Lazminator | 24.01.2011 19:09 | OTL ERGEBNIS:OTL Logfile: Code:
OTL logfile created on: 24.01.2011 18:59:25 - Run 1
OTL by OldTimer - Version 3.2.20.5 Folder = C:\Users\Muammer Saglam\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18999)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 47,00% Memory free
4,00 Gb Paging File | 3,00 Gb Available in Paging File | 69,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 221,36 Gb Total Space | 65,73 Gb Free Space | 29,69% Space Free | Partition Type: NTFS
Drive D: | 11,52 Gb Total Space | 2,16 Gb Free Space | 18,71% Space Free | Partition Type: NTFS
Computer Name: MUAMMER-PC | User Name: Muammer Saglam | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - C:\Users\Muammer Saglam\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\System32\Macromed\Flash\FlashUtil10l_ActiveX.exe (Adobe Systems, Inc.)
PRC - C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe (Google Inc.)
PRC - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
PRC - C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
PRC - C:\Program Files\Common Files\Java\Java Update\jucheck.exe (Sun Microsystems, Inc.)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Windows\System32\conime.exe (Microsoft Corporation)
PRC - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (Avira GmbH)
PRC - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (Avira GmbH)
PRC - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
PRC - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH)
PRC - C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
========== Modules (SafeList) ==========
MOD - C:\Users\Muammer Saglam\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.6002.18305_none_5cb72f2a088b0ed3\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (FontCache) -- C:\Windows\System32\FntCache.dll (Microsoft Corporation)
SRV - (AntiVirScheduler) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe (Avira GmbH)
SRV - (AntiVirService) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe (Avira GmbH)
SRV - (Nero BackItUp Scheduler 4.0) -- C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (ServiceLayer) -- C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia.)
SRV - (WinDefend) -- C:\Program Files\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (Com4Qlb) -- C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe (Hewlett-Packard Development Company, L.P.)
SRV - (IDriverT) -- C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe (Macrovision Corporation)
========== Driver Services (SafeList) ==========
DRV - (HTCAND32) -- C:\Windows\System32\drivers\ANDROIDUSB.sys (HTC, Corporation)
DRV - (avipbb) -- C:\Windows\System32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys (Avira GmbH)
DRV - (avgio) -- C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys (Avira GmbH)
DRV - (ggsemc) -- C:\Windows\System32\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV - (ggflt) -- C:\Windows\System32\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV - (usbaudio) USB-Audiotreiber (WDM) -- C:\Windows\System32\drivers\USBAUDIO.sys (Microsoft Corporation)
DRV - (ISODrive) -- C:\Program Files\UltraISO\drivers\ISODrive.sys (EZB Systems, Inc.)
DRV - (sptd) -- C:\Windows\System32\Drivers\sptd.sys ()
DRV - (SynTP) -- C:\Windows\System32\drivers\SynTP.sys (Synaptics, Inc.)
DRV - (upperdev) -- C:\Windows\System32\drivers\usbser_lowerflt.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (UsbserFilt) -- C:\Windows\System32\drivers\usbser_lowerfltj.sys (Windows (R) Codename Longhorn DDK provider)
DRV - (nmwcdc) -- C:\Windows\System32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcd) -- C:\Windows\System32\drivers\ccdcmb.sys (Nokia)
DRV - (ssmdrv) -- C:\Windows\System32\drivers\ssmdrv.sys (AVIRA GmbH)
DRV - (CnxtHdAudService) -- C:\Windows\System32\drivers\CHDRT32.sys (Conexant Systems Inc.)
DRV - (61883) -- C:\Windows\System32\drivers\61883.sys (Microsoft Corporation)
DRV - (Avc) -- C:\Windows\System32\drivers\avc.sys (Microsoft Corporation)
DRV - (MSDV) -- C:\Windows\System32\drivers\msdv.sys (Microsoft Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (pccsmcfd) -- C:\Windows\System32\drivers\pccsmcfd.sys (Nokia)
DRV - (HdAudAddService) -- C:\Windows\System32\drivers\CHDART.sys (Conexant Systems Inc.)
DRV - (HpqRemHid) -- C:\Windows\System32\drivers\HpqRemHid.sys (Hewlett-Packard Development Company, L.P.)
DRV - (XAudio) -- C:\Windows\System32\drivers\XAudio.sys (Conexant Systems, Inc.)
DRV - (HSF_DPV) -- C:\Windows\System32\drivers\HSX_DPV.sys (Conexant Systems, Inc.)
DRV - (HSXHWAZL) -- C:\Windows\System32\drivers\HSXHWAZL.sys (Conexant Systems, Inc.)
DRV - (winachsf) -- C:\Windows\System32\drivers\HSX_CNXT.sys (Conexant Systems, Inc.)
DRV - (HpqKbFiltr) -- C:\Windows\System32\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)
DRV - (athr) -- C:\Windows\System32\drivers\athr.sys (Atheros Communications, Inc.)
DRV - (rismxdp) -- C:\Windows\System32\drivers\rixdptsk.sys (REDC)
DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvmfdx32.sys (NVIDIA Corporation)
DRV - (rimmptsk) -- C:\Windows\System32\drivers\rimmptsk.sys (REDC)
DRV - (nvsmu) -- C:\Windows\System32\drivers\nvsmu.sys (NVIDIA Corporation)
DRV - (rimsptsk) -- C:\Windows\System32\drivers\rimsptsk.sys (REDC)
DRV - (LHidFilt) -- C:\Windows\System32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (LMouFilt) -- C:\Windows\System32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (ql2300) -- C:\Windows\system32\drivers\ql2300.sys (QLogic Corporation)
DRV - (adp94xx) -- C:\Windows\system32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (elxstor) -- C:\Windows\system32\drivers\elxstor.sys (Emulex)
DRV - (adpahci) -- C:\Windows\system32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\system32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (iaStorV) -- C:\Windows\system32\drivers\iastorv.sys (Intel Corporation)
DRV - (adpu320) -- C:\Windows\system32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (ulsata2) -- C:\Windows\system32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (vsmraid) -- C:\Windows\system32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ql40xx) -- C:\Windows\system32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\system32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (adpu160m) -- C:\Windows\system32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (nvraid) -- C:\Windows\system32\drivers\nvraid.sys (NVIDIA Corporation)
DRV - (nfrd960) -- C:\Windows\system32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\system32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (SiSRaid4) -- C:\Windows\system32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (nvstor) -- C:\Windows\system32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (aic78xx) -- C:\Windows\system32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (arcsas) -- C:\Windows\system32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (LSI_SCSI) -- C:\Windows\system32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\system32\drivers\sisraid2.sys (Silicon Integrated Systems Corp.)
DRV - (HpCISSs) -- C:\Windows\system32\drivers\hpcisss.sys (Hewlett-Packard Company)
DRV - (arc) -- C:\Windows\system32\drivers\arc.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\system32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\system32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (LSI_SAS) -- C:\Windows\system32\drivers\lsi_sas.sys (LSI Logic)
DRV - (Symc8xx) -- C:\Windows\system32\drivers\symc8xx.sys (LSI Logic)
DRV - (LSI_FC) -- C:\Windows\system32\drivers\lsi_fc.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\system32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\system32\drivers\mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\system32\drivers\sym_hi.sys (LSI Logic)
DRV - (megasas) -- C:\Windows\system32\drivers\megasas.sys (LSI Logic Corporation)
DRV - (viaide) -- C:\Windows\system32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\system32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (aliide) -- C:\Windows\system32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\system32\drivers\brserid.sys (Brother Industries Ltd.)
DRV - (BrUsbSer) -- C:\Windows\system32\drivers\brusbser.sys (Brother Industries Ltd.)
DRV - (BrFiltUp) -- C:\Windows\system32\drivers\brfiltup.sys (Brother Industries, Ltd.)
DRV - (BrFiltLo) -- C:\Windows\system32\drivers\brfiltlo.sys (Brother Industries, Ltd.)
DRV - (BrSerWdm) -- C:\Windows\system32\drivers\brserwdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\system32\drivers\brusbmdm.sys (Brother Industries Ltd.)
DRV - (HSFHWAZL) -- C:\Windows\System32\drivers\VSTAZL3.SYS (Conexant Systems, Inc.)
DRV - (ntrigdigi) -- C:\Windows\system32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (E1G60) Intel(R) -- C:\Windows\System32\drivers\E1G60I32.sys (Intel Corporation)
DRV - (BCM43XV) -- C:\Windows\System32\drivers\BCMWL6.SYS (Broadcom Corporation)
DRV - (ialm) -- C:\Windows\System32\drivers\igdkmd32.sys (Intel Corporation)
DRV - (AF05BDA) -- C:\Windows\System32\drivers\AF05BDA.sys (AfaTech )
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HPNoteBook | MSN
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = HPNoteBook | MSN
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local
========== FireFox ==========
FF - prefs.js..browser.search.defaultenginename: "Search"
FF - prefs.js..browser.search.defaulturl: "hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search="
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=302398"
FF - prefs.js..browser.search.selectedEngine: "Search"
FF - prefs.js..browser.startup.homepage: "google.de"
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20
FF - prefs.js..extensions.enabledItems: {b236a43f-ea0b-90fd-d2a8-988af5d25090}:4.6.6.2
FF - prefs.js..keyword.URL: "hxxp://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&type=302398&p="
FF - prefs.js..network.proxy.type: 1
FF - HKLM\software\mozilla\Firefox\Extensions\\smartwebprinting@hp.com: C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn2 [2009.04.01 13:57:48 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2010.09.18 21:10:35 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.19\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.01.10 20:52:02 | 000,000,000 | ---D | M]
[2008.12.23 01:40:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Muammer Saglam\AppData\Roaming\mozilla\Extensions
[2011.01.22 19:04:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Muammer Saglam\AppData\Roaming\mozilla\Firefox\Profiles\kw638ve2.default\extensions
[2009.09.05 22:47:04 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\Muammer Saglam\AppData\Roaming\mozilla\Firefox\Profiles\kw638ve2.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2010.07.23 14:47:46 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Muammer Saglam\AppData\Roaming\mozilla\Firefox\Profiles\kw638ve2.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.01.15 22:19:40 | 000,000,266 | ---- | M] () -- C:\Users\Muammer Saglam\AppData\Roaming\Mozilla\Firefox\Profiles\kw638ve2.default\searchplugins\Search.xml
[2011.01.09 17:27:10 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.01.15 22:19:27 | 000,000,000 | ---D | M] (LoudMo Contextual Ad Assistant) -- C:\Program Files\Mozilla Firefox\extensions\{b236a43f-ea0b-90fd-d2a8-988af5d25090}
[2010.07.27 08:15:57 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010.04.12 16:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
[2010.05.24 09:44:21 | 001,447,344 | ---- | M] (1 mal 1 Software GmbH) -- C:\Program Files\Mozilla Firefox\plugins\NpFv522.dll
[2010.09.18 21:10:17 | 000,001,392 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.09.18 21:10:17 | 000,002,344 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.09.18 21:10:17 | 000,006,805 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.09.18 21:10:17 | 000,000,986 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.09.18 21:10:17 | 000,000,801 | ---- | M] () -- C:\Program Files\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O2 - BHO: (Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - No CLSID value found.
O2 - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O2 - BHO: (HP Smart BHO Class) - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\Hp\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O3 - HKLM\..\Toolbar: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O3 - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O3 - HKLM\..\Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (vShare Plugin) - {043C5167-00BB-4324-AF7E-62013FAEDACF} - C:\Program Files\vShare\vshare_toolbar.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [HP Health Check Scheduler] c:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe (Hewlett-Packard)
O4 - HKLM..\Run: [HTC Sync Loader] C:\Program Files\HTC\HTC Sync 3.0\htcUPCTLoader.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [SynTPStart] C:\Program Files\Synaptics\SynTP\SynTPStart.exe (Synaptics, Inc.)
O4 - HKLM..\Run: [UCam_Menu] C:\Program Files\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [UpdatePPShortCut] C:\Program Files\CyberLink\PowerProducer\MUITransfer\MUIStartMenu.exe (CyberLink Corp.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKCU..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
O8 - Extra context menu item: Google Sidewiki... - C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll (Google Inc.)
O9 - Extra Button: HP Intelligente Auswahl - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\Hp\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
O13 - gopher Prefix: missing
O16 - DPF: {1851174C-97BD-4217-A0CC-E908F60D5B7A} https://h50203.www5.hp.com/HPISWeb/Customer/cabs/HPISDataManager.CAB (Hewlett-Packard Online Support Services)
O16 - DPF: {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {8100D56A-5661-482C-BEE8-AFECE305D968} hxxp://upload.facebook.com/controls/2009.07.28_v5.5.8.1/FacebookPhotoUploader55.cab (Facebook Photo Uploader 5 Control)
O16 - DPF: {888078C6-70B2-4F88-8EE7-1F50DDEA6120} https://as.photoprintit.de/ips-opdata/activex/ImageUploader6.cab (CeWe Color AG & Co. OHG Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab (Reg Error: Key error.)
O16 - DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab (Java Plug-in 1.6.0_02)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O16 - DPF: {E55FD215-A32E-43FE-A777-A7E8F165F560} hxxp://92.51.137.94/objects/NpFv522.dll (Flatcast Viewer 5.2)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\vsharechrome {3F3A4B8A-86FC-43A4-BB00-6D7EBE9D4484} - C:\Program Files\vShare\vshare_toolbar.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\Muammer Saglam\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Users\Muammer Saglam\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2005.09.11 16:18:54 | 000,000,340 | -HS- | M] () - D:\AUTOMODE -- [ NTFS ]
O33 - MountPoints2\{0888b9a5-9650-11df-abde-001b24e6e738}\Shell\AutoRun\command - "" = G:\m.exe
O33 - MountPoints2\{0888b9a5-9650-11df-abde-001b24e6e738}\Shell\open\Command - "" = G:\m.exe
O33 - MountPoints2\{3dfbcc98-78b7-11df-9a0f-001b24e6e738}\Shell - "" = AutoRun
O33 - MountPoints2\{3dfbcc98-78b7-11df-9a0f-001b24e6e738}\Shell\AutoRun\command - "" = G:\autorun.exe
O33 - MountPoints2\{948dbaab-726a-11df-bdd9-001e101f2c0e}\Shell - "" = AutoRun
O33 - MountPoints2\{948dbaab-726a-11df-bdd9-001e101f2c0e}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{c2bf2d28-7265-11df-8ca9-001b24e6e738}\Shell - "" = AutoRun
O33 - MountPoints2\{c2bf2d28-7265-11df-8ca9-001b24e6e738}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{cf8d47a0-73a0-11df-a48c-001b24e6e738}\Shell - "" = AutoRun
O33 - MountPoints2\{cf8d47a0-73a0-11df-a48c-001b24e6e738}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{cf8d47b4-73a0-11df-a48c-001b24e6e738}\Shell - "" = AutoRun
O33 - MountPoints2\{cf8d47b4-73a0-11df-a48c-001b24e6e738}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{cf8d4998-73a0-11df-a48c-001b24e6e738}\Shell - "" = AutoRun
O33 - MountPoints2\{cf8d4998-73a0-11df-a48c-001b24e6e738}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{cf8d49b2-73a0-11df-a48c-001b24e6e738}\Shell - "" = AutoRun
O33 - MountPoints2\{cf8d49b2-73a0-11df-a48c-001b24e6e738}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 30 Days ==========
[2011.01.24 18:55:43 | 000,603,136 | ---- | C] (OldTimer Tools) -- C:\Users\Muammer Saglam\Desktop\OTL.exe
[2011.01.11 23:04:24 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[2011.01.11 23:04:15 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2011.01.11 20:48:10 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\AppData\Roaming\Malwarebytes
[2011.01.11 20:48:00 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbamswissarmy.sys
[2011.01.11 20:48:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.01.11 20:47:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.01.11 20:47:56 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2011.01.11 20:47:56 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2011.01.10 20:36:02 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011.01.10 15:09:42 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\AppData\Roaming\Google
[2011.01.09 22:49:46 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\AppData\Local\Google
[2011.01.09 22:49:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Google
[2011.01.09 22:49:31 | 000,000,000 | ---D | C] -- C:\Program Files\Google
[2011.01.09 18:00:52 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\Favorites\Documents\Backups
[2011.01.09 17:59:58 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\AppData\Roaming\Priotecs
[2011.01.09 17:59:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Priotecs Software
[2011.01.09 17:59:00 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\Favorites\Documents\Add-in Express
[2011.01.09 17:58:57 | 000,000,000 | ---D | C] -- C:\Program Files\Outlook Backup Assistant
[2011.01.09 12:34:36 | 005,888,786 | ---- | C] (J. Rathlev ) -- C:\Users\Muammer Saglam\Favorites\Documents\pb-setup-5.0.0702.exe
[2011.01.09 12:34:20 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\Favorites\Documents\PersBackup
[2010.12.28 20:57:25 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\AppData\Local\Verlag Heinrich Vogel
[2010.12.28 20:54:15 | 000,000,000 | ---D | C] -- C:\Users\Muammer Saglam\AppData\Local\Verlag_Heinrich_Vogel_in_
[2010.12.28 20:53:31 | 000,000,000 | RH-D | C] -- C:\Users\Muammer Saglam\AppData\Roaming\SecuROM
[2009.07.15 17:45:01 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\ProgramData\hpe5450.dll
[2009.07.15 17:32:34 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\ProgramData\hpeF0FB.dll
[5 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Muammer Saglam\*.tmp files -> C:\Users\Muammer Saglam\*.tmp -> ]
========== Files - Modified Within 30 Days ==========
[2011.01.24 18:55:59 | 000,603,136 | ---- | M] (OldTimer Tools) -- C:\Users\Muammer Saglam\Desktop\OTL.exe
[2011.01.24 18:53:00 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.01.24 18:52:00 | 000,001,154 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3931976470-4106526602-3779783612-1000UA.job
[2011.01.24 18:08:15 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2011.01.24 18:08:15 | 000,003,168 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2011.01.24 17:52:53 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.01.24 16:09:30 | 000,093,590 | ---- | M] () -- C:\Users\Muammer Saglam\AppData\Roaming\nvModes.001
[2011.01.24 16:09:22 | 000,000,163 | ---- | M] () -- C:\Users\Public\Documents\hpqp.ini
[2011.01.24 16:08:49 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.01.24 16:08:08 | 2146,373,632 | -HS- | M] () -- C:\hiberfil.sys
[2011.01.24 13:04:43 | 000,093,590 | ---- | M] () -- C:\Users\Muammer Saglam\AppData\Roaming\nvModes.dat
[2011.01.23 21:52:00 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3931976470-4106526602-3779783612-1000Core.job
[2011.01.13 21:53:41 | 000,002,087 | ---- | M] () -- C:\Users\Muammer Saglam\Desktop\Google Chrome.lnk
[2011.01.12 21:55:37 | 159,407,648 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2011.01.11 22:56:45 | 000,083,968 | ---- | M] () -- C:\Users\Muammer Saglam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.01.10 20:55:48 | 000,624,216 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2011.01.10 20:55:48 | 000,592,170 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2011.01.10 20:55:48 | 000,124,902 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2011.01.10 20:55:48 | 000,103,186 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2011.01.10 20:49:43 | 000,422,592 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2011.01.09 18:36:41 | 515,969,575 | ---- | M] () -- C:\Users\Muammer Saglam\Desktop\Outlook - 2011-01-09_18-00-52.oba
[2011.01.09 17:59:50 | 000,000,862 | ---- | M] () -- C:\Users\Muammer Saglam\Desktop\Outlook Backup Assistant.lnk
[2011.01.09 12:59:14 | 000,000,016 | ---- | M] () -- C:\Users\Muammer Saglam\persistent_state
[2011.01.09 12:50:58 | 000,000,036 | ---- | M] () -- C:\Windows\iltwain.ini
[2011.01.09 12:43:43 | 000,002,560 | ---- | M] () -- C:\Windows\_MSRSTRT.EXE
[2011.01.09 12:34:40 | 005,888,786 | ---- | M] (J. Rathlev ) -- C:\Users\Muammer Saglam\Favorites\Documents\pb-setup-5.0.0702.exe
[2011.01.08 16:05:34 | 000,007,592 | ---- | M] () -- C:\Users\Muammer Saglam\AppData\Local\d3d9caps.dat
[2010.12.28 16:55:03 | 000,413,696 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\odbc32.dll
[5 C:\*.tmp files -> C:\*.tmp -> ]
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\Muammer Saglam\*.tmp files -> C:\Users\Muammer Saglam\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.01.10 20:36:06 | 000,002,087 | ---- | C] () -- C:\Users\Muammer Saglam\Desktop\Google Chrome.lnk
[2011.01.10 20:35:14 | 000,001,154 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3931976470-4106526602-3779783612-1000UA.job
[2011.01.10 20:35:09 | 000,001,102 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-3931976470-4106526602-3779783612-1000Core.job
[2011.01.09 22:50:11 | 000,001,112 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.01.09 22:50:09 | 000,001,108 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.01.09 18:03:15 | 515,969,575 | ---- | C] () -- C:\Users\Muammer Saglam\Desktop\Outlook - 2011-01-09_18-00-52.oba
[2011.01.09 17:59:50 | 000,000,862 | ---- | C] () -- C:\Users\Muammer Saglam\Desktop\Outlook Backup Assistant.lnk
[2011.01.09 12:43:42 | 000,002,560 | ---- | C] () -- C:\Windows\_MSRSTRT.EXE
[2010.08.11 21:54:40 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.07.08 20:15:19 | 000,000,041 | -HS- | C] () -- C:\ProgramData\.zreglib
[2010.05.26 12:02:46 | 000,000,426 | ---- | C] () -- C:\Windows\Brpfx04a.ini
[2010.05.26 12:02:46 | 000,000,169 | ---- | C] () -- C:\Windows\brpcfx.ini
[2010.05.26 12:01:22 | 000,000,425 | ---- | C] () -- C:\Windows\BRWMARK.INI
[2010.05.26 12:01:22 | 000,000,027 | ---- | C] () -- C:\Windows\BRPP2KA.INI
[2010.05.26 11:58:33 | 000,000,066 | ---- | C] () -- C:\Windows\Brfaxrx.ini
[2010.05.26 11:58:31 | 000,106,496 | ---- | C] () -- C:\Windows\System32\BrMuSNMP.dll
[2010.02.09 15:00:38 | 000,000,306 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2010.02.09 14:02:13 | 000,000,000 | ---- | C] () -- C:\Windows\hpqEmlSz.INI
[2010.01.01 22:20:38 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.12.23 00:34:24 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
[2009.12.23 00:34:19 | 000,881,664 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2009.12.23 00:34:19 | 000,205,824 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2009.12.23 00:34:17 | 003,596,288 | ---- | C] () -- C:\Windows\System32\qt-dx331.dll
[2009.12.23 00:34:10 | 000,085,504 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2009.11.15 22:09:08 | 000,178,176 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2009.02.14 23:05:08 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2009.02.14 23:04:38 | 000,007,119 | ---- | C] () -- C:\Windows\mgxoschk.ini
[2008.12.20 01:18:24 | 000,717,296 | ---- | C] () -- C:\Windows\System32\drivers\sptd.sys
[2008.11.15 01:16:30 | 000,000,132 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Roaming\default.rss
[2008.11.13 00:56:19 | 000,004,767 | ---- | C] () -- C:\Windows\Irremote.ini
[2008.11.04 01:58:10 | 000,000,036 | ---- | C] () -- C:\Windows\iltwain.ini
[2008.11.04 01:57:47 | 000,009,391 | ---- | C] () -- C:\Windows\System32\dymourl.ini
[2008.11.04 01:56:07 | 000,061,440 | ---- | C] () -- C:\Windows\System32\DYMOCFG.DLL
[2008.11.04 01:56:07 | 000,004,096 | ---- | C] () -- C:\Windows\System32\lmmonres.dll
[2008.10.24 23:20:54 | 000,003,704 | ---- | C] () -- C:\ProgramData\hpzinstall.log
[2008.02.10 21:52:05 | 000,000,305 | ---- | C] () -- C:\ProgramData\addr_file.html
[2008.02.10 21:44:11 | 000,000,000 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Local\FnF4.txt
[2008.02.10 12:42:15 | 000,083,968 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2008.02.08 22:54:45 | 000,040,606 | ---- | C] () -- C:\ProgramData\LuUninstall.LiveUpdate
[2008.02.08 22:33:00 | 000,093,590 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Roaming\nvModes.001
[2008.02.08 22:21:19 | 000,093,590 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Roaming\nvModes.dat
[2008.02.08 22:19:22 | 000,007,592 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Local\d3d9caps.dat
[2008.02.08 22:11:17 | 000,000,000 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Local\QSwitch.txt
[2008.02.08 22:11:17 | 000,000,000 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Local\DSwitch.txt
[2008.02.08 22:11:17 | 000,000,000 | ---- | C] () -- C:\Users\Muammer Saglam\AppData\Local\AtStart.txt
[2008.01.14 17:47:06 | 000,099,712 | ---- | C] () -- C:\Windows\HPBroker.dll
[2007.12.06 08:06:48 | 000,016,480 | ---- | C] () -- C:\Windows\System32\rixdicon.dll
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:25:21 | 000,061,440 | ---- | C] () -- C:\Windows\System32\igfxTMM.dll
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.03.09 23:58:00 | 001,060,424 | ---- | C] () -- C:\Windows\System32\WdfCoInstaller01000.dll
[2005.04.06 10:37:06 | 000,009,216 | ---- | C] () -- C:\Windows\System32\gengpmon.dll
[2004.05.05 00:00:00 | 000,012,288 | ---- | C] () -- C:\Windows\System32\HLINKPRX.DLL
[2002.10.15 13:46:26 | 000,196,608 | ---- | C] () -- C:\Windows\System32\hpbvnstp.dll
[2001.07.31 10:17:12 | 000,094,274 | ---- | C] () -- C:\Windows\System32\HPBHEALR.DLL
========== Alternate Data Streams ==========
@Alternate Data Stream - 24 bytes -> C:\Windows:5A9D9B1749138FEA
< End of report > --- --- --- |