Netzwerk | 24.05.2011 17:49 | lol? warte mal..ich hab mit OTL kurz durchgescannt
hier die ergebnisse : Code:
OTL logfile created on: 29.05.2011 11:41:26 - Run 1
OTL by OldTimer - Version 3.2.23.0 Folder = C:\Dokumente und Einstellungen\pc10\Desktop
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
510,98 Mb Total Physical Memory | 186,59 Mb Available Physical Memory | 36,51% Memory free
1,22 Gb Paging File | 0,88 Gb Available in Paging File | 71,99% Paging File free
Paging file location(s): C:\pagefile.sys 768 1536 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 19,53 Gb Total Space | 11,67 Gb Free Space | 59,73% Space Free | Partition Type: NTFS
Computer Name: PC10 | User Name: pc10 | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 7 Days
========== Processes (SafeList) ==========
PRC - C:\Dokumente und Einstellungen\pc10\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Programme\Faronics\Deep Freeze\Install C-0\_$Df\FrzState2k.exe (Faronics Corporation)
PRC - C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
PRC - C:\Programme\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
PRC - C:\WINXP\explorer.exe (Microsoft Corporation)
PRC - C:\Programme\Faronics\Deep Freeze\Install C-0\DF5Serv.exe (Faronics Corporation)
========== Modules (SafeList) ==========
MOD - C:\Dokumente und Einstellungen\pc10\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\WINXP\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll (Microsoft Corporation)
========== Win32 Services (SafeList) ==========
SRV - (HidServ) -- File not found
SRV - (YahooAUService) -- C:\Programme\Yahoo!\SoftwareUpdate\YahooAUService.exe (Yahoo! Inc.)
SRV - (DF5Serv) -- C:\Programme\Faronics\Deep Freeze\Install C-0\DF5Serv.exe (Faronics Corporation)
========== Driver Services (SafeList) ==========
DRV - (DeepFrz) -- C:\WINXP\System32\drivers\DeepFrz.sys (Faronics Corporation)
DRV - (SoC PC-Camera Service) -- C:\WINXP\system32\drivers\PFC027.SYS ()
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..extensions.enabledItems: {B13721C7-F507-4982-B2E5-502A71474FED}:2.2.0.102
FF - prefs.js..extensions.enabledItems: jqs@sun.com:1.0
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.5\extensions\\Components: C:\Programme\Mozilla Firefox\components [2009.11.27 18:33:36 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.0.5\extensions\\Plugins: C:\Programme\Mozilla Firefox\plugins [2011.05.21 08:18:31 | 000,000,000 | ---D | M]
[2009.11.27 18:33:37 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\pc10\Anwendungsdaten\Mozilla\Extensions
[2009.11.27 18:33:37 | 000,000,000 | ---D | M] (No name found) -- C:\Dokumente und Einstellungen\pc10\Anwendungsdaten\Mozilla\Firefox\Profiles\61xwz0bo.default\extensions
[2011.02.28 15:05:14 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
[2010.08.01 12:39:12 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010.11.04 10:20:52 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011.01.26 13:18:20 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011.02.28 15:05:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Programme\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
[2009.11.27 17:57:33 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\PROGRAMME\JAVA\JRE6\LIB\DEPLOY\JQS\FF
File not found (No name found) -- C:\PROGRAMME\MOZILLA FIREFOX\EXTENSIONS\{B13721C7-F507-4982-B2E5-502A71474FED}
[2011.02.02 22:40:24 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Mozilla Firefox\plugins\npdeployJava1.dll
[2008.03.15 15:56:14 | 000,001,392 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2008.10.13 20:34:40 | 000,002,344 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\eBay-de.xml
[2008.02.19 16:40:48 | 000,006,805 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2006.12.03 17:59:22 | 000,000,986 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2006.11.17 13:19:24 | 000,000,801 | ---- | M] () -- C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml
O1 HOSTS File: ([2008.04.14 11:00:00 | 000,000,820 | ---- | M]) - C:\WINXP\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on (mastermind)) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programme\Skype\Phone\IEPlugin\SkypeIEPlugin.dll (Skype Technologies S.A.)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O4 - HKLM..\Run: [Adobe ARM] C:\Programme\Gemeinsame Dateien\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [Microsoft_W32] C:\Programme\Microsoft NET Framework Client v1\msnfwc1.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Programme\Gemeinsame Dateien\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [Microsoft_W32] C:\Programme\Microsoft NET Framework Client v1\msnfwc1.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Autostart\Verknüpfung mit TaskShed.lnk = C:\Programme\Client\TaskShed.exe ()
O4 - Startup: C:\Dokumente und Einstellungen\pc10\Startmenü\Programme\Autostart\Verknüpfung mit TaskShed.lnk = C:\Programme\Client\TaskShed.exe ()
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Programme\Microsoft NET Framework Client v1\msnfwc1.exe ()
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run: Policies = C:\Programme\Microsoft NET Framework Client v1\msnfwc1.exe ()
O9 - Extra Button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programme\Skype\Phone\IEPlugin\SkypeIEPlugin.dll (Skype Technologies S.A.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Programme\Gemeinsame Dateien\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINXP\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\DfLogon: DllName - LogonDll.dll - C:\WINXP\System32\LogonDll.dll ()
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\WINXP\Web\Wallpaper\Grüne Idylle.bmp
O24 - Desktop BackupWallPaper: C:\WINXP\Web\Wallpaper\Grüne Idylle.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.11.13 22:42:21 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk /k:C *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
========== Files/Folders - Created Within 7 Days ==========
[2011.05.29 11:40:30 | 000,580,096 | ---- | C] (OldTimer Tools) -- C:\Dokumente und Einstellungen\pc10\Desktop\OTL.exe
[2011.05.29 11:33:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc10\Startmenü\Programme\WinRAR
[2011.05.29 11:33:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc10\Anwendungsdaten\WinRAR
[2011.05.29 11:33:53 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\WinRAR
[2011.05.29 11:33:51 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR
[2011.05.29 11:11:09 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\pc10\Eigene Dateien\Eigene Videos
[6 C:\WINXP\*.tmp files -> C:\WINXP\*.tmp -> ]
[1 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]
========== Files - Modified Within 7 Days ==========
[2011.05.29 11:40:30 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\pc10\Desktop\OTL.exe
[2011.05.29 11:19:16 | 062,776,694 | ---- | M] () -- C:\Dokumente und Einstellungen\pc10\Desktop\Portable Counter-Strike 1.6.exe
[2011.05.29 11:07:32 | 000,002,206 | ---- | M] () -- C:\WINXP\System32\wpa.dbl
[2011.05.29 11:07:29 | 535,875,584 | -HS- | M] () -- C:\hiberfil.sys
[6 C:\WINXP\*.tmp files -> C:\WINXP\*.tmp -> ]
[1 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]
========== Files Created - No Company Name ==========
[2011.05.29 11:39:17 | 000,303,616 | ---- | C] () -- C:\Dokumente und Einstellungen\pc10\Desktop\ProPublicCheats v2.exe
[2011.05.29 11:18:59 | 062,776,694 | ---- | C] () -- C:\Dokumente und Einstellungen\pc10\Desktop\Portable Counter-Strike 1.6.exe
[2009.11.27 18:33:39 | 000,000,000 | ---- | C] () -- C:\WINXP\nsreg.dat
[2009.11.13 22:46:43 | 000,002,048 | --S- | C] () -- C:\WINXP\bootstet.dat
[2009.11.13 22:38:38 | 000,021,740 | ---- | C] () -- C:\WINXP\System32\emptyregdb.dat
[2009.11.13 22:12:35 | 000,004,073 | ---- | C] () -- C:\WINXP\ODBCINST.INI
[2009.11.13 22:11:12 | 000,121,336 | ---- | C] () -- C:\WINXP\System32\FNTCACHE.DAT
[2009.11.13 20:17:01 | 000,049,152 | ---- | C] () -- C:\WINXP\System32\LogonDll.dll
[2008.04.14 11:00:00 | 013,107,200 | ---- | C] () -- C:\WINXP\System32\oembios.bin
[2008.04.14 11:00:00 | 000,673,088 | ---- | C] () -- C:\WINXP\System32\mlang.dat
[2008.04.14 11:00:00 | 000,448,470 | ---- | C] () -- C:\WINXP\System32\perfh007.dat
[2008.04.14 11:00:00 | 000,432,356 | ---- | C] () -- C:\WINXP\System32\perfh009.dat
[2008.04.14 11:00:00 | 000,272,128 | ---- | C] () -- C:\WINXP\System32\perfi009.dat
[2008.04.14 11:00:00 | 000,269,480 | ---- | C] () -- C:\WINXP\System32\perfi007.dat
[2008.04.14 11:00:00 | 000,218,003 | ---- | C] () -- C:\WINXP\System32\dssec.dat
[2008.04.14 11:00:00 | 000,079,910 | ---- | C] () -- C:\WINXP\System32\perfc007.dat
[2008.04.14 11:00:00 | 000,067,312 | ---- | C] () -- C:\WINXP\System32\perfc009.dat
[2008.04.14 11:00:00 | 000,046,258 | ---- | C] () -- C:\WINXP\System32\mib.bin
[2008.04.14 11:00:00 | 000,034,478 | ---- | C] () -- C:\WINXP\System32\perfd007.dat
[2008.04.14 11:00:00 | 000,028,626 | ---- | C] () -- C:\WINXP\System32\perfd009.dat
[2008.04.14 11:00:00 | 000,004,569 | ---- | C] () -- C:\WINXP\System32\secupd.dat
[2008.04.14 11:00:00 | 000,004,463 | ---- | C] () -- C:\WINXP\System32\oembios.dat
[2008.04.14 11:00:00 | 000,001,804 | ---- | C] () -- C:\WINXP\System32\Dcache.bin
[2008.04.14 11:00:00 | 000,000,741 | ---- | C] () -- C:\WINXP\System32\noise.dat
[2005.07.16 18:18:31 | 000,001,074 | -H-- | C] () -- C:\Dokumente und Einstellungen\pc10\Anwendungsdaten\pc10log.dat
[2004.03.24 06:52:26 | 000,138,396 | ---- | C] () -- C:\WINXP\System32\drivers\PFC027.SYS
[2004.01.08 08:00:22 | 000,011,170 | ---- | C] () -- C:\WINXP\System32\PA207USD.DLL
[2003.09.21 21:30:00 | 000,131,072 | ---- | C] () -- C:\WINXP\System32\e1000msg.dll
========== LOP Check ==========
[2011.02.10 13:21:32 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\pc10\Anwendungsdaten\ElevatedDiagnostics
[2010.11.04 10:35:18 | 000,000,000 | ---D | M] -- C:\Dokumente und Einstellungen\pc10\Anwendungsdaten\OpenOffice.org
========== Purity Check ==========
< End of report > |