Antispyware expert

#46 Ad-Aware SE Personal Lavasoft
Adobe Flash Player 10 ActiveX Adobe Systems Incorporated 10.0.12.36
Adobe Reader 7.0 - Deutsch Adobe Systems Incorporated 007.000.000
Adobe Shockwave Player Adobe Systems, Inc. 10.1.4.20
AOL Instant Messenger
Avira AntiVir Personal - Free Antivirus Avira GmbH
Canon iP3300
Canon iP3300 Benutzerregistrierung
CCleaner Piriform
DivX Codec DivX, Inc. 6.8.5
DivX Player 6.8.2
DivX Web Player DivX,Inc. 1.4.2
Free YouTube to iPod Converter version 2.5 DVD Video Soft Limited.
Google Earth Google 4.2.198.2451
HijackThis 2.0.2 TrendMicro 2.0.2
InCD
iPod for Windows 2005-09-23 Apple Computer, Inc. 4.3.0
iTunes Apple Computer, Inc. 5.0.1.4
J2SE Runtime Environment 5.0 Update 11 Sun Microsystems, Inc. 1.5.0.110
Java(TM) SE Runtime Environment 6 Update 1 Sun Microsystems, Inc. 1.6.0.10
Logitech Desktop Messenger 1.0.31
Logitech SetPoint 1.02
Malwarebytes' Anti-Malware Malwarebytes Corporation
MansionPoker
Microsoft .NET Framework 2.0 Service Pack 2 Microsoft Corporation 2.2.30729
Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU Microsoft Corporation 2.2.30729
Microsoft .NET Framework 3.0 Service Pack 2 Microsoft Corporation 3.2.30729
Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU Microsoft Corporation 3.2.30729
Microsoft .NET Framework 3.5 Language Pack SP1 - DEU Microsoft Corporation
Microsoft .NET Framework 3.5 SP1 Microsoft Corporation
Microsoft ActiveSync 3.8
Microsoft Office Professional Edition 2003 Microsoft Corporation 11.0.6361.0
Microsoft Office Visio Professional 2003 Microsoft Corporation 11.0.4301.6360
Microsoft Rechner-Plus Microsoft 1.0.0
Microsoft Silverlight Microsoft Corporation 2.0.40115.0
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Corporation 9.0.30729
Microsoft Windows Media Player Control for Pocket IE
movianVPN for Pocket PC 2003 O/S Evaluation Version
Mozilla Firefox (3.0.15) Mozilla 3.0.15 (de)
MSXML 6.0 Parser (KB933579) Microsoft Corporation 6.10.1200.0
Nero 6 Ultra Edition
NeroVision Express 3
PartyPoker PartyGaming 136
PokerStars PokerStars
PostgreSQL 8.3 PostgreSQL Global Development Group 8.3
PowerArchiver
QuickTime Apple Computer, Inc. 7.0.3
RealPlayer
SAMSUNG Mobile Modem Driver Set
Samsung Mobile phone USB driver Software
SAMSUNG Mobile USB Modem 1.0 Software
SAMSUNG Mobile USB Modem Software
Samsung PC Studio 3 USB Driver Installer Samsung Electronics Co., Ltd. 3.2.0.70701
Skype add-on for IE
Skype™ 3.8 Skype Technologies S.A. 3.8.139
Viewpoint Manager (Remove Only)
Viewpoint Media Player
Winamp (remove only)
Windows Installer 3.1 (KB893803) Microsoft Corporation 3.1
Windows Live Messenger Microsoft Corporation 8.1.0178.00
Windows XP Service Pack 2 Microsoft Corporation 20040803.231317

#47 Wenn dein Rechner wieder sauber ist braucht dein PC dringend updates

Wollen wir noch eins versuchen

Download MalAware (von Emsisoft) zum Desktop
Doppelklick MalAware.exe und scanne dein Rechner
Am Ende klicke Save log
Der Editor oeffnet sich und speichere das Log (scan_jjmmdd_xxxxxxxxx.txt) auf den Desktop
Poste dessen Inhalt hier im thread
Note:Wenn eine Meldung kommt “This scanner is outdated”klicke Nein
__________
MfG Argus

#48 Mit den updates das weiß ich , aber danke fuer den hinweis!


MalAware - Version 07.12.2009 22:14:41
Letztes Update: 07.12.2009 22:14:41

Scan Einstellungen:

Scan Methode: Schneller Scan
Objekte: Speicher, Traces
Säuberung: Aus
Scan Beginn: 08.12.2009 03:49:56

C:\Programme\PartyGaming\DM.dll PartyPoker
C:\Programme\PartyGaming\libeay32.dll PartyPoker
C:\Programme\PartyGaming\llh.dll PartyPoker
C:\Programme\PartyGaming\PartyCasino\PartyCasino.dll PartyPoker
C:\Programme\PartyGaming\PartyGaming.exe PartyPoker
C:\Programme\PartyGaming\PartyPoker\PartyPoker.dll PartyPoker
C:\Programme\PartyGaming\PartyPoker\ppunistall.bat PartyPoker
C:\Programme\PartyGaming\PartyPoker\RunApp.exe PartyPoker
C:\Programme\PartyGaming\ssleay32.dll PartyPoker
C:\Programme\PartyGaming\zlib1.dll PartyPoker
HKEY_LOCAL_MACHINE\software\classes\clsid\{9f95f736-0f62-4214-a4b4-caa6738d4c07} WhenU.SaveNow
HKEY_LOCAL_MACHINE\software\classes\interface\{c285d18d-43a2-4aef-83fb-bf280e660a97} WhenU.SaveNow
HKEY_LOCAL_MACHINE\software\classes\runmsc.loader.1\clsid WhenU.SaveNow
HKEY_LOCAL_MACHINE\software\classes\runmsc.loader\clsid WhenU.SaveNow
HKEY_LOCAL_MACHINE\software\classes\runmsc.loader\curver WhenU.SaveNow
HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}AppID dl.tvunetworks.com
HKEY_CLASSES_ROOT\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32ThreadingModel dl.tvunetworks.com
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}AppID dl.tvunetworks.com
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3EA4FA88-E0BE-419A-A732-9B79B87A6ED0}\InprocServer32ThreadingModel dl.tvunetworks.com
HKEY_LOCAL_MACHINE\software\Active Security AntiMalware
HKEY_LOCAL_MACHINE\software\AntiMalware AntiMalware

Gescannt

Dateien: 292
Traces: 47170
Cookies: 0
Prozesse: 33

Gefunden

Dateien: 0
Traces: 4
Cookies: 0
Prozesse: 0

Scan Ende: 08.12.2009 03:50:38
Scan Zeit: 00:00:41

#49 Da dieser Fake AntiMalware Program viele Onlinescanner blockiert solltest du mit DrWEb scannen
http://board.protecus.de/t29350.htm

Und jetzt geh ich ins Bett,muss in 5 Stunden schon wieder raus

Hier noch mehr Info http://www.bleepingcomputer.com/virus-removal/remove-antimalware
__________
MfG Argus

#50 PM ist unterwegs
__________
MfG Argus

#51 merci!
mcahe spaeter weiter...

#52 Hallo DanielSB

Werde übernehmen
Aber erst gegen Abend. Muss noch arbeiten

#53 Alles Klar


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:50:14, on 08.12.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\iPod\bin\iPodService.exe
C:\Programme\Gemeinsame Dateien\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\Explorer.EXE
C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe
C:\Programme\iTunes\iTunesHelper.exe
C:\Programme\AIM95\aim.exe
C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\Logitech\SetPoint\kem.exe
C:\PROGRAMME\LOGITECH\SETPOINT\KHALMNPR.EXE
C:\Programme\Microsoft ActiveSync\WCESMgr.exe
C:\Programme\Internet Explorer\iexplore.exe
C:\Programme\Microsoft Office\OFFICE11\OUTLOOK.EXE
C:\Programme\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.gesichterparty.de/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [TkBellExe] "C:\Programme\Gemeinsame Dateien\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Programme\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programme\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [AIM] C:\Programme\AIM95\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Skype] "C:\Programme\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Programme\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [VoipBuster] "C:\Programme\VoipBuster.com\VoipBuster\VoipBuster.exe" -nosplash -minimized
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-21-1409082233-1957994488-1202660629-1006\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'elephant')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader - Schnellstart.lnk = C:\Programme\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Programme\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Programme\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Programme\AIM95\aim.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\GEMEIN~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Programme\Avira\AntiVir Desktop\avguard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programme\Gemeinsame Dateien\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Programme\Ahead\InCD\InCDsrv.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programme\iPod\bin\iPodService.exe
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Programme\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Programme\Viewpoint\Common\ViewpointService.exe

--
End of file - 4937 bytes

#54 Muss jetzt weg!
bin erst wieder ab 20 uhr online

Gruß


GMER 1.0.15.15273 - http://www.gmer.net
Rootkit scan 2009-12-08 15:09:38
Windows 5.1.2600 Service Pack 2
Running: v69bijie[1].exe; Driver: C:\DOKUME~1\Daniel!\LOKALE~1\Temp\uwtdapod.sys


---- System - GMER 1.0.15 ----

Code 82A96460 ZwEnumerateKey
Code 82A3E960 ZwFlushInstructionCache
Code 829850EE IofCallDriver
Code 829CF8EE IofCompleteRequest

---- Kernel code sections - GMER 1.0.15 ----

.text ntoskrnl.exe!IofCallDriver 804E37C5 5 Bytes JMP 829850F3
.text ntoskrnl.exe!IofCompleteRequest 804E3BF6 5 Bytes JMP 829CF8F3
PAGE ntoskrnl.exe!ZwEnumerateKey 8056EEB0 5 Bytes JMP 82A96464
PAGE ntoskrnl.exe!ZwFlushInstructionCache 805769EA 5 Bytes JMP 82A3E964

---- Modules - GMER 1.0.15 ----

Module \systemroot\system32\drivers\H8SRTbmnrinvdci.sys (*** hidden *** ) F5863000-F587F000 (114688 bytes)

---- Services - GMER 1.0.15 ----

Service C:\WINDOWS\system32\drivers\H8SRTbmnrinvdci.sys (*** hidden *** ) [SYSTEM] H8SRTd.sys <-- ROOTKIT !!!

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys@start 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys@type 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys@imagepath \systemroot\system32\drivers\H8SRTbmnrinvdci.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys@group file system
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys\modules
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys\modules@H8SRTd \\?\globalroot\systemroot\system32\drivers\H8SRTbmnrinvdci.sys
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys\modules@H8SRTc \\?\globalroot\systemroot\system32\H8SRTsfoeppjpwq.dll
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys\modules@H8SRTsrcr \\?\globalroot\systemroot\system32\H8SRTelvllxgxcm.dat
Reg HKLM\SYSTEM\CurrentControlSet\Services\H8SRTd.sys\modules@h8srtserf \\?\globalroot\systemroot\system32\H8SRTeevttitetb.dll
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys@start 1
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys@type 1
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys@imagepath \systemroot\system32\drivers\H8SRTbmnrinvdci.sys
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys@group file system
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys\modules (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys\modules@H8SRTd \\?\globalroot\systemroot\system32\drivers\H8SRTbmnrinvdci.sys
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys\modules@H8SRTc \\?\globalroot\systemroot\system32\H8SRTsfoeppjpwq.dll
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys\modules@H8SRTsrcr \\?\globalroot\systemroot\system32\H8SRTelvllxgxcm.dat
Reg HKLM\SYSTEM\ControlSet003\Services\H8SRTd.sys\modules@h8srtserf \\?\globalroot\systemroot\system32\H8SRTeevttitetb.dll

---- Files - GMER 1.0.15 ----

File C:\Dokumente und Einstellungen\Daniel!\Lokale Einstellungen\Temp\flaF.tmp 0 bytes
File C:\Dokumente und Einstellungen\Daniel!\Lokale Einstellungen\Temp\H8SRT482f.tmp 343040 bytes executable
File C:\WINDOWS\Temp\H8SRTd1b5.tmp 194 bytes
File C:\WINDOWS\system32\h8srtcfg.dat 624 bytes
File C:\WINDOWS\system32\H8SRTeevttitetb.dll 40960 bytes executable
File C:\WINDOWS\system32\H8SRTelvllxgxcm.dat 195 bytes
File C:\WINDOWS\system32\H8SRTsfoeppjpwq.dll 23040 bytes executable
File C:\WINDOWS\system32\drivers\H8SRTbmnrinvdci.sys 39936 bytes executable <-- ROOTKIT !!!

---- EOF - GMER 1.0.15 ----

#55 Download RootRepeal zum Desktop

Doppelklicke die RootRepeal.exe, um den Scanner zu starten.
Klicke den Knopf Scan klicke OK
Mache einen Haken bei den folgenden Element File und klicke Ok.
Files
Im Anschluss wirst Du gefragt, welche Laufwerke gescannt werden sollen.
Wähle C:\ und klicke wieder Ok.
Der Suchlauf beginnt automatisch, es wird eine Weile dauern, bitte Geduld.
Wenn der Suchlauf beendet ist, klicke auf Save Report.
Speichere das Logfile als RootRepeal.txt auf dem Desktop.
Kopiere den Inhalt hier in den Thread.
__________
MfG Argus

#56 WEnn ich das Programm installieren will, haengt sich mein Rechner auf!

Kann es sein, dass der pc zu langsam fuer das prog ist?

#57 >>>
Lade den Avenger herunter und entzippe ihn auf den Desktop. Nicht gezippt direkt als EXE ist der Avenger hier erhältlich.

Starte die avenger.exe durch Doppelklick und akzeptiere mit OK die Nutzungsbedingungen. Füge den Inhalt der folgenden Codebox vollständig und unverändert bei "Input script here" ein und klicke auf "Execute". Beantworte die Frage, ob Du sicher bist, dass das Skript ausgeführt werden soll mit "Ja".

Code

drivers to disable:
H8SRTbmnrinvdci.sys
H8SRTd.sys

drivers to delete:
H8SRTbmnrinvdci.sys
H8SRTd.sys

Beantworte die Frage zum Neustart des Rechners (Reboot now?) ebenfalls mit "Ja". Nachdem der Rechner neu gestartet ist (das kann auch zweimal nötig sein und passieren!) und das DOS-Fenster, das der Avenger geöffnet hat, wieder geschlossen ist, öffnet Avenger Deinen Editor mit dem Avengerlog, zu finden auch unter C:\avenger.txt. Den Inhalt bitte posten. Ein Backup der entfernten Objekte wurde als C:\avenger\backup.zip angelegt.

>>>
Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
• Doppelklick auf die OTL.exe
• Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
• Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
• Unter Extra Registry, wähle bitte Use SafeList
• Klicke nun auf Run Scan links oben
• Wenn der Scan beendet wurde werden 2 Logfiles erstellt
• Poste die Logfiles in Code-Tags hier in den Thread.

#58

Code

.Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform:  Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.

Hidden driver "H8SRTd.sys" found!
ImagePath:  \systemroot\system32\drivers\H8SRTbmnrinvdci.sys 
Start Type:  4 (Disabled)

Rootkit scan completed.


Error:  could not open driver "H8SRTbmnrinvdci.sys"
Disablement of driver "H8SRTbmnrinvdci.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist

Driver "H8SRTd.sys" disabled successfully.

Error:  registry key "\Registry\Machine\System\CurrentControlSet\Services\H8SRTbmnrinvdci.sys" not found!
Deletion of driver "H8SRTbmnrinvdci.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist

Driver "H8SRTd.sys" deleted successfully.

Completed script processing.

*******************

Finished!  Terminate.

.

#59

Code

OTL Extras logfile created on: 09.12.2009 19:19:22 - Run 1
OTL by OldTimer - Version 3.1.12.0     Folder = C:\Dokumente und Einstellungen\Daniel!\Desktop
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.2180)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
383,53 Mb Total Physical Memory | 120,49 Mb Available Physical Memory | 31,42% Memory free
922,23 Mb Paging File | 627,23 Mb Available in Paging File | 68,01% Paging File free
Paging file location(s): C:\pagefile.sys 576 1152 [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Programme
Drive C: | 30,00 Gb Total Space | 19,94 Gb Free Space | 66,48% Space Free | Partition Type: NTFS
Drive D: | 44,56 Gb Total Space | 35,18 Gb Free Space | 78,95% Space Free | Partition Type: NTFS
E: Drive not present or media not loaded
F: Drive not present or media not loaded
G: Drive not present or media not loaded
H: Drive not present or media not loaded
I: Drive not present or media not loaded
 
Computer Name: DANIEL
Current User Name: Daniel!
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
[color=#E56717]========== Extra Registry (SafeList) ==========[/color]
 
 
[color=#E56717]========== File Associations ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\iexplore.exe File not found
 
[color=#E56717]========== Shell Spawning ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- "C:\Programme\Microsoft Office\OFFICE11\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome File not found
htmlfile [opennew] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 File not found
htmlfile [print] -- "C:\Programme\Microsoft Office\OFFICE11\msohtmed.exe" /p %1 (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome File not found
https [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" -nohome File not found
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\Winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Programme\Winamp\Winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Programme\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Programme\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[color=#E56717]========== Security Center Settings ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:*:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:*:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:*:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:*:Enabled:@xpsp2res.dll,-22002
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002
"1900:UDP" = 1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008
 
[color=#E56717]========== Authorized Applications List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]
"C:\Programme\MSN Messenger\msncall.exe" = C:\Programme\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -- File not found
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\AIM95\aim.exe" = C:\Programme\AIM95\aim.exe:*:Enabled:AOL Instant Messenger -- (America Online, Inc.)
"C:\Programme\LimeWire\LimeWire.exe" = C:\Programme\LimeWire\LimeWire.exe:*:Enabled:LimeWire -- File not found
"C:\Programme\Microsoft ActiveSync\wcescomm.exe" = C:\Programme\Microsoft ActiveSync\wcescomm.exe:*:Enabled:ActiveSync Connection Manager -- (Microsoft Corporation)
"C:\Programme\Microsoft ActiveSync\WCESMgr.exe" = C:\Programme\Microsoft ActiveSync\WCESMgr.exe:*:Enabled:ActiveSync Application -- (Microsoft Corporation)
"C:\Programme\Internet Explorer\iexplore.exe" = C:\Programme\Internet Explorer\iexplore.exe:*:Enabled:Internet Explorer -- (Microsoft Corporation)
"C:\Programme\VoipBuster.com\VoipBuster\VoipBuster.exe" = C:\Programme\VoipBuster.com\VoipBuster\VoipBuster.exe:*:Enabled:Client to make VoIP calls. -- File not found
"C:\Programme\AIM\aim.exe" = C:\Programme\AIM\aim.exe:*:Enabled:AOL Instant Messenger -- File not found
"C:\Programme\iTunes\iTunes.exe" = C:\Programme\iTunes\iTunes.exe:*:Enabled:iTunes -- (Apple Computer, Inc.)
"C:\Programme\Gemeinsame Dateien\AOL\Loader\aolload.exe" = C:\Programme\Gemeinsame Dateien\AOL\Loader\aolload.exe:*:Enabled:AOL Loader -- File not found
"C:\Programme\Gemeinsame Dateien\AOL\1154704329\ee\aolsoftware.exe" = C:\Programme\Gemeinsame Dateien\AOL\1154704329\ee\aolsoftware.exe:*:Enabled:AOL Services -- File not found
"C:\Programme\Gemeinsame Dateien\AOL\1154704329\ee\aim6.exe" = C:\Programme\Gemeinsame Dateien\AOL\1154704329\ee\aim6.exe:*:Enabled:AIM -- File not found
"C:\Programme\MSN Messenger\msncall.exe" = C:\Programme\MSN Messenger\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone) -- File not found
"D:\Eigene Dateien\TVUPlayer\TVUPlayer.exe" = D:\Eigene Dateien\TVUPlayer\TVUPlayer.exe:*:Enabled:TVU Player Component -- File not found
"C:\WINDOWS\system32\dpvsetup.exe" = C:\WINDOWS\system32\dpvsetup.exe:*:Enabled:Microsoft DirectPlay Voice Test -- (Microsoft Corporation)
"C:\Programme\MSN Messenger\livecall.exe" = C:\Programme\MSN Messenger\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone) -- (Microsoft Corporation)
"%windir%\explorer.exe" = %windir%\explorer.exe:*:Enabled:@xpsp2res.dll,-22019 -- (Microsoft Corporation)
"C:\Dokumente und Einstellungen\Daniel!\temp\TeamViewer\Version4\TeamViewer.exe" = C:\Dokumente und Einstellungen\Daniel!\temp\TeamViewer\Version4\TeamViewer.exe:*:Enabled:TeamViewer Remote Control Application -- (TeamViewer GmbH)
"C:\Programme\Tournament Indicator\Indicator.exe" = C:\Programme\Tournament Indicator\Indicator.exe:*:Enabled:Tournament Indicator -- File not found
"C:\Programme\Skype\Phone\Skype.exe" = C:\Programme\Skype\Phone\Skype.exe:*:Enabled:Skype -- (Skype Technologies S.A.)
 
 
[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{052FDD78-A6EA-3187-8386-C82F4CA3A929}" = Microsoft .NET Framework 3.5 Language Pack SP1 - deu
"{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_iP3300" = Canon iP3300
"{18D10072035C4515918F7E37EAFAACFC}" = AutoUpdate
"{1E04F83B-2AB9-4301-9EF7-E86307F79C72}" = Google Earth
"{279DB581-239C-4E13-97F8-0F48E40BE75C}" = Windows Live Messenger
"{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}" = Logitech SetPoint
"{3248F0A8-6813-11D6-A77B-00B0D0150110}" = J2SE Runtime Environment 5.0 Update 11
"{3248F0A8-6813-11D6-A77B-00B0D0160010}" = Java(TM) SE Runtime Environment 6 Update 1
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083}" = QuickTime
"{437C19B3-7E20-4E39-B868-CA6BAA820E1C}" = Microsoft Rechner-Plus
"{5C82DAE5-6EB0-4374-9254-BE3319BA4E82}" = Skype™ 3.8
"{78F4DFCE-1336-4027-BCB2-1A00C24A8653}" = iTunes
"{7B63B2922B174135AFC0E1377DD81EC2}" = DivX Codec
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8ADFC4160D694100B5B8A22DE9DCABD9}" = DivX Player
"{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}" = Logitech Desktop Messenger
"{90110407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Professional Edition 2003
"{90510407-6000-11D3-8CFE-0150048383C9}" = Microsoft Office Visio Professional 2003
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AC76BA86-7AD7-1031-7B44-A70000000000}" = Adobe Reader 7.0 - Deutsch
"{B7050CBDB2504B34BC2A9CA0A692CC29}" = DivX Web Player
"{B823632F-3B72-4514-8861-B961CE263224}" = PostgreSQL 8.3
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C2C284D2-6BD7-3B34-B0C5-B2CAED168DF7}" = Microsoft .NET Framework 3.0 Service Pack 2 Language Pack - DEU
"{C30DCBFD-20DE-4272-8A50-64292ABE662B}" = movianVPN for Pocket PC 2003 O/S Evaluation Version
"{C314CE45-3392-3B73-B4E1-139CD41CA933}" = Microsoft .NET Framework 2.0 Service Pack 2 Language Pack - DEU
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC}" = iPod for Windows 2005-09-23
"{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}" = Samsung PC Studio 3 USB Driver Installer
"Ad-Aware SE Personal" = Ad-Aware SE Personal
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Shockwave Player" = Adobe Shockwave Player
"AOL Instant Messenger" = AOL Instant Messenger
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Canon iP3300 Benutzerregistrierung" = Canon iP3300 Benutzerregistrierung
"[url="http://www.ccleaner.de"]CCleaner[/url]" = [url="http://www.ccleaner.de"]CCleaner[/url]
"Free YouTube to iPod Converter_is1" = Free YouTube to iPod Converter version 2.5
"HijackThis" = HijackThis 2.0.2
"InCD!UninstallKey" = InCD
"InstallShield_{3868A8EE-5051-4DB0-8DF6-4F4B8A98D083}" = QuickTime
"InstallShield_{78F4DFCE-1336-4027-BCB2-1A00C24A8653}" = iTunes
"InstallShield_{D4936AAF-FFD0-44A1-A7EA-A2DB41CEB5BC}" = iPod for Windows 2005-09-23
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Mansion Poker" = MansionPoker
"Microsoft .NET Framework 3.5 Language Pack SP1 - deu" = Microsoft .NET Framework 3.5 Language Pack SP1 - DEU
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mozilla Firefox (3.0.15)" = Mozilla Firefox (3.0.15)
"Nero - Burning Rom!UninstallKey" = Nero 6 Ultra Edition
"NeroVision!UninstallKey" = NeroVision Express 3
"PartyPoker" = PartyPoker
"PokerStars" = PokerStars
"PowerArchiver" = PowerArchiver
"RealPlayer 6.0" = RealPlayer
"SAMSUNG Mobile Modem" = SAMSUNG Mobile Modem Driver Set
"Samsung Mobile phone USB driver" = Samsung Mobile phone USB driver Software
"SAMSUNG Mobile USB Modem" = SAMSUNG Mobile USB Modem Software
"SAMSUNG Mobile USB Modem 1.0" = SAMSUNG Mobile USB Modem 1.0 Software
"ToolBand.SkypeIEToolbarToolbar" = Skype add-on for IE
"Viewpoint Manager" = Viewpoint Manager (Remove Only)
"ViewpointMediaPlayer" = Viewpoint Media Player
"WIC" = Windows Imaging Component
"Winamp" = Winamp (remove only)
"Windows CE Services" = Microsoft ActiveSync 3.8
"Windows Media Format Runtime" = Windows Media Format Runtime
"Windows Media Player" = Windows Media Player 10
"Windows XP Service Pack" = Windows XP Service Pack 2
"WMHHCEAll" = Microsoft Windows Media Player Control for Pocket IE
"XPSEPSCLP" = XML Paper Specification Shared Components Language Pack 1.0
 
[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
 
[color=#E56717]========== Last 10 Event Log Errors ==========[/color]
 
[ Application Events ]
Error - 08.12.2009 08:33:54 | Computer Name = DANIEL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 08.12.2009 08:34:59 | Computer Name = DANIEL | Source = Application Error | ID = 1004
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 08.12.2009 14:06:26 | Computer Name = DANIEL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 08.12.2009 14:13:54 | Computer Name = DANIEL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 08.12.2009 14:16:12 | Computer Name = DANIEL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 08.12.2009 14:23:39 | Computer Name = DANIEL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 09.12.2009 01:32:18 | Computer Name = DANIEL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 09.12.2009 01:51:00 | Computer Name = DANIEL | Source = Application Error | ID = 1004
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 09.12.2009 14:00:51 | Computer Name = DANIEL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
Error - 09.12.2009 14:04:07 | Computer Name = DANIEL | Source = Application Error | ID = 1000
Description = Fehlgeschlagene Anwendung ViewpointService.exe, Version 2.0.0.54, 
fehlgeschlagenes Modul ViewpointService.exe, Version 2.0.0.54, Fehleradresse 0x00002250.
 
[ System Events ]
Error - 09.12.2009 14:05:25 | Computer Name = DANIEL | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Avira AntiVir Planer" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1053
 
Error - 09.12.2009 14:05:25 | Computer Name = DANIEL | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Avira
 AntiVir Guard.
 
Error - 09.12.2009 14:05:25 | Computer Name = DANIEL | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Avira AntiVir Guard" wurde aufgrund folgenden Fehlers 
nicht gestartet:   %%1053
 
Error - 09.12.2009 14:05:25 | Computer Name = DANIEL | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst Viewpoint
 Manager Service.
 
Error - 09.12.2009 14:05:25 | Computer Name = DANIEL | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Viewpoint Manager Service" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1053
 
Error - 09.12.2009 14:05:25 | Computer Name = DANIEL | Source = Service Control Manager | ID = 7009
Description = Zeitüberschreitung (30000 ms) beim Verbindungsversuch mit Dienst IMAPI-CD-Brenn-COM-Dienste.
 
Error - 09.12.2009 14:05:25 | Computer Name = DANIEL | Source = Service Control Manager | ID = 7000
Description = Der Dienst "IMAPI-CD-Brenn-COM-Dienste" wurde aufgrund folgenden Fehlers
 nicht gestartet:   %%1053
 
Error - 09.12.2009 14:16:00 | Computer Name = DANIEL | Source = ACPI | ID = 327685
Description = AMLI: ACPI-BIOS versucht, in eine ungültige E/A-Portadresse (0xcf8)
 zu schreiben, die sich in "0xcf8 - 0xcff", einem  geschützten Adressbereich befindet.
 Dies kann zu Systeminstabilität führen. Wenden Sie sich an den Systemhersteller,
um
 technische Unterstützung zu erhalten.
 
Error - 09.12.2009 14:16:00 | Computer Name = DANIEL | Source = ACPI | ID = 327684
Description = AMLI: ACPI-BIOS versucht, von einer ungültigen E/A-Portadresse (0xcfc)
 zu lesen, die sich in "0xcf8 - 0xcff", einem  geschützten Adressbereich, befindet.
 Dies kann zu Systeminstabilität führen. Wenden Sie sich and den Systemhersteller,
um
 technische Unterstützung zu erhalten.
 
Error - 09.12.2009 14:17:31 | Computer Name = DANIEL | Source = Service Control Manager | ID = 7024
Description = Der Dienst "InCD Helper" wurde mit folgendem dienstspezifischem Fehler
 beendet: 1 (0x1).
 
 
< End of report >

#60 Das sind die gleichen Logs Es sollten zwei verschiedene sein