also so groß wie möglich??
OTL logfile created on: 01.12.2011 18:03:53 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\...\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19154)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,99 Gb Total Physical Memory | 1,85 Gb Available Physical Memory | 61,85% Memory free
3,87 Gb Paging File | 2,75 Gb Available in Paging File | 71,02% Paging File free
Paging file location(s): c:\pagefile.sys 1000 1500 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 455,99 Gb Total Space | 263,09 Gb Free Space | 57,70% Space Free | Partition Type: NTFS
Drive D: | 770,19 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Computer Name: ...-PC | User Name: ... | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Processes (SafeList) ==========
PRC - [2011.12.01 18:03:06 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\...\Desktop\OTL.exe
PRC - [2011.11.15 14:29:26 | 000,896,352 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
PRC - [2011.11.15 14:22:52 | 000,746,392 | ---- | M] (Spigot, Inc.) -- C:\Program Files\Application Updater\ApplicationUpdater.exe
PRC - [2011.11.08 18:00:47 | 000,924,632 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2011.10.19 16:56:15 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.10.19 16:56:01 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\sched.exe
PRC - [2011.10.19 16:55:48 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.10.19 16:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
PRC - [2011.10.15 09:53:00 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2011.10.15 09:53:00 | 001,328,960 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2011.09.07 11:32:36 | 027,473,760 | ---- | M] (SlimWare Utilities, Inc.) -- C:\Program Files\SlimDrivers\SlimDrivers.exe
PRC - [2011.08.31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011.08.17 08:29:20 | 004,527,424 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Pro\DTAgent.exe
PRC - [2011.08.17 08:28:14 | 003,120,448 | ---- | M] (DT Soft Ltd) -- C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
PRC - [2010.01.15 13:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009.09.02 08:41:24 | 001,466,476 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
PRC - [2009.09.02 08:41:06 | 000,102,503 | ---- | M] (IVT Corporation) -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
PRC - [2009.06.23 16:19:14 | 000,711,200 | ---- | M] (Acer Incorporated) -- C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerTray.exe
PRC - [2009.06.23 16:19:14 | 000,707,104 | ---- | M] (Acer Incorporated) -- C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerSvc.exe
PRC - [2009.06.23 16:19:12 | 000,453,152 | ---- | M] (Acer Incorporated) -- C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerEvent.exe
PRC - [2009.05.26 14:26:20 | 000,062,208 | ---- | M] (NewTech Infosystems, Inc.) -- C:\Program Files\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
PRC - [2009.04.11 07:27:36 | 002,926,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009.02.19 04:42:50 | 000,866,824 | ---- | M] (Dritek System Inc.) -- C:\Program Files\Launch Manager\LManager.exe
PRC - [2007.09.11 00:45:04 | 000,124,832 | ---- | M] () -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe
PRC - [2006.05.24 07:49:14 | 000,024,576 | ---- | M] (Syntek America Inc.) -- C:\Windows\System32\StkASv2K.exe
========== Modules (No Company Name) ==========
MOD - [2011.11.08 18:00:47 | 001,989,592 | ---- | M] () -- C:\Program Files\Mozilla Firefox\mozjs.dll
MOD - [2010.12.04 15:05:45 | 000,043,520 | ---- | M] () -- C:\Windows\System32\CmdLineExt03.dll
MOD - [2009.08.16 16:06:02 | 000,141,312 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll
MOD - [2003.06.07 22:30:08 | 000,057,344 | ---- | M] () -- C:\Program Files\Launch Manager\PowerUtl.dll
========== Win32 Services (SafeList) ==========
SRV - File not found [Auto | Stopped] -- -- (ioloSystemService)
SRV - File not found [Auto | Stopped] -- -- (ioloFileInfoList)
SRV - [2011.11.18 12:42:56 | 003,313,752 | ---- | M] () [Auto | Running] -- c:\program files\common files\akamai/netsession_win_d768ebc.dll -- (Akamai)
SRV - [2011.11.15 14:22:52 | 000,746,392 | ---- | M] (Spigot, Inc.) [Auto | Running] -- C:\Program Files\Application Updater\ApplicationUpdater.exe -- (Application Updater)
SRV - [2011.10.19 16:56:01 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.10.19 16:55:48 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.10.15 09:53:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.09.18 12:21:48 | 000,316,816 | ---- | M] (Protection Technology) [Auto | Stopped] -- C:\Windows\System32\appdrvrem01.exe -- (appdrvrem01) Application Driver Auto Removal Service (01)
SRV - [2011.08.31 17:00:48 | 000,366,152 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011.01.18 23:39:00 | 003,885,424 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\System32\GameMon.des -- (npggsvc)
SRV - [2010.02.06 11:37:52 | 000,069,120 | ---- | M] (BOONTY) [On_Demand | Stopped] -- C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe -- (Boonty Games)
SRV - [2010.01.15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService)
SRV - [2009.09.23 15:37:30 | 000,051,168 | ---- | M] (NOS Microsystems Ltd.) [On_Demand | Stopped] -- C:\Program Files\NOS\bin\getPlus_Helper.dll -- (getPlusHelper) getPlus(R)
SRV - [2009.09.02 08:41:24 | 001,466,476 | ---- | M] (IVT Corporation) [Auto | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe -- (BlueSoleilCS)
SRV - [2009.09.02 08:41:06 | 000,102,503 | ---- | M] (IVT Corporation) [On_Demand | Running] -- C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe -- (BsHelpCS)
SRV - [2009.06.23 16:19:14 | 000,707,104 | ---- | M] (Acer Incorporated) [Auto | Running] -- C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerSvc.exe -- (ePowerSvc)
SRV - [2009.05.26 14:26:20 | 000,062,208 | ---- | M] (NewTech Infosystems, Inc.) [Auto | Running] -- C:\Program Files\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe -- (NTI IScheduleSvc)
SRV - [2009.03.25 18:52:50 | 000,654,848 | ---- | M] (Macrovision Europe Ltd.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2008.02.03 11:00:00 | 000,129,992 | ---- | M] (EasyBits Sofware AS) [Auto | Running] -- C:\Windows\System32\ezsvc7.dll -- (ezSharedSvc)
SRV - [2008.01.21 03:23:32 | 000,272,952 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2007.09.11 00:45:04 | 000,124,832 | ---- | M] () [Auto | Running] -- C:\Program Files\Adobe\Photoshop Elements 6.0\PhotoshopElementsFileAgent.exe -- (AdobeActiveFileMonitor6.0)
SRV - [2007.01.24 12:21:24 | 000,375,176 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007.01.24 12:21:14 | 000,177,032 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)
SRV - [2006.05.24 07:49:14 | 000,024,576 | ---- | M] (Syntek America Inc.) [Auto | Running] -- C:\Windows\System32\StkASv2K.exe -- (StkASSrv)
========== Driver Services (SafeList) ==========
DRV - [2011.12.01 17:53:16 | 000,012,984 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\SWDUMon.sys -- (SWDUMon)
DRV - [2011.11.17 14:58:15 | 000,443,448 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\sptd.sys -- (sptd)
DRV - [2011.11.17 14:55:22 | 000,232,512 | ---- | M] (DT Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2011.10.19 16:56:15 | 000,134,344 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.10.19 16:56:15 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.10.19 16:56:15 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.10.15 09:53:00 | 010,327,360 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2011.09.18 12:21:51 | 003,033,712 | ---- | M] (Protection Technology) [Kernel | System | Running] -- C:\Windows\System32\drivers\appdrv01.sys -- (appdrv01) Application Driver (01)
DRV - [2011.08.31 17:00:50 | 000,022,216 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.07.08 00:21:28 | 000,139,880 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2010.06.17 15:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.01.27 03:09:02 | 000,050,704 | ---- | M] (CACE Technologies, Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\npf.sys -- (npf)
DRV - [2009.10.10 13:40:30 | 000,281,760 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\atksgt.sys -- (atksgt)
DRV - [2009.10.10 13:40:29 | 000,025,888 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\drivers\lirsgt.sys -- (lirsgt)
DRV - [2009.07.08 09:17:36 | 000,039,304 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btcusb.sys -- (Btcsrusb)
DRV - [2009.06.17 13:02:46 | 000,029,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\btnetBus.sys -- (btnetBUs)
DRV - [2009.06.17 13:02:40 | 000,017,928 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\btnetdrv.sys -- (BT)
DRV - [2009.06.17 13:01:42 | 000,025,480 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IvtBtBus.sys -- (IvtBtBUs)
DRV - [2009.06.17 13:01:36 | 000,020,744 | ---- | M] (IVT Corporation.) [Kernel | Boot | Running] -- C:\Windows\System32\Drivers\BtHidBus.sys -- (BtHidBus)
DRV - [2009.06.17 13:01:10 | 000,032,392 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\VCommMgr.sys -- (VcommMgr)
DRV - [2009.06.17 13:01:04 | 000,014,856 | ---- | M] (IVT Corporation.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VComm.sys -- (VComm)
DRV - [2009.04.11 05:42:52 | 000,031,616 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (winusb)
DRV - [2009.03.18 16:35:40 | 000,026,176 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.03.17 19:28:50 | 000,452,096 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\CHDRT32.sys -- (CnxtHdAudService)
DRV - [2009.01.19 19:31:56 | 000,277,544 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\acedrv11.sys -- (acedrv11)
DRV - [2008.12.29 18:51:14 | 003,715,072 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\NETw5v32.sys -- (NETw5v32) Intel(R)
DRV - [2008.12.09 09:59:30 | 000,020,392 | ---- | M] (EldoS Corporation) [Kernel | System | Running] -- C:\Windows\System32\drivers\ElRawDsk.sys -- (ElRawDisk)
DRV - [2008.09.03 20:12:56 | 000,223,232 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\k57nd60x.sys -- (k57nd60x) Broadcom NetLink (TM)
DRV - [2006.09.27 04:01:36 | 000,241,628 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkAMini.sys -- (StkAMini)
DRV - [2006.08.02 07:44:04 | 000,004,772 | ---- | M] (Syntek America Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\StkScan.sys -- (StkScan)
DRV - [2005.08.10 13:44:04 | 000,050,688 | ---- | M] (Protection Technology) [Kernel | Boot | Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x)
DRV - [2005.05.16 14:20:39 | 000,006,656 | ---- | M] (Protection Technology) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x)
========== Standard Registry (SafeList) ==========
========== Internet Explorer ==========
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=2&o=vp32&d=0809&m=easynote_tj65
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = ${URL_SEARCHPAGE}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=2&o=vp32&d=0809&m=easynote_tj65
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
IE - HKLM\..\URLSearchHook: - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - No CLSID value found
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.packardbell.com/rdr.aspx?b=ACPW&l=0407&s=2&o=vp32&d=0809&m=easynote_tj65
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Bar = http://www.google.com/ie
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Prev Search Page = ${URL_SEARCHPAGE}
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://google.icq.com/search/search_frame.php
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://google.icq.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://start.facemoods.com/?a=ddrnw [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://de.ask.com/?l=dis&o=14200
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKCU\..\URLSearchHook: {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.8\iobitToolbarIE.dll (Spigot, Inc.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
========== FireFox ==========
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaultthis.engineName: "InnoGames Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2682599&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.param.yahoo-fr: "chr-greentree_ff&type=382950&ilc=12"
FF - prefs.js..browser.search.selectedEngine: "Yahoo"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "http://www.google.de/ig"
FF - prefs.js..extensions.enabledItems: {E2883E8F-472F-4fb0-9522-AC9BF37916A7}:1
FF - prefs.js..extensions.enabledItems: 6
FF - prefs.js..extensions.enabledItems: 2
FF - prefs.js..extensions.enabledItems: 48
FF - prefs.js..extensions.enabledItems: [email protected]:5.0.67.0
FF - prefs.js..extensions.enabledItems: {800b5000-a755-47e1-992b-48a1c1357f07}:1.1.9
FF - prefs.js..extensions.enabledItems: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065}:3.3.2.1
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.1.1
FF - prefs.js..extensions.enabledItems: [email protected]:2
FF - prefs.js..extensions.enabledItems: 5
FF - prefs.js..extensions.enabledItems: 3
FF - prefs.js..extensions.enabledItems: 1
FF - prefs.js..extensions.enabledItems: {635abd67-4fe9-1b23-4f01-e679fa7484c1}:2.3.5.20110120033202
FF - prefs.js..extensions.enabledItems: vshare@toolbar:1.0.0
FF - prefs.js..extensions.enabledItems: {a6fd85ed-e919-4a43-a5af-8da18bda539f}:1.0.10
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: {872b5b88-9db5-4310-bdd0-ac189557e5f5}:3.3.2.1
FF - prefs.js..extensions.enabledItems: {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1
FF - prefs.js..extensions.enabledItems: [email protected]:3.3.2.1
FF - prefs.js..extensions.enabledItems: {d2f11d8b-3eb5-4b42-9511-370dbec707fb}:3.2.5.2
FF - prefs.js..extensions.enabledItems: {f999a48b-1950-4d81-9971-79018f807b4b}:3.3.2.1
FF - prefs.js..extensions.enabledItems: {df902f29-c93b-4b6a-88e1-5bc2f17cb637}:3.3.2.1
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..extensions.enabledItems: [email protected]:1.0.0
FF - prefs.js..keyword.URL: "http://de.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=382950&p="
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaultenginename: ""
FF - prefs.js..sweetim.toolbar.previous.browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2520057&SearchSource=3&q={searchTerms}"
FF - prefs.js..sweetim.toolbar.previous.browser.search.selectedEngine: "ICQ Search"
FF - prefs.js..browser.startup.homepage: "http://www.google.de/ig"
FF - prefs.js..sweetim.toolbar.previous.keyword.URL: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2520057&q="
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX,Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8051.1204: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@pages.tvunetworks.com/WebPlayer: C:\Program Files\TVUPlayer\npTVUAx.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2011.11.08 18:00:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 8.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2011.11.05 12:53:43 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{184AA5E6-741D-464a-820E-94B3ABC2F3B4}: C:\Users\...\AppData\Roaming\5021 [2011.07.26 11:04:27 | 000,000,000 | ---D | M]
[2011.07.30 18:47:13 | 000,000,000 | ---D | M] (No name found) -- C:\Users\...\AppData\Roaming\mozilla\Extensions
[2011.12.01 16:06:08 | 000,000,000 | ---D | M] (No name found) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions
[2011.03.13 11:41:49 | 000,000,000 | ---D | M] (Microsoft .NET Framework Assistant) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{20a82645-c095-46ed-80e3-08825760534b}
[2011.07.30 18:47:07 | 000,000,000 | ---D | M] (Searchqu Toolbar) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
[2011.11.15 20:54:44 | 000,000,000 | ---D | M] (Selenium IDE) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{a6fd85ed-e919-4a43-a5af-8da18bda539f}
[2010.10.04 13:12:53 | 000,000,000 | ---D | M] ("Free YouTube Download (Free Studio) Menu") -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.01.15 18:57:30 | 000,000,000 | ---D | M] (eGames Toolbar) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{b2b46577-0217-4ec5-a467-7a1e8d0d7b71}
[2011.11.07 17:29:18 | 000,000,000 | ---D | M] (InnoGames Community Toolbar) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{c7478d43-2bd5-4844-98b8-c2a6aa9ed677}
[2011.11.07 17:29:20 | 000,000,000 | ---D | M] (Oryte Games 1.15 Community Toolbar) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{d2f11d8b-3eb5-4b42-9511-370dbec707fb}
[2011.12.01 16:06:08 | 000,000,000 | ---D | M] (Fussballcup Community Toolbar) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{df902f29-c93b-4b6a-88e1-5bc2f17cb637}
[2009.10.11 16:51:36 | 000,000,000 | ---D | M] (Adobe DLM (powered by getPlus(R))) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
[2011.11.16 20:49:23 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.04.09 08:23:28 | 000,000,000 | ---D | M] (Conduit Engine) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\[email protected]
[2011.11.05 12:39:46 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\[email protected]
[2011.05.11 16:43:26 | 000,000,000 | ---D | M] (LogMeIn, Inc. Remote Access Plugin) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\[email protected]
[2011.06.27 17:32:24 | 000,000,000 | ---D | M] (Gutscheinrausch.de) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\[email protected]
[2010.09.22 20:18:26 | 000,000,000 | ---D | M] (vShare Plugin) -- C:\Users\...\AppData\Roaming\mozilla\Firefox\Profiles\4rd6j7sn.default\extensions\vshare@toolbar
[2010.05.26 15:18:50 | 000,002,333 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\askcom.xml
[2011.03.21 14:50:08 | 000,000,921 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\conduit.xml
[2011.07.21 16:07:53 | 000,002,055 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\daemon-search.xml
[2010.01.17 10:01:05 | 000,002,280 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\google-und-download-suche.xml
[2011.12.01 16:03:59 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-1.xml
[2011.03.11 18:39:00 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-10.xml
[2011.03.11 19:08:55 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-11.xml
[2011.03.11 19:37:22 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-12.xml
[2011.03.11 20:32:26 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-13.xml
[2011.03.12 09:34:22 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-14.xml
[2011.03.12 10:29:27 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-15.xml
[2011.03.12 21:27:45 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-16.xml
[2011.03.13 10:44:59 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-17.xml
[2011.03.13 11:36:35 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-18.xml
[2011.03.13 11:42:30 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-19.xml
[2010.06.04 18:15:52 | 000,000,961 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-2.xml
[2011.03.13 15:33:22 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-20.xml
[2011.03.13 15:36:31 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-21.xml
[2011.03.13 15:41:08 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-22.xml
[2011.03.13 17:00:20 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-23.xml
[2011.03.13 19:38:16 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-24.xml
[2011.03.13 20:08:26 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-25.xml
[2011.03.15 14:19:13 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-26.xml
[2011.03.20 17:19:06 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-27.xml
[2011.03.20 18:28:20 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-28.xml
[2011.03.23 17:42:23 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-29.xml
[2010.07.31 16:40:32 | 000,000,961 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-3.xml
[2010.09.15 15:43:18 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-4.xml
[2010.10.04 14:11:29 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-5.xml
[2010.11.08 19:12:20 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-6.xml
[2010.12.12 10:49:17 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-7.xml
[2011.03.06 15:47:08 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-8.xml
[2011.03.07 20:07:54 | 000,000,950 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin-9.xml
[2010.05.12 16:40:48 | 000,001,042 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\icqplugin.xml
[2011.07.30 18:47:03 | 000,002,501 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\SearchResults.xml
[2011.04.05 18:25:53 | 000,003,915 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\SweetIM Search.xml
[2011.04.05 18:26:24 | 000,003,915 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\sweetim.xml
[2010.09.22 20:18:32 | 000,001,583 | ---- | M] () -- C:\Users\...\AppData\Roaming\Mozilla\Firefox\Profiles\4rd6j7sn.default\searchplugins\web-search.xml
[2011.11.27 11:57:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
[2010.02.02 18:56:42 | 000,000,000 | ---D | M] ("ICQ Toolbar") -- C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\{46551EC9-40F0-4E47-8E18-8E5CF550CFB8}.XPI
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\{C0C9A2C7-2E5C-4447-BC53-97718BC91E1B}.XPI
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\{C36177C0-224A-11DA-8CD6-0800200C9A91}.XPI
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\{DD05FD3D-18DF-4CE4-AE53-E795339C5F01}.XPI
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\[email protected]
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\[email protected]
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\[email protected]
() (No name found) -- C:\USERS\...\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\4RD6J7SN.DEFAULT\EXTENSIONS\[email protected]
[2011.11.08 18:00:47 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2010.04.12 16:29:19 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll
[2011.10.05 15:38:06 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.11.05 12:39:34 | 000,002,288 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2011.10.05 15:38:06 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2011.10.05 15:38:06 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2011.07.21 14:18:31 | 000,002,048 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\fcmdSrch.xml
[2011.10.05 15:38:06 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.07.30 18:47:03 | 000,002,501 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml
[2011.10.05 15:38:06 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.10.05 15:38:06 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
========== Chrome ==========
CHR - default_search_provider: SweetIM Search ()
CHR - default_search_provider: search_url = http://search.sweetim.com/search.asp?src=6&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?client=chrome&hl={language}&q={searchTerms}
O1 HOSTS File: ([2006.09.18 22:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (IObit Toolbar) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.8\iobitToolbarIE.dll (Spigot, Inc.)
O2 - BHO: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O2 - BHO: (UrlHelper Class) - {A40DC6C5-79D0-4ca8-A185-8FF989AF1115} - C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O2 - BHO: (no name) - {EEE6C35C-6118-11DC-9C72-001320C79847} - No CLSID value found.
O3 - HKLM\..\Toolbar: (IObit Toolbar) - {0BDA0769-FD72-49F4-9266-E1FB004F4D8F} - C:\Program Files\IObit Toolbar\IE\4.8\iobitToolbarIE.dll (Spigot, Inc.)
O3 - HKLM\..\Toolbar: (no name) - {4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {32099AAC-C132-4136-9E9A-4E364A424E17} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {4E7BD74F-2B8D-469E-85B2-BC27FE9AAE2E} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - No CLSID value found.
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acer ePower Management] C:\Program Files\Packard Bell\Packard Bell PowerSave Solution\ePowerTrayLauncher.exe (Acer Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware (reboot)] C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Performance Center] C:\Program Files\Ascentive\Performance Center\ApcMain.exe (Ascentive)
O4 - HKLM..\Run: [SearchSettings] C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe (Spigot, Inc.)
O4 - HKCU..\Run: [DAEMON Tools Pro Agent] C:\Program Files\DAEMON Tools Pro\DTAgent.exe (DT Soft Ltd)
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\...\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 File not found
O9 - Extra Button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.5 - {7578ADEA-D65F-4C89-A249-B1C88B6FFC20} - C:\Program Files\ICQ7.5\ICQ.exe (ICQ, LLC.)
O13 - gopher Prefix: missing
O16 - DPF: {149E45D8-163E-4189-86FC-45022AB2B6C9} file:///C:/Program%20Files/Monopoly/Images/stg_drm.ocx (SpinTop DRM Control)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_22-windows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CC450D71-CC90-424C-8638-1F2DBAC87A54} file:///C:/Program%20Files/Monopoly/Images/armhelper.ocx (ArmHelper Control)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FC9B8EB1-1AE7-4D4B-AF74-755E6AA34B06}: DhcpNameServer = 192.168.1.1
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\System32\skype4com.dll (Skype Technologies)
O20 - AppInit_DLLs: (C:\PROGRA~1\WI371A~1\Datamngr\datamngr.dll) - File not found
O20 - AppInit_DLLs: (C:\PROGRA~1\WI371A~1\Datamngr\IEBHO.dll) -C:\Program Files\Windows iLivid Toolbar\Datamngr\IEBHO.dll (Bandoo Media, inc)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Wallpaper Galactic_1900x1440.jpg
O24 - Desktop BackupWallPaper: C:\Windows\Web\Wallpaper\Packard Bell\Wallpaper\Wallpaper Galactic_1900x1440.jpg
O28 - HKLM ShellExecuteHooks: {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\System32\ezUPBHook.dll (EasyBits Software Corp.)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006.09.18 22:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O32 - AutoRun File - [2007.08.04 16:54:31 | 000,000,000 | R--D | M] - D:\AutoRun -- [ UDF ]
O32 - AutoRun File - [2007.08.04 16:54:31 | 000,700,416 | R--- | M] (Electronic Arts Inc.) - D:\AutoRun.exe -- [ UDF ]
O32 - AutoRun File - [2007.08.04 15:09:54 | 000,659,456 | R--- | M] (Electronic Arts Inc.) - D:\AutoRunGUI.dll -- [ UDF ]
O32 - AutoRun File - [2007.08.04 17:00:52 | 000,000,152 | R--- | M] () - D:\autorun.inf -- [ UDF ]
O33 - MountPoints2\{96efdff6-8ca6-11de-ae6b-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{96efdff6-8ca6-11de-ae6b-806e6f6e6963}\Shell\AutoRun\command - "" = D:\AutoRun.exe -- [2007.08.04 16:54:31 | 000,700,416 | R--- | M] (Electronic Arts Inc.)
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
[2009.10.29 19:30:44 | 000,001,107 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_GE.dat
[2009.10.29 19:30:44 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
[2009.10.29 19:30:44 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
[2009.10.29 16:32:52 | 000,000,027 | ---- | C] () -- C:\Windows\CDE DX4400DEFGIPS.ini
[2009.10.21 15:17:13 | 000,000,069 | ---- | C] () -- C:\Windows\NeroDigital.ini
[2009.10.20 13:31:34 | 000,117,248 | ---- | C] () -- C:\Windows\System32\EhStorAuthn.dll
[2009.10.20 13:31:34 | 000,107,612 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchema.bin
[2009.10.10 16:40:53 | 000,000,056 | -H-- | C] () -- C:\Windows\System32\ezsidmv.dat
[2009.10.10 16:40:44 | 000,008,180 | ---- | C] () -- C:\Windows\System32\ezdigsgn.dat
[2009.10.10 16:19:54 | 000,058,880 | ---- | C] () -- C:\Users\...\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.10.10 13:40:30 | 000,281,760 | ---- | C] () -- C:\Windows\System32\drivers\atksgt.sys
[2009.10.10 13:40:29 | 000,025,888 | ---- | C] () -- C:\Windows\System32\drivers\lirsgt.sys[2009.09.07 14:42:42 | 000,000,931 | ---- | C] () -- C:\Windows\System32\bscs.ini
[2009.09.02 08:39:46 | 000,028,672 | ---- | C] () -- C:\Windows\System32\BsMobileCSps.dll
[2009.08.19 19:35:52 | 000,004,184 | ---- | C] () -- C:\Windows\System32\drivers\CDConfig.bin
[2009.08.19 11:12:14 | 000,000,033 | ---- | C] () -- C:\Windows\LaunApp.ini
[2009.06.17 13:02:46 | 000,029,192 | ---- | C] () -- C:\Windows\System32\drivers\btnetBus.sys
[2009.03.26 02:15:57 | 000,628,742 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009.03.26 02:15:57 | 000,290,748 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009.03.26 02:15:57 | 000,126,454 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009.03.26 02:15:57 | 000,036,916 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009.03.25 18:50:36 | 000,000,209 | ---- | C] () -- C:\Windows\ODBCINST.INI
[2009.03.25 17:38:23 | 000,018,904 | ---- | C] () -- C:\Windows\System32\StructuredQuerySchemaTrivial.bin
[2009.03.04 20:35:58 | 000,872,448 | ---- | C] () -- C:\Windows\iconv.dll
[2009.03.04 20:35:58 | 000,743,424 | ---- | C] () -- C:\Windows\libxml2.dll
[2009.03.04 20:35:53 | 000,000,060 | ---- | C] () -- C:\Windows\Prelaunch.ini
[2009.03.04 20:35:53 | 000,000,028 | ---- | C] () -- C:\Windows\WisLangCode.ini
[2008.10.07 08:13:22 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSwedish.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSpanish.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelPortugese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelKorean.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelJapanese.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelGerman.dll
[2008.10.07 08:13:20 | 000,058,648 | ---- | C] () -- C:\Windows\System32\AgCPanelFrench.dll
[2007.04.27 10:43:58 | 000,120,200 | ---- | C] () -- C:\Windows\System32\DLLDEV32i.dll
[2006.11.02 13:57:28 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2006.11.02 13:47:37 | 000,378,968 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2006.11.02 13:35:32 | 000,005,632 | ---- | C] () -- C:\Windows\System32\sysprepMCE.dll
[2006.11.02 11:33:01 | 000,595,996 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2006.11.02 11:33:01 | 000,287,440 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2006.11.02 11:33:01 | 000,104,070 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2006.11.02 11:33:01 | 000,030,674 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2006.11.02 11:23:21 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2006.11.02 09:58:30 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2006.11.02 09:19:00 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2006.11.02 08:40:29 | 000,013,750 | ---- | C] () -- C:\Windows\System32\pacerprf.ini
[2006.11.02 08:25:31 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
[2003.02.20 18:53:42 | 000,005,702 | ---- | C] () -- C:\Windows\System32\OUTLPERF.INI
========== LOP Check ==========
[2011.08.13 17:46:59 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\.minecraft
[2011.09.03 08:54:58 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\.spoutcraft
[2011.07.26 11:04:27 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\5021
[2011.01.30 20:23:27 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Advatl
[2010.03.06 15:16:22 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Atari
[2011.11.05 12:39:33 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Babylon
[2011.07.21 16:11:30 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\DAEMON Tools Lite
[2011.11.17 15:09:24 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\DAEMON Tools Pro
[2010.03.13 08:18:50 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\dBpoweramp
[2010.03.07 13:37:14 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\DreamDale
[2011.10.14 19:17:57 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\DriverCure
[2011.08.27 19:53:02 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\DVDVideoSoft
[2011.08.27 19:52:26 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\DVDVideoSoftIEHelpers
[2010.01.15 18:57:30 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\egamestoolbar
[2009.11.25 20:16:31 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\FileZilla
[2009.12.04 11:15:23 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\flightgear.org
[2011.11.05 12:53:44 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\FrostWire
[2011.07.02 11:02:25 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\GamesCafe
[2011.01.15 12:15:08 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\GetRightToGo
[2011.08.08 19:44:26 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\gtk-2.0
[2011.11.30 20:42:54 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\ICQ
[2011.10.14 20:02:48 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\iolo
[2009.12.25 09:15:56 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Jane s Hotel Family Hero
[2009.11.01 19:18:16 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Klett
[2011.07.26 11:04:10 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\kock
[2011.07.26 09:17:02 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Leadertech
[2010.03.07 13:37:01 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\MagicBall4
[2011.01.15 20:37:33 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\MAGIX
[2010.08.07 10:24:10 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\MB4
[2009.12.22 22:50:29 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\MobMapUpdater
[2010.12.22 09:54:12 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Mysteryville2
[2011.08.16 16:49:11 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Notepad++
[2011.06.27 17:32:06 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\OpenCandy
[2009.11.20 18:25:42 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\OpenOffice.org
[2011.01.23 13:13:02 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Opera
[2009.10.10 11:38:15 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Packard Bell
[2011.10.14 19:17:57 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\ParetoLogic
[2011.01.10 19:44:51 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\PhotoScape
[2011.07.14 13:18:38 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\PlayFirst
[2010.02.05 11:07:24 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Playrix Entertainment
[2011.02.26 23:40:23 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Power Sound Editor Free
[2011.10.25 15:43:49 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Pro Cycling Manager 2009
[2009.12.03 12:14:46 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\ProtectDisc
[2010.08.07 10:23:45 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\SmashFrenzy4
[2011.08.16 16:55:33 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Software Informer
[2010.01.15 14:02:00 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\SpinTop
[2011.08.17 14:26:10 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Tific
[2011.06.10 15:14:11 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\TS3Client
[2011.10.14 19:40:35 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\TuneUp Software
[2011.08.10 18:58:17 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\UAs
[2009.10.10 13:46:09 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Ubisoft
[2011.01.02 20:26:02 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Ulead Systems
[2011.11.12 19:41:50 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Uniblue
[2010.02.04 11:13:39 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\UNOUndercover
[2011.07.31 18:58:37 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\VDownloader
[2011.08.11 19:38:29 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\xmldm
[2011.07.02 11:02:15 | 000,000,000 | ---D | M] -- C:\Users\...\AppData\Roaming\Zylom
[2011.12.01 17:51:13 | 000,032,536 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2011.12.01 17:53:44 | 000,000,394 | ---- | M] () -- C:\Windows\Tasks\SlimDrivers Startup.job
[2011.12.01 16:39:45 | 000,000,426 | -H-- | M] () -- C:\Windows\Tasks\User_Feed_Synchronization-{95CAA103-F894-4B4D-BE28-EF988682EB8E}.job
========== Purity Check ==========
========== Alternate Data Streams ==========
@Alternate Data Stream - 98 bytes -> C:\ProgramData\Temp:453190EC
@Alternate Data Stream - 94 bytes -> C:\ProgramData\Temp:A18D1A5B
@Alternate Data Stream - 241 bytes -> C:\ProgramData\Temp:E5F8E280
@Alternate Data Stream - 139 bytes -> C:\ProgramData\Temp:00F7B10F
@Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:E6E9EB6C
@Alternate Data Stream - 133 bytes -> C:\ProgramData\Temp:A696643D
@Alternate Data Stream - 128 bytes -> C:\ProgramData\Temp:700B9342
@Alternate Data Stream - 125 bytes -> C:\ProgramData\Temp:0E22C5DB
@Alternate Data Stream - 124 bytes -> C:\ProgramData\Temp:4CF61E54
@Alternate Data Stream - 122 bytes -> C:\ProgramData\Temp:52B72A7C
@Alternate Data Stream - 119 bytes -> C:\ProgramData\Temp:AFFC859A
@Alternate Data Stream - 116 bytes -> C:\ProgramData\Temp:3447AB86
@Alternate Data Stream - 105 bytes -> C:\ProgramData\Temp:9547F1DB
@Alternate Data Stream - 100 bytes -> C:\ProgramData\Temp:DDEB08FD
< End of report >
OTL Extras logfile created on: 01.12.2011 18:03:53 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\...\Desktop
Windows Vista Home Premium Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.19154)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
2,99 Gb Total Physical Memory | 1,85 Gb Available Physical Memory | 61,85% Memory free
3,87 Gb Paging File | 2,75 Gb Available in Paging File | 71,02% Paging File free
Paging file location(s): c:\pagefile.sys 1000 1500 [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 455,99 Gb Total Space | 263,09 Gb Free Space | 57,70% Space Free | Partition Type: NTFS
Drive D: | 770,19 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: UDF
Computer Name: ...-PC | User Name: ... | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files\Opera\Opera.exe (Opera Software)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
"TCP Query User{0713D554-7289-4F42-96CD-C3C891398F4E}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe |
"TCP Query User{09455EC2-F668-44C6-B19E-0FD4361EF4E1}C:\program files\winamp\winamp.exe" = protocol=6 | dir=in | app=c:\program files\winamp\winamp.exe |
"TCP Query User{1AC9B3AA-3CBB-4BD3-AF2B-146EE966230A}C:\program files\java\jre6\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"TCP Query User{2FF9AF62-62AC-47BC-B476-F4C947AF9F6B}C:\program files\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe |
"TCP Query User{35F0A994-2C02-49BF-B3BA-D53D084E60B0}C:\program files\mozilla firefox\firefox.exe" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"TCP Query User{39ECDE12-799F-402E-B278-07DD31379302}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe |
"TCP Query User{4612C280-0A59-4E6B-9E8B-AA895455429E}C:\program files\sopcast\adv\sopadver.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe |
"TCP Query User{4645DE69-BF54-4CC2-AF9A-5AA99E7F65A8}C:\program files\ea games\battlefield 1942 singleplayer demo\bf1942.exe" = protocol=6 | dir=in | app=c:\program files\ea games\battlefield 1942 singleplayer demo\bf1942.exe |
"TCP Query User{4BA42F53-7656-4413-A6A8-D4D2328611C8}C:\users\...\documents\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-dede-downloader.exe" = protocol=6 | dir=in | app=c:\users\...\documents\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-dede-downloader.exe |
"TCP Query User{519D6ABA-2F05-4AD0-80F7-91C4AE4D4BE2}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{51B06794-6145-4DA8-A87C-EA14F45799D8}C:\program files\icq7.0\icq.exe" = protocol=6 | dir=in | app=c:\program files\icq7.0\icq.exe |
"TCP Query User{58AC5D95-5FE0-47B7-BD4F-98D315C667CD}C:\program files\ea sports\fussball manager 11\manager11.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fussball manager 11\manager11.exe |
"TCP Query User{5F55A02F-CBEE-4D4D-895D-F6958E872797}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{63F3F105-462C-4088-9E17-E6D5D2DD40DC}C:\users\...\documents\world of warcraft\launcher.exe" = protocol=6 | dir=in | app=c:\users\...\documents\world of warcraft\launcher.exe |
"TCP Query User{6B895909-52F5-4C05-A05A-744ED301D26D}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=6 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"TCP Query User{6C38D8C0-D1DD-4B5E-856F-27D5EDE46739}C:\program files\ea games\battlefield 1942 singleplayer demo\bf1942.exe" = protocol=6 | dir=in | app=c:\program files\ea games\battlefield 1942 singleplayer demo\bf1942.exe |
"TCP Query User{785AF56E-6B2F-41E5-9D04-5474A1095482}C:\program files\microsoft games\age of empires\empiresx.exe" = protocol=6 | dir=in | app=c:\program files\microsoft games\age of empires\empiresx.exe |
"TCP Query User{7C5F3946-C57F-4A37-9383-B03826BE1CE9}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe |
"TCP Query User{81AA2475-D89F-4546-8D15-29D39221CC46}C:\users\...\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\...\appdata\local\akamai\netsession_win.exe |
"TCP Query User{8DA5B05D-4B29-4A5C-AFBF-C275243A6997}C:\program files\ea sports\fifa 11 demo\game\fifa.exe" = protocol=6 | dir=in | app=c:\program files\ea sports\fifa 11 demo\game\fifa.exe |
"TCP Query User{9E19CF05-C612-48DF-B1FA-552BD1F5943D}C:\users\...\documents\world of warcraft\wow-3.3.3.11685-to-3.3.3.11723-dede-downloader.exe" = protocol=6 | dir=in | app=c:\users\...\documents\world of warcraft\wow-3.3.3.11685-to-3.3.3.11723-dede-downloader.exe |
"TCP Query User{AFA28A8C-3EA8-4917-9ACE-6866F4D99A5C}C:\program files\sopcast\sopcast.exe" = protocol=6 | dir=in | app=c:\program files\sopcast\sopcast.exe |
"TCP Query User{B3890DF5-1B43-4B74-A227-DC90F3814226}C:\users\...\documents\world of warcraft\wow-3.2.2.10505-to-3.3.0.10958-dede-downloader.exe" = protocol=6 | dir=in | app=c:\users\...\documents\world of warcraft\wow-3.2.2.10505-to-3.3.0.10958-dede-downloader.exe |
"TCP Query User{B5C8AE28-F490-4D98-B0CB-94A0EA1C9B54}C:\program files\java\jre6\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"TCP Query User{B8357AB0-0293-4701-B4BE-2782DBFA63A1}C:\program files\cyanide\tour de france 2009 - der offizielle radsport-manager\pcm.exe" = protocol=6 | dir=in | app=c:\program files\cyanide\tour de france 2009 - der offizielle radsport-manager\pcm.exe |
"TCP Query User{BD468039-7CFB-4B83-BCBB-DB55AD60B4F7}C:\program files\tvuplayer\tvuplayer.exe" = protocol=6 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"TCP Query User{CFDE3FFF-980C-42FD-AFFD-870D0A98A13C}C:\users\...\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\...\appdata\local\akamai\netsession_win.exe |
"TCP Query User{EBA67E9B-EB88-41E0-9FFE-AFB2B07F5EF7}C:\aeriagames\wolfteam-de\wolfteam.bin" = protocol=6 | dir=in | app=c:\aeriagames\wolfteam-de\wolfteam.bin |
"TCP Query User{ECA97D3C-0C0C-47EC-BFA3-2D03FAAFE016}C:\users\...\documents\world of warcraft\wow-3.3.2.11403-to-3.3.3.11685-dede-downloader.exe" = protocol=6 | dir=in | app=c:\users\...\documents\world of warcraft\wow-3.3.2.11403-to-3.3.3.11685-dede-downloader.exe |
"TCP Query User{F1058546-93E5-4D7D-A339-2AF19E5A80DD}C:\users\...\desktop\spiele\empire earth\empire earth.exe" = protocol=6 | dir=in | app=c:\users\...\desktop\spiele\empire earth\empire earth.exe |
"TCP Query User{F6985C39-D41B-41DA-ABAE-BA3945E43928}C:\users\...\documents\world of warcraft\backgrounddownloader.exe" = protocol=6 | dir=in | app=c:\users\...\documents\world of warcraft\backgrounddownloader.exe |
"TCP Query User{F9E36500-1031-4326-8040-26654C9B13A0}C:\program files\ubisoft\related designs\anno 1404\tools\anno4web.exe" = protocol=6 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\anno4web.exe |
"UDP Query User{03F565FA-CD09-4184-A220-C023D159DB43}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe |
"UDP Query User{0501A626-C3DD-4E02-91D1-3C8BA8653FA2}C:\program files\cyanide\tour de france 2009 - der offizielle radsport-manager\pcm.exe" = protocol=17 | dir=in | app=c:\program files\cyanide\tour de france 2009 - der offizielle radsport-manager\pcm.exe |
"UDP Query User{10C4DE74-93A1-4FAC-B168-308780BC7391}C:\users\...\documents\world of warcraft\wow-3.2.2.10505-to-3.3.0.10958-dede-downloader.exe" = protocol=17 | dir=in | app=c:\users\...\documents\world of warcraft\wow-3.2.2.10505-to-3.3.0.10958-dede-downloader.exe |
"UDP Query User{14CCB8D4-3707-4AEB-8913-EE3959923112}C:\program files\java\jre6\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\javaw.exe |
"UDP Query User{15FF3C3E-18F8-4554-A647-81F4D451A5A7}C:\program files\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe |
"UDP Query User{18F4AD67-E1D8-4D01-80F5-D29B34CAB776}C:\program files\icq7.0\icq.exe" = protocol=17 | dir=in | app=c:\program files\icq7.0\icq.exe |
"UDP Query User{1FDDD551-3326-4FBA-8DE9-E869F5BE116A}C:\program files\winamp\winamp.exe" = protocol=17 | dir=in | app=c:\program files\winamp\winamp.exe |
"UDP Query User{2B49C70E-668D-4435-9DF8-3333DDE8C44B}C:\program files\ea games\battlefield 1942 singleplayer demo\bf1942.exe" = protocol=17 | dir=in | app=c:\program files\ea games\battlefield 1942 singleplayer demo\bf1942.exe |
"UDP Query User{2E07EC7C-E42B-4899-B19A-9528ED3C1708}C:\program files\ubisoft\related designs\anno 1404\tools\anno4web.exe" = protocol=17 | dir=in | app=c:\program files\ubisoft\related designs\anno 1404\tools\anno4web.exe |
"UDP Query User{316EDA0D-5114-49CE-94DA-1C01F1F3D207}C:\program files\ea games\battlefield 1942 singleplayer demo\bf1942.exe" = protocol=17 | dir=in | app=c:\program files\ea games\battlefield 1942 singleplayer demo\bf1942.exe |
"UDP Query User{37521634-51C3-4914-B6AA-067452230BE6}C:\users\...\documents\world of warcraft\backgrounddownloader.exe" = protocol=17 | dir=in | app=c:\users\...\documents\world of warcraft\backgrounddownloader.exe |
"UDP Query User{3BEF6788-0A9E-4FF8-97C3-21D414302818}C:\users\...\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\...\appdata\local\akamai\netsession_win.exe |
"UDP Query User{414737BA-50C7-4024-8FBB-C2FCA236D5BA}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{5836C31D-4E6F-48C1-A3A0-F483FEDE3563}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
"UDP Query User{595C4909-55A0-4B4D-904B-06FBE8822111}C:\users\...\documents\world of warcraft\wow-3.3.2.11403-to-3.3.3.11685-dede-downloader.exe" = protocol=17 | dir=in | app=c:\users\...\documents\world of warcraft\wow-3.3.2.11403-to-3.3.3.11685-dede-downloader.exe |
"UDP Query User{68DF4993-E3EC-44CB-8177-EFDA462513B9}C:\users\...\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\...\appdata\local\akamai\netsession_win.exe |
"UDP Query User{776F90AE-3140-4B1D-B37C-371E7EFE07C1}C:\program files\sopcast\adv\sopadver.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\adv\sopadver.exe |
"UDP Query User{7850CB5C-84B2-4F17-A803-F43DC7473E79}C:\program files\ea sports\fifa 11\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa 11\game\fifa.exe |
"UDP Query User{841F2061-572D-4766-AB80-69724231413F}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe |
"UDP Query User{9133A15C-389A-4680-8881-352CE6E81FCC}C:\program files\ea sports\fussball manager 11\manager11.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fussball manager 11\manager11.exe |
"UDP Query User{92FBFC5E-2BF0-40B6-9F49-2E25D6C95B1A}C:\users\...\documents\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-dede-downloader.exe" = protocol=17 | dir=in | app=c:\users\...\documents\world of warcraft\wow-3.3.3.11723-to-3.3.5.12213-dede-downloader.exe |
"UDP Query User{A27AB750-6C84-42CC-8CD0-C248BAD9E6E5}C:\program files\sopcast\sopcast.exe" = protocol=17 | dir=in | app=c:\program files\sopcast\sopcast.exe |
"UDP Query User{A4132798-AC28-40D8-B5BC-147B81675ECA}C:\aeriagames\wolfteam-de\wolfteam.bin" = protocol=17 | dir=in | app=c:\aeriagames\wolfteam-de\wolfteam.bin |
"UDP Query User{AC78D564-8F68-4B7F-BDA3-84DFECA89515}C:\users\...\documents\world of warcraft\launcher.exe" = protocol=17 | dir=in | app=c:\users\...\documents\world of warcraft\launcher.exe |
"UDP Query User{B9166D41-421C-4B47-A6C9-E5C082907F4B}C:\program files\tvuplayer\tvuplayer.exe" = protocol=17 | dir=in | app=c:\program files\tvuplayer\tvuplayer.exe |
"UDP Query User{BABE32E6-33CB-4775-90FC-612FDADCE432}C:\program files\java\jre6\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre6\bin\java.exe |
"UDP Query User{BE9A2FF4-BD48-458E-8813-888FEED8AFE4}C:\program files\ea sports\fifa 11 demo\game\fifa.exe" = protocol=17 | dir=in | app=c:\program files\ea sports\fifa 11 demo\game\fifa.exe |
"UDP Query User{C438C9E9-BCC2-46DE-B622-801F9170F610}C:\users\...\desktop\spiele\empire earth\empire earth.exe" = protocol=17 | dir=in | app=c:\users\...\desktop\spiele\empire earth\empire earth.exe |
"UDP Query User{CA77470C-272A-4D4B-90A7-9EB69D73E4DA}C:\program files\microsoft games\age of empires\empiresx.exe" = protocol=17 | dir=in | app=c:\program files\microsoft games\age of empires\empiresx.exe |
"UDP Query User{DE9ED2EE-6635-432F-B693-C882A7E7F87A}C:\program files\mozilla firefox\firefox.exe" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe |
"UDP Query User{ECCAB259-B508-485C-BF56-20F6BD3BB421}C:\users\...\documents\world of warcraft\wow-3.3.3.11685-to-3.3.3.11723-dede-downloader.exe" = protocol=17 | dir=in | app=c:\users\...\documents\world of warcraft\wow-3.3.3.11685-to-3.3.3.11723-dede-downloader.exe |
"UDP Query User{EED2E5A6-CBAD-4FA2-8871-1EF81DC3F4BD}C:\program files\google\google earth\plugin\geplugin.exe" = protocol=17 | dir=in | app=c:\program files\google\google earth\plugin\geplugin.exe |
| « netzwerksicherheit | ebay Server wird nicht gefunden, Seite nicht geöffnet » | ||
Der erste Schritt zur Anwendung von Hijackthis ist der Downl...
Windows Movie Maker unter Windows Vista
Wer unter Windows Vista ein Video schneiden möchte aber keine High-End-Hardware sein eigenen nennt,...
Papierkorb bei Windows XP, Vista und Windows 7 einblenden
Es kann passieren, dass beim Entfernen einer Datei der Löschvorgang nicht funktioniert, weil das Sy...
Windows Vista: habe ein problem mit meinen cd laufwerken kann mir jemand helfen ???Hallo,auf einmal funktioniern meine beiden cd laufwerke nicht mehr.auch im geräte manager sind sie ...
Windows Vista: hab eine ein problem mit meinen desktop hoffe mir aknn jemand helFehler auf dem desktop :(Ich habe mir von half life2 den mod pirates vikings and knights runte...
Moin Jungs könnt ihr das hier mal überprüfen ich bin ja nun kein Fachmann würde gerne mal wissen...
Ich habe auf einem neuen System (2 Tage alt) häufiger BSODs und ich würde gerne meine Minidumps ho...
Mein Laptop(Sony VAIO)mit Windows 7 (unten nich angegeben!!! da es diese Auswahlmöglichkeit nicht g...
Hallo ! dieses kleine Fenster öffnet sich beim Vista start seit etwa 4 Tagen. Weiß jemand womit es...
Kann wenn jemand zeit hat mir die Kürtzel für onlinspiele und bedeutung schicken zum Spiel world o...
Hallo zusammen,ich bin in Sachen Firewall, Viren, Trojaner usw. nicht sehr bewandert, hatte aber meh...
Wenn Ihnen diese Seite nicht weiterhilft, können Sie hier unsere ganze Webseite nach passenden Tipps oder ähnlichen Fragen durchsuchen lassen, oder im Chat nach Hilfe fragen!
Wie können wir ihnen (kostenlos!) weiterhelfen?
