Ich bin von demselben wie hier angesprochenen Trojaner betroffen.
Entsprechend der dort empfohlenen Schritte gehe ich auch hier vor, hoffe das ist richtig so.
1. OTL Ergebnis:
2. Malwarebytes:Code:All processes killed ========== OTL ========== HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{48F2E6FA-246B-4A22-B2D0-93DC48EC7027}\ not found. 64bit-Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{48F2E6FA-246B-4A22-B2D0-93DC48EC7027}\ not found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E : value set successfully! Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{48F2E6FA-246B-4A22-B2D0-93DC48EC7027}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{48F2E6FA-246B-4A22-B2D0-93DC48EC7027}\ not found. HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully! Unable to set value : HKU\S-1-5-21-2865443694-1217552214-2959549799-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Default_Page_URL| /E! Unable to set value : HKU\S-1-5-21-2865443694-1217552214-2959549799-1001\SOFTWARE\Microsoft\Internet Explorer\Main\\Start Page| /E! Unable to set value : HKEY_USERS\S-1-5-21-2865443694-1217552214-2959549799-1001\Software\Microsoft\Internet Explorer\SearchScopes\\DefaultScope| /E! Registry key HKEY_USERS\S-1-5-21-2865443694-1217552214-2959549799-1001\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}\ not found. Unable to set value : HKU\S-1-5-21-2865443694-1217552214-2959549799-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E! Unable to set value : HKU\S-1-5-21-2865443694-1217552214-2959549799-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyOverride| /E! C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml moved successfully. File C:\Program Files (x86)\mozilla firefox\searchplugins\babylon.xml not found. C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml moved successfully. C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml moved successfully. C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml moved successfully. C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml moved successfully. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{02478D38-C3F9-4efb-9B51-7695ECA05670}\ not found. Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\Locked not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\ not found. Registry key HKEY_USERS\S-1-5-21-2865443694-1217552214-2959549799-1001\Software\Microsoft\Windows\CurrentVersion\Run not found. File C:\Users\*****\AppData\Local\Microsoft\Windows\1252\TSTheme.exe not found. Registry value HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. Registry value HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce\\mctadmin deleted successfully. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully! Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7e9b74d4-75e2-11e1-acc0-848f69bdc48f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7e9b74d4-75e2-11e1-acc0-848f69bdc48f}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7e9b74d4-75e2-11e1-acc0-848f69bdc48f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7e9b74d4-75e2-11e1-acc0-848f69bdc48f}\ not found. File F:\AutoRun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7e9b74eb-75e2-11e1-acc0-848f69bdc48f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7e9b74eb-75e2-11e1-acc0-848f69bdc48f}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7e9b74eb-75e2-11e1-acc0-848f69bdc48f}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7e9b74eb-75e2-11e1-acc0-848f69bdc48f}\ not found. File F:\AutoRun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d65a4a81-906a-11e1-83bb-001e101f63cf}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d65a4a81-906a-11e1-83bb-001e101f63cf}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d65a4a81-906a-11e1-83bb-001e101f63cf}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d65a4a81-906a-11e1-83bb-001e101f63cf}\ not found. File G:\AutoRun.exe not found. ========== FILES ========== File\Folder C:\Users\*****\Desktop\temp 20120715 not found. File\Folder C:\Users\*****\AppData\Roaming\hellomoto not found. < ipconfig /flushdns /c > Windows-IP-Konfiguration Der DNS-Aufl”sungscache wurde geleert. G:\downloads\cmd.bat deleted successfully. G:\downloads\cmd.txt deleted successfully. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Daniel ->Temp folder emptied: 1804134 bytes ->Temporary Internet Files folder emptied: 167228600 bytes ->Java cache emptied: 11009176 bytes ->FireFox cache emptied: 85528843 bytes ->Flash cache emptied: 15224722 bytes User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 56478 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes ->Flash cache emptied: 0 bytes User: Gamesymbol User: Hintergrundbilder User: Progsymbol User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 0 bytes %systemroot%\System32 .tmp files removed: 0 bytes %systemroot%\System32 (64bit) .tmp files removed: 0 bytes %systemroot%\System32\drivers .tmp files removed: 0 bytes Windows Temp folder emptied: 122664 bytes %systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 85096 bytes RecycleBin emptied: 0 bytes Total Files Cleaned = 268,00 mb OTL by OldTimer - Version 3.2.54.1 log created on 07242012_113300 Files\Folders moved on Reboot... File move failed. C:\Users\Daniel\AppData\Local\Temp\FXSAPIDebugLogFile.txt scheduled to be moved on reboot. PendingFileRenameOperations files... [2011.02.23 02:59:33 | 000,000,000 | ---- | M] () C:\Users\Daniel\AppData\Local\Temp\FXSAPIDebugLogFile.txt : Unable to obtain MD5 Registry entries deleted on Reboot...
3. CC-Cleaner, installierte Programme: angehängt als "install.txt" Anhang 10034Code:Malwarebytes Anti-Malware (PRO) 1.62.0.1300 www.malwarebytes.org Datenbank Version: v2012.07.24.04 Windows 7 Service Pack 1 x64 NTFS (Abgesichertenmodus/Netzwerkfähig) Internet Explorer 9.0.8112.16421 Daniel :: DANIEL-PC [Administrator] Schutz: Deaktiviert 24.07.2012 12:58:36 mbam-log-2012-07-24 (12-58-36).txt Art des Suchlaufs: Vollständiger Suchlauf (C:\|) Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM Deaktivierte Suchlaufeinstellungen: P2P Durchsuchte Objekte: 436620 Laufzeit: 10 Minute(n), 52 Sekunde(n) Infizierte Speicherprozesse: 0 (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: 0 (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: 1 HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\ (Hijack.Zones) -> Erfolgreich gelöscht und in Quarantäne gestellt. Infizierte Registrierungswerte: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: 0 (Keine bösartigen Objekte gefunden) Infizierte Verzeichnisse: 0 (Keine bösartigen Objekte gefunden) Infizierte Dateien: 0 (Keine bösartigen Objekte gefunden) (Ende)
4. "C:\ProgramData\ndhlopzv.syn" ist nicht bekannt und nicht auffindbar.
5. erneuter OTL-Scan:
OTL.txt:
Extras.txt:Code:OTL logfile created on: 24.07.2012 13:25:06 - Run 2 OTL by OldTimer - Version 3.2.54.1 Folder = G:\downloads 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,99 Gb Total Physical Memory | 6,27 Gb Available Physical Memory | 78,45% Memory free 15,98 Gb Paging File | 14,47 Gb Available in Paging File | 90,56% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 221,65 Gb Total Space | 109,70 Gb Free Space | 49,49% Space Free | Partition Type: NTFS Drive D: | 195,31 Gb Total Space | 120,52 Gb Free Space | 61,71% Space Free | Partition Type: NTFS Drive E: | 292,97 Gb Total Space | 257,83 Gb Free Space | 88,00% Space Free | Partition Type: NTFS Drive F: | 323,06 Gb Total Space | 81,53 Gb Free Space | 25,24% Space Free | Partition Type: NTFS Drive G: | 120,17 Gb Total Space | 89,30 Gb Free Space | 74,32% Space Free | Partition Type: NTFS Computer Name: DANIEL-PC | User Name: Daniel | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.07.24 04:41:42 | 000,596,480 | ---- | M] (OldTimer Tools) -- G:\downloads\OTL.exe PRC - [2012.06.15 00:17:36 | 000,913,888 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe ========== Modules (No Company Name) ========== MOD - [2012.06.15 00:17:55 | 002,042,848 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\mozjs.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010.03.03 06:12:12 | 000,202,752 | ---- | M] (AMD) [Auto | Stopped] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2009.07.14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2012.07.13 13:28:36 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012.07.03 13:46:44 | 000,655,944 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2012.06.16 00:40:06 | 000,113,120 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2012.05.30 13:56:52 | 003,048,136 | ---- | M] (Skype Technologies S.A.) [Auto | Stopped] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012.01.03 15:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.01.02 06:55:24 | 001,431,888 | ---- | M] (Flexera Software, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV - [2011.09.10 11:43:18 | 000,018,432 | ---- | M] (Apache Software Foundation) [Auto | Stopped] -- D:\xampp\apache\bin\httpd.exe -- (Apache2.2) SRV - [2011.06.07 21:29:16 | 000,630,272 | ---- | M] (FileZilla Project) [On_Demand | Stopped] -- D:\xampp\FileZillaFTP\FileZillaServer.exe -- (FileZilla Server) SRV - [2011.04.05 02:13:37 | 000,655,624 | ---- | M] (Acresso Software Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service) SRV - [2011.03.28 21:11:06 | 002,292,096 | ---- | M] (Microsoft Corp.) [Auto | Stopped] -- C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2011.03.16 10:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010.11.01 17:49:58 | 000,401,408 | ---- | M] (Sphinx Software) [Auto | Stopped] -- C:\Program Files (x86)\Windows7FirewallControl\Windows7FirewallService.exe -- (Windows7FirewallService) SRV - [2010.10.28 12:14:30 | 000,357,456 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\LogiShrd\Bluetooth\LBTServ.exe -- (LBTServ) SRV - [2010.09.22 18:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Programme\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV - [2010.03.18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.12.28 21:33:00 | 000,096,896 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Stopped] -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe -- (AsSysCtrlService) SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys -- (AODDriver4.0) DRV:64bit: - [2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector) DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2011.09.09 12:10:19 | 000,046,112 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tbhsd.sys -- (tbhsd) DRV:64bit: - [2011.08.01 16:59:06 | 000,045,416 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64) DRV:64bit: - [2011.06.10 06:34:52 | 000,539,240 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2011.05.13 15:37:54 | 000,048,488 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:64bit: - [2011.03.11 08:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 08:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.02.23 04:39:18 | 000,513,080 | ---- | M] (Duplex Secure Ltd.) [Kernel | Boot | Stopped] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2010.11.20 15:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 13:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.11.17 14:04:32 | 000,115,216 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService) DRV:64bit: - [2010.08.24 19:29:54 | 000,041,040 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\LUsbFilt.sys -- (LUsbFilt) DRV:64bit: - [2010.08.24 19:29:32 | 000,057,936 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LMouFilt.Sys -- (LMouFilt) DRV:64bit: - [2010.08.24 19:29:10 | 000,063,568 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\LHidFilt.Sys -- (LHidFilt) DRV:64bit: - [2010.04.27 17:57:20 | 000,016,200 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:64bit: - [2010.04.27 17:57:14 | 000,036,936 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:64bit: - [2010.04.27 17:57:12 | 000,026,440 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:64bit: - [2010.04.27 15:03:12 | 000,077,512 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:64bit: - [2010.04.27 15:02:42 | 000,043,976 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:64bit: - [2010.04.27 10:30:52 | 000,184,968 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc) DRV:64bit: - [2010.04.27 10:29:54 | 000,083,080 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub) DRV:64bit: - [2010.03.03 06:23:10 | 006,402,560 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atipmdag.sys -- (amdkmdag) DRV:64bit: - [2010.03.03 05:07:32 | 000,188,928 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap) DRV:64bit: - [2010.03.02 19:30:20 | 001,301,504 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV:64bit: - [2010.02.18 10:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64) DRV:64bit: - [2010.01.06 16:27:06 | 000,233,776 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ahcix64.sys -- (ahcix64) DRV:64bit: - [2009.11.10 19:11:32 | 000,234,040 | ---- | M] (Advanced Micro Devices, Inc) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\ahcix64s.sys -- (ahcix64s) DRV:64bit: - [2009.09.30 09:34:32 | 000,121,872 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\AtiHdmi.sys -- (AtiHdmiService) DRV:64bit: - [2009.07.16 11:38:40 | 000,015,416 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.05 09:00:28 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie.sys -- (AtiPcie) DRV:64bit: - [2008.12.26 13:56:04 | 000,021,504 | ---- | M] (Avnex) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vcsvad.sys -- (VCSVADHWSer) DRV:64bit: - [2008.06.27 08:51:10 | 000,088,632 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\adfs.sys -- (adfs) DRV - [2010.11.01 06:08:46 | 000,014,544 | ---- | M] (OpenLibSys.org) [File_System | On_Demand | Stopped] -- C:\Programme\Game Booster 3\Driver\WinRing0x64.sys -- (WinRing0_1_2_0) DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) DRV - [2008.08.14 07:57:42 | 000,074,720 | ---- | M] (Adobe Systems, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysWow64\drivers\adfs.sys -- (adfs) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank IE - HKLM\..\SearchScopes,DefaultScope = IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = BD C4 ED 44 F6 D2 CB 01 [binary data] IE - HKCU\..\URLSearchHook: - No CLSID value found IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "Facemoods Search" FF - prefs.js..browser.startup.homepage: "http://www.google.de/" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.5 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24 FF - prefs.js..extensions.enabledItems: {1E73965B-8B48-48be-9C8D-68B920ABC1C4}:10.0.0.1209 FF - prefs.js..keyword.URL: "http://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.1.7&q=" FF - prefs.js..network.proxy.autoconfig_url: "file:///C:/Users/Daniel/AppData/Local/Temp/proxtube.pac" FF - prefs.js..network.proxy.backup.ftp: "91.113.192.222" FF - prefs.js..network.proxy.backup.ftp_port: 8080 FF - prefs.js..network.proxy.backup.socks: "91.113.192.222" FF - prefs.js..network.proxy.backup.socks_port: 8080 FF - prefs.js..network.proxy.backup.ssl: "91.113.192.222" FF - prefs.js..network.proxy.backup.ssl_port: 8080 FF - prefs.js..network.proxy.ftp: "80.120.42.142" FF - prefs.js..network.proxy.ftp_port: 3129 FF - prefs.js..network.proxy.http: "80.120.42.142" FF - prefs.js..network.proxy.http_port: 3129 FF - prefs.js..network.proxy.share_proxy_settings: true FF - prefs.js..network.proxy.socks: "80.120.42.142" FF - prefs.js..network.proxy.socks_port: 3129 FF - prefs.js..network.proxy.ssl: "80.120.42.142" FF - prefs.js..network.proxy.ssl_port: 3129 FF - prefs.js..network.proxy.type: 0 FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_265.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_265.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC) FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.5: C:\Program Files (x86)\Microsoft\Office Live\npOLW.dll (Microsoft Corp.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll File not found FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll File not found FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.1: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012.02.24 00:18:14 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012.06.24 22:20:20 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 13.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2012.05.29 12:01:59 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2012.06.27 22:55:12 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Thunderbird 14.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Thunderbird\plugins [2012.04.18 00:52:01 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\avgthb@avg.com: C:\Program Files (x86)\AVG\AVG2012\Thunderbird\ [2012.01.27 19:29:41 | 000,000,000 | ---D | M] [2011.02.23 03:21:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\Extensions [2011.02.23 03:21:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2012.07.24 13:10:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Daniel\AppData\Roaming\mozilla\Firefox\Profiles\okeyj2q3.default\extensions [2012.05.18 19:00:29 | 000,000,000 | ---D | M] (ProxTube - Unblock YouTube) -- C:\Users\Daniel\AppData\Roaming\mozilla\Firefox\Profiles\okeyj2q3.default\extensions\ich@maltegoetz.de [2012.07.22 20:22:25 | 000,001,056 | ---- | M] () -- C:\Users\Daniel\AppData\Roaming\Mozilla\Firefox\Profiles\okeyj2q3.default\searchplugins\icqplugin.xml [2012.06.24 22:20:20 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions [2012.06.15 01:41:57 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012.02.24 00:18:14 | 000,000,000 | ---D | M] (DivX Plus Web Player HTML5 <video>) -- C:\PROGRAM FILES (X86)\DIVX\DIVX PLUS WEB PLAYER\FIREFOX\DIVXHTML5 [2012.06.15 00:19:07 | 000,085,472 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll [2012.04.01 19:35:48 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2012.06.15 00:46:57 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml O1 HOSTS File: ([2012.07.24 11:31:10 | 000,001,401 | RHS- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O1 - Hosts: 66.232.114.203 www.google-analytics.com. O1 - Hosts: 66.232.114.203 ad-emea.doubleclick.net. O1 - Hosts: 66.232.114.203 www.statcounter.com. O1 - Hosts: 108.163.215.51 www.google-analytics.com. O1 - Hosts: 108.163.215.51 ad-emea.doubleclick.net. O1 - Hosts: 108.163.215.51 www.statcounter.com. O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC) O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O4:64bit: - HKLM..\Run: [Eraser] C:\Programme\Eraser\Eraser.exe (The Eraser Project) O4:64bit: - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.) O4:64bit: - HKLM..\Run: [IntelliPoint] C:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation) O4:64bit: - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.) O4:64bit: - HKLM..\Run: [TsUsbRedirectionGroupPolicyExtension] C:\Users\Daniel\AppData\Local\Microsoft\Windows\4551\TsUsbRedirectionGroupPolicyExtension.exe () O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [HDAudDeck] C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (VIA) O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation) O4 - HKLM..\Run: [QFan Help] C:\Program Files (x86)\ASUS\AI Suite\QFan4\FanHelp.exe (ASUSTeK Computer Inc.) O4 - HKLM..\Run: [Six Engine] C:\Program Files (x86)\ASUS\EPU\EPU.exe ( ASUSTeK Computer Inc.) O4 - HKLM..\Run: [Windows7FirewallControl] C:\Program Files (x86)\Windows7FirewallControl\Windows7FirewallControl.exe (Sphinx Software) O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.) O4 - HKCU..\Run: [Steam] D:\Steam\Steam.exe (Valve Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 [2012.06.14 03:27:07 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 [2012.06.14 03:27:07 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 [2012.06.14 03:27:07 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 [2012.06.14 03:27:07 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 [2012.06.14 03:27:07 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 [2012.06.14 03:27:07 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 [2012.06.14 03:27:07 | 000,000,000 | ---D | M] O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 [2012.06.14 03:27:07 | 000,000,000 | ---D | M] O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~2\SPYBOT~1\SDHelper.dll (Safer Networking Limited) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16:64bit: - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C0EA97E4-0F27-4DD5-A99E-26C2A1456ADF}: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Programme\Common Files\LogiShrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.) O20 - Winlogon\Notify\LBTWlgn: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{a9565840-3ef6-11e0-8b0f-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{a9565840-3ef6-11e0-8b0f-806e6f6e6963}\Shell\AutoRun\command - "" = P:\Setup.exe autorun O33 - MountPoints2\{a9565840-3ef6-11e0-8b0f-806e6f6e6963}\Shell\setup\command - "" = P:\Setup.exe autorun O33 - MountPoints2\{fd01ef40-4397-11e0-84e1-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{fd01ef40-4397-11e0-84e1-806e6f6e6963}\Shell\AutoRun\command - "" = M:\autorun.exe O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.07.24 13:12:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2012.07.24 13:12:01 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner [2012.07.24 13:12:00 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google [2012.07.24 04:58:45 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy [2012.07.24 04:04:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET [2012.07.24 03:51:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Kaspersky Lab [2012.07.24 03:34:39 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Malwarebytes [2012.07.24 03:34:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware [2012.07.24 03:34:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2012.07.24 03:34:35 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012.07.24 03:34:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2012.07.24 03:24:58 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\hellomoto [2012.07.23 20:12:36 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\BBB_rfactor2_sync [2012.07.23 19:13:41 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\~MASTEMP [2012.06.30 20:23:27 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Puuv [2012.06.30 20:23:27 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Meocz [2012.06.30 20:23:27 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Giecu [2012.06.30 16:35:54 | 000,000,000 | ---D | C] -- C:\Users\Daniel\Desktop\Motorsport4all_P1 [2012.06.27 22:34:57 | 000,000,000 | ---D | C] -- C:\Program Files\HashTab Shell Extension [2012.06.27 22:26:11 | 000,000,000 | ---D | C] -- C:\UserData [2012.06.26 12:19:02 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Roaming\Alien Skin [2012.06.26 12:15:56 | 000,000,000 | ---D | C] -- C:\Users\Daniel\AppData\Local\Alien Skin [2012.06.26 12:15:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Alien Skin [2012.06.26 12:15:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Alien Skin [2012.06.26 12:15:21 | 000,000,000 | ---D | C] -- C:\Program Files\Alien Skin [2012.06.26 12:11:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topaz Labs [2012.06.26 12:11:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Topaz Labs [2012.06.26 12:11:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Topaz Labs ========== Files - Modified Within 30 Days ========== [2012.07.24 13:12:01 | 000,000,828 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012.07.24 13:12:00 | 000,001,106 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012.07.24 13:04:07 | 001,613,340 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.07.24 13:04:07 | 000,696,832 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2012.07.24 13:04:07 | 000,652,150 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2012.07.24 13:04:07 | 000,148,128 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2012.07.24 13:04:07 | 000,121,082 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2012.07.24 12:57:12 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2012.07.24 11:31:10 | 000,001,401 | RHS- | M] () -- C:\Windows\SysNative\drivers\etc\hosts [2012.07.24 10:39:23 | 000,013,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.07.24 10:39:23 | 000,013,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.07.24 04:58:45 | 000,001,264 | ---- | M] () -- C:\Users\Daniel\Desktop\Spybot - Search & Destroy.lnk [2012.07.24 03:51:20 | 142,519,120 | ---- | M] () -- C:\Users\Daniel\Desktop\setup_11.0.0.1245.x01_2012_07_24_05_01.exe [2012.07.24 03:35:05 | 000,001,115 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012.07.24 02:57:00 | 000,001,110 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012.07.24 01:35:29 | 000,002,066 | -H-- | M] () -- C:\Users\Daniel\Documents\Default.rdp [2012.07.23 19:24:32 | 000,001,456 | ---- | M] () -- C:\Users\Daniel\AppData\Local\Adobe Für Web speichern 11.0 Prefs [2012.07.23 12:39:32 | 000,426,184 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012.07.23 12:39:32 | 000,070,344 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012.07.22 20:55:20 | 000,000,616 | ---- | M] () -- C:\Users\Public\Desktop\Napster 5.lnk [2012.07.03 13:46:44 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2012.06.24 22:20:21 | 000,001,055 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk ========== Files Created - No Company Name ========== [2012.07.24 13:12:01 | 000,000,828 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012.07.24 04:58:45 | 000,001,264 | ---- | C] () -- C:\Users\Daniel\Desktop\Spybot - Search & Destroy.lnk [2012.07.24 03:50:37 | 142,519,120 | ---- | C] () -- C:\Users\Daniel\Desktop\setup_11.0.0.1245.x01_2012_07_24_05_01.exe [2012.07.24 03:34:36 | 000,001,115 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk [2012.07.22 20:55:20 | 000,000,616 | ---- | C] () -- C:\Users\Public\Desktop\Napster 5.lnk [2012.07.22 20:55:20 | 000,000,616 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Napster 5.lnk [2012.06.16 07:30:03 | 000,000,710 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\cmpinfo.dat [2012.06.16 07:30:03 | 000,000,000 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\cmpinfo_bak.dat [2012.06.14 19:30:44 | 000,000,124 | ---- | C] () -- C:\Users\Daniel\DatabridUser.properties [2012.04.15 13:20:03 | 000,001,616 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\pkginfo.dat [2012.04.15 13:20:03 | 000,000,000 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\pkginfo_bak.dat [2012.03.31 17:11:38 | 000,250,880 | ---- | C] () -- C:\Windows\SysWow64\ff_kernelDeint.dll [2012.03.31 17:11:38 | 000,134,144 | ---- | C] () -- C:\Windows\SysWow64\IntelQuickSyncDecoder.dll [2012.03.31 17:11:37 | 001,180,013 | ---- | C] () -- C:\Windows\SysWow64\unins000.exe [2012.03.31 17:11:37 | 000,053,088 | ---- | C] () -- C:\Windows\SysWow64\unins000.dat [2012.03.20 20:17:29 | 000,001,456 | ---- | C] () -- C:\Users\Daniel\AppData\Local\Adobe Für Web speichern 12.0 Prefs [2012.03.14 19:07:51 | 000,000,719 | ---- | C] () -- C:\Users\Daniel\.recently-used.xbel [2012.01.12 02:33:16 | 000,000,132 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\Adobe GIF Format CS5 Prefs [2012.01.07 07:24:46 | 000,000,600 | ---- | C] () -- C:\Users\Daniel\AppData\Local\PUTTY.RND [2012.01.05 08:58:09 | 001,349,083 | ---- | C] () -- C:\Windows\sslftp.exe [2012.01.04 18:18:00 | 000,061,440 | ---- | C] () -- C:\Windows\SysWow64\nvPhotoshopUtil.dll [2012.01.04 18:18:00 | 000,040,960 | ---- | C] () -- C:\Windows\SysWow64\nvISWOW64.dll [2012.01.03 07:32:03 | 000,000,132 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\Adobe PNG Format CS5 Prefs [2011.12.20 05:45:25 | 000,003,284 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\glide_wrapper.zbag.ini [2011.12.10 12:53:19 | 000,005,515 | ---- | C] () -- C:\Windows\fmachine.ini [2011.11.21 14:32:06 | 000,000,103 | ---- | C] () -- C:\Windows\MSUTIL.INI [2011.11.17 16:14:09 | 000,000,700 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\CamStudioPortableBackup.reg [2011.09.28 00:08:22 | 000,000,166 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\PLGComp.ini [2011.09.23 01:12:48 | 000,007,607 | ---- | C] () -- C:\Users\Daniel\AppData\Local\Resmon.ResmonCfg [2011.09.22 19:08:56 | 004,447,232 | ---- | C] () -- C:\Windows\SysWow64\ffmpeg.dll [2011.08.22 21:07:48 | 000,079,872 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll [2011.08.22 21:07:02 | 000,158,720 | ---- | C] () -- C:\Windows\SysWow64\ff_unrar.dll [2011.08.22 21:07:00 | 000,260,608 | ---- | C] () -- C:\Windows\SysWow64\TomsMoComp_ff.dll [2011.08.22 21:06:30 | 001,525,248 | ---- | C] () -- C:\Windows\SysWow64\ff_samplerate.dll [2011.08.22 21:06:30 | 000,211,968 | ---- | C] () -- C:\Windows\SysWow64\ff_libdts.dll [2011.08.22 21:06:30 | 000,098,304 | ---- | C] () -- C:\Windows\SysWow64\ff_wmv9.dll [2011.08.22 21:06:28 | 000,328,704 | ---- | C] () -- C:\Windows\SysWow64\ff_libfaad2.dll [2011.08.22 21:06:28 | 000,115,200 | ---- | C] () -- C:\Windows\SysWow64\ff_liba52.dll [2011.08.22 21:06:26 | 000,146,944 | ---- | C] () -- C:\Windows\SysWow64\ff_libmad.dll [2011.08.22 21:06:26 | 000,137,728 | ---- | C] () -- C:\Windows\SysWow64\libmpeg2_ff.dll [2011.07.27 13:24:36 | 000,175,616 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll [2011.07.27 13:24:35 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini [2011.06.28 19:06:58 | 000,001,285 | ---- | C] () -- C:\Windows\3DSIMED.INI [2011.06.20 19:27:29 | 000,000,083 | ---- | C] () -- C:\Windows\PhysicsEditor.ini [2011.06.13 03:18:22 | 000,008,704 | ---- | C] () -- C:\Users\Daniel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011.05.30 15:42:50 | 000,240,640 | ---- | C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011.05.26 12:38:47 | 000,000,126 | ---- | C] () -- C:\Windows\wininit.ini [2011.05.26 11:29:19 | 000,001,456 | ---- | C] () -- C:\Users\Daniel\AppData\Local\Adobe Für Web speichern 11.0 Prefs [2011.05.24 11:03:03 | 000,000,074 | -H-- | C] () -- C:\Windows\koo.dat [2011.05.24 11:03:00 | 000,000,216 | ---- | C] () -- C:\Windows\ulead32.ini [2011.05.20 23:35:28 | 000,304,744 | ---- | C] () -- C:\Windows\SysWow64\nvStreaming.exe [2011.04.05 02:19:22 | 000,000,007 | ---- | C] () -- C:\Windows\Swift3DPS.INI [2011.04.04 17:25:19 | 000,002,229 | ---- | C] () -- C:\Windows\Auto-Illustrator preferences.ini [2011.04.04 17:25:16 | 001,279,488 | -H-- | C] () -- C:\Users\Daniel\AppData\Roaming\RBScript350.dll [2011.04.04 17:25:16 | 000,115,712 | -H-- | C] () -- C:\Users\Daniel\AppData\Roaming\MBSJPEGDecompressionPlugin.dll [2011.04.04 17:25:16 | 000,064,512 | -H-- | C] () -- C:\Users\Daniel\AppData\Roaming\rbap450.dll [2011.04.04 17:25:16 | 000,041,472 | -H-- | C] () -- C:\Users\Daniel\AppData\Roaming\RBShell400.dll [2011.04.04 17:25:16 | 000,026,112 | -H-- | C] () -- C:\Users\Daniel\AppData\Roaming\MBSRegistrationPlugin.dll [2011.04.02 00:10:28 | 001,590,298 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011.03.09 01:45:47 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini [2011.03.03 13:40:08 | 000,150,528 | ---- | C] () -- C:\Windows\SysWow64\mkx.dll [2011.03.03 13:39:56 | 000,109,568 | ---- | C] () -- C:\Windows\SysWow64\avi.dll [2011.03.03 13:39:46 | 000,141,824 | ---- | C] () -- C:\Windows\SysWow64\mp4.dll [2011.03.03 13:39:34 | 000,123,392 | ---- | C] () -- C:\Windows\SysWow64\ogm.dll [2011.03.03 13:39:02 | 000,113,152 | ---- | C] () -- C:\Windows\SysWow64\dsmux.exe [2011.03.03 13:38:54 | 000,154,112 | ---- | C] () -- C:\Windows\SysWow64\ts.dll [2011.03.03 13:38:40 | 000,249,856 | ---- | C] () -- C:\Windows\SysWow64\dxr.dll [2011.03.03 13:38:10 | 000,097,792 | ---- | C] () -- C:\Windows\SysWow64\avs.dll [2011.03.03 13:37:50 | 000,093,184 | ---- | C] () -- C:\Windows\SysWow64\avss.dll [2011.03.03 13:37:40 | 000,358,400 | ---- | C] () -- C:\Windows\SysWow64\gdsmux.exe [2011.03.03 13:35:32 | 000,080,384 | ---- | C] () -- C:\Windows\SysWow64\mkzlib.dll [2011.03.03 13:35:26 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\mkunicode.dll [2011.02.26 23:54:19 | 000,001,338 | ---- | C] () -- C:\Users\Daniel\AppData\Local\0622CB98.il [2011.02.26 23:54:19 | 000,000,240 | ---- | C] () -- C:\Users\Daniel\AppData\Local\IndexIE_0622CB98.il [2011.02.25 11:02:09 | 000,151,552 | ---- | C] () -- C:\Windows\SysWow64\nvRegDev.dll [2011.02.23 14:25:50 | 000,000,079 | ---- | C] () -- C:\Users\Daniel\AppData\Local\CrystalDiskMark30.ini [2011.02.23 14:19:08 | 000,000,600 | ---- | C] () -- C:\Users\Daniel\AppData\Roaming\winscp.rnd [2011.02.23 04:51:04 | 000,000,998 | ---- | C] () -- C:\Windows\eReg.dat [2011.02.23 04:44:35 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2011.02.23 04:36:19 | 000,000,000 | ---- | C] () -- C:\Windows\Bench32.INI [2011.02.23 03:48:01 | 000,000,498 | RHS- | C] () -- C:\Users\Daniel\ntuser.pol [2011.02.23 03:20:32 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2011.02.23 03:06:28 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\AsIO.dll [2011.02.23 03:06:28 | 000,013,440 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2011.02.23 03:06:28 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys [2011.02.23 03:06:28 | 000,010,216 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp32.sys [2011.02.23 03:03:37 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2010.11.12 10:59:48 | 000,008,922 | ---- | C] () -- C:\Windows\UN020914.INI [2010.08.18 21:56:38 | 000,000,151 | ---- | C] () -- C:\Windows\SysWow64\Registration.ini ========== LOP Check ========== [2012.03.13 14:51:41 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\.rFactor [2011.06.01 01:25:12 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Acreon [2012.06.26 12:19:02 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Alien Skin [2012.01.02 06:58:34 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Autodesk [2012.05.29 11:56:14 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Autosim Analyzer [2011.04.27 10:34:16 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\avidemux [2012.02.01 23:48:50 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Avnex [2011.12.16 23:36:44 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Bierbuden Autoupdate [2011.05.05 12:06:39 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\BUFFALO [2011.02.27 11:28:48 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Canneverbe Limited [2012.04.01 16:52:12 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\com.Rhapsody.Napster5 [2012.02.04 01:05:27 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Command & Conquer 3 Tiberium Wars [2012.04.29 04:07:34 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\CubicExplorer [2012.07.24 13:13:02 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\DAEMON Tools Lite [2011.06.13 03:25:21 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\DVDVideoSoft [2011.06.16 03:46:00 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Eltima Software [2012.07.24 01:35:55 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\FileZilla [2011.04.27 02:39:43 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\FlashGet [2012.03.31 06:54:29 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\gema [2012.07.06 00:26:46 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Giecu [2011.11.19 13:10:28 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\HandBrake [2011.02.23 15:28:27 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\HD Tune Pro [2011.02.23 03:30:09 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\HeidiSQL [2011.10.21 16:41:42 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Helios [2012.07.24 03:25:08 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\hellomoto [2012.05.17 11:39:08 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\HTMLReport [2011.05.27 18:18:20 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\ICQ [2012.05.29 11:59:58 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\inkscape [2012.05.29 13:03:34 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\IrfanView [2011.02.24 14:40:18 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Leadertech [2012.07.24 03:54:25 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Meocz [2011.04.14 11:51:58 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\mkvtoolnix [2012.04.04 02:09:50 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\MusicBrainz [2011.06.18 11:57:01 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\NLC Modding Group [2012.01.04 03:53:02 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Opera [2011.03.09 01:27:37 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Publish Providers [2012.06.30 20:23:27 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Puuv [2011.11.21 21:56:06 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Simraceway [2011.11.29 02:54:10 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Sony [2011.11.01 12:45:14 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Sony Creative Software Inc [2012.01.23 19:16:43 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\TeamViewer [2012.04.25 20:29:25 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Temp [2011.12.08 01:33:25 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Thinstall [2011.02.23 03:21:59 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Thunderbird [2011.06.13 03:12:58 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Video DVD Maker FREE [2011.11.27 04:02:32 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\Xilisoft [2012.07.23 19:15:03 | 000,000,000 | ---D | M] -- C:\Users\Daniel\AppData\Roaming\~MASTEMP [2012.06.28 18:56:11 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Alternate Data Streams ========== @Alternate Data Stream - 152 bytes -> C:\ProgramData\TEMP:78067A35 < End of report >
So, das wars erstmal. Falls noch mehr Infos notwendig sind bitte Bescheid geben.Code:OTL Extras logfile created on: 24.07.2012 13:25:06 - Run 2 OTL by OldTimer - Version 3.2.54.1 Folder = G:\downloads 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 7,99 Gb Total Physical Memory | 6,27 Gb Available Physical Memory | 78,45% Memory free 15,98 Gb Paging File | 14,47 Gb Available in Paging File | 90,56% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 221,65 Gb Total Space | 109,70 Gb Free Space | 49,49% Space Free | Partition Type: NTFS Drive D: | 195,31 Gb Total Space | 120,52 Gb Free Space | 61,71% Space Free | Partition Type: NTFS Drive E: | 292,97 Gb Total Space | 257,83 Gb Free Space | 88,00% Space Free | Partition Type: NTFS Drive F: | 323,06 Gb Total Space | 81,53 Gb Free Space | 25,24% Space Free | Partition Type: NTFS Drive G: | 120,17 Gb Total Space | 89,30 Gb Free Space | 74,32% Space Free | Partition Type: NTFS Computer Name: DANIEL-PC | User Name: Daniel | Logged in as Administrator. Boot Mode: SafeMode with Networking | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .html[@ = Opera.HTML] -- Reg Error: Key error. File not found .url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) .html [@ = Opera.HTML] -- Reg Error: Key error. File not found [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [MAS-Explorer] -- "E:\SimInstall\bockbierbude_tools\MAS-Explorer_V0212\Release\MAS-Explorer.exe" /d "%1" () Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [MAS-Explorer] -- "E:\SimInstall\bockbierbude_tools\MAS-Explorer_V0212\Release\MAS-Explorer.exe" /d "%1" () Directory [OneNote.Open] -- C:\PROGRA~2\MICROS~1\Office12\ONENOTE.EXE "%L" Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] ========== System Restore Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore] ========== Firewall Settings ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 -- [2012.06.14 03:27:07 | 000,000,000 | ---D | M] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 -- [2012.06.14 03:27:07 | 000,000,000 | ---D | M] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile] "DisableNotifications" = 0 "EnableFirewall" = 1 -- [2012.06.14 03:27:07 | 000,000,000 | ---D | M] ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] ========== Vista Active Open Ports Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{1F53345D-2FEA-4500-A446-BB8CE2C627A0}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{2310FE72-7789-4840-8554-DB0E3E23157D}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | "{27622AC9-ED53-4F4C-A145-A2D6A2572DD2}" = rport=139 | protocol=6 | dir=out | app=system | "{3961AC46-17F7-4645-AE6B-5E0232EE7C2B}" = lport=137 | protocol=17 | dir=in | app=system | "{457C298B-9819-4911-AFF3-3879A534C058}" = rport=10243 | protocol=6 | dir=out | app=system | "{51B5D69A-F6B8-4E32-B3FC-EF0D40E423D0}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{5922C427-702E-4784-8578-328F8C5F337C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{69B1B47C-46C7-4E49-AAF6-D0F6C6C420C4}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | "{6C0A9BE0-F3CC-4388-AA8C-599D438AE1D8}" = lport=1900 | protocol=17 | dir=in | name=windows live communications platform (ssdp) | "{71A5B67B-2FE5-4740-8395-6A4112FFC52A}" = lport=445 | protocol=6 | dir=in | app=system | "{7790074A-A2C3-4354-B07D-5351C19EE7DD}" = lport=10243 | protocol=6 | dir=in | app=system | "{7BDC00BB-9770-436B-BEAF-B3D6CE2051C9}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | "{7F7FAA0C-D48D-49AA-819A-555212A1DD35}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{8428C54A-5D9D-4D93-9841-3A32DDA89709}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | "{87A8F575-DA9C-47C8-BD92-C807B1149DC8}" = lport=2869 | protocol=6 | dir=in | app=system | "{88CF8018-0C6F-44C9-A80E-3FFCDB552FCF}" = lport=139 | protocol=6 | dir=in | app=system | "{938467D4-759B-4C95-8272-5E9127125D9B}" = lport=808 | protocol=6 | dir=in | svc=nettcpactivator | app=c:\windows\microsoft.net\framework64\v4.0.30319\smsvchost.exe | "{A1FA057D-158E-4125-8E1B-B39DACA69D2F}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | "{B1CB7792-D5FE-4FFA-96B7-029356EA7312}" = lport=2869 | protocol=6 | dir=in | name=windows live communications platform (upnp) | "{BF0E35A7-F0A9-41DA-A5CD-7B94F284CF41}" = rport=137 | protocol=17 | dir=out | app=system | "{C59D497F-2328-4520-A772-04395DE0D0DC}" = lport=5353 | protocol=6 | dir=in | name=adobe csi cs4 | "{C72A8545-1DF7-4506-B437-C0FABBFBF79F}" = rport=445 | protocol=6 | dir=out | app=system | "{CDD24FB8-13C4-49E7-8AFE-E7049D51208B}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | "{F9DA787C-9987-4D9F-98D5-C60F0F281A8B}" = lport=138 | protocol=17 | dir=in | app=system | "{FA6A23D8-D1BE-407A-A951-AFDA74911867}" = rport=138 | protocol=17 | dir=out | app=system | ========== Vista Active Application Exception List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] "{063C3930-A42D-4AD4-84A3-8AEB5E86F279}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{06F5543C-A596-4C90-B7CF-908D9C6707F8}" = protocol=6 | dir=in | app=d:\steam\steamapps\brezlseppl\race 07\config.exe | "{0A3F5BD4-887B-449D-AA7C-4AAEE8061474}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{16532BE4-7BB0-4441-84D4-F2A686EC26EF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{1A5F4230-BFB1-468F-9EE1-5B1F507568A5}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | "{1C3CA0C5-1045-41AB-B166-5BE6F45F7453}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | "{2109B8B5-C70E-4537-9D74-7CB18BE0C9A7}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{280F8761-08F7-44F4-A2A4-462CFCFD54E2}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | "{35F05B5B-79BB-4634-9CEB-BE4889C94BA2}" = dir=in | app=c:\program files (x86)\windows live\contacts\wlcomm.exe | "{42E0B134-4189-435B-9394-B88551D06CC2}" = protocol=17 | dir=in | app=d:\steam\steam.exe | "{4DB3A65A-B39D-44A2-9BB1-8C9D2809B40D}" = protocol=17 | dir=in | app=d:\steam\steamapps\brezlseppl\race 07\steamexpansionapp.exe | "{4DE3F63D-F168-4D2E-A982-5B411D574224}" = protocol=17 | dir=in | app=d:\steam\steamapps\brezlseppl\race 07\config.exe | "{71180978-1C8A-4C37-B793-7F2143E31FDC}" = protocol=6 | dir=in | app=d:\steam\steamapps\brezlseppl\race 07\steamexpansionapp.exe | "{7BBEF58F-51B7-4E4A-BFB7-FA807117110E}" = protocol=6 | dir=in | app=d:\steam\steamapps\brezlseppl\race 07\steamproxy.exe | "{938AB334-F743-4394-80B6-223A358F1A07}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | "{9805C3EF-3F42-48F8-BAF9-DC2F0F457AFE}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{983BD28A-F157-47DD-AA13-627464961142}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{9B8A0E50-D989-4D12-A297-AC78CAD439CA}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{9C6E173E-5916-4EE9-877E-6CDC17B29BB6}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | "{9ED7F4BE-51B6-41A2-BFFF-C6318C596BFF}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{A112930E-799B-45C7-8613-E7A493C252D5}" = protocol=17 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | "{B5780CEE-294B-47CD-B019-E77B20665F93}" = protocol=17 | dir=in | app=d:\steam\steamapps\brezlseppl\race 07\steamproxy.exe | "{C46C0806-D1BD-43E4-BDB8-D18BBDDDB112}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | "{C793901A-B6F7-44C3-BE62-18FA83B89007}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | "{D19B73CF-EBCB-4A01-8978-74A333CA727D}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | "{D2EF91E6-2946-44A6-99A5-CB6A9AFFC74E}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | "{D779E475-17C1-4EA3-81BE-0451778C508E}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | "{DB372B25-782D-4269-BBDC-B462C45C4CA0}" = protocol=6 | dir=out | app=system | "{DFC95DDF-1A42-4443-A3DB-8702D8641D6F}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | "{E482453E-C3E9-4C7E-9FE2-8DBF5FCCCDFE}" = protocol=6 | dir=in | app=c:\program files (x86)\microsoft office\office12\onenote.exe | "{F0C91D5E-F7E4-4462-9D90-BBE674CBC741}" = dir=in | app=c:\program files (x86)\windows live\mesh\moe.exe | "{F1B4CC57-C925-40B3-B24F-64AAFF2A1454}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | "{F2BC9871-6928-4B4C-AB42-723380FB595D}" = protocol=6 | dir=in | app=d:\steam\steam.exe | "TCP Query User{0EC3CDD0-AC57-4F94-A93A-25B814199422}F:\install\bildbearbeitung\adobe photoshop cs5 portable\adobe photoshop cs5\app\photoshopcs5\photoshop.exe" = protocol=6 | dir=in | app=f:\install\bildbearbeitung\adobe photoshop cs5 portable\adobe photoshop cs5\app\photoshopcs5\photoshop.exe | "TCP Query User{0F10FE59-13D4-4639-B9E7-D2757C167202}C:\windows\system32\ftp.exe" = protocol=6 | dir=in | app=c:\windows\system32\ftp.exe | "TCP Query User{149CCD45-2E02-4379-AA3E-3D604D55899F}D:\steam\steamapps\brezlseppl\race 07\race_steam.exe" = protocol=6 | dir=in | app=d:\steam\steamapps\brezlseppl\race 07\race_steam.exe | "TCP Query User{211A33AF-E648-4A04-A0C2-A7056F1E576B}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | "TCP Query User{43D0897C-587B-4A63-A8A2-C5880E7A0916}C:\rfactorrlms\rfactor.exe" = protocol=6 | dir=in | app=c:\rfactorrlms\rfactor.exe | "TCP Query User{4A8E6FC6-0B88-470C-B383-C9E11DC7CF07}C:\python27\pythonw.exe" = protocol=6 | dir=in | app=c:\python27\pythonw.exe | "TCP Query User{5256C89D-F98D-4319-AA79-24929B188159}C:\program files (x86)\filezilla ftp client\filezilla.exe" = protocol=6 | dir=in | app=c:\program files (x86)\filezilla ftp client\filezilla.exe | "TCP Query User{5FC0AF9A-2CB4-4F7E-862D-3D401D1164DD}C:\rfactorbbb\rfactor dedicated.exe" = protocol=6 | dir=in | app=c:\rfactorbbb\rfactor dedicated.exe | "TCP Query User{6CC90F05-51F7-479F-A5EB-51FDE686EA85}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "TCP Query User{755CDBD2-8B21-420D-A25C-91CADF2197B6}C:\rfactorrlms\rfactor dedicated.exe" = protocol=6 | dir=in | app=c:\rfactorrlms\rfactor dedicated.exe | "TCP Query User{75D09913-708D-48F6-9BFC-E3C82B12D878}D:\xampp\apache\bin\httpd.exe" = protocol=6 | dir=in | app=d:\xampp\apache\bin\httpd.exe | "TCP Query User{763F19DC-E469-48B7-9F96-496D9E27BF5D}C:\program files (x86)\ea games\command & conquer generäle stunde null\game.dat" = protocol=6 | dir=in | app=c:\program files (x86)\ea games\command & conquer generäle stunde null\game.dat | "TCP Query User{7F4F5303-31CD-486D-BA26-B276C67E5014}C:\windows\sslftp.exe" = protocol=6 | dir=in | app=c:\windows\sslftp.exe | "TCP Query User{92B383FB-90C2-4ACE-87F7-77507549A6C9}C:\program files (x86)\teamspeak3-server_win64\ts3server_win64.exe" = protocol=6 | dir=in | app=c:\program files (x86)\teamspeak3-server_win64\ts3server_win64.exe | "TCP Query User{A31C8787-14B1-4706-A9A9-FA298D4CEB6F}D:\xampp\mysql\bin\mysqld.exe" = protocol=6 | dir=in | app=d:\xampp\mysql\bin\mysqld.exe | "TCP Query User{A618A741-D9FE-4772-B9B1-F521CB332BB2}C:\python26\pythonw.exe" = protocol=6 | dir=in | app=c:\python26\pythonw.exe | "TCP Query User{A7EA752F-62B1-413E-916F-DA5E0A6352AE}C:\rfactor2\core\rfactor2.exe" = protocol=6 | dir=in | app=c:\rfactor2\core\rfactor2.exe | "TCP Query User{C4C97F2E-A8F0-4236-8C0D-C1B28F4381BE}C:\rfactor2\core\rfactor2 dedicated.exe" = protocol=6 | dir=in | app=c:\rfactor2\core\rfactor2 dedicated.exe | "TCP Query User{C5980C1A-9E2D-47DB-95F7-8D42F2803BF7}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "TCP Query User{C701432B-8E1C-4D2D-8546-222C51B1D649}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe | "TCP Query User{D0C963A6-E15E-4806-945D-C9CF1E05A91F}C:\rfactorbbb\rfactor.exe" = protocol=6 | dir=in | app=c:\rfactorbbb\rfactor.exe | "TCP Query User{F02B1632-2778-4246-B4B0-DA7C6FCE78FD}C:\rfactorsro\rfactor.exe" = protocol=6 | dir=in | app=c:\rfactorsro\rfactor.exe | "UDP Query User{03FACF87-68F7-403F-9799-05EDBDA1F324}D:\xampp\apache\bin\httpd.exe" = protocol=17 | dir=in | app=d:\xampp\apache\bin\httpd.exe | "UDP Query User{07F83628-674D-4279-B869-EB337B6473C3}F:\install\bildbearbeitung\adobe photoshop cs5 portable\adobe photoshop cs5\app\photoshopcs5\photoshop.exe" = protocol=17 | dir=in | app=f:\install\bildbearbeitung\adobe photoshop cs5 portable\adobe photoshop cs5\app\photoshopcs5\photoshop.exe | "UDP Query User{0A377FAA-8239-490F-A585-F41AB4A01C85}C:\rfactor2\core\rfactor2 dedicated.exe" = protocol=17 | dir=in | app=c:\rfactor2\core\rfactor2 dedicated.exe | "UDP Query User{1CEA7925-0BF1-4711-A2A5-757DEAA860CE}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "UDP Query User{1D2053ED-1DD0-4D96-81CC-2B9FE6EE8ECA}C:\program files (x86)\teamspeak3-server_win64\ts3server_win64.exe" = protocol=17 | dir=in | app=c:\program files (x86)\teamspeak3-server_win64\ts3server_win64.exe | "UDP Query User{1E8F27E5-47F1-4849-8A06-CDCF91BF3EF2}C:\windows\system32\ftp.exe" = protocol=17 | dir=in | app=c:\windows\system32\ftp.exe | "UDP Query User{239B44FB-6CA0-43DE-B53B-2299C4E46916}D:\xampp\mysql\bin\mysqld.exe" = protocol=17 | dir=in | app=d:\xampp\mysql\bin\mysqld.exe | "UDP Query User{3D735F74-D0AC-434F-A0EE-A45718F7AE23}C:\program files (x86)\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\java.exe | "UDP Query User{532CF4D7-9021-4C8D-ACFD-5A3CF8DD8300}D:\steam\steamapps\brezlseppl\race 07\race_steam.exe" = protocol=17 | dir=in | app=d:\steam\steamapps\brezlseppl\race 07\race_steam.exe | "UDP Query User{6ACDCB42-A302-4668-8DCF-4C92FFD99E55}C:\rfactorbbb\rfactor dedicated.exe" = protocol=17 | dir=in | app=c:\rfactorbbb\rfactor dedicated.exe | "UDP Query User{84907C56-E8C1-4DA4-89DE-2903F009190F}C:\python27\pythonw.exe" = protocol=17 | dir=in | app=c:\python27\pythonw.exe | "UDP Query User{889215A6-D5FF-42EF-AFC8-B4A2C1F6B3D9}C:\python26\pythonw.exe" = protocol=17 | dir=in | app=c:\python26\pythonw.exe | "UDP Query User{9091DEF0-E0A6-4E11-A6DA-4ECB936DEA35}C:\program files (x86)\mozilla firefox\plugin-container.exe" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\plugin-container.exe | "UDP Query User{9B0A77E8-EB64-4FE1-B3AA-C0FA5494259F}C:\rfactorrlms\rfactor.exe" = protocol=17 | dir=in | app=c:\rfactorrlms\rfactor.exe | "UDP Query User{AD46F0A2-2050-4F3E-A019-1C21A9BF3918}C:\rfactorrlms\rfactor dedicated.exe" = protocol=17 | dir=in | app=c:\rfactorrlms\rfactor dedicated.exe | "UDP Query User{C544AA9A-42E5-49D4-88EB-D5F4C7EDD8AB}C:\rfactorsro\rfactor.exe" = protocol=17 | dir=in | app=c:\rfactorsro\rfactor.exe | "UDP Query User{CB338920-A4FE-48D9-A3FE-F15FA85C056A}C:\windows\sslftp.exe" = protocol=17 | dir=in | app=c:\windows\sslftp.exe | "UDP Query User{E0A9DE5A-8C16-4103-85B8-4A7A22108CA7}C:\program files (x86)\ea games\command & conquer generäle stunde null\game.dat" = protocol=17 | dir=in | app=c:\program files (x86)\ea games\command & conquer generäle stunde null\game.dat | "UDP Query User{ED4F92C7-87CC-49D1-8A0A-FAD074DD9ECF}C:\program files (x86)\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre6\bin\javaw.exe | "UDP Query User{F4EDFC50-8C18-4E8A-863A-37DE31376205}C:\rfactor2\core\rfactor2.exe" = protocol=17 | dir=in | app=c:\rfactor2\core\rfactor2.exe | "UDP Query User{FA2F84BA-FB61-44EF-8582-56A9B3829EE9}C:\program files (x86)\filezilla ftp client\filezilla.exe" = protocol=17 | dir=in | app=c:\program files (x86)\filezilla ftp client\filezilla.exe | "UDP Query User{FCC47011-F334-4C9E-9C23-560628ABA19F}C:\rfactorbbb\rfactor.exe" = protocol=17 | dir=in | app=c:\rfactorbbb\rfactor.exe | ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "{11BA2B00-1495-47B8-BFA8-D08C605AB2CC}" = Windows Live Family Safety "{1444D2EE-C7AD-44A8-844F-2634B49353D1}" = Logitech Gaming Software 5.10 "{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector "{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant "{1E9FC118-651D-4934-97BE-E53CAE5C7D45}" = Microsoft_VC80_MFCLOC_x86_x64 "{23170F69-40C1-2702-0920-000001000000}" = 7-Zip 9.20 (x64 edition) "{295CFB7C-A57E-4313-93E7-68E7CE1D0332}" = Adobe WinSoft Linguistics Plugin x64 "{2D74E972-5A85-44DC-9193-8A302BA8C181}" = Photoshop Camera Raw_x64 "{2E295B5B-1AD4-4d36-97C2-A316084722C0}" = Python 2.7.2 (64-bit) "{350AA351-21FA-3270-8B7A-835434E766AD}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 "{4569AD91-47F4-4D9E-8FC9-717EC32D7AE1}" = Microsoft_VC80_CRT_x86_x64 "{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 "{5C46703D-92EE-40d9-BCF8-DEADBEEFAAAA}" = The Compressonator 1.50 "{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 "{624C7F0A-89B2-4C49-9CAB-9D69613EC95A}" = Microsoft IntelliPoint 8.2 "{6631325A-9B1B-4EE7-8E64-8CC4A6F10643}" = Adobe Fonts All x64 "{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64) "{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}" = Microsoft Visual C++ 2005 Redistributable (x64) "{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 "{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 "{8557397C-A42D-486F-97B3-A2CBC2372593}" = Microsoft_VC90_ATL_x86_x64 "{8875A1C0-6308-4790-8CF6-D34E89880052}" = Adobe Linguistics CS4 x64 "{887797BF-37A5-4199-B0C9-0D38D6196E9A}" = Adobe Anchor Service x64 CS4 "{8C8D673B-20FB-43E6-BCB7-9B3F78F2E762}" = Adobe Type Support x64 CS4 "{8DAA31EB-6830-4006-A99F-4DF8AB24714F}" = Adobe CSI CS4 x64 "{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended "{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007 "{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007 "{90BA8112-80B3-4617-A3C1-BD2771B60F74}" = Adobe CMaps x64 CS4 "{90BF0360-A1DB-4599-A643-95AB90A52C1E}" = Microsoft_VC90_MFCLOC_x86_x64 "{925D058B-564A-443A-B4B2-7E90C6432E55}" = Microsoft_VC80_ATL_x86_x64 "{92A3CA0D-55CD-4C5D-BA95-5C2600C20F26}" = Microsoft_VC90_CRT_x86_x64 "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{A3454894-144A-4D80-B605-C128FE0D7329}" = Adobe Drive CS4 x64 "{A472B9E4-0AFF-4F7B-B25D-F64F8E928AAB}" = Microsoft_VC90_MFC_x86_x64 "{A7EEF79E-06B2-4382-9D2E-39DBA0F72D50}" = Eraser 6.0.8.2273 "{aac9fcc4-dd9e-4add-901c-b5496a07ab2e}" = Microsoft Visual C++ 2005 Redistributable (x64) - KB2467175 "{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64) "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 296.10 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 296.10 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.12.0213 "{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application "{C8C1BAD5-54E6-4146-AD07-3A8AD36569C3}" = Microsoft_VC80_MFC_x86_x64 "{CEA21F20-DBF4-464C-8B81-28B8508AFDDD}" = Windows Live Family Safety "{D40172D6-CE2D-4B72-BF5F-26A04A900B7B}" = Adobe Photoshop CS4 (64 Bit) "{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources "{D81C035E-D0A5-11DF-9450-0013D3D69929}" = MSVCRT Redists "{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources "{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter "{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 "{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client "{DFFABE78-8173-4E97-9C5C-22FB26192FC5}" = Adobe PDF Library Files x64 CS4 "{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service "{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile "Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit "CCleaner" = CCleaner "Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile "Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack "Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended "Microsoft IntelliPoint 8.2" = Microsoft IntelliPoint 8.2 "Recuva" = Recuva "sp6" = Logitech SetPoint 6.20 "TeamSpeak 3 Client" = TeamSpeak 3 Client "wxPython2.8-unicode-py27_is1" = wxPython 2.8.12.1 (unicode) for Python 2.7 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{00ADFB20-AE75-46F4-AD2C-F48B15AC3100}" = Adobe Color NA Recommended Settings CS4 "{033E378E-6AD3-4AD5-BDEB-CBD69B31046C}" = Microsoft_VC90_ATL_x86 "{0481A2EA-DA1D-4D10-A7C3-F8237948F6B5}" = Messenger Companion "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{05308C4E-7285-4066-BAE3-6B50DA6ED755}" = Adobe Update Manager CS4 "{054EFA56-2AC1-48F4-A883-0AB89874B972}" = Adobe Extension Manager CS4 "{06F80017-8F98-4C94-B868-52358569FC32}" = Command & Conquer Generals "{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86 "{098727E1-775A-4450-B573-3F441F1CA243}" = kuler "{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer "{0D6013AB-A0C7-41DC-973C-E93129C9A29F}" = Adobe Color JA Extra Settings CS4 "{0D67A4E4-5BE0-4C9A-8AD8-AB552B433F23}" = Adobe Setup "{0F3647F8-E51D-4FCC-8862-9A8D0C5ACF25}" = Microsoft_VC80_ATL_x86 "{0F723FC1-7606-4867-866C-CE80AD292DAF}" = Adobe CSI CS4 "{1618734A-3957-4ADD-8199-F973763109A8}" = Adobe Anchor Service CS4 "{16E16F01-2E2D-4248-A42F-76261C147B6C}" = Adobe Drive CS4 "{16E6D2C1-7C90-4309-8EC4-D2212690AAA4}" = AdobeColorCommonSetRGB "{1BA1DBDC-5431-46FD-A66F-A17EB1C439EE}" = Windows Live Messenger "{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources "{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 "{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update "{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions "{20D4A895-748C-4D88-871C-FDB1695B0169}" = Platform "{2205B8AE-490E-43F2-AB43-C13C2BEC86A7}" = DDS Thumbnail Viewer "{23F79416-CAD1-41BF-99A3-040F6C814AAA}" = NVIDIA Photoshop Plug-ins "{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31 "{310BC5E2-31AF-49BB-904D-E71EB93645DC}" = AI Suite "{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery "{35D94F92-1D3A-43C5-8605-EA268B1A7BD9}" = PDF Settings CS4 "{36A1E3D6-288A-4EEE-A081-30D9808B2BE3}" = Joe "{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack "{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup "{3A4E8896-C2E7-4084-A4A4-B8FD1894E739}" = Adobe XMP Panels CS4 "{3D2C9DE6-9ADE-4252-A241-E43723B0CE02}" = Adobe Color - Photoshop Specific CS4 "{3DA8DF9A-044E-46C4-8531-DEDBB0EE37FF}" = Adobe WinSoft Linguistics Plugin "{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg "{40719211-D09A-11DF-BA30-0013D3D69929}" = MSVCRT Redists "{4943EFF5-229F-435D-BEA9-BE3CAEA783A7}" = Adobe Service Manager Extension "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver "{5570C7F0-43D0-4916-8A9E-AEDD52FA86F4}" = Adobe Color EU Extra Settings CS4 "{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml "{5E386C5B-CDE7-435A-B5C9-EC73A1B0553A}" = NVIDIA Photoshop Plug-ins 64 bit "{635FED5B-2C6D-49BE-87E6-7A6FCD22BC5A}" = Microsoft_VC90_MFC_x86 "{63C24A08-70F3-4C8E-B9FB-9F21A903801D}" = Adobe Color Video Profiles CS CS4 "{63E5CDBF-8214-4F03-84F8-CD3CE48639AD}" = Adobe Photoshop CS4 Support "{64963F0E-03F2-4B59-8D1B-1806545E7092}" = NVIDIA DDS Utilities "{65CB4C08-C47B-4A7E-A6A4-50C06ADA5FC6}" = Adobe AIR "{67F0E67A-8E93-4C2C-B29D-47C48262738A}" = Adobe Device Central CS4 "{68243FF8-83CA-466B-B2B8-9F99DA5479C4}" = AdobeColorCommonSetCMYK "{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE "{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core "{7BE15435-2D3E-4B58-867F-9C75BED0208C}" = QuickTime "{7C8B5E63-821A-4DFB-BDFA-19854D88EC5C}" = 3dsmax ancillary install "{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP "{820D3F45-F6EE-4AAF-81EF-CE21FF21D230}" = Adobe Type Support CS4 "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{83877DB1-8B77-45BC-AB43-2BAC22E093E0}" = Adobe Bridge CS4 "{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform "{842B4B72-9E8F-4962-B3C1-1C422A5C4434}" = Suite Shared Configuration CS4 "{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer "{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 "{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7 "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A1EBF29-7CF8-471E-B90B-95FF36AC8248}" = Topaz Simplify 3 "{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007 "{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007 "{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007 "{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007 "{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{928D7B99-2BEA-49F9-83B8-20FA57860643}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007 "{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007 "{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007 "{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{A23BFC95-4A73-410F-9248-4C2B48E38C49}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) "{90120000-002A-0000-1000-0000000FF1CE}_HOMESTUDENTR_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-002A-0407-1000-0000000FF1CE}_HOMESTUDENTR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007 "{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A6353E8F-5B8D-47CC-8737-DFF032ED3973}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007 "{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{DB2ACBD1-65B1-4FC5-881E-4E75C668E7E2}" = Microsoft Office 2007 Service Pack 3 (SP3) "{90120000-00B0-0407-0000-0000000FF1CE}" = Microsoft – Speichern als PDF – Add-In für 2007 Microsoft Office-Programme "{90140000-2005-0000-0000-0000000FF1CE}" = Microsoft Office File Validation Add-In "{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007 "{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3) "{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86 "{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker "{931AB7EA-3656-4BB7-864D-022B09E3DD67}" = Adobe Linguistics CS4 "{933B4015-4618-4716-A828-5289FC03165F}" = VC80CRTRedist - 8.0.50727.6195 "{94D398EB-D2FD-4FD1-B8C4-592635E8A191}" = Adobe CMaps CS4 "{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 "{9B700657-676B-4A98-8B25-40A1BAC81031}" = Nero 8 Essentials "{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 "{9C2AC00C-0C06-4B7E-97A4-A833808D54D6}" = EPU "{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail "{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer "{A78FE97A-C0C8-49CE-89D0-EDD524A17392}" = PDF Settings CS5 "{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper "{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common "{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer "{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.3) - Deutsch "{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh "{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie "{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail "{B29AD377-CC12-490A-A480-1452337C618D}" = Connect "{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy "{B65BA85C-0A27-4BC0-A22D-A66F0E5B9494}" = Adobe Photoshop CS4 "{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Skype Click to Call "{B6D38690-755E-4F40-A35A-23F8BC2B86AC}" = Microsoft_VC90_MFCLOC_x86 "{B6EC7388-E277-4A5B-8C8F-71067A41BA64}" = TextPad 5 "{BB4E33EC-8181-4685-96F7-8554293DEC6A}" = Adobe Output Module "{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common "{C52E3EC1-048C-45E1-8D53-10B0C6509683}" = Adobe Default Language CS4 "{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections "{CC75AB5C-2110-4A7F-AF52-708680D22FE8}" = Photoshop Camera Raw "{CE8B18E0-38FC-400F-9500-8FC04C51D2EB}" = Check5 "{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D1A19B02-817E-4296-A45B-07853FD74D57}" = Microsoft_VC80_MFC_x86 "{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform "{D92BBB52-82FF-42ED-8A3C-4E062F944AB7}" = Microsoft_VC80_MFCLOC_x86 "{DA909E62-3B45-4BA1-8B58-FCAEBA4BCEC9}" = NVIDIA PhysX "{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh "{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10 "{E4848436-0345-47E2-B648-8B522FCDA623}" = Adobe Photoshop CS4 "{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker "{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger "{e7394a0f-3f80-45b1-87fc-abcd51893246}" = Python 2.6.4 "{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.10 "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F0E64E2E-3A60-40D8-A55D-92F6831875DA}" = Adobe Search for Help "{F2A0AF0C-1B01-2BDF-F224-53161D4CEF5C}" = Napster 5 Beta "{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}" = Command and Conquer(TM) Generäle Die Stunde Null "{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5 "{F8EF2B3F-C345-4F20-8FE4-791A20333CD5}" = Adobe ExtendScript Toolkit CS4 "{F93C84A6-0DC6-42AF-89FA-776F7C377353}" = Adobe PDF Library Files CS4 "{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials "{FCDBEA60-79F0-4FAE-BBA8-55A26C609A49}" = Visual Studio 2008 x64 Redistributables "{FCDD51BB-CAD0-4BB1-B7DF-CE86D1032794}" = Adobe Fonts All "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "Adobe AIR" = Adobe AIR "Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin "Adobe Shockwave Player" = Adobe Shockwave Player 11.5 "com.Rhapsody.Napster5" = Napster 5 Beta "DivX Setup.divx.com" = DivX-Setup "ffdshow_is1" = ffdshow v1.1.4096 [2011-11-29] "FileZilla Client" = FileZilla Client 3.5.3 "Fraps" = Fraps (remove only) "Game Booster_is1" = Game Booster 3 "HeidiSQL_is1" = HeidiSQL 7.0.0.4053 "HOMESTUDENTR" = Microsoft Office Home and Student 2007 "InstallShield_{06F80017-8F98-4C94-B868-52358569FC32}" = Command & Conquer Generals "InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}" = VIA Plattform-Geräte-Manager "InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver "InstallShield_{F3E9C243-122E-4D6B-ACC1-E1FEC02F6CA1}" = Command and Conquer(TM) Generäle Die Stunde Null "KLiteCodecPack_is1" = K-Lite Codec Pack 7.5.0 (Full) "Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.62.0.1300 "Mozilla Firefox 13.0.1 (x86 de)" = Mozilla Firefox 13.0.1 (x86 de) "Mozilla Thunderbird 14.0 (x86 de)" = Mozilla Thunderbird 14.0 (x86 de) "MozillaMaintenanceService" = Mozilla Maintenance Service "PSPad editor_is1" = PSPad editor "Revo Uninstaller" = Revo Uninstaller 1.94 "rFactor2" = rFactor2 "Steam App 44650" = GT Power Expansion "Steam App 8600" = RACE 07 "Steam App 8640" = RACE On "Steam App 8660" = GTR Evolution "VLC media player" = VLC media player 2.0.1 "Windows 7 - Codec Pack" = Windows 7 Codec Pack 3.4.0 "Windows7FirewallControl_is1" = Windows7FirewallControl (i386) 4.0.144.38 "WinLiveSuite" = Windows Live Essentials "WinRAR archiver" = WinRAR 4.11 (32-Bit) "wxPython2.8-unicode-py26_is1" = wxPython 2.8.9.1 (unicode) for Python 2.6 "xampp" = XAMPP 1.7.7 ========== HKEY_CURRENT_USER Uninstall List ========== [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "Bierbuden Autoupdate" = Bierbuden Autoupdate (remove only) ========== Last 20 Event Log Errors ========== [ Application Events ] Error - 29.03.2012 10:10:20 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: Explorer.EXE, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: DivXPropertyHandler.dll, Version: 1.0.0.72, Zeitstempel: 0x4cffd017 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00000000000052a2 ID des fehlerhaften Prozesses: 0xb68 Startzeit der fehlerhaften Anwendung: 0x01cd0d603c1b1010 Pfad der fehlerhaften Anwendung: C:\Windows\Explorer.EXE Pfad des fehlerhaften Moduls: C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll Berichtskennung: ea928eca-79a8-11e1-9eb4-485b39ef007a Error - 29.03.2012 10:29:08 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: DivXPropertyHandler.dll, Version: 1.0.0.72, Zeitstempel: 0x4cffd017 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000004c62 ID des fehlerhaften Prozesses: 0x15d0 Startzeit der fehlerhaften Anwendung: 0x01cd0db7f45e642c Pfad der fehlerhaften Anwendung: C:\Windows\explorer.exe Pfad des fehlerhaften Moduls: C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll Berichtskennung: 8ae903b3-79ab-11e1-9eb4-485b39ef007a Error - 29.03.2012 19:03:21 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: rFactor2.exe, Version: 1.0.4.2, Zeitstempel: 0x4f637593 Name des fehlerhaften Moduls: d3d9.dll, Version: 1.0.0.0, Zeitstempel: 0x4f2d6eb0 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00048aa9 ID des fehlerhaften Prozesses: 0x118c Startzeit der fehlerhaften Anwendung: 0x01cd0dff69592794 Pfad der fehlerhaften Anwendung: C:\rFactor2\Core\rFactor2.exe Pfad des fehlerhaften Moduls: C:\rFactor2\Core\d3d9.dll Berichtskennung: 60bbd85e-79f3-11e1-9eb4-485b39ef007a Error - 29.03.2012 22:14:21 | Computer Name = Daniel-PC | Source = SideBySide | ID = 16842827 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe". Fehler in Manifest- oder Richtliniendatei "C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPluginBroker.exe" in Zeile 2. Mehrere requestedPrivileges-Elemente sind nicht im Manifest zulässig. Error - 29.03.2012 22:14:22 | Computer Name = Daniel-PC | Source = SideBySide | ID = 16842832 Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error - 29.03.2012 22:14:28 | Computer Name = Daniel-PC | Source = SideBySide | ID = 16842785 Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Python26\Lib\distutils\command\wininst-8_d.exe". Die abhängige Assemblierung "Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"" konnte nicht gefunden werden. Verwenden Sie für eine detaillierte Diagnose das Programm "sxstrace.exe". Error - 29.03.2012 22:14:49 | Computer Name = Daniel-PC | Source = SideBySide | ID = 16842832 Description = Fehler beim Generieren des Aktivierungskontexts für "c:\rFactor2\Core\ModMgr.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile . Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion. In Konflikt stehende Komponenten:. Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. Error - 30.03.2012 08:25:24 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: DivXPropertyHandler.dll, Version: 1.0.0.72, Zeitstempel: 0x4cffd017 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000001921 ID des fehlerhaften Prozesses: 0xbe0 Startzeit der fehlerhaften Anwendung: 0x01cd0db5af2bce16 Pfad der fehlerhaften Anwendung: C:\Windows\explorer.exe Pfad des fehlerhaften Moduls: C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll Berichtskennung: 6c46d939-7a63-11e1-9eb4-485b39ef007a Error - 30.03.2012 12:29:12 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: explorer.exe, Version: 6.1.7601.17567, Zeitstempel: 0x4d672ee4 Name des fehlerhaften Moduls: DivXPropertyHandler.dll, Version: 1.0.0.72, Zeitstempel: 0x4cffd017 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0000000000001921 ID des fehlerhaften Prozesses: 0x12b8 Startzeit der fehlerhaften Anwendung: 0x01cd0e89a5cebe1d Pfad der fehlerhaften Anwendung: C:\Windows\explorer.exe Pfad des fehlerhaften Moduls: C:\Program Files\DivX\DivX Plus Media Foundation Components\DivXPropertyHandler.dll Berichtskennung: 7b3c8c3c-7a85-11e1-9eb4-485b39ef007a Error - 30.03.2012 16:59:02 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: rFactor2.exe, Version: 1.0.4.2, Zeitstempel: 0x4f637593 Name des fehlerhaften Moduls: d3d9.dll, Version: 1.0.0.0, Zeitstempel: 0x4f2d6eb0 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00048aa9 ID des fehlerhaften Prozesses: 0x854 Startzeit der fehlerhaften Anwendung: 0x01cd0eaec27083a0 Pfad der fehlerhaften Anwendung: C:\rFactor2\Core\rFactor2.exe Pfad des fehlerhaften Moduls: C:\rFactor2\Core\d3d9.dll Berichtskennung: 2d3ebef0-7aab-11e1-9eb4-485b39ef007a Error - 30.03.2012 17:27:38 | Computer Name = Daniel-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: rFactor2.exe, Version: 1.0.4.2, Zeitstempel: 0x4f637593 Name des fehlerhaften Moduls: d3d9.dll, Version: 1.0.0.0, Zeitstempel: 0x4f2d6eb0 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00048aa9 ID des fehlerhaften Prozesses: 0x1224 Startzeit der fehlerhaften Anwendung: 0x01cd0eb7fd788af2 Pfad der fehlerhaften Anwendung: C:\rFactor2\Core\rFactor2.exe Pfad des fehlerhaften Moduls: C:\rFactor2\Core\d3d9.dll Berichtskennung: 2c0bc62a-7aaf-11e1-9eb4-485b39ef007a [ System Events ] Error - 24.07.2012 07:17:17 | Computer Name = Daniel-PC | Source = DCOM | ID = 10005 Description = Error - 24.07.2012 07:18:46 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 24.07.2012 07:18:46 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 24.07.2012 07:18:46 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 24.07.2012 07:20:54 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 24.07.2012 07:20:54 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 24.07.2012 07:20:54 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 24.07.2012 07:25:54 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 24.07.2012 07:25:54 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 Error - 24.07.2012 07:25:54 | Computer Name = Daniel-PC | Source = Service Control Manager | ID = 7001 Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1068 < End of report >
VG,
Daniel
kurzes Update: Das vom Trojaner gezeigte Bild sieht so aus:
Trojaner.JPG
(kopiert aus diesem Thread: http://forum.botfrei.de/attachment.p...4&d=1342814869)
Zitat von brezl
.
Hätte ich nicht für möglich gehalten, dass sich das Problem doch so schnell aus der Welt schaffen lässt.
Lesezeichen