iexplore.exe, lässt sich nicht beenden

#1 Hi,

mein Problem ist, dass sich der Prozess iexplore.exe nicht beenden lässt. Ich habe aber weder ein Browserfenster geöffnet noch sonstiges. Selbst wenn ich vom netz weg bin erscheint im Taskmanager der Prozess: iexplore.exe



Wenn ich ihn beenden möchte, ist er in nicht einmal 4sekunden wieder da.


Avira, windows defender und a-squared habe ich mehrmals durchlaufen lassen auch im Abgesicherten Modus, doch kein Fund. Nun was kann ich machen?





Ich bedanke mich schoneinmal im Vorraus [/img]

#2 Koennte Swizzor sein. Nutze bitte einmal dieses Tool:
http://virus-protect.org/artikel/tools/comboscan.html
__________
MfG Ralf
SEO-Spam Hunter

#3 Hier Comboscan.txt:



Computer is in Normal Mode.
--------------------------------------------------------------------------------

-- System Restore --------------------------------------------------------------

System Restore is disabled; attempting to re-enable...success.


-- Last 1 Restore Point(s) --
1: 2007-03-18 09:16:12 UTC - RP1 - Systemprüfpunkt


Performed disk cleanup.


-- HijackThis (run as Matze.exe) -----------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 10:16:41, on 18.03.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Internet Explorer\IEXPLORE.EXE
C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe
C:\Programme\HP\HP Software Update\HPWuSchd2.exe
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\OnlineControl\ocontrol.exe
C:\WINDOWS\system32\cisvc.exe
C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
C:\WINDOWS\SYSTEM32\HPZipm12.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SYSTEM32\cidaemon.exe
C:\WINDOWS\explorer.exe
C:\Programme\Free Download Manager\fdm.exe
C:\Downloads\Video\comboscan.exe
C:\DOKUME~1\Matze\Desktop\Matze.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Programme\TechSmith\SnagIt 8\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\programme\google\googletoolbar3.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Programme\TechSmith\SnagIt 8\SnagItIEAddin.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [avgnt] "C:\Programme\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [HP Software Update] C:\Programme\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [ICQ Lite] C:\Programme\ICQLite\ICQLite.exe -trayboot
O4 - Global Startup: OnlineControl.lnk = C:\Programme\OnlineControl\ocontrol.exe
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Programme\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Programme\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download web site with Free Download Manager - file://C:\Programme\Free Download Manager\dlpage.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Programme\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Programme\ICQLite\ICQLite.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f003.mail.lycos.de/app/uploader/FileUploader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{105D0E81-B31B-41F6-9B50-75F5B227BE3C}: NameServer = 192.168.2.1,194.25.2.129
O17 - HKLM\System\CS1\Services\Tcpip\..\{105D0E81-B31B-41F6-9B50-75F5B227BE3C}: NameServer = 192.168.2.1,194.25.2.129
O17 - HKLM\System\CS2\Services\Tcpip\..\{105D0E81-B31B-41F6-9B50-75F5B227BE3C}: NameServer = 192.168.2.1,194.25.2.129
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AntiVir PersonalEdition Classic Planer (AntiVirScheduler) - Unknown owner - C:\Programme\AntiVir PersonalEdition Classic\sched.exe (file missing)
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Unknown owner - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: MWAgent - MicroWorld Technologies Inc. - C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\SYSTEM32\HPZipm12.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe


-- HijackThis Fixed Entries (C:\DOKUME~1\Matze\Desktop\backups\) ---------------

backup-20061213-151307-677 O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\programme\google\googletoolbar3.dll
backup-20061213-151521-827 O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
backup-20061213-151600-680 O4 - HKLM\..\Run: [winupdates] C:\Programme\winupdates\winupdates.exe /auto
backup-20061213-151637-859 O4 - HKLM\..\Run: [G2] C:\Program Files\G2\G2Main.exe
backup-20061213-151729-625 O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
backup-20061213-151818-398 O4 - HKCU\..\Run: [Anonymizer] C:\Programme\Anonymizer\Anonymizer Software\Anonymizer.exe -nogui
backup-20061213-151926-334 O16 - DPF: {C3C46E1D-4929-4FE8-853E-5CD43938047D} - http://222.239.77.81/program/install/g2.cab
backup-20061231-035238-735 O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
backup-20070108-141358-684 O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Programme\Unlocker\UnlockerAssistant.exe"
backup-20070116-125924-909 O16 - DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} (CPlayFirstDinerDashControl Object) - http://satde.oberon-media.com/online2/diner_dash/DinerDash.1.0.0.80.cab
backup-20070124-115124-164 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
backup-20070124-183411-598 O4 - HKLM\..\RunOnce: [mcdetect.exe] c:\PROGRA~1\mcafee.com\agent\mcdetect.exe -regserver
backup-20070301-190227-467 O4 - Startup: IMBoss Server.lnk = C:\Programme\IMBoss\IMBoss.exe

-- File Associations -----------------------------------------------------------

.bat - batfile - "%1" %*
.chm - chm.file - "C:\WINDOWS\hh.exe" %1
.cmd - cmdfile - "%1" %*
.com - comfile - "%1" %*
.exe - exefile - "%1" %*
.hlp - hlpfile - %SystemRoot%\System32\winhlp32.exe %1
.inf - inffile - %SystemRoot%\System32\NOTEPAD.EXE %1
.ini - inifile - %SystemRoot%\System32\NOTEPAD.EXE %1
.js - JSFile - %SystemRoot%\System32\WScript.exe "%1" %*
.lnk - lnkfile - {00021401-0000-0000-C000-000000000046}
.pif - piffile - "%1" %*
[COLOR=red].reg - regfile - "regedit.exe" "%1"[/COLOR]
.scr - scrfile - "%1" /S
.txt - txtfile - %SystemRoot%\system32\NOTEPAD.EXE %1
.vbs - VBSFile - %SystemRoot%\System32\WScript.exe "%1" %*


-- Drivers: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled ---------------------

3R AN983 (ADMtek AN983/AN985/ADM951X-10/100-MBit/s-Fast Ethernet-Adapter) - C:\WINDOWS\system32\drivers\an983.sys
3R Arp1394 (1394-ARP-Clientprotokoll) - C:\WINDOWS\system32\drivers\arp1394.sys
2R Aspi32 - C:\WINDOWS\system32\drivers\ASPI32.SYS
1R avgio - C:\Programme\AntiVir PersonalEdition Classic\avgio.sys
3S avgntflt - C:\Programme\AntiVir PersonalEdition Classic\avgntflt.sys
3S Bridge (MAC-Brücke) - C:\WINDOWS\system32\drivers\bridge.sys
3S BridgeMP (MAC-Brückenminiport) - C:\WINDOWS\system32\drivers\bridge.sys
3S CCDECODE (Untertiteldecoder) - C:\WINDOWS\system32\drivers\CCDECODE.sys
1R eeCtrl (Symantec Eraser Control driver) - C:\Programme\Gemeinsame Dateien\Symantec Shared\EENGINE\eeCtrl.sys
2R GDTdiInterceptor - C:\WINDOWS\system32\drivers\GDTdiIcpt.sys
3S HdAudAddService (Microsoft UAA Function Driver for High Definition Audio Service) - C:\WINDOWS\system32\drivers\Hdaudio.sys
3R HDAudBus (Microsoft UAA Bus Driver for High Definition Audio) - C:\WINDOWS\system32\drivers\Hdaudbus.sys
3R hidusb (Microsoft HID Class-Treiber) - C:\WINDOWS\system32\drivers\hidusb.sys
3S HookCentre - C:\WINDOWS\system32\drivers\HookCentre.sys
3S HPZid412 (IEEE-1284.4 Driver HPZid412) - C:\WINDOWS\system32\drivers\HPZid412.sys
3S HPZipr12 (Print Class Driver for IEEE-1284.4 HPZipr12) - C:\WINDOWS\system32\drivers\HPZipr12.sys
3S HPZius12 (USB to IEEE-1284.4 Translation Driver HPZius12) - C:\WINDOWS\system32\drivers\HPZius12.sys
3R ialm - C:\WINDOWS\system32\drivers\igxpmp32.sys
3R IntcAzAudAddService (Service for Realtek HD Audio (WDM)) - C:\WINDOWS\system32\drivers\RtkHDAud.Sys
1R intelppm (Intel-Prozessortreiber) - C:\WINDOWS\system32\drivers\intelppm.sys
3S k600bus (Sony Ericsson 600i driver (WDM)) - C:\WINDOWS\system32\drivers\k600bus.sys
3S k600mdfl (Sony Ericsson 600i USB WMC Modem Filter) - C:\WINDOWS\system32\drivers\k600mdfl.sys
3S k600mdm (Sony Ericsson 600i USB WMC Modem Drivers) - C:\WINDOWS\system32\drivers\k600mdm.sys
3S k600mgmt (Sony Ericsson 600i USB WMC Device Management Drivers) - C:\WINDOWS\system32\drivers\k600mgmt.sys
3S k600obex (Sony Ericsson 600i USB WMC OBEX Interface Drivers) - C:\WINDOWS\system32\drivers\k600obex.sys
1R kbdhid (Tastatur-HID-Treiber) - C:\WINDOWS\system32\drivers\kbdhid.sys
3S lac97inf - C:\DOKUME~1\Matze\LOKALE~1\Temp\lac97inf.sys (not found)
3R mouhid (Maus-HID-Treiber) - C:\WINDOWS\system32\drivers\mouhid.sys
3S MSTEE (Microsoft Streaming Tee/Sink-to-Sink-Konvertierung) - C:\WINDOWS\system32\drivers\MSTEE.sys
3S NABTSFEC (NABTS/FEC VBI-Codec) - C:\WINDOWS\system32\drivers\NABTSFEC.sys
3S NdisIP (Microsoft TV-/Videoverbindung) - C:\WINDOWS\system32\drivers\NdisIP.sys
3R NIC1394 (1394-Netzwerktreiber) - C:\WINDOWS\system32\drivers\nic1394.sys
3S nm (Netzwerkmonitortreiber) - C:\WINDOWS\system32\drivers\nmnt.sys
3S NPF (NetGroup Packet Filter Driver) - C:\WINDOWS\system32\drivers\npf.sys
0R ohci1394 (OHCI-konformer IEEE 1394-Hostcontroller) - C:\WINDOWS\system32\drivers\ohci1394.sys
1R oreans32 - C:\WINDOWS\system32\drivers\oreans32.sys
3S PAC207 (Trust WB-1400T Webcam) - C:\WINDOWS\system32\drivers\PFC027.sys
3R pfc (Padus ASPI Shell) - C:\WINDOWS\system32\drivers\pfc.sys
0R sfdrv01 (StarForce Protection Environment Driver (version 1.x)) - C:\WINDOWS\system32\drivers\sfdrv01.sys
0R sfhlp02 (StarForce Protection Helper Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfhlp02.sys
0R sfvfs02 (StarForce Protection VFS Driver (version 2.x)) - C:\WINDOWS\system32\drivers\sfvfs02.sys
3S SLIP (BDA Slip De-Framer) - C:\WINDOWS\system32\drivers\SLIP.sys
3S streamip (BDA-IPSink) - C:\WINDOWS\system32\drivers\StreamIP.sys
3R usbccgp (Microsoft Standard-USB-Haupttreiber) - C:\WINDOWS\system32\drivers\usbccgp.sys
3R usbehci (Miniporttreiber für erweiterten Microsoft USB 2.0-Hostcontroller) - C:\WINDOWS\system32\drivers\usbehci.sys
3S usbprint (Microsoft USB-Druckerklasse) - C:\WINDOWS\system32\drivers\usbprint.sys
3S usbscan (USB-Scannertreiber) - C:\WINDOWS\system32\drivers\usbscan.sys
3R usbstor (USB-Massenspeichertreiber) - C:\WINDOWS\system32\drivers\usbstor.sys
4S WS2IFSL (Windows Socket 2.0 Non-IFS-Dienstanbieter-Unterstützungsumgebung) - C:\WINDOWS\system32\drivers\ws2ifsl.sys
3S WSTCODEC (World Standard Teletext-Codec) - C:\WINDOWS\system32\drivers\WSTCODEC.SYS
3S WudfPf (Windows Driver Foundation - User-mode Driver Framework Platform Driver) - C:\WINDOWS\system32\drivers\WudfPf.sys
3S WudfRd (Windows Driver Foundation - User-mode Driver Framework Reflector) - C:\WINDOWS\system32\drivers\WudfRd.sys


-- Services: 0-Boot, 1-System, 2-Auto, 3-Demand, 4-Disabled --------------------

2S AntiVirScheduler (AntiVir PersonalEdition Classic Planer) - C:\Programme\AntiVir PersonalEdition Classic\sched.exe
2S AntiVirService (AntiVir PersonalEdition Classic Guard) - C:\Programme\AntiVir PersonalEdition Classic\avguard.exe
3S aspnet_state (ASP.NET State Service) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
3S clr_optimization_v2.0.50727_32 (.NET Runtime Optimization Service v2.0.50727_X86) - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
2S CLTNetCnService (Symantec Lic NetConnect service) -
3S IDriverT (InstallDriver Table Manager) - "C:\Programme\Gemeinsame Dateien\InstallShield\Driver\1050\Intel 32\IDriverT.exe"
3S lxcg_device - C:\WINDOWS\system32\lxcgcoms.exe -service
2R MWAgent - C:\Programme\Gemeinsame Dateien\MicroWorld\Agent\MWASER.EXE
2R Pml Driver HPZ12 - C:\WINDOWS\SYSTEM32\HPZipm12.exe
3S rpcapd (Remote Packet Capture Protocol v.0 (experimental)) - "C:\Programme\WinPcap\rpcapd.exe" -d -f "C:\Programme\WinPcap\rpcapd.ini"
2R STI Simulator - C:\WINDOWS\System32\PAStiSvc.exe
3R usnsvc (Messenger Sharing USN Journal Reader-Service) - C:\WINDOWS\system32\svchost.exe -k usnsvc
2R WinDefend (Windows Defender) - "C:\Programme\Windows Defender\MsMpEng.exe"


-- Scheduled Tasks -------------------------------------------------------------

2007-03-18 01:31:44 322 --ah----- C:\WINDOWS\Tasks\MP Scheduled Scan.job<MPSCHE~1.JOB>
2007-01-24 08:18:01 362 --a------ C:\WINDOWS\Tasks\McAfee AntiSpyware.job<MCAFEE~1.JOB>


-- Files created between 2007-02-18 and 2007-03-18 -----------------------------

2007-03-17 23:17:55 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll<CMDLIN~1.DLL>
2007-03-16 21:00:04 0 d-------- C:\WINDOWS\system32\NtmsData
2007-03-15 09:40:08 322560 --a------ C:\WINDOWS\SSSUn.EXE
2007-03-15 09:40:00 0 d-------- C:\Programme\SSS
2007-03-12 12:51:10 0 d-------- C:\Programme\Security Task Manager<SECURI~1>
2007-03-08 17:58:45 0 d-------- C:\WINDOWS\pss
2007-03-04 19:39:26 0 d-------- C:\Programme\mIRC
2007-03-03 20:45:16 0 d-------- C:\Programme\Gemeinsame Dateien\DeskShare Shared<DESKSH~1>
2007-03-03 12:52:11 0 d-------- C:\Programme\PokerStars.NET<POKERS~1.NET>
2007-03-03 01:11:35 0 d-------- C:\My Shared Folder<MYSHAR~1>
2007-03-03 00:55:19 0 d-------- C:\Programme\BitTorrent<BITTOR~1>
2007-03-02 18:28:16 0 d-------- C:\Programme\Windows Defender<WIFD1F~1>
2007-02-28 18:54:09 0 d-------- C:\Programme\Sandboxie<SANDBO~1>
2007-02-27 20:08:13 33952 --a------ C:\WINDOWS\system32\drivers\oreans32.sys
2007-02-27 19:53:46 0 --a------ C:\WINDOWS\system32\kabbtree.reg
2007-02-27 19:53:30 0 d-------- C:\Programme\Kabbalah Trainer<KABBAL~1>
2007-02-23 12:35:43 0 d-------- C:\Programme\Flash Effect Maker<FLASHE~1>
2007-02-22 17:37:55 0 d-------- C:\Programme\Webteh
2007-02-22 12:35:04 1 --a------ C:\WINDOWS\system32\ActiveXComponent32.dll<ACTIVE~1.DLL>
2007-02-22 12:34:58 720896 --a------ C:\WINDOWS\iun6002ev.exe<IUN600~1.EXE>
2007-02-22 12:16:07 0 d-------- C:\WINDOWS\MailBoy 2004<MAILBO~1>
2007-02-22 12:16:07 0 d-------- C:\Programme\MailBoy 2004<MAILBO~1>
2007-02-20 21:20:26 0 d-------- C:\Programme\MP3 Remix<MP3REM~1>
2007-02-20 21:14:21 0 d-------- C:\Programme\diPlugin
2007-02-18 22:46:44 0 d-------- C:\Programme\Winamp
2007-02-18 12:14:38 131072 --a------ C:\WINDOWS\system32\dzip32.dll
2007-02-18 12:14:38 110592 --a------ C:\WINDOWS\system32\dunzip32.dll
2007-02-18 12:14:31 0 d-------- C:\Programme\Windows Media Bonus Pack for Windows XP<WI12E0~1>
2007-02-18 10:19:35 564224 --a------ C:\WINDOWS\system32\HEViewer.exe
2007-02-18 10:19:35 0 d-------- C:\Programme\Gemeinsame Dateien\HTML Executable Viewer<HTMLEX~1>
2007-02-18 09:44:15 0 d-------- C:\My Recorder<MYRECO~1>
2007-02-18 09:42:49 5 --a------ C:\WINDOWS\system32\SySMp3rj.dat
2007-02-18 09:42:24 196608 --a------ C:\WINDOWS\system32\NCTWMAFile2.dll<NCTWMA~1.DLL>
2007-02-18 09:42:24 331776 --a------ C:\WINDOWS\system32\NCTAudioVisualizationEx2.dll<NC57DE~1.DLL>
2007-02-18 09:42:24 311296 --a------ C:\WINDOWS\system32\NCTAudioRecord2.dll<NCTAUD~4.DLL>
2007-02-18 09:42:24 315392 --a------ C:\WINDOWS\system32\NCTAudioPlayer2.dll<NCTAUD~2.DLL>
2007-02-18 09:42:24 1040384 --a------ C:\WINDOWS\system32\NCTAudioInformation2.dll<NCTAUD~3.DLL>
2007-02-18 09:42:24 1843200 --a------ C:\WINDOWS\system32\NCTAudioFile2.dll<NCTAUD~1.DLL>
2007-02-18 09:42:24 237568 --a------ C:\WINDOWS\system32\lame_enc.dll


-- Find3M Report ---------------------------------------------------------------

2007-03-18 10:15:24 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Free Download Manager<FREEDO~1>
2007-03-16 20:59:50 0 d-------- C:\Programme\AntiVir PersonalEdition Classic<ANTIVI~1>
2007-03-16 20:57:53 0 d-------- C:\Programme\ICQLite
2007-03-16 08:53:03 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\LimeWire
2007-03-15 22:38:34 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Tor
2007-03-15 18:08:51 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\FinalBurner Audio CD<FINALB~1>
2007-03-15 15:12:26 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\OpenOffice.org2<OPENOF~1.ORG>
2007-03-12 22:00:00 0 d-------- C:\Programme\a-squared Anti-Malware<A-SQUA~1>
2007-03-08 12:12:19 0 d-------- C:\Programme\Lx_cats
2007-03-03 20:45:16 0 d-------- C:\Programme\Gemeinsame Dateien<GEMEIN~1>
2007-03-03 12:43:41 0 d-------- C:\Programme\7-Zip
2007-03-02 18:50:38 0 d--h----- C:\Programme\InstallShield Installation Information<INSTAL~1>
2007-03-02 18:43:54 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\SmartDraw<SMARTD~1>
2007-02-28 09:04:53 0 d---s---- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Microsoft<MICROS~1>
2007-02-28 09:04:06 0 d-------- C:\Programme\Gemeinsame Dateien\Wise Installation Wizard<WISEIN~1>
2007-02-26 20:24:50 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\SecondLife<SECOND~1>
2007-02-26 20:11:58 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Mozilla
2007-02-25 19:37:41 648 --a------ C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\wklnhst.dat
2007-02-22 17:42:47 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\BSplayer
2007-02-22 17:37:56 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\BSplayer Pro<BSPLAY~1>
2007-02-20 21:14:05 737280 --a------ C:\WINDOWS\iun6002.exe
2007-02-19 17:22:39 0 d-------- C:\Programme\DivX
2007-02-15 19:30:30 0 d-------- C:\Programme\Java
2007-02-15 14:08:22 0 d-------- C:\Programme\SmartDraw 7<SMARTD~2>
2007-02-13 21:27:24 0 d-------- C:\Programme\thriXXX
2007-02-13 15:26:54 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Image Zone Express<IMAGEZ~1>
2007-02-13 00:00:03 356352 --a------ C:\WINDOWS\eSellerateEngine.dll<ESELLE~1.DLL>
2007-02-11 12:08:54 0 d-------- C:\Programme\Windows Live Safety Center<WINDOW~4>
2007-02-10 21:07:52 0 d-------- C:\Programme\MSN Messenger<MSNMES~1>
2007-02-07 14:31:34 0 d-------- C:\Programme\Rockstar Games<ROCKST~1>
2007-02-05 19:35:18 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\HP
2007-02-05 19:29:54 127892 --a------ C:\WINDOWS\hpoins11.dat
2007-02-05 19:28:06 0 d-------- C:\Programme\Gemeinsame Dateien\HP
2007-02-05 19:28:01 0 d-------- C:\Programme\HP
2007-02-05 19:24:57 0 d-------- C:\Programme\Hewlett-Packard<HEWLET~1>
2007-02-05 19:23:52 0 d-------- C:\Programme\Gemeinsame Dateien\Hewlett-Packard<HEWLET~1>
2007-02-05 14:47:45 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Real
2007-02-05 14:45:53 0 d-------- C:\Programme\Gemeinsame Dateien\xing shared<XINGSH~1>
2007-02-05 14:45:48 0 d-------- C:\Programme\Gemeinsame Dateien\Real
2007-02-05 14:33:15 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Ulead Systems<ULEADS~1>
2007-02-05 14:31:00 0 d-------- C:\Programme\Abbyy FineReader 6.0 Sprint<ABBYYF~1.0SP>
2007-02-04 20:17:18 0 d-------- C:\Programme\Image-Line<IMAGE-~1>
2007-02-04 20:14:27 0 d-------- C:\Programme\VstPlugins<VSTPLU~1>
2007-02-04 19:40:17 118784 --a------ C:\WINDOWS\dsdxirmv.exe
2007-02-04 19:27:51 0 d-------- C:\Programme\Sony Setup<SONYSE~1>
2007-02-04 17:04:11 0 d-------- C:\Programme\Gemeinsame Dateien\MAGIX Shared<MAGIXS~1>
2007-02-04 16:15:42 0 d-------- C:\Programme\Native Instruments<NATIVE~1>
2007-02-04 15:30:44 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\FrostWire<FROSTW~1>
2007-02-04 15:17:33 0 d-------- C:\Programme\Direct Connect<DIRECT~1>
2007-02-04 15:15:25 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Neo-Modus.com<NEO-MO~1.COM>
2007-02-04 15:11:50 0 d-------- C:\Programme\FileNavigator<FILENA~1>
2007-02-04 14:58:45 0 d-------- C:\Programme\Innovatools<INNOVA~1>
2007-02-04 14:37:04 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\uTorrent
2007-02-04 14:36:15 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\BitTorrent<BITTOR~1>
2007-02-02 17:21:29 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\SMSSender<SMSSEN~1>
2007-02-02 17:21:14 0 d-------- C:\Programme\Microsoft SMS Sender<MID535~1>
2007-02-02 17:15:21 0 d-------- C:\Programme\Pro Imaging Powertoys<PROIMA~1>
2007-01-29 15:27:20 0 d-------- C:\Programme\WinAce
2007-01-29 15:26:09 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\NewsLetter Pro<NEWSLE~1>
2007-01-29 15:25:55 0 d-------- C:\Programme\Gemeinsame Dateien\Symantec Shared<SYMANT~1>
2007-01-29 15:25:21 0 d-------- C:\Programme\IMBoss
2007-01-29 09:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe
2007-01-28 14:34:46 0 d-------- C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\Help
2007-01-27 15:55:30 0 d-------- C:\Programme\AB-Tools.com
2007-01-24 11:56:50 421152 --ahs---- C:\WINDOWS\fidbox.dat
2007-01-22 13:57:19 0 d-------- C:\Programme\Gemeinsame Dateien\aol
2007-01-22 13:53:51 0 d-------- C:\Programme\Strategy First<STRATE~1>
2007-01-19 12:43:44 0 d-------- C:\Programme\WinPcap
2007-01-18 21:36:52 304160 --a------ C:\StiImg.dat
2007-01-16 13:54:37 2 --a------ C:\WINDOWS\system32\grecorder.dll<GRECOR~1.DLL>
2007-01-12 09:27:42 232960 --a------ C:\WINDOWS\system32\webcheck.dll
2007-01-12 09:27:42 51712 -----n--- C:\WINDOWS\system32\msfeedsbs.dll<MSFEED~1.DLL>
2007-01-12 09:27:42 458752 -----n--- C:\WINDOWS\system32\msfeeds.dll
2007-01-12 09:27:42 6054400 --a------ C:\WINDOWS\system32\ieframe.dll
2007-01-11 18:53:22 415470 --a------ C:\WINDOWS\system32\perfh007.dat
2007-01-11 18:53:22 74996 --a------ C:\WINDOWS\system32\perfc007.dat
2007-01-08 19:04:54 105984 --a------ C:\WINDOWS\system32\url.dll
2007-01-08 19:04:08 102400 --a------ C:\WINDOWS\system32\occache.dll
2007-01-08 19:02:04 266752 --a------ C:\WINDOWS\system32\iertutil.dll
2007-01-08 19:02:04 44544 --a------ C:\WINDOWS\system32\iernonce.dll
2007-01-08 19:02:02 384000 --a------ C:\WINDOWS\system32\iedkcs32.dll
2007-01-08 19:02:02 383488 --a------ C:\WINDOWS\system32\ieapfltr.dll
2007-01-08 19:02:02 161792 --a------ C:\WINDOWS\system32\ieakui.dll
2007-01-08 19:02:02 230400 --a------ C:\WINDOWS\system32\ieaksie.dll
2007-01-08 19:02:02 153088 --a------ C:\WINDOWS\system32\ieakeng.dll
2007-01-08 19:01:14 17408 --a------ C:\WINDOWS\system32\corpol.dll
2007-01-08 19:00:48 124928 --a------ C:\WINDOWS\system32\advpack.dll
2007-01-08 18:08:14 56832 --a------ C:\WINDOWS\system32\ie4uinit.exe
2007-01-08 18:08:10 13824 --a------ C:\WINDOWS\system32\ieudinit.exe
2007-01-08 01:52:28 53248 --a------ C:\WINDOWS\system32\hklspl.dll
2007-01-05 17:16:55 34912 --a------ C:\Dokumente und Einstellungen\Matze\Anwendungsdaten\GDIPFONTCACHEV1.DAT<GDIPFO~1.DAT>
2006-12-21 14:05:40 40960 --a------ C:\WINDOWS\system32\frapsvid.dll
2006-12-19 22:49:41 135168 --a------ C:\WINDOWS\system32\shsvcs.dll
2006-12-19 19:17:03 334336 --a------ C:\WINDOWS\system32\wiaservc.dll


-- Registry Dump ---------------------------------------------------------------


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run\not active]
"Free Download Manager"="C:\\Programme\\Free Download Manager\\fdm.exe -autorun"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\runonce]
"ICQ Lite"="C:\\Programme\\ICQLite\\ICQLite.exe -trayboot"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe"
"LXCGCATS"="rundll32 C:\\WINDOWS\\System32\\spool\\DRIVERS\\W32X86\\3\\LXCGtime.dll,_RunDLLEntry@16"
"avgnt"="\"C:\\Programme\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min"
"HP Software Update"="C:\\Programme\\HP\\HP Software Update\\HPWuSchd2.exe"
"TkBellExe"="\"C:\\Programme\\Gemeinsame Dateien\\Real\\Update_OB\\realsched.exe\" -osboot"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\not active]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\a-squared]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="a2guard"
"hkey"="HKLM"
"command"="\"C:\\Programme\\a-squared Anti-Malware\\a2guard.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitTorrent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="bittorrent"
"hkey"="HKCU"
"command"="\"C:\\Programme\\BitTorrent\\bittorrent.exe\" --force_start_minimized"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EzPrint]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="ezprint"
"hkey"="HKLM"
"command"="\"C:\\Programme\\Lexmark 2300 Series\\ezprint.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\lxcgmon.exe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="lxcgmon"
"hkey"="HKLM"
"command"="\"C:\\Programme\\Lexmark 2300 Series\\lxcgmon.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NeroCheck"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="igfxpers"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\system32\\igfxpers.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="qttask"
"hkey"="HKLM"
"command"="\"C:\\Programme\\QuickTime\\qttask.exe\" -atboottime"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="RTHDCPL"
"hkey"="HKLM"
"command"="RTHDCPL.EXE"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SkyTel"
"hkey"="HKLM"
"command"="SkyTel.EXE"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="jusched"
"hkey"="HKLM"
"command"="\"C:\\Programme\\Java\\jre1.5.0_11\\bin\\jusched.exe\""
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="realsched"
"hkey"="HKLM"
"command"="\"C:\\Programme\\Gemeinsame Dateien\\Real\\Update_OB\\realsched.exe\" -osboot"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="MSASCui"
"hkey"="HKLM"
"command"="\"C:\\Programme\\Windows Defender\\MSASCui.exe\" -hide"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WISE-FTP Task Planner]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="wf_tp"
"hkey"="HKCU"
"command"="\"C:\\Programme\\AceBIT\\WISE-FTP 4\\wf_tp.exe\" /bg"
"inimapping"="0"


[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{B9E618A2-A4FE-11D4-83C2-005004636C96}"="OE Shell Hook"
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"UPnPMonitor"="{e57ce738-33e8-4c51-8354-bb4de9d215d1}"
"WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"InfoCockpit"="C:\\Programme\\T-Online\\T-Online_Software_6\\Info-Cockpit\\INFOCOCKPIT.EXE /nosplash"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"InfoCockpit"="C:\\Programme\\T-Online\\T-Online_Software_6\\Info-Cockpit\\INFOCOCKPIT.EXE /nosplash"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"SynchronousMachineGroupPolicy"=dword:00000000
"SynchronousUserGroupPolicy"=dword:00000000

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0
Usnsvc REG_MULTI_SZ usnsvc\0\0



-- End of ComboScan: finished at 2007-03-18 at 10:17:10 ------------------------






Hier Supplementary.txt:



Supplementary logfile - please post this as an attachment with your post.
--------------------------------------------------------------------------------

-- System Information ----------------------------------------------------------

Microsoft Windows XP Home Edition (build 2600) SP 2.0
Architecture: X86; Language: German

CPU 0: Intel(R) Celeron(R) CPU 2.66GHz
Percentage of Memory in Use: 63%
Physical Memory (total/avail): 502.48 MiB / 181.14 MiB
Pagefile Memory (total/avail): 1227.79 MiB / 968.81 MiB
Virtual Memory (total/avail): 2047.88 MiB / 1991.09 MiB

C: is Fixed (NTFS) - 149.05 GiB total, 112.61 GiB free.
D: is Removable (No Media)
E: is Removable (No Media)
F: is Removable (No Media)
G: is Removable (No Media)
H: is Removable (No Media)
I: is CDROM (CDFS)


-- Security Center -------------------------------------------------------------

AUOptions is scheduled to auto-install.
Windows Internal Firewall is enabled.

FirstRunDisabled is set.

FW: Panda Antivirus Platinum 7 v7.07.00 (Panda Software) [COLOR=RED]Disabled[/COLOR]
AV: Avira AntiVir PersonalEdition Classic v0.0.0.0 (Avira GmbH)
AV: Panda Antivirus Platinum 7 v7.07.00 (Panda Software) [COLOR=RED]Disabled[/COLOR]


-- Environment Variables -------------------------------------------------------

ALLUSERSPROFILE=C:\Dokumente und Einstellungen\All Users
APPDATA=C:\Dokumente und Einstellungen\Matze\Anwendungsdaten
CLIENTNAME=Console
CommonProgramFiles=C:\Programme\Gemeinsame Dateien
COMPUTERNAME=XANDER-70EB2C0C
ComSpec=C:\WINDOWS\system32\cmd.exe
FP_NO_HOST_CHECK=NO
HOMEDRIVE=C:
HOMEPATH=\Dokumente und Einstellungen\Matze
LOGONSERVER=\\XANDER-70EB2C0C
NUMBER_OF_PROCESSORS=1
OS=Windows_NT
Path=C:\WINDOWS\SYSTEM32;C:\WINDOWS;C:\WINDOWS\SYSTEM32\WBEM
PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
PROCESSOR_ARCHITECTURE=x86
PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 1, GenuineIntel
PROCESSOR_LEVEL=15
PROCESSOR_REVISION=0401
ProgramFiles=C:\Programme
PROMPT=$P$G
SESSIONNAME=Console
SystemDrive=C:
SystemRoot=C:\WINDOWS
TEMP=C:\DOKUME~1\Matze\LOKALE~1\Temp
TMP=C:\DOKUME~1\Matze\LOKALE~1\Temp
USERDOMAIN=XANDER-70EB2C0C
USERNAME=Matze
USERPROFILE=C:\Dokumente und Einstellungen\Matze
windir=C:\WINDOWS


-- User Profiles ---------------------------------------------------------------

Matze (admin)
Administrator (new local, admin)


-- Add/Remove Programs ---------------------------------------------------------

--> "C:\Programme\InstallShield Installation Information\{F37167DD-4436-4641-90B6-329D60632DDA}\Setup.exe" REMOVEALL --u:{F37167DD-4436-4641-90B6-329D60632DDA}
--> C:\Programme\Gemeinsame Dateien\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
--> rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
a-squared Anti-Malware 2.1 --> "C:\Programme\a-squared Anti-Malware\unins000.exe"
ABBYY FineReader 6.0 Sprint --> MsiExec.exe /I{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}
Adobe Acrobat 4.0 --> C:\WINDOWS\ISUNINST.EXE -f"C:\Programme\Gemeinsame Dateien\Adobe\Acrobat 4.0\NT\Uninst.isu" -c"C:\Programme\Gemeinsame Dateien\Adobe\Acrobat 4.0\NT\Uninst.dll"
Adobe Flash Player 9 ActiveX --> C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete
Adobe Reader 7.0.8 - Deutsch --> MsiExec.exe /I{AC76BA86-7AD7-1031-7B44-A70800000002}
Adobe Shockwave Player --> C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log
Avira AntiVir PersonalEdition Classic --> C:\Programme\AntiVir PersonalEdition Classic\SETUP.EXE /REMOVE
Conflict Global Storm --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{75443B81-E1FC-4D79-80C0-5F0DF2A7F897}\setup.exe" -l0x7
CopyRightLeft 0.4 Beta --> C:\Programme\CopyRightLeft\unins000.exe
Counter Strike 1.6 - By PirocaHP.F!N4LShare --> C:\WINDOWS\unvise32.exe C:\CS1.6 pod-Bot\uninstal_cs.log
CueClub --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programme\Real\RealGames\CueClub\setup.exe"
Dev-C++ 5 beta 9 release (4.9.9.0) --> "C:\Dev-Cpp\uninstall.exe"
diPlugin --> C:\WINDOWS\iun6002.exe "C:\Programme\diPlugin\irunin.ini"
DivX --> C:\Programme\DivX\DivXCodecUninstall.exe /CODEC
DivX Web Player --> C:\Programme\DivX\DivXWebPlayerUninstall.exe /PLUGIN
DreamStation DXi2 --> C:\WINDOWS\DSDXIRMV.EXE C:\PROGRAMME\CAKEWALK\SHARED DXI\AUDIO SIMULATION\DREAMSTATION DXI2
FinalBurner Free v1.6.0.47 --> "C:\Programme\FinalBurner\Uninstall.exe" "C:\Programme\FinalBurner\install.log" -u
Flash Effect Maker Pro v3.3567 Free (567 Templates/Unicode UTF8 --> "C:\Programme\Flash Effect Maker\unins000.exe"
Free Download Manager 2.0 --> "C:\Programme\Free Download Manager\unins000.exe"
Google Earth --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{3DE5E7D4-7B88-403C-A3FD-2017A8240C5B}\setup.exe" -l0x9 -removeonly
Google Toolbar for Internet Explorer --> regsvr32 /u /s "c:\programme\google\googletoolbar3.dll"
Grand Theft Auto Vice City --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{4B35F00C-E63D-40DC-9839-DF15A33EAC46}\setup.exe" -l0x7
Hello Engines! Standard 4 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{51974F4F-7A40-48AE-99B8-243F34F17884}\setup.exe" -l0x7 -removeonly
High Definition Audio Driver Package - KB888111 -->
Hotfix for Windows Media Format 11 SDK (KB929399) --> "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
HP Customer Participation Program 7.0 --> C:\Programme\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
HP Imaging Device Functions 7.0 --> C:\Programme\HP\Digital Imaging\DeviceManagement\hpzscr01.exe -datfile hpqbud01.dat
HP Photosmart Essential --> MsiExec.exe /X{6994491D-D491-48F1-AE1F-E179C1FFFC2F}
HP Photosmart, Officejet and Deskjet 7.0.A --> C:\Programme\HP\Digital Imaging\{BDBE2F3E-42DB-4d4a-8CB1-19BA765DBC6C}\setup\hpzscr01.exe -datfile hposcr11.dat
HP Software Update --> MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
HP Solution Center 7.0 --> C:\Programme\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
HTML Executable Viewer 1.1.0 --> C:\Programme\Gemeinsame Dateien\HTML Executable Viewer\Uninst.exe
ICQ 5.1 --> C:\Programme\ICQLite\ICQLiteUninstall.EXE
In-A-Flash 4.0 --> C:\Programme\NETGUI\In-A-Flash 4\uninst.exe
Innovatools Add/Remove Plus! 2006 version 5.1 --> "C:\Programme\Innovatools\Add Remove Plus! 2006\unins000.exe"
Intel(R) Graphics Media Accelerator Driver --> C:\WINDOWS\system32\igxpun.exe -uninstall
InterActual Player --> C:\Program Files\InterActual\InterActual Player\inuninst.exe
InterVideo WinDVD 7 --> "C:\Programme\InstallShield Installation Information\{90885A82-9673-49EA-AB39-AF776639C67C}\setup.exe" REMOVEALL
IrfanView (remove only) --> C:\Programme\IrfanView\iv_uninstall.exe
J2SE Runtime Environment 5.0 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150000}
J2SE Runtime Environment 5.0 Update 11 --> MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150110}
Learn2 Player (Uninstall Only) --> C:\Programme\Learn2.com\StRunner\stuninst.exe
Lexmark 2300 Series --> C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\lxcgUNST.EXE -NOLICENSE
MAGIX Foto Clinic 4.5 (D) --> C:\MAGIX\Foto_Clinic_45\instslct.exe
MAGIX Online Druck Service --> C:\PROGRA~1\MAGIXO~1\UNWISE.EXE C:\PROGRA~1\MAGIXO~1\INSTALL.LOG
Media Library Management Wizard --> RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\mplibwiz.inf,DefaultUninstall
Metamail --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{BE3F89C0-42D5-11D5-A40A-00105AC8331A}\setup.exe" -l0x9
Microsoft Color Control Panel Applet for Windows XP --> MsiExec.exe /X{CE378F36-E404-4244-A33F-F50A2A6D31BD}
Microsoft Compression Client Pack 1.0 for Windows XP --> "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
Microsoft Office XP Professional with FrontPage --> MsiExec.exe /I{90280409-6000-11D3-8CFE-0050048383C9}
Microsoft SMS Sender --> MsiExec.exe /I{394BE3D9-7F57-4638-A8D1-1D88671913B7}
Microsoft Text To Speech Engine --> MsiExec.exe /X{647B6F8B-645C-4992-99D8-49202C689C05}
Microsoft User-Mode Driver Framework Feature Pack 1.0 --> "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
Microsoft Visual C++ 2005 Redistributable --> MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
Microsoft Windows Theme Nunavut --> MsiExec.exe /X{047815FB-4E38-42D5-95CB-8A131DDD8668}
Microsoft Works --> MsiExec.exe /I{416D80BA-6F6D-4672-B7CF-F54DA2F80B44}
MPEG-4 DV --> C:\Programme\MPEG-4 DV\uninst.exe C:\Programme\MPEG-4 DV\install.log
MSN --> C:\Programme\MSN\MsnInstaller\msninst.exe /Action:ARP
My Screen Recorder 2.61 --> "C:\Programme\Deskshare\My Screen Recorder\unins000.exe"
Nero 6 Ultra Edition --> C:\Programme\Ahead\nero\uninstall\UNNERO.exe /UNINSTALL
Nero BurnRights (Ahead Software) --> C:\WINDOWS\UNNeroBurnRights.exe /UNINSTALL
NetObjects Fusion 9.0 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{40BF4F2C-ED91-4740-983A-0B0EBA05CE4A}\setup.exe" -l0x7 anything -uninst
Network Chemistry Packetyzer 5.0.0 --> "C:\Programme\Network Chemistry\Packetyzer\unins000.exe"
OCR Software by I.R.I.S 7.0 --> C:\Programme\HP\Digital Imaging\OCR\hpzscr01.exe -datfile hpqbud11.dat
OnlineControl 1.2 --> "C:\Programme\OnlineControl\unins000.exe"
OpenOffice.org 2.0 --> MsiExec.exe /I{55A4E9CC-3F8D-4940-A2A4-EE04D3BADF74}
PantsOff 2.0 --> C:\Programme\PantsOff\unins000.exe
Plus! MP3 Audio Converter LE --> RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\audcle.inf,DefaultUninstall
PokerStars.net --> C:\Programme\PokerStars.NET\Uninstall.EXE /u:"PokerStars.net"
Praias do Brasil --> MsiExec.exe /X{CC117C61-DE03-4C98-9240-E75650049D09}
PrintMaster Special Edition --> C:\PROGRA~1\BRODER~1\PRINTM~1\UNWISE.EXE C:\PROGRA~1\BRODER~1\PRINTM~1\INSTALL.LOG
QuickTime --> C:\WINDOWS\unvise32qt.exe C:\WINDOWS\system32\QuickTime\Uninstall.log
QuizTime - 4. Edition 1.21.C --> C:\WINDOWS\uninstall\QuizTime - 4. Edition\setup.exe
Ranking Toolbox 4 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{2388C625-9532-467F-ADEA-B92E027B85E3}\setup.exe" -l0x7 -removeonly
RealPlayer --> C:\Programme\Gemeinsame Dateien\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
Realtek High Definition Audio Driver --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\11\50\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x7 -removeonly
Schreib-Trainer 2.1 --> "C:\Programme\AB-Tools.com\Schreib-Trainer\unins000.exe"
Security Task Manager 1.7 --> C:\Programme\Security Task Manager\Uninstal.exe "C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Security Task Manager"
Sicherheitsupdate für Windows XP (KB890046) --> "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB893756) --> "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB896358) --> "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB896423) --> "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB896424) --> "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB896428) --> "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB899587) --> "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB899591) --> "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB900725) --> "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB901017) --> "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB901214) --> "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB902400) --> "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB904706) --> "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB905414) --> "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB905749) --> "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB908519) --> "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB911562) --> "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB911567) --> "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB911927) --> "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB912919) --> "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB913580) --> "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB914388) --> "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB914389) --> "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB917344) --> "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB917422) --> "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB917953) --> "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB918118) --> "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB918439) --> "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB918899) --> "C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB919007) --> "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB920213) --> "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB920214) --> "C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB920670) --> "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB920683) --> "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB920685) --> "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB921398) --> "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB921883) --> "C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB922616) --> "C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB922760) --> "C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB922819) --> "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB923191) --> "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB923414) --> "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB923694) --> "C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB923980) --> "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB924191) --> "C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB924270) --> "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB924496) --> "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB924667) --> "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB925454) --> "C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB925486) --> "C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB926255) --> "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB926436) --> "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB927779) --> "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB927802) --> "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB928255) --> "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
Sicherheitsupdate für Windows XP (KB928843) --> "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
SimpleScreenshot 1.30 --> C:\WINDOWS\SSSUn.EXE /UnInst:"C:\WINDOWS\SimpleScreenshot_Uninstall.in"
SmartDraw 7 --> C:\PROGRA~1\SMARTD~2\UNWISE.EXE C:\PROGRA~1\SMARTD~2\INSTALL.LOG
SnagIt 8 --> MsiExec.exe /I{93699C3E-005E-4294-87CA-F5B7DE2CD687}
Sony Ericsson PC Suite --> MsiExec.exe /I{CB0EAA54-406C-4119-9A63-EDD0DC1B2B47}
SuperHTML Web Studio (Testversion) --> MsiExec.exe /I{C4F58B48-A23B-45E2-AED0-A5DE2F6BB6D8}
T-Online 6.0 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{B1275E23-717A-4D52-997A-1AD1E24BC7F3}\setup.exe" CPAS
Text-To-Speech-Runtime --> MsiExec.exe /X{7B3F0113-E63C-4D6D-AF19-111A3165CCA2}
Tor (remove only) --> "C:\Programme\Tor\Uninstall.exe"
Trust WB-1400T Webcam --> C:\PROGRA~1\GEMEIN~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{F6CE1230-A694-4B86-B21C-A11A112689DA} /l1031
Ulead PhotoImpact 11 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{C8550C86-A712-4219-AD4C-038C9FD1D149}\setup.exe" -l0x7
Update für Windows XP (KB894391) --> "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
Update für Windows XP (KB898461) --> "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
Update für Windows XP (KB900485) --> "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
Update für Windows XP (KB908531) --> "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
Update für Windows XP (KB910437) --> "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
Update für Windows XP (KB911280) --> "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
Update für Windows XP (KB916595) --> "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
Update für Windows XP (KB920872) --> "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
Update für Windows XP (KB922582) --> "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
Update für Windows XP (KB929338) --> "C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe"
Update für Windows XP (KB931836) --> "C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
VideoLAN VLC media player 0.8.5 --> C:\Programme\VideoLAN\VLC\uninstall.exe
Viewpoint Media Player --> C:\Programme\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
Virtual Sound Canvas DXi --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{4E10E7FC-36CD-4C22-AC20-9E15692E8C2F}\setup.exe" UNINSTALL_XXX
Windows Backup Utility --> MsiExec.exe /I{76EFFC7C-17A6-479D-9E47-8E658C1695AE}
Windows Defender --> MsiExec.exe /I{A06275F4-324B-4E85-95E6-87B2CD729401}
Windows Imaging Component --> "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
Windows Live Messenger --> MsiExec.exe /I{8DCBD4B1-DD30-4A9A-ADF7-FA3162B596C4}
Windows Live OneCare safety scanner --> RunDll32.exe "C:\Programme\Windows Live Safety Center\wlscCore.dll",UninstallFunction WLSC_SCANNER_PRODUCT
Windows Live Sign-in Assistant --> MsiExec.exe /I{F652D238-5F29-42D5-BAF3-0115EF977EC2}
Windows Media Encoder 9 Series --> msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Windows Media Encoder 9 Series --> MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
Windows Media Format 11 runtime --> "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
Windows Vista Upgrade Advisor --> MsiExec.exe /I{B79FBFDD-8B0C-4B8E-B70E-499E39978281}
Windows XP-Hotfix - KB834707 -->
Windows XP-Hotfix - KB873339 -->
Windows XP-Hotfix - KB883667 -->
Windows XP-Hotfix - KB885835 -->
Windows XP-Hotfix - KB885836 -->
Windows XP-Hotfix - KB885884 --> C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe
Windows XP-Hotfix - KB886185 -->
Windows XP-Hotfix - KB887472 --> C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
Windows XP-Hotfix - KB888302 --> C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
Windows XP-Hotfix - KB890859 --> "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
Windows XP-Hotfix - KB891781 --> C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
winpcap-nmap 3.1 --> "C:\Programme\WinPcap\uninstall.exe"
WinPcap 3.1 --> "C:\Programme\WinPcap\Uninstall.exe" "C:\Programme\WinPcap\install.log"
WinRAR Archivierer --> C:\Programme\WinRAR\uninstall.exe
WinZip --> "C:\Programme\WinZip\WINZIP32.EXE" /uninstall
WISE-FTP 4 --> RunDll32 C:\PROGRA~1\GEMEIN~1\INSTAL~1\PROFES~1\RunTime\10\01\Intel32\Ctor.dll,LaunchSetup "C:\Programme\InstallShield Installation Information\{9A9E5020-54CB-4F7F-AB7D-160807E374EA}\setup.exe" -l0x7 -removeonly
Xpage Internet Studio 6 Special Edition --> "C:\Programme\Xpage Internet Studio 6 Special Edition\Uninstall_Xpage Internet Studio 6 Special Edition\Uninstall Xpage Internet Studio 6 Special Edition.exe"
Yahoo! Messenger --> C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG
Yahoo! Toolbar mit Pop-Up-Blocker --> C:\PROGRA~1\Yahoo!\Common\unyt.exe


-- End of ComboScan: finished at 2007-03-18 at 10:17:10 ------------------------





Ich hoffe du kannst dort was finden, danke für die Hilfe.