Corporation)

O4 - HKLM..\Run: [TkBellExe] C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe (RealNetworks, Inc.)

O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Action Manager 32.lnk = C:\Programme\ScannerU\AM32.exe ()

O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Gigaset WLAN Adapter Monitor.lnk = C:\Programme\Siemens\Gigaset USB Adapter 54\GigasetUSBMonitor.exe ()

O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Microsoft Office.lnk = C:\Programme\Microsoft Office\Office\OSA9.EXE (Microsoft Corporation)

O4 - Startup: C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Startmenü\Programme\Autostart\Secunia PSI.lnk = C:\Programme\Secunia\PSI\psi.exe (Secunia)

O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0

O8 - Extra context menu item: &Google-Suche - C:\Programme\Google\GoogleToolbar1.dll (Google Inc.)

O8 - Extra context menu item: &Ins Deutsche übersetzen - C:\Programme\Google\GoogleToolbar1.dll (Google Inc.)

O8 - Extra context menu item: Ähnliche Seiten - C:\Programme\Google\GoogleToolbar1.dll (Google Inc.)

O8 - Extra context menu item: Im Cache gespeicherte Seite - C:\Programme\Google\GoogleToolbar1.dll (Google Inc.)

O8 - Extra context menu item: Verweisseiten - C:\Programme\Google\GoogleToolbar1.dll (Google Inc.)

O9 - Extra Button: Hilfe zu Verbindungen - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()

O9 - Extra 'Tools' menuitem : Hilfe zu Verbindungen - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm ()

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-0015-0000-0005-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_05-windows-i586.cab (Java Plug-in 1.5.0_05)

O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)

O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\msdaipp.dll (Microsoft Corporation)

O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Programme\Gemeinsame Dateien\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)

O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20 - Winlogon\Notify\AtiExtEvent: DllName - Ati2evxx.dll - C:\WINDOWS\System32\ati2evxx.dll (ATI Technologies Inc.)

O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home

O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\Eigene Bilder\wow.bmp

O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\Eigene Bilder\wow.bmp

O32 - HKLM CDRom: AutoRun - 1

O32 - AutoRun File - [2004.11.02 20:05:56 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]

O32 - AutoRun File - [2001.07.27 15:07:38 | 000,000,000 | -HS- | M] () - D:\AUTOEXEC.BAT -- [ FAT32 ]

O34 - HKLM BootExecute: (autocheck autochk *) -  File not found

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37 - HKLM\...com [@ = ComFile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

 
 ========== Files/Folders - Created Within 30 Days ==========

 

[2010.09.18 16:58:16 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xmldm

[2010.09.16 19:45:13 | 000,083,968 | ---- | C] (eSage Lab) -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\remover.exe

[2010.09.14 19:17:20 | 000,000,000 | RH-D | C] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Recent

[2010.09.12 16:59:47 | 000,000,000 | ---D | C] -- C:\Programme\7-Zip

[2010.09.05 18:06:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Anwendungsdaten\Apple Computer

[2010.09.05 17:47:20 | 000,000,000 | ---D | C] -- C:\AVZ

[2010.09.05 16:42:34 | 001,286,232 | ---- | C] (Kaspersky Lab ZAO) -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\TDSSKiller.exe

[2010.09.04 19:41:53 | 000,000,000 | ---D | C] -- C:\Programme\Secunia

[2010.09.04 19:16:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Sun

[2010.09.04 19:16:27 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll

[2010.09.04 19:16:27 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe

[2010.09.04 19:16:27 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe

[2010.09.04 19:16:27 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe

[2010.09.04 19:16:27 | 000,073,728 | ---- | C] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl

[2010.09.04 19:02:06 | 000,185,920 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll

[2010.09.04 19:01:57 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll

[2010.09.04 19:01:57 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll

[2010.09.04 19:01:48 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\xing shared

[2010.09.04 19:00:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real

[2010.09.04 18:51:03 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Apple

[2010.09.04 18:50:46 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Lokale Einstellungen\Anwendungsdaten\Apple

[2010.09.04 18:49:51 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Lokale Einstellungen\Anwendungsdaten\Apple Computer

[2010.09.04 18:19:47 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner

[2010.09.03 19:41:58 | 000,000,000 | -HSD | C] -- C:\RECYCLER

[2010.08.31 23:41:20 | 000,574,976 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\OTL.exe

[2010.08.30 22:59:21 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe

[2010.08.30 22:59:21 | 000,161,792 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe

[2010.08.30 22:59:21 | 000,136,704 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe

[2010.08.30 22:59:21 | 000,031,232 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe

[2010.08.30 22:59:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT

[2010.08.30 22:59:13 | 000,000,000 | ---D | C] -- C:\Combo-Fix

[2010.08.30 22:58:30 | 000,000,000 | ---D | C] -- C:\Qoobox

[2010.08.29 20:11:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Anwendungsdaten\Malwarebytes

[2010.08.29 20:10:52 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys

[2010.08.29 20:10:49 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes

[2010.08.29 20:10:48 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys

[2010.08.29 20:10:48 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware

[2010.08.22 18:26:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Lokale Einstellungen\Anwendungsdaten\Help

[2010.08.22 18:26:28 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Anwendungsdaten\Help

[2010.08.22 18:11:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\SecTaskMan

[2010.08.22 18:11:38 | 000,000,000 | ---D | C] -- C:\Programme\Security Task Manager

[2010.08.22 17:06:37 | 000,000,000 | ---D | C] -- C:\Programme\Unlocker

[2010.08.21 14:36:16 | 000,000,000 | ---D | C] -- C:\Programme\iKnowPS

[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 
 ========== Files - Modified Within 30 Days ==========

 

[2010.09.19 16:26:33 | 000,000,248 | ---- | M] () -- C:\WINDOWS\System\hpsysdrv.dat

[2010.09.19 16:22:48 | 000,000,282 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-3851759823-1197635777-2726854231-1008.job

[2010.09.19 16:22:38 | 000,000,006 | -H-- | M] () -- C:\WINDOWS\tasks\SA.DAT

[2010.09.19 16:22:36 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2010.09.19 16:22:34 | 468,242,432 | -HS- | M] () -- C:\hiberfil.sys

[2010.09.18 21:12:30 | 004,194,304 | -H-- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\NTUSER.DAT

[2010.09.18 21:12:30 | 000,000,190 | -HS- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\ntuser.ini

[2010.09.18 19:03:02 | 000,000,290 | ---- | M] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-3851759823-1197635777-2726854231-1008.job

[2010.09.16 23:25:13 | 000,068,096 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2010.09.16 21:47:41 | 003,915,828 | -H-- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Lokale Einstellungen\Anwendungsdaten\IconCache.db

[2010.09.16 20:00:08 | 000,083,410 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootk3.zip

[2010.09.16 19:58:12 | 000,105,984 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootk3.doc

[2010.09.16 19:55:47 | 000,137,728 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootk2.doc

[2010.09.16 19:54:59 | 000,105,984 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootk1.doc

[2010.09.16 19:44:00 | 000,040,422 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\bootkit_remover.rar

[2010.09.15 23:49:53 | 000,083,401 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootkit.zip

[2010.09.15 23:46:08 | 000,116,224 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootkit.doc

[2010.09.15 22:00:29 | 000,080,384 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\MBRCheck.exe

[2010.09.15 20:55:37 | 000,001,374 | ---- | M] () -- C:\WINDOWS\imsins.BAK

[2010.09.13 18:40:54 | 000,001,158 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl

[2010.09.12 17:21:39 | 000,572,928 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\Results of system analysis.doc

[2010.09.07 21:55:08 | 000,010,071 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\betti.JPG

[2010.09.05 17:07:01 | 000,133,632 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\RKUnhookerLE.EXE

[2010.09.04 19:43:23 | 000,000,711 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Startmenü\Programme\Autostart\Secunia PSI.lnk

[2010.09.04 19:16:12 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaws.exe

[2010.09.04 19:16:12 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javaw.exe

[2010.09.04 19:16:12 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\java.exe

[2010.09.04 19:16:12 | 000,073,728 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\javacpl.cpl

[2010.09.04 19:16:11 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\WINDOWS\System32\deployJava1.dll

[2010.09.04 19:15:46 | 000,902,476 | ---- | M] () -- C:\WINDOWS\System32\PerfStringBackup.INI

[2010.09.04 19:15:46 | 000,392,842 | ---- | M] () -- C:\WINDOWS\System32\perfh007.dat

[2010.09.04 19:15:46 | 000,381,828 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat

[2010.09.04 19:15:46 | 000,064,650 | ---- | M] () -- C:\WINDOWS\System32\perfc007.dat

[2010.09.04 19:15:46 | 000,053,572 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat

[2010.09.04 19:12:34 | 000,008,540 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\cc_20100904_191209.reg

[2010.09.04 19:02:06 | 000,185,920 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\rmoc3260.dll

[2010.09.04 19:01:57 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5016.dll

[2010.09.04 19:01:57 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\WINDOWS\System32\pndx5032.dll

[2010.09.04 19:01:24 | 000,278,528 | ---- | M] (Real Networks, Inc) -- C:\WINDOWS\System32\pncrt.dll

[2010.09.04 18:56:27 | 000,001,643 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Thunderbird.lnk

[2010.09.04 18:19:50 | 000,000,665 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\CCleaner.lnk

[2010.09.03 19:05:16 | 000,000,227 | ---- | M] () -- C:\WINDOWS\system.ini

[2010.09.03 19:05:08 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts

[2010.09.03 10:27:00 | 001,286,232 | ---- | M] (Kaspersky Lab ZAO) -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\TDSSKiller.exe

[2010.09.01 15:33:49 | 000,083,968 | ---- | M] (eSage Lab) -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\remover.exe

[2010.08.31 23:41:25 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\OTL.exe

[2010.08.31 23:33:46 | 000,118,784 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\ComboFix 10.doc

[2010.08.30 22:53:59 | 003,831,151 | R--- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\Combo-Fix.exe

[2010.08.30 19:39:16 | 000,000,000 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\defogger_reenable

[2010.08.28 20:07:43 | 000,028,160 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\GMER 1.doc

[2010.08.23 19:55:14 | 000,838,208 | ---- | M] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\hoi.jpg

[8 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

[2 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2010.09.16 20:00:08 | 000,083,410 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootk3.zip

[2010.09.16 19:58:12 | 000,105,984 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootk3.doc

[2010.09.16 19:55:47 | 000,137,728 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootk2.doc

[2010.09.16 19:54:59 | 000,105,984 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootk1.doc

[2010.09.16 19:48:35 | 000,035,875 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\bootkit_remover_debug_log.txt

[2010.09.15 23:49:53 | 000,083,401 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootkit.zip

[2010.09.15 23:46:07 | 000,116,224 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\bootkit.doc

[2010.09.15 23:34:05 | 000,040,422 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\bootkit_remover.rar

[2010.09.15 22:00:29 | 000,080,384 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\MBRCheck.exe

[2010.09.15 20:53:22 | 000,001,374 | ---- | C] () -- C:\WINDOWS\imsins.BAK

[2010.09.12 17:21:38 | 000,572,928 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\Results of system analysis.doc

[2010.09.07 21:55:08 | 000,010,071 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\betti.JPG

[2010.09.05 17:07:27 | 000,133,632 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\RKUnhookerLE.EXE

[2010.09.04 19:43:23 | 000,000,711 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Startmenü\Programme\Autostart\Secunia PSI.lnk

[2010.09.04 19:12:16 | 000,008,540 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\cc_20100904_191209.reg

[2010.09.04 19:02:26 | 000,000,282 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeLogonTaskS-1-5-21-3851759823-1197635777-2726854231-1008.job

[2010.09.04 19:02:24 | 000,000,290 | ---- | C] () -- C:\WINDOWS\tasks\RealUpgradeScheduledTaskS-1-5-21-3851759823-1197635777-2726854231-1008.job

[2010.09.04 18:56:27 | 000,001,643 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Mozilla Thunderbird.lnk

[2010.09.04 18:19:50 | 000,000,665 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\CCleaner.lnk

[2010.08.31 23:33:45 | 000,118,784 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\ComboFix 10.doc

[2010.08.30 22:59:21 | 000,256,512 | ---- | C] () -- C:\WINDOWS\PEV.exe

[2010.08.30 22:59:21 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe

[2010.08.30 22:59:21 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe

[2010.08.30 22:59:21 | 000,077,312 | ---- | C] () -- C:\WINDOWS\MBR.exe

[2010.08.30 22:59:21 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe

[2010.08.30 22:53:29 | 003,831,151 | R--- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop\Combo-Fix.exe

[2010.08.30 19:39:16 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\defogger_reenable

[2010.08.28 20:07:43 | 000,028,160 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Eigene Dateien\GMER 1.doc

[2009.02.13 19:16:00 | 000,068,096 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Lokale Einstellungen\Anwendungsdaten\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

[2009.02.07 16:16:05 | 000,000,000 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Anwendungsdaten\wklnhst.dat

[2009.02.07 15:34:21 | 000,000,160 | ---- | C] () -- C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Lokale Einstellungen\Anwendungsdaten\fusioncache.dat

[2007.09.25 18:39:50 | 000,001,763 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\QTSBandwidthCache

[2006.12.26 13:09:56 | 000,000,613 | ---- | C] () -- C:\WINDOWS\if40le.ini

[2006.12.26 13:09:54 | 000,000,114 | ---- | C] () -- C:\WINDOWS\SCNDRVU.INI

[2006.12.26 13:09:35 | 000,003,049 | ---- | C] () -- C:\WINDOWS\If42le.ini

[2006.12.26 13:09:34 | 000,000,241 | ---- | C] () -- C:\WINDOWS\PEXPLORE.INI

[2006.12.26 13:09:23 | 000,000,403 | ---- | C] () -- C:\WINDOWS\umxaddin.ini

[2006.12.26 13:08:13 | 000,049,152 | R--- | C] () -- C:\WINDOWS\AutoSet.dll

[2006.05.03 18:02:07 | 000,000,777 | ---- | C] () -- C:\WINDOWS\ODBC.INI

[2006.05.02 22:33:16 | 000,032,768 | ---- | C] () -- C:\WINDOWS\UMSDIH.DLL

[2006.05.02 22:20:42 | 000,000,305 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\addr_file.html

[2005.12.09 23:03:52 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\px.ini

[2005.01.01 21:24:26 | 000,000,061 | ---- | C] () -- C:\WINDOWS\smscfg.ini

[2005.01.01 21:05:37 | 000,028,848 | ---- | C] () -- C:\WINDOWS\System32\drivers\USBkey.sys

[2005.01.01 21:02:58 | 000,013,624 | ---- | C] () -- C:\WINDOWS\System32\CHODDI.SYS

[2005.01.01 21:02:53 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\hpreg.dll

[2005.01.01 20:56:54 | 000,000,108 | ---- | C] () -- C:\WINDOWS\WININIT.INI

[2005.01.01 20:43:38 | 000,001,702 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\hpzinstall.log

[2005.01.01 20:42:40 | 000,003,776 | ---- | C] () -- C:\WINDOWS\System32\fxsperf.ini

[2005.01.01 20:26:25 | 000,000,849 | ---- | C] () -- C:\WINDOWS\orun32.ini

[2005.01.01 20:23:16 | 000,323,584 | ---- | C] () -- C:\WINDOWS\System32\pythoncom22.dll

[2005.01.01 20:23:16 | 000,094,208 | ---- | C] () -- C:\WINDOWS\System32\pywintypes22.dll

[2005.01.01 20:23:01 | 000,016,896 | ---- | C] () -- C:\WINDOWS\System32\bcbmm.dll

[2002.09.20 18:19:34 | 000,001,194 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini

[2001.07.06 23:30:00 | 000,003,254 | ---- | C] () -- C:\WINDOWS\System32\HPTCPMON.INI

[1999.01.22 21:46:58 | 000,065,536 | ---- | C] () -- C:\WINDOWS\System32\MSRTEDIT.DLL

 
 ========== Alternate Data Streams ==========

 

@Alternate Data Stream - 104 bytes -> C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\TEMP:DFC5A2B2

< End of report >

extras:

Code:

OTL Extras logfile created on: 19.09.2010 16:50:34 - Run 4

OTL by OldTimer - Version 3.2.11.0     Folder = C:\Dokumente und Einstellungen\HP_Besitzer.NAME-CD5FDA878D\Desktop

Windows XP Home Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation

Internet Explorer (Version = 8.0.6001.18702)

Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

 

446,00 Mb Total Physical Memory | 241,00 Mb Available Physical Memory | 54,00% Memory free

1,00 Gb Paging File | 1,00 Gb Available in Paging File | 70,00% Paging File free

Paging file location(s): C:\pagefile.sys 672 1344 [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme

Drive C: | 143,45 Gb Total Space | 124,64 Gb Free Space | 86,89% Space Free | Partition Type: NTFS

Drive D: | 5,59 Gb Total Space | 0,50 Gb Free Space | 9,03% Space Free | Partition Type: FAT32

E: Drive not present or media not loaded

F: Drive not present or media not loaded

G: Drive not present or media not loaded

H: Drive not present or media not loaded

I: Drive not present or media not loaded

 

Computer Name: NAME-CD5FDA878D

Current User Name: HP_Besitzer

Logged in as Administrator.

 

Current Boot Mode: Normal

Scan Mode: Current user

Company Name Whitelist: Off

Skip Microsoft Files: Off

File Age = 30 Days

Output = Minimal

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

 

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]

.html [@ = FirefoxHTML] -- C:\Programme\Mozilla Firefox\firefox.exe (Mozilla Corporation)

 
 ========== Shell Spawning ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

htmlfile [edit] -- Reg Error: Key error.

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)

Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

 
 ========== Security Center Settings ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"FirstRunDisabled" = 1

"AntiVirusDisableNotify" = 0

"FirewallDisableNotify" = 0

"UpdatesDisableNotify" = 0

"AntiVirusOverride" = 1

"FirewallOverride" = 0

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

"DisableMonitoring" = 1

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"EnableFirewall" = 1

"DoNotAllowExceptions" = 0

"DisableNotifications" = 0

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007

"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004

"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005

"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001

"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002

 
 ========== Authorized Applications List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

"C:\Programme\Windows Live\Messenger\wlcsdk.exe" = C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)

"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]

"C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe" = C:\Programme\HP\Digital Imaging\bin\hpofxm08.exe:*:Enabled:hpofxm08.exe -- (Hewlett-Packard Co.)

"C:\Programme\HP\Digital Imaging\bin\hposfx08.exe" = C:\Programme\HP\Digital Imaging\bin\hposfx08.exe:*:Enabled:hposfx08.exe -- (Hewlett-Packard Co.)

"C:\Programme\HP\Digital Imaging\bin\hposid01.exe" = C:\Programme\HP\Digital Imaging\bin\hposid01.exe:*:Enabled:hposid01.exe -- (Hewlett-Packard Co.)

"C:\Programme\HP\Digital Imaging\bin\hpqCopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpqCopy.exe:*:Enabled:hpqcopy.exe -- (Hewlett-Packard Co.)

"C:\Programme\HP\Digital Imaging\bin\hpfccopy.exe" = C:\Programme\HP\Digital Imaging\bin\hpfccopy.exe:*:Enabled:hpfccopy.exe -- (Hewlett-Packard)

"C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe" = C:\Programme\HP\Digital Imaging\bin\hpzwiz01.exe:*:Enabled:hpzwiz01.exe -- (Hewlett-Packard Co.)

"C:\Programme\HP\Digital Imaging\Unload\HpqPhUnl.exe" = C:\Programme\HP\Digital Imaging\Unload\HpqPhUnl.exe:*:Enabled:hpqphunl.exe -- ()

"C:\Programme\HP\Digital Imaging\Unload\HpqDIA.exe" = C:\Programme\HP\Digital Imaging\Unload\HpqDIA.exe:*:Enabled:hpqdia.exe -- ( )

"C:\Programme\HP\Digital Imaging\bin\hpoews01.exe" = C:\Programme\HP\Digital Imaging\bin\hpoews01.exe:*:Enabled:hpoews01.exe -- (Hewlett-Packard Co.)

"C:\Programme\Windows Live\Messenger\wlcsdk.exe" = C:\Programme\Windows Live\Messenger\wlcsdk.exe:*:Enabled:Windows Live Call -- (Microsoft Corporation)

"C:\Programme\Windows Live\Sync\WindowsLiveSync.exe" = C:\Programme\Windows Live\Sync\WindowsLiveSync.exe:*:Enabled:Windows Live Sync -- (Microsoft Corporation)

"C:\Programme\Mozilla Firefox\firefox.exe" = C:\Programme\Mozilla Firefox\firefox.exe:*:Enabled:Mozilla Firefox -- (Mozilla Corporation)

 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{00000407-78E1-11D2-B60F-006097C998E7}" = Microsoft Office 2000 Premium

"{075473F5-846A-448B-BCB3-104AA1760205}" = Sonic RecordNow Data

"{0B33B738-AD79-4E32-90C5-E67BFB10BBFF}" = AiO_Scan

"{0BEDBD4E-2D34-47B5-9973-57E62B29307C}" = ATI Systemsteuerung

"{172975EB-9465-4861-95B5-C7BB6D3DE62A}" = DocumentViewer

"{1CB34CE9-0E6B-493F-BB66-3425E5DF76E5}" = CP_CalendarTemplates1

"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool

"{21657574-BD54-48A2-9450-EB03B2C7FC29}" = Sonic MyDVD Plus

"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT

"{23012310-3E05-46A5-88A9-C6CBCABCAC79}" = Optimierung aufgrund von Kundenerfahrungen

"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer

"{23B35809-5E4A-4F14-8332-1CDEDDFAC089}" = CP_Package_Variety2

"{24BEBF2E-73F3-4599-840B-EDC612CCDD0D}" = Destinations

"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20

"{2979CB15-D6DF-4AA1-ADE0-9B83786C2357}" = SLOW-PCfighter

"{2A548002-9042-4083-A270-B67473DE1073}" = SkinsHP1

"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie

"{2C5D07FB-31A2-4F2D-9FDA-0B24ACD42BD0}" = HP Deskjet Printer Preload

"{30465B6C-B53F-49A1-9EBA-A3F187AD502E}" = Sonic Update Manager

"{30C19FF2-7FBA-4d09-B9DE-1659977F64F6}" = TrayApp

"{3248F0A8-6813-11D6-A77B-00B0D0150050}" = J2SE Runtime Environment 5.0 Update 5

"{33D6CC28-9F75-4d1b-A11D-98895B3A3729}" = HP Photosmart 330,380,420,470,7800,8000,8200 Series

"{34F3FCF1-817B-4D61-B6AF-19D9486AFEA0}" = Unload

"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP

"{36D620AD-EEBA-4973-BA86-0C9AE6396620}" = OptionalContentQFolder

"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform

"{3BA95526-6AE0-4B87-A62D-17187EF565FC}" = HP Boot Optimizer

"{3E386744-10FA-44b2-98C9-DF7A270DECB3}" = HP PSC & OfficeJet 5.3.A

"{3FE0CFAB-584A-4AA5-B8CD-C32284CFA308}" = RandMap

"{4041C245-7099-4C96-9738-5EBC23827B3C}" = BufferChm

"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger

"{45D707E9-F3C4-11D9-A373-0050BAE317E1}" = HP DVD Play 1.0

"{494D17B5-3369-4905-8C4B-80C972C5E0FF}" = CP_Panorama1Config

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4DA4012B-39AF-48c2-B23B-A4D570D233A6}" = cp_LightScribeConfig

"{522D1D79-9C0A-4361-91F8-2AFF8EC6C2E1}" = CP_Package_Variety1

"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent

"{53EE9E42-CECB-4C92-BF76-9CA65DAF8F1C}" = FullDPAppQFolder

"{54E3707F-808E-4fd4-95C9-15D1AB077E5D}" = NewCopy

"{54F0998F-73C8-4b51-8286-FE903C231BED}" = cp_PosterPrintConfig

"{567C23E1-7580-4185-B8C2-30805677297C}" = NewCopy_CDA

"{56F8AFC3-FA98-4ff1-9673-8A026CBF85BE}" = WebReg

"{5B79CFD1-6845-4158-9D7D-6BE89DF2C135}" = HP PSC & OfficeJet 5.3.B

"{5CFD7508-7774-48FE-8280-7A3C0AE71755}" = Internetdienste

"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call

"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Sonic Express Labeler

"{6956856F-B6B3-4BE0-BA0B-8F495BE32033}" = Apple Software Update

"{6BB6627C-694F-4FDC-A3E5-C7F4BED4C724}" = DocProc

"{755EC5E3-FD51-46bd-A57F-7A2D56FBF061}" = PSTAPlugin

"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync

"{766633B3-1AFA-44B6-A3FC-1DE991CD9C52}" = CP_Package_Basic1

"{769A295C-DCF4-41d6-AFBA-7D9394B23AFE}" = PSPrinters08

"{7850A6D2-CBEA-4728-9877-F1BEDEA9F619}" = AiOSoftware

"{79F8E1D4-36C1-439C-95FA-F695050B5B07}" = Sonic_PrimoSDK

"{7C03270C-4FAB-4F5C-B10D-52FEDA190790}" = DocumentViewerQFolder

"{80AE27BA-B0ED-4288-A8B9-D8194BCF4115}" = cp_UpdateProjectsConfig

"{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Einfache Internetanmeldung

"{869C3062-4745-4949-B6C9-98AF24D89030}" = PhotoGallery

"{923A7F5A-1E8C-4FBE-8DF6-85940A60A79F}" = Readme

"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting

"{9D4ABB0C-F60B-44A6-956C-A4A63D5495C9}" = CueTour

"{A195B13E-A5E3-4BAF-A995-7F70F445CD06}" = ScannerCopy

"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI

"{A3455242-DAE0-4523-8242-FD82706ABF4B}" = CameraDrivers

"{A93944F2-D2D4-4750-BFE7-9A288FEAF2CF}" = Apple Application Support

"{AB708C9B-97C8-4AC9-899B-DBF226AC9382}" = Sonic RecordNow Audio

"{AC76BA86-7AD7-1031-7B44-A70000000000}" = Adobe Reader 7.0 - Deutsch

"{B11E71BA-498C-42D4-9F1A-9D7A89D9DA61}" = CP_AtenaShokunin1Config

"{B12665F4-4E93-4AB4-B7FC-37053B524629}" = Sonic RecordNow Copy

"{B26E3B0D-C2FA-4370-B068-7C476766F029}" = Microsoft Works

"{B276997E-4367-4b1b-A39C-4CAE7464337A}" = AiO_Scan_CDA

"{B4D279F1-4309-49cc-A4B5-3A0D2E59C7B5}" = PanoStandAlone

"{B57F2FF0-5A25-4332-B503-4592B370C02F}" = CP_Package_Variety3

"{B60E7826-F117-4d26-8165-D2DC5A494AB0}" = Fax_CDA

"{B64E3AFC-59EF-4f18-BF11-E751462450D3}" = AiOSoftwareNPI

"{BBD3BF67-5B89-4CBB-BA58-5818ED5F3290}" = cp_OnlineProjectsConfig

"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail

"{C506A18C-1469-4678-B094-F4EC9DAE6DB7}" = Scan

"{C83A12B9-B31B-461A-BBD4-CE9B988094F1}" = HP Photosmart Kameras 5.0

"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1

"{CE24344F-DFD8-40C8-8FD8-C9740B5F25AC}" = Fax

"{D518592A-0F1E-40ca-BECB-3D3F026C6B0D}" = CameraDrivers

"{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}" = HpSdpAppCoreApp

"{DBA4DB9D-EE51-4944-A419-98AB1F1249C8}" = LiveUpdate Notice (Symantec Corporation)

"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update

"{E3F90083-80D4-4b5a-87C7-E97E12F5516D}" = HPProductAssistant

"{E55B3271-7CA8-4D0C-AE06-69A24856E996}_is1" = Uniblue SpeedUpMyPC

"{E63E34A7-E552-412B-9E40-FD6FC5227ABA}_is1" = Uniblue RegistryBooster

"{E78BFA60-5393-4C38-82AB-E8019E464EB4}" = Microsoft .NET Framework 1.1 German Language Pack

"{EA103B64-C0E4-4C0E-A506-751590E1653D}" = SolutionCenter

"{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime

"{ECFDD6BD-E0C0-41CC-A171-E6D6AF4C0E93}" = HP Software Update

"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]

"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard

"{F4C2E5F5-2970-45f4-ABD3-C180C4D961C4}" = Status

"{F4F4F84E-804F-4E9A-84D7-C34283F0088F}" = RealUpgrade 1.0

"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials

"{FC8D25A7-FF1B-41BB-BB3B-9A06C0A60AE0}" = InstantShareDevices

"7-Zip" = 7-Zip 9.11 beta

"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin

"AntiVir PersonalEdition Classic" = Avira AntiVir Personal - Free Antivirus

"ATI Display Driver" = ATI Display Driver

"BSW" = BrettspielWelt

"CCleaner" = CCleaner

"HP Document Viewer" = HP Document Viewer 5.3

"HP Imaging Device Functions" = HP Imaging Device Functions 6.0

"HP Photo & Imaging" = HP Photosmart Premier Software 6.0

"HP Solution Center & Imaging Support Tools" = HP Solution Center & Imaging Support Tools 5.3

"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs

"ie7" = Windows Internet Explorer 7

"ie8" = Windows Internet Explorer 8

"iKnowPS_is1" = iKnowPS

"InstallShield_{23012310-3E05-46A5-88A9-C6CBCABCAC79}" = Optimierung aufgrund von Kundenerfahrungen

"InstallShield_{5CFD7508-7774-48FE-8280-7A3C0AE71755}" = Internetdienste

"InstallShield_{8105684D-8CA6-440D-8F58-7E5FD67A499D}" = Einfache Internetanmeldung

"LiveUpdate" = LiveUpdate 3.0 (Symantec Corporation)

"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware

"Microsoft .NET Framework 1.1  (1033)" = Microsoft .NET Framework 1.1

"Mozilla Firefox (3.6.9)" = Mozilla Firefox (3.6.9)

"Mozilla Thunderbird (3.1.2)" = Mozilla Thunderbird (3.1.2)

"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP

"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs

"OnCourt_is1" = OnCourt 5.4.0

"PC-Doctor 5 for Windows" = PC-Doctor 5 for Windows

"PS2" = PS2

"Python 2.2.3" = Python 2.2.3

"pywin32-py2.2" = Python 2.2 pywin32 extensions (build 203)

"RealPlayer 12.0" = RealPlayer

"Secunia PSI" = Secunia PSI

"Security Task Manager" = Security Task Manager 1.7h

"SLOW-PCfighter" = SLOW-PCfighter

"Unlocker" = Unlocker 1.9.0

"Windows Media Format Runtime" = Windows Media Format 11 runtime

"Windows Media Player" = Windows Media Player 11

"Windows XP Service Pack" = Windows XP Service Pack 3

"WinLiveSuite_Wave3" = Windows Live Essentials

"Wise Registry Cleaner_is1" = Wise Registry Cleaner Free 5.33

"WMFDist11" = Windows Media Format 11 runtime

"wmp11" = Windows Media Player 11

"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

 
 ========== Last 10 Event Log Errors ==========

 

[ Application Events ]

Error - 04.09.2010 13:41:29 | Computer Name = NAME-CD5FDA878D | Source = crypt32 | ID = 131083

Description = Die Extrahierung der Drittanbieterstammlisten aus der automatischen

 Aktualisierungs-CAB-Datei bei <hxxp://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>

 ist fehlgeschlagen mit dem Fehler: Ein erforderliches Zertifikat befindet sich 

nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel

 in der signierten Datei.  .

 

Error - 05.09.2010 10:54:21 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3855, fehlgeschlagenes

 Modul AcroFF.dll, Version 0.0.0.0, Fehleradresse 0x00003817.

 

Error - 05.09.2010 10:56:55 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3855, fehlgeschlagenes

 Modul AcroFF.dll, Version 0.0.0.0, Fehleradresse 0x00003817.

 

Error - 05.09.2010 11:34:07 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3855, fehlgeschlagenes

 Modul AcroFF.dll, Version 0.0.0.0, Fehleradresse 0x00003817.

 

Error - 07.09.2010 13:57:53 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung plugin-container.exe, Version 1.9.2.3855,

 fehlgeschlagenes Modul ntdll.dll, Version 5.1.2600.5755, Fehleradresse 0x0000100b.

 

Error - 08.09.2010 15:37:25 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung plugin-container.exe, Version 1.9.2.3855,

 fehlgeschlagenes Modul ntdll.dll, Version 5.1.2600.5755, Fehleradresse 0x0000100b.

 

Error - 13.09.2010 14:57:22 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3888, fehlgeschlagenes

 Modul AcroFF.dll, Version 0.0.0.0, Fehleradresse 0x00003817.

 

Error - 14.09.2010 14:02:18 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3888, fehlgeschlagenes

 Modul AcroFF.dll, Version 0.0.0.0, Fehleradresse 0x00003817.

 

Error - 16.09.2010 17:17:25 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung explorer.exe, Version 6.0.2900.5512, fehlgeschlagenes

 Modul qasf.dll, Version 10.0.0.3646, Fehleradresse 0x0001816f.

 

Error - 17.09.2010 13:18:11 | Computer Name = NAME-CD5FDA878D | Source = Application Error | ID = 1000

Description = Fehlgeschlagene Anwendung firefox.exe, Version 1.9.2.3888, fehlgeschlagenes

 Modul AcroFF.dll, Version 0.0.0.0, Fehleradresse 0x00003817.

 

[ System Events ]

Error - 15.09.2010 15:05:33 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

Error - 15.09.2010 15:40:50 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

Error - 16.09.2010 13:00:01 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

Error - 16.09.2010 14:56:15 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

Error - 16.09.2010 15:46:17 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

Error - 16.09.2010 15:46:18 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7026

Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:

   avgio

 

Error - 16.09.2010 15:49:19 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

Error - 17.09.2010 12:49:54 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

Error - 18.09.2010 08:21:54 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

Error - 19.09.2010 10:23:14 | Computer Name = NAME-CD5FDA878D | Source = Service Control Manager | ID = 7023

Description = Der Dienst "HID Input Service" wurde mit folgendem Fehler beendet:

   %%126

 

 

< End of report >