| |
| |||||||
Log-Analyse und Auswertung: Fehlermeldung "Bezahlen und installieren" mit Windows 7Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
29.12.2011, 10:27
| #1 |
| |  Fehlermeldung "Bezahlen und installieren" mit Windows 7 Hallo liebe Helfer! Auch meinen Laptop hat es nun erwischt, kurz nachdem ich mich mit dem Internet verbinde erschreint ein schwarzer Bildschirm mit der Aufforderung ein Update runterzuladen und zu installieren, welches 50 Euro kosten soll. Ich hoffe, ihr könnt mir helfen. Geändert von Stoffel1983 (29.12.2011 um 11:04 Uhr) |
|
29.12.2011, 11:06
| #2 |
| | Fehlermeldung "Bezahlen und installieren" mit Windows 7 OTL ist leider zu groß zum hochladenOTL Logfile:
__________________Code:
ATTFilter OTL logfile created on: 29.12.2011 10:40:17 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = G:\ 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy 3,80 Gb Total Physical Memory | 2,55 Gb Available Physical Memory | 67,08% Memory free 7,60 Gb Paging File | 5,75 Gb Available in Paging File | 75,62% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 282,08 Gb Total Space | 23,65 Gb Free Space | 8,38% Space Free | Partition Type: NTFS Drive D: | 15,72 Gb Total Space | 2,27 Gb Free Space | 14,41% Space Free | Partition Type: NTFS Drive E: | 6,30 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive F: | 3,60 Gb Total Space | 3,60 Gb Free Space | 100,00% Space Free | Partition Type: FAT32 Drive G: | 1,86 Gb Total Space | 0,64 Gb Free Space | 34,19% Space Free | Partition Type: FAT32 Computer Name: BESITZER-HP | User Name: Melanie | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.12.29 09:59:18 | 000,584,192 | ---- | M] (OldTimer Tools) -- G:\OTL.exe PRC - [2011.07.05 16:24:34 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011.04.30 06:15:19 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2011.02.26 07:23:14 | 000,102,400 | ---- | M] (Mozilla Foundation) -- C:\Users\Melanie\AppData\Roaming\Microsoft\dllhsts.exe PRC - [2011.02.04 15:32:02 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe PRC - [2010.12.21 17:44:50 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2010.07.02 10:51:16 | 000,027,192 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe PRC - [2010.07.02 10:48:24 | 000,602,680 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe PRC - [2010.04.23 11:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe PRC - [2010.04.13 08:57:58 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010.04.13 08:57:56 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010.03.18 20:57:02 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2010.03.18 20:56:56 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010.01.16 18:02:38 | 000,436,752 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McUICnt.exe PRC - [2010.01.15 13:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe PRC - [2009.10.12 10:45:12 | 000,312,784 | ---- | M] () -- C:\Program Files (x86)\3DataManager\WTGService.exe PRC - [2009.09.05 17:29:06 | 000,385,024 | ---- | M] (shbox.de) -- C:\Program Files (x86)\FreePDF_XP\fpassist.exe PRC - [2009.04.30 11:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ========== Modules (No Company Name) ========== MOD - [2011.10.14 13:07:37 | 000,452,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\8762c6ea69969fd8563f7922a16adc17\IAStorUtil.ni.dll MOD - [2011.10.14 13:03:40 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\018d2569cf208acbe8ad73908705f607\System.Runtime.Remoting.ni.dll MOD - [2011.10.14 13:03:11 | 012,431,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d76221993c2fdfb991b8c12ae50a30eb\System.Windows.Forms.ni.dll MOD - [2011.10.14 13:03:04 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e245eb9c1067cabd5673fe832d28613\System.Drawing.ni.dll MOD - [2011.10.14 13:02:49 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\3136e12cfb8809d39813e76c766c782c\WindowsBase.ni.dll MOD - [2011.10.14 13:02:43 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll MOD - [2011.10.14 13:02:39 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll MOD - [2011.10.14 13:02:38 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll MOD - [2011.10.14 13:02:28 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll MOD - [2010.07.17 19:46:33 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll MOD - [2010.07.17 19:46:31 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2010.05.19 09:05:58 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll MOD - [2010.05.19 09:05:58 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll MOD - [2010.05.19 09:05:58 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010.06.18 15:26:18 | 000,103,992 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe -- (HP Wireless Assistant Service) SRV:64bit: - [2010.06.17 14:54:20 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) [Auto | Running] -- C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe -- (RtVOsdService) SRV - [2011.07.05 16:24:34 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011.05.21 09:51:59 | 000,079,360 | ---- | M] (SolidWorks) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe -- (SolidWorks Licensing Service) SRV - [2011.04.30 06:15:19 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2011.02.04 15:32:02 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010.07.02 10:51:16 | 000,027,192 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC) SRV - [2010.04.13 08:57:58 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R) SRV - [2010.04.04 00:01:24 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2010.03.18 20:57:02 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2010.03.18 20:56:56 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010.01.15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009.11.18 03:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Programme\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters) SRV - [2009.10.12 10:45:12 | 000,312,784 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\3DataManager\WTGService.exe -- (WTGService) SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009.04.30 11:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011.07.05 16:24:35 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:64bit: - [2011.07.05 16:24:34 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:64bit: - [2011.03.11 07:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 07:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.01.11 18:20:51 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri) DRV:64bit: - [2011.01.11 18:20:34 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:64bit: - [2011.01.11 18:20:34 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:64bit: - [2010.12.25 11:05:03 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:64bit: - [2010.12.25 11:05:03 | 000,114,560 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbdev.sys -- (hwusbdev) DRV:64bit: - [2010.09.29 14:26:00 | 003,063,360 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:64bit: - [2010.08.25 19:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2010.06.23 09:10:56 | 000,344,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2010.05.27 22:32:56 | 000,320,560 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2010.04.13 08:44:22 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2010.02.03 15:38:30 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R) DRV:64bit: - [2009.09.23 02:39:56 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:64bit: - [2009.09.17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.07.14 00:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2009.06.20 03:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2009.06.10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:64bit: - [2009.06.10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:64bit: - [2009.06.10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:64bit: - [2009.06.10 22:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:64bit: - [2009.06.10 21:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:64bit: - [2009.06.10 21:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R) DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.03.25 16:48:00 | 000,153,128 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdm.sys -- (s1018mdm) DRV:64bit: - [2009.03.25 16:48:00 | 000,146,472 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) DRV:64bit: - [2009.03.25 16:48:00 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) DRV:64bit: - [2009.03.25 16:48:00 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018obex.sys -- (s1018obex) DRV:64bit: - [2009.03.25 16:48:00 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM) DRV:64bit: - [2009.03.25 16:48:00 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) DRV:64bit: - [2009.03.25 16:48:00 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdfl.sys -- (s1018mdfl) DRV - [2010.12.25 11:05:03 | 000,114,560 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\ewusbdev.sys -- (hwusbdev) DRV - [2009.09.23 02:39:56 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV - [2009.09.10 15:31:56 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = HP | MSN IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = HP | MSN IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Upgrade to Google Chrome IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome IE - HKCU\..\URLSearchHook: {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files (x86)\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: c:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Creative Software Inc) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) [2011.06.28 17:39:59 | 000,024,683 | ---- | M] (Ask.com) -- C:\Program Files (x86)\mozilla firefox\plugins\NPAskSBr.dll O1 HOSTS File: ([2010.12.21 14:33:35 | 000,427,737 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 Scan | Free Anti Virus | Bitdefender | Malware | Avast | Avg | Spyware Removal | Adware at 0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 123fporn.info O1 - Hosts: 14727 more lines... O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (Ask Search Assistant BHO) - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files (x86)\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com) O2 - BHO: (Ask Toolbar BHO) - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe () O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe File not found O4 - HKLM..\Run: [FreePDF Assistant] C:\Program Files (x86)\FreePDF_XP\fpassist.exe (shbox.de) O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKCU..\Run: [{7B7EAB26-0CE2-11E0-BB84-806E6F6E6963}] C:\Users\Melanie\AppData\Roaming\Microsoft\dllhsts.exe (Mozilla Foundation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C9DA838F-7911-4B4A-8724-39607CAE0A3F}: NameServer = 213.94.78.16 213.94.78.17 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D8C11FF8-4B80-4DF6-ACBC-EE6D42770822}: DhcpNameServer = 192.168.43.1 O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{3394bf82-1f3c-11e0-97f0-ca811793646e}\Shell - "" = AutoRun O33 - MountPoints2\{3394bf82-1f3c-11e0-97f0-ca811793646e}\Shell\AutoRun\command - "" = G:\Startme.exe O33 - MountPoints2\{391e79e2-100e-11e0-9881-c0cb382f6dfb}\Shell - "" = AutoRun O33 - MountPoints2\{391e79e2-100e-11e0-9881-c0cb382f6dfb}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\{410d23f0-119e-11e0-9a84-c0cb382f6dfb}\Shell - "" = AutoRun O33 - MountPoints2\{410d23f0-119e-11e0-9a84-c0cb382f6dfb}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\{80447f10-1249-11e0-99df-b18970f09977}\Shell - "" = AutoRun O33 - MountPoints2\{80447f10-1249-11e0-99df-b18970f09977}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\{8f8bb864-100e-11e0-b470-c0cb382f6dfb}\Shell - "" = AutoRun O33 - MountPoints2\{8f8bb864-100e-11e0-b470-c0cb382f6dfb}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\G\Shell - "" = AutoRun O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\.\Autorun.exe AUTORUN=1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe" ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1 ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 10.1 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP MsConfig:64bit - StartUpReg: HPAdvisorDock - hkey= - key= - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe () MsConfig:64bit - State: "startup" - Reg Error: Key error. CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2011.12.29 10:13:35 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{B4DE1409-ED41-4464-9D27-B5305F51774A} [2011.12.25 09:20:21 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8E3A970C-E6E8-472B-BB93-144CF56CA41A} [2011.12.24 19:17:11 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{4266FDBE-8439-4318-906E-D6FBC2DB023E} [2011.12.24 07:16:47 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9D620DD1-3128-46BA-BDD9-1B8BE147CF15} [2011.12.24 07:15:12 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{C2C432A1-76EE-489F-AF85-EDA534AB24AA} [2011.12.23 22:34:12 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{3E3E87F0-805E-42B7-92EE-9A73BC129105} [2011.12.23 16:00:07 | 000,016,200 | ---- | C] (McAfee, Inc.) -- C:\Windows\stinger.sys [2011.12.23 10:33:53 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9075A6EC-25FD-46F2-B5F7-072A5C705120} [2011.12.23 10:33:51 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A5E9DF31-9268-4B2F-A255-52930248D562} [2011.12.23 10:33:49 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8D63F849-BD8E-4AFA-A04A-911C068884EC} [2011.12.23 10:32:47 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E8C21FDD-7656-4E26-B9F6-63D282B3A586} [2011.12.22 14:33:24 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E2ECF56B-6C31-4418-89AA-ADD1C09D2336} [2011.12.22 14:33:21 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{43722931-70A8-400F-BCA2-2CDEA43F181A} [2011.12.22 14:29:10 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9B73E5B2-9594-4A42-8FDE-381C22B55F99} [2011.12.22 11:00:26 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{AB44F698-F98A-41D4-90E3-880E1642EDFB} [2011.12.22 07:04:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{5B85B762-DE63-479A-ADB2-F61D247A923A} [2011.12.21 19:44:29 | 000,000,000 | ---D | C] -- C:\Users\Melanie\Desktop\Kalligraphie [2011.12.21 18:29:25 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{4A9B9E31-1CED-4C61-8F0E-B2E21B2F9E72} [2011.12.21 18:29:15 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{ECECD0A4-6836-4480-83A2-BEAC190280DF} [2011.12.21 18:29:09 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{CF50EDAA-7FC6-443C-AA02-2982117678EF} [2011.12.21 18:28:34 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{CE52506C-374C-49BC-83AC-B6CF5DA525B5} [2011.12.20 13:49:12 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{482890B5-0FFD-449B-811D-AC5E3AA2FA31} [2011.12.20 13:47:09 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{C9AC0274-6A18-4E31-9FA6-9217A3226FCF} [2011.12.19 20:17:06 | 000,000,000 | ---D | C] -- C:\Users\Melanie\Desktop\Neuer Ordner [2011.12.19 16:46:32 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{07B9D05A-4F4A-46B2-8597-B483ECA604DA} [2011.12.19 16:46:28 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{564F7157-0837-40A6-ADF6-C1AF32E8F9B6} [2011.12.19 16:46:24 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{C9886F9A-C2CF-4A09-BC5C-34929612BEAC} [2011.12.19 16:43:37 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{6CCE7C6B-888F-4DA3-A674-7C9ED2FD7CAB} [2011.12.18 14:03:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{5226F7D7-061C-4B9F-8A5E-42E322917D99} [2011.12.18 14:03:26 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{2B00CFBA-7E16-494D-82DD-D07BD47A7491} [2011.12.18 14:02:39 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{58873B82-53A5-44BA-9AF8-39C587DE9C73} [2011.12.18 08:42:00 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{AA95FC52-1607-4B14-A1E5-DC8446589B2C} [2011.12.17 20:24:43 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9BBEE408-A96F-49FD-9469-E05B0E005E27} [2011.12.17 08:24:13 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{1A853848-EB16-46C9-B453-E88E007EB4FF} [2011.12.17 08:23:06 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{FC38D65F-9C45-4EEC-8CE8-C69C8856D615} [2011.12.16 18:37:14 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{2A963B25-A1CB-43D5-9486-D20F133450E9} [2011.12.16 18:36:08 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{66EFB3B2-1A59-4AE9-BBF2-EA5B40D9BE4E} [2011.12.16 13:24:56 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{1431528A-602C-44C8-8916-15A1513532E8} [2011.12.15 07:37:42 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{63826A7D-F8E0-4B45-A75A-52A3EF445E21} [2011.12.15 07:37:40 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8C283677-64AF-4435-A474-4DA186223FA7} [2011.12.15 07:37:21 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{D7FB4F26-BBF9-45A6-9D30-EC3E7FD3FC11} [2011.12.15 07:36:47 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{F613507C-29BC-48C3-BA8E-1A409360B1F7} [2011.12.14 20:47:40 | 000,000,000 | ---D | C] -- C:\Users\Melanie\Desktop\Oma [2011.12.14 09:33:45 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{67DE2EAD-5110-4A73-BB51-FB95D495F6D8} [2011.12.14 09:33:41 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9A469D07-EA33-419C-9AC6-A009ECD6E3E6} [2011.12.14 09:21:57 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8AFC1481-07EC-41F7-8B7D-5646D36010E9} [2011.12.14 08:03:07 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8E1F7189-D03E-4BDE-BD70-43D4021975A0} [2011.12.13 09:03:32 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{34BD0A82-1116-45C8-93F9-A063C5D79652} [2011.12.13 09:03:29 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{D961C47C-3080-4E1E-B97C-EE21C76B7ED0} [2011.12.13 09:03:27 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{75137F38-10AB-4BCA-AEBC-B350E4AEAC18} [2011.12.13 09:03:22 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{17B894CE-7ADE-4BE5-924C-6E0642E062A9} [2011.12.12 21:03:05 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A456E8DF-8B45-4B72-831E-6D2757E242F7} [2011.12.12 21:02:56 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{6106FCEA-F2B8-4648-B6EF-57D164BB3C19} [2011.12.12 09:02:39 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{020F9144-8A43-4022-8B01-DFD9EAF96663} [2011.12.12 09:02:37 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{DB16066E-C5AC-4EDB-B4B3-020B60563DF9} [2011.12.12 07:22:58 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{AFB611E1-110C-4F84-A9E9-1314EBC3D928} [2011.12.11 07:27:55 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{124B2E4A-8121-445A-9531-E30F015572E7} [2011.12.11 07:26:35 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{C0B0C912-BBD5-496F-AF86-34823B1CE9E2} [2011.12.10 11:12:49 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E2A146F7-1D25-4BDE-9421-F872433CF224} [2011.12.10 11:11:16 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{66C1955E-126B-4357-A011-3434CBBE71B9} [2011.12.09 15:01:30 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{67DDB368-2375-4B22-95C1-A333F20C7AAC} [2011.12.08 10:09:19 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{5400887F-09EF-4262-AE35-F17EC5F8DEA1} [2011.12.08 10:07:59 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{026285FF-1EB8-4E70-A41C-DE530542B3FD} [2011.12.07 19:33:53 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{B123BC4C-9FC2-4AF7-AEA5-0160A8B5B836} [2011.12.07 19:33:46 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{14656086-B0E7-44B8-97B7-02FCD3554831} [2011.12.07 07:33:20 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A7B1DE72-1348-4B4E-BEEE-1166C4B1DB56} [2011.12.07 07:32:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{7F480852-2C69-47A2-9A06-30B297D56B52} [2011.12.06 14:06:46 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{55461443-7DE0-4F25-9C7D-049E5EFB0BD6} [2011.12.06 14:06:44 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{7944DF64-81D5-40B4-AC02-B0470749C305} [2011.12.06 13:49:19 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9FF378D3-0F76-45A9-BAA4-E4CCAF8BB05D} [2011.12.06 08:22:45 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{344229AD-3A98-4E45-AB4D-6821E0225644} [2011.12.06 08:19:11 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{427918FB-4745-45CA-8D54-5FEB12E69B1C} [2011.12.05 20:18:55 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A9264B01-3C0D-456C-B383-CA4BA5D37D81} [2011.12.05 20:15:52 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{EEC4F366-3DCC-485C-AEEB-6D08C5E7EA1D} [2011.12.05 08:15:36 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8775383A-E006-4F5C-9735-09A3B713181B} [2011.12.05 08:15:34 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{602B0339-652D-4E37-8DEA-7985FCCDA4A9} [2011.12.05 08:15:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{4171BC5F-FFC2-4E7C-A693-0C97DF14BEF2} [2011.12.05 08:15:27 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{D0582C9C-0931-4361-B854-BD7B0351EC25} [2011.12.04 20:15:09 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E38BE7EA-EEC1-4EC0-BBDA-5C08DBF963FC} [2011.12.04 20:14:07 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{F8E449C2-53F1-45F3-8AEF-911B13316921} [2011.12.04 08:13:27 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{054BFAB3-E0AC-47A0-B57C-E572F2054FAC} [2011.12.03 21:37:33 | 000,000,000 | ---D | C] -- C:\Users\Melanie\Documents\Sony Ericsson [2011.12.03 21:32:10 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\ProgramData\hpeD5F6.dll [2011.12.03 21:24:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avanquest update [2011.12.03 21:24:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest [2011.12.03 21:24:12 | 000,000,000 | ---D | C] -- C:\ProgramData\BVRP Software [2011.12.03 20:13:11 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{BDA1F246-9F47-4638-A5EC-B62BDBC038F1} [2011.12.03 20:13:08 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{03326FDC-986F-4139-8FCF-A56D226ED0E8} [2011.12.03 20:13:06 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{85355FCC-B146-4708-A588-6FDB519CC3BC} [2011.12.03 20:13:03 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{B58F16A9-2CDF-48E7-AB79-D2127C621FB4} [2011.12.03 08:12:45 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{79C4D86D-752F-4A66-8244-CE8A3022C319} [2011.12.03 08:11:35 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{2FB6220B-FDEF-46A7-8045-7F17F6D0A7A8} [2011.12.02 14:25:48 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{950D60A7-3F80-47A7-B0CE-102C439191ED} [2011.12.02 14:22:15 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{35A7BB2F-DE3C-4C0E-A712-6DCDA3C5E6E7} [2011.12.02 12:17:54 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{223B3896-BA27-4847-8EAB-FFA4D4373E97} [2011.12.01 07:58:32 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{3DBDF462-CDE6-4D32-880E-AA7BF5169846} [2011.12.01 07:57:19 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{BE81199E-09AB-4106-9C4C-AC4975BA9286} [2011.11.30 18:08:07 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{DD2F633C-B248-4397-B372-1CE08AF2C2F3} [2011.11.30 18:08:03 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{59AB754E-7353-496A-9FF8-38A31AC3C890} [2011.11.30 06:07:44 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{990BEC23-7267-4E30-B71A-8EA081A6419A} [2011.11.30 06:06:40 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{B70C4F3E-B950-4C51-A4FF-08CEAEF5E360} [1 C:\Users\Melanie\Desktop\*.tmp files -> C:\Users\Melanie\Desktop\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.12.29 10:44:06 | 001,507,342 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.12.29 10:44:06 | 000,657,910 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2011.12.29 10:44:06 | 000,619,146 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.12.29 10:44:06 | 000,131,250 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2011.12.29 10:44:06 | 000,107,466 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.12.29 10:20:20 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.12.29 10:20:20 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.12.29 10:12:47 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.12.29 10:12:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.12.29 10:12:11 | 3062,255,616 | -HS- | M] () -- C:\hiberfil.sys [2011.12.25 10:51:11 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.12.23 16:00:07 | 000,016,200 | ---- | M] (McAfee, Inc.) -- C:\Windows\stinger.sys [2011.12.22 07:03:42 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForMelanie.job [2011.12.19 18:10:37 | 000,024,471 | ---- | M] () -- C:\Users\Melanie\Desktop\1194985207511978749calzettoni.svg.med.png [2011.12.14 19:26:27 | 000,432,648 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011.12.11 09:58:45 | 000,024,032 | ---- | M] () -- C:\Users\Melanie\Desktop\groessentabelle_socken.gif [2011.12.03 21:32:10 | 000,148,736 | ---- | M] (Avanquest Software) -- C:\ProgramData\hpeD5F6.dll [1 C:\Users\Melanie\Desktop\*.tmp files -> C:\Users\Melanie\Desktop\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.12.19 18:10:36 | 000,024,471 | ---- | C] () -- C:\Users\Melanie\Desktop\1194985207511978749calzettoni.svg.med.png [2011.12.11 09:58:40 | 000,024,032 | ---- | C] () -- C:\Users\Melanie\Desktop\groessentabelle_socken.gif [2011.09.28 18:02:20 | 000,041,021 | R-S- | C] () -- C:\Users\Melanie\AppData\Roaming\igfxtray.dat [2011.09.28 18:02:17 | 000,000,253 | -H-- | C] () -- C:\Users\Melanie\AppData\Roaming\wndsksi.inf [2011.06.28 13:51:17 | 000,000,000 | ---- | C] () -- C:\Users\Melanie\AppData\Local\{B97A963C-44CB-467E-B4B7-3EE18883ABBF} [2011.05.25 08:52:26 | 000,000,000 | ---- | C] () -- C:\Users\Melanie\AppData\Local\{FCC8B979-13AA-4E66-AEA2-1D3391993287} [2011.05.21 09:52:00 | 000,000,000 | ---- | C] () -- C:\Windows\eDrawingOfficeAutomator.INI [2011.02.23 17:58:00 | 000,001,854 | ---- | C] () -- C:\Users\Melanie\AppData\Roaming\GhostObjGAFix.xml [2011.01.25 16:45:19 | 001,526,948 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011.01.11 16:37:41 | 000,003,584 | ---- | C] () -- C:\Users\Melanie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.12.21 14:13:34 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010.09.29 14:25:27 | 000,000,268 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini [2010.09.29 14:25:27 | 000,000,209 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini [2010.09.29 14:23:30 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010.08.25 19:34:30 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin [2010.08.25 19:34:30 | 000,104,796 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin [2010.07.17 13:17:50 | 000,000,202 | ---- | C] () -- C:\Windows\SysWow64\HPWA.ini [2010.07.17 12:27:48 | 000,009,988 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat [2010.07.17 10:47:25 | 000,000,186 | ---- | C] () -- C:\Windows\SysWow64\HP Documentation.ini [2010.05.14 19:27:50 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin [2010.05.14 18:16:12 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll [2010.05.14 18:16:12 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll [2010.02.09 17:58:12 | 000,012,800 | ---- | C] () -- C:\Windows\LPRES.DLL [2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:59:36 | 001,498,564 | ---- | C] () -- C:\Windows\SysWow64\igkrng400.bin [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [1997.06.14 09:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll ========== LOP Check ========== [2011.12.22 07:08:52 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\3DataManager [2011.05.21 09:54:52 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\DassaultSystemes [2011.05.21 10:21:12 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\EDrawings [2011.06.28 17:45:19 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\FrostWire [2011.12.12 21:12:31 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\HartlauerFotoService3 [2011.09.28 18:02:16 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\MicroST [2010.12.25 11:05:05 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Program Files (x86) [2011.04.03 14:01:53 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Sony [2011.04.03 14:01:01 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Sony Setup [2011.01.11 17:47:43 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\WildTangent [2011.04.12 13:10:09 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Windows Live Writer [2011.12.06 13:48:36 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2011.01.10 18:36:45 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin [2010.07.17 23:34:26 | 000,000,000 | -HSD | M] -- C:\boot [2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2010.12.21 10:14:53 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2010.09.29 14:51:46 | 000,000,000 | -H-D | M] -- C:\HP [2010.09.29 14:27:46 | 000,000,000 | ---D | M] -- C:\Intel [2010.12.21 14:17:57 | 000,000,000 | RH-D | M] -- C:\MSOCache [2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs [2010.12.21 17:21:42 | 000,000,000 | ---D | M] -- C:\persönlich [2011.08.16 18:23:03 | 000,000,000 | R--D | M] -- C:\Program Files [2011.12.03 21:24:36 | 000,000,000 | R--D | M] -- C:\Program Files (x86) [2011.12.24 08:49:13 | 000,000,000 | -H-D | M] -- C:\ProgramData [2010.12.21 10:14:53 | 000,000,000 | -HSD | M] -- C:\Programme [2010.12.21 10:15:43 | 000,000,000 | -HSD | M] -- C:\Recovery [2011.03.30 18:44:48 | 000,000,000 | ---D | M] -- C:\SwSetup [2011.12.29 10:42:20 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2010.12.21 10:15:47 | 000,000,000 | -H-D | M] -- C:\SYSTEM.SAV [2011.01.22 08:15:38 | 000,000,000 | R--D | M] -- C:\Users [2011.12.24 08:49:42 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.manifest /3 > < MD5 for: AFD.SYS > [2011.04.25 03:44:02 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=6EF20DDF3172E97D69F596FB90602F29 -- C:\Windows\SysNative\drivers\afd.sys [2011.04.25 03:44:02 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=6EF20DDF3172E97D69F596FB90602F29 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16802_none_3430bc3977dfec2d\afd.sys [2009.07.14 00:21:42 | 000,500,224 | ---- | M] (Microsoft Corporation) MD5=B9384E03479D2506BC924C16A3DB87BC -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_33dd3439781e25f7\afd.sys [2010.11.20 10:23:34 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=D31DC7A16DEA4A9BAF179F3D6FBDB38C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991\afd.sys [2011.04.25 03:34:03 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=D5B031C308A409A0A576BFF4CF083D30 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_3618198975057170\afd.sys [2011.04.25 04:09:35 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=F4AD06143EAC303F55D0E86C40802976 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_3695e61e8e2c13d4\afd.sys [2011.04.25 03:44:27 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=FBFF8B7C9D116229E9208A0D1CAEB49B -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.20951_none_3483491e9126fe55\afd.sys < MD5 for: EXPLORER.EXE > [2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe [2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe [2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe [2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe [2010.07.17 19:56:45 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe [2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SysWOW64\explorer.exe [2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe [2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe [2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe [2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe [2010.07.17 19:52:23 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe [2010.07.17 19:56:45 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe [2010.07.17 19:52:23 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe [2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe [2010.07.17 19:56:45 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe [2010.07.17 19:52:23 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe [2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe [2010.07.17 19:56:45 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe [2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe [2010.07.17 19:52:23 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe < MD5 for: REGEDIT.EXE > [2009.07.14 02:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=2E2C937846A0B8789E5E91739284D17A -- C:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e\regedit.exe [2009.07.14 02:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\regedit.exe [2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\SysWOW64\regedit.exe [2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\winsxs\wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5a78515e29ea6f39\regedit.exe < MD5 for: USERINIT.EXE > [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe [2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe [2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe < MD5 for: WININIT.EXE > [2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe [2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe [2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe [2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe < MD5 for: WINLOGON.EXE > [2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe [2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2010.07.17 19:56:45 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2010.07.17 19:56:45 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe [2010.07.17 19:56:45 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > < End of report > |
|
29.12.2011, 11:08
| #3 |
| | Fehlermeldung "Bezahlen und installieren" mit Windows 7 OTL ist leider zu groß zum hochladenOTL Logfile:
__________________Code:
ATTFilter OTL logfile created on: 29.12.2011 10:40:17 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = G:\ 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy 3,80 Gb Total Physical Memory | 2,55 Gb Available Physical Memory | 67,08% Memory free 7,60 Gb Paging File | 5,75 Gb Available in Paging File | 75,62% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 282,08 Gb Total Space | 23,65 Gb Free Space | 8,38% Space Free | Partition Type: NTFS Drive D: | 15,72 Gb Total Space | 2,27 Gb Free Space | 14,41% Space Free | Partition Type: NTFS Drive E: | 6,30 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF Drive F: | 3,60 Gb Total Space | 3,60 Gb Free Space | 100,00% Space Free | Partition Type: FAT32 Drive G: | 1,86 Gb Total Space | 0,64 Gb Free Space | 34,19% Space Free | Partition Type: FAT32 Computer Name: BESITZER-HP | User Name: Melanie | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.12.29 09:59:18 | 000,584,192 | ---- | M] (OldTimer Tools) -- G:\OTL.exe PRC - [2011.07.05 16:24:34 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe PRC - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011.04.30 06:15:19 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe PRC - [2011.02.26 07:23:14 | 000,102,400 | ---- | M] (Mozilla Foundation) -- C:\Users\Melanie\AppData\Roaming\Microsoft\dllhsts.exe PRC - [2011.02.04 15:32:02 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe PRC - [2010.12.21 17:44:50 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe PRC - [2010.07.02 10:51:16 | 000,027,192 | ---- | M] () -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe PRC - [2010.07.02 10:48:24 | 000,602,680 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe PRC - [2010.04.23 11:00:00 | 000,514,232 | ---- | M] (EasyBits Software AS) -- C:\Windows\SysWOW64\ezSharedSvcHost.exe PRC - [2010.04.13 08:57:58 | 000,013,336 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe PRC - [2010.04.13 08:57:56 | 000,284,696 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe PRC - [2010.03.18 20:57:02 | 002,320,920 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2010.03.18 20:56:56 | 000,268,824 | ---- | M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2010.01.16 18:02:38 | 000,436,752 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McUICnt.exe PRC - [2010.01.15 13:49:20 | 000,255,536 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\SSScheduler.exe PRC - [2009.10.12 10:45:12 | 000,312,784 | ---- | M] () -- C:\Program Files (x86)\3DataManager\WTGService.exe PRC - [2009.09.05 17:29:06 | 000,385,024 | ---- | M] (shbox.de) -- C:\Program Files (x86)\FreePDF_XP\fpassist.exe PRC - [2009.04.30 11:23:26 | 000,090,112 | ---- | M] () -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe ========== Modules (No Company Name) ========== MOD - [2011.10.14 13:07:37 | 000,452,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\8762c6ea69969fd8563f7922a16adc17\IAStorUtil.ni.dll MOD - [2011.10.14 13:03:40 | 000,771,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\018d2569cf208acbe8ad73908705f607\System.Runtime.Remoting.ni.dll MOD - [2011.10.14 13:03:11 | 012,431,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d76221993c2fdfb991b8c12ae50a30eb\System.Windows.Forms.ni.dll MOD - [2011.10.14 13:03:04 | 001,586,688 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\0e245eb9c1067cabd5673fe832d28613\System.Drawing.ni.dll MOD - [2011.10.14 13:02:49 | 003,325,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\3136e12cfb8809d39813e76c766c782c\WindowsBase.ni.dll MOD - [2011.10.14 13:02:43 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\275680f2b9db0501d53c50ea7d7a43f0\System.Xml.ni.dll MOD - [2011.10.14 13:02:39 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e9ebeb7959f1c916ebf6fca8f7077d6c\System.Configuration.ni.dll MOD - [2011.10.14 13:02:38 | 007,949,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\95b9866ab6e4437ef5dc5855ebab4e33\System.ni.dll MOD - [2011.10.14 13:02:28 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\1b31ced9bb880d94fff1c6d47c16a81e\mscorlib.ni.dll MOD - [2010.07.17 19:46:33 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll MOD - [2010.07.17 19:46:31 | 000,032,768 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_de_b77a5c561934e089\System.Runtime.Remoting.resources.dll MOD - [2010.05.19 09:05:58 | 007,745,536 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll MOD - [2010.05.19 09:05:58 | 002,121,728 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll MOD - [2010.05.19 09:05:58 | 000,135,168 | ---- | M] () -- C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2010.06.18 15:26:18 | 000,103,992 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe -- (HP Wireless Assistant Service) SRV:64bit: - [2010.06.17 14:54:20 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) [Auto | Running] -- C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe -- (RtVOsdService) SRV - [2011.07.05 16:24:34 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2011.06.06 11:55:28 | 000,064,952 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011.05.21 09:51:59 | 000,079,360 | ---- | M] (SolidWorks) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe -- (SolidWorks Licensing Service) SRV - [2011.04.30 06:15:19 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2011.02.04 15:32:02 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe) SRV - [2010.07.02 10:51:16 | 000,027,192 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe -- (HPWMISVC) SRV - [2010.04.13 08:57:58 | 000,013,336 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc) Intel(R) SRV - [2010.04.04 00:01:24 | 000,246,520 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService) SRV - [2010.03.18 20:57:02 | 002,320,920 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2010.03.18 20:56:56 | 000,268,824 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2010.01.15 13:49:20 | 000,227,232 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009.11.18 03:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Programme\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters) SRV - [2009.10.12 10:45:12 | 000,312,784 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\3DataManager\WTGService.exe -- (WTGService) SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009.04.30 11:23:26 | 000,090,112 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe -- (OMSI download service) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011.07.05 16:24:35 | 000,123,784 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:64bit: - [2011.07.05 16:24:34 | 000,088,288 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:64bit: - [2011.03.11 07:22:41 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 07:22:40 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.01.11 18:20:51 | 000,034,032 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\seehcri.sys -- (seehcri) DRV:64bit: - [2011.01.11 18:20:34 | 000,027,176 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:64bit: - [2011.01.11 18:20:34 | 000,013,352 | ---- | M] (Sony Ericsson Mobile Communications) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:64bit: - [2010.12.25 11:05:03 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:64bit: - [2010.12.25 11:05:03 | 000,114,560 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\ewusbdev.sys -- (hwusbdev) DRV:64bit: - [2010.09.29 14:26:00 | 003,063,360 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\BCMWL664.SYS -- (BCM43XX) DRV:64bit: - [2010.08.25 19:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2010.06.23 09:10:56 | 000,344,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2010.05.27 22:32:56 | 000,320,560 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2010.04.13 08:44:22 | 000,540,696 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2010.02.03 15:38:30 | 000,271,872 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R) DRV:64bit: - [2009.09.23 02:39:56 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV:64bit: - [2009.09.17 21:54:54 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.07.14 00:31:10 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus) DRV:64bit: - [2009.06.20 03:09:57 | 001,394,688 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2009.06.10 22:01:11 | 001,485,312 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:64bit: - [2009.06.10 22:01:11 | 000,740,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:64bit: - [2009.06.10 22:01:11 | 000,292,864 | ---- | M] (Conexant Systems, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:64bit: - [2009.06.10 22:01:06 | 001,146,880 | ---- | M] (LSI Corp) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\agrsm64.sys -- (AgereSoftModem) DRV:64bit: - [2009.06.10 21:35:33 | 000,389,120 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:64bit: - [2009.06.10 21:35:28 | 005,434,368 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\netw5v64.sys -- (netw5v64) Intel(R) DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.03.25 16:48:00 | 000,153,128 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdm.sys -- (s1018mdm) DRV:64bit: - [2009.03.25 16:48:00 | 000,146,472 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018unic.sys -- (s1018unic) Sony Ericsson Device 1018 USB Ethernet Emulation (WDM) DRV:64bit: - [2009.03.25 16:48:00 | 000,133,160 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mgmt.sys -- (s1018mgmt) Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM) DRV:64bit: - [2009.03.25 16:48:00 | 000,128,552 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018obex.sys -- (s1018obex) DRV:64bit: - [2009.03.25 16:48:00 | 000,113,704 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018bus.sys -- (s1018bus) Sony Ericsson Device 1018 driver (WDM) DRV:64bit: - [2009.03.25 16:48:00 | 000,034,856 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018nd5.sys -- (s1018nd5) Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS) DRV:64bit: - [2009.03.25 16:48:00 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s1018mdfl.sys -- (s1018mdfl) DRV - [2010.12.25 11:05:03 | 000,114,560 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\ewusbdev.sys -- (hwusbdev) DRV - [2009.09.23 02:39:56 | 000,225,280 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR) DRV - [2009.09.10 15:31:56 | 000,117,248 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\ewusbmdm.sys -- (hwdatacard) DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = HP | MSN IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = HP | MSN IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = HP | MSN IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Upgrade to Google Chrome IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Upgrade to Google Chrome IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = Upgrade to Google Chrome IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = Upgrade to Google Chrome IE - HKCU\..\URLSearchHook: {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files (x86)\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com) IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: c:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Creative Software Inc) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.5: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (the VideoLAN Team) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) [2011.06.28 17:39:59 | 000,024,683 | ---- | M] (Ask.com) -- C:\Program Files (x86)\mozilla firefox\plugins\NPAskSBr.dll O1 HOSTS File: ([2010.12.21 14:33:35 | 000,427,737 | R--- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 Anti Spyware | Cash Advance | Debt Consolidation | Insurance | Cell Phones at 0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 123fporn.info O1 - Hosts: 14727 more lines... O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (Ask Search Assistant BHO) - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files (x86)\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL (Ask.com) O2 - BHO: (Ask Toolbar BHO) - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {F0D4B239-DA4B-4DAF-81E4-DFEE4931A4AA} - C:\Program Files (x86)\AskSBar\bar\1.bin\ASKSBAR.DLL (Ask.com) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe () O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O4 - HKLM..\Run: [Easybits Recovery] C:\Program Files (x86)\EasyBits For Kids\ezRecover.exe File not found O4 - HKLM..\Run: [FreePDF Assistant] C:\Program Files (x86)\FreePDF_XP\fpassist.exe (shbox.de) O4 - HKLM..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe (Hewlett-Packard Company) O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) O4 - HKCU..\Run: [{7B7EAB26-0CE2-11E0-BB84-806E6F6E6963}] C:\Users\Melanie\AppData\Roaming\Microsoft\dllhsts.exe (Mozilla Foundation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: EnableShellExecuteHooks = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~3\Office12\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{C9DA838F-7911-4B4A-8724-39607CAE0A3F}: NameServer = 213.94.78.16 213.94.78.17 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D8C11FF8-4B80-4DF6-ACBC-EE6D42770822}: DhcpNameServer = 192.168.43.1 O18:64bit: - Protocol\Handler\grooveLocalGWS - No CLSID value found O18:64bit: - Protocol\Handler\livecall - No CLSID value found O18:64bit: - Protocol\Handler\ms-help - No CLSID value found O18:64bit: - Protocol\Handler\msnim - No CLSID value found O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found O18:64bit: - Protocol\Handler\wlpg - No CLSID value found O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{3394bf82-1f3c-11e0-97f0-ca811793646e}\Shell - "" = AutoRun O33 - MountPoints2\{3394bf82-1f3c-11e0-97f0-ca811793646e}\Shell\AutoRun\command - "" = G:\Startme.exe O33 - MountPoints2\{391e79e2-100e-11e0-9881-c0cb382f6dfb}\Shell - "" = AutoRun O33 - MountPoints2\{391e79e2-100e-11e0-9881-c0cb382f6dfb}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\{410d23f0-119e-11e0-9a84-c0cb382f6dfb}\Shell - "" = AutoRun O33 - MountPoints2\{410d23f0-119e-11e0-9a84-c0cb382f6dfb}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\{80447f10-1249-11e0-99df-b18970f09977}\Shell - "" = AutoRun O33 - MountPoints2\{80447f10-1249-11e0-99df-b18970f09977}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\{8f8bb864-100e-11e0-b470-c0cb382f6dfb}\Shell - "" = AutoRun O33 - MountPoints2\{8f8bb864-100e-11e0-b470-c0cb382f6dfb}\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\F\Shell - "" = AutoRun O33 - MountPoints2\F\Shell\AutoRun\command - "" = F:\.\Autorun.exe AUTORUN=1 O33 - MountPoints2\G\Shell - "" = AutoRun O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\.\Autorun.exe AUTORUN=1 O34 - HKLM BootExecute: (autocheck autochk *) O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun) ActiveX: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "C:\Program Files (x86)\Common Files\LightScribe\LSRunOnce.exe" ActiveX: {166B1BCA-3F9C-11CF-8075-444553540000} - Macromedia Shockwave Director 10.1 ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework ActiveX: {2A202491-F00D-11cf-87CC-0020AFEECF20} - Macromedia Shockwave Director 10.1 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP MsConfig:64bit - StartUpReg: HPAdvisorDock - hkey= - key= - C:\Program Files (x86)\Hewlett-Packard\HP Advisor\Dock\HPAdvisorDock.exe () MsConfig:64bit - State: "startup" - Reg Error: Key error. CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 30 Days ========== [2011.12.29 10:13:35 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{B4DE1409-ED41-4464-9D27-B5305F51774A} [2011.12.25 09:20:21 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8E3A970C-E6E8-472B-BB93-144CF56CA41A} [2011.12.24 19:17:11 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{4266FDBE-8439-4318-906E-D6FBC2DB023E} [2011.12.24 07:16:47 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9D620DD1-3128-46BA-BDD9-1B8BE147CF15} [2011.12.24 07:15:12 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{C2C432A1-76EE-489F-AF85-EDA534AB24AA} [2011.12.23 22:34:12 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{3E3E87F0-805E-42B7-92EE-9A73BC129105} [2011.12.23 16:00:07 | 000,016,200 | ---- | C] (McAfee, Inc.) -- C:\Windows\stinger.sys [2011.12.23 10:33:53 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9075A6EC-25FD-46F2-B5F7-072A5C705120} [2011.12.23 10:33:51 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A5E9DF31-9268-4B2F-A255-52930248D562} [2011.12.23 10:33:49 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8D63F849-BD8E-4AFA-A04A-911C068884EC} [2011.12.23 10:32:47 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E8C21FDD-7656-4E26-B9F6-63D282B3A586} [2011.12.22 14:33:24 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E2ECF56B-6C31-4418-89AA-ADD1C09D2336} [2011.12.22 14:33:21 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{43722931-70A8-400F-BCA2-2CDEA43F181A} [2011.12.22 14:29:10 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9B73E5B2-9594-4A42-8FDE-381C22B55F99} [2011.12.22 11:00:26 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{AB44F698-F98A-41D4-90E3-880E1642EDFB} [2011.12.22 07:04:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{5B85B762-DE63-479A-ADB2-F61D247A923A} [2011.12.21 19:44:29 | 000,000,000 | ---D | C] -- C:\Users\Melanie\Desktop\Kalligraphie [2011.12.21 18:29:25 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{4A9B9E31-1CED-4C61-8F0E-B2E21B2F9E72} [2011.12.21 18:29:15 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{ECECD0A4-6836-4480-83A2-BEAC190280DF} [2011.12.21 18:29:09 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{CF50EDAA-7FC6-443C-AA02-2982117678EF} [2011.12.21 18:28:34 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{CE52506C-374C-49BC-83AC-B6CF5DA525B5} [2011.12.20 13:49:12 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{482890B5-0FFD-449B-811D-AC5E3AA2FA31} [2011.12.20 13:47:09 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{C9AC0274-6A18-4E31-9FA6-9217A3226FCF} [2011.12.19 20:17:06 | 000,000,000 | ---D | C] -- C:\Users\Melanie\Desktop\Neuer Ordner [2011.12.19 16:46:32 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{07B9D05A-4F4A-46B2-8597-B483ECA604DA} [2011.12.19 16:46:28 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{564F7157-0837-40A6-ADF6-C1AF32E8F9B6} [2011.12.19 16:46:24 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{C9886F9A-C2CF-4A09-BC5C-34929612BEAC} [2011.12.19 16:43:37 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{6CCE7C6B-888F-4DA3-A674-7C9ED2FD7CAB} [2011.12.18 14:03:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{5226F7D7-061C-4B9F-8A5E-42E322917D99} [2011.12.18 14:03:26 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{2B00CFBA-7E16-494D-82DD-D07BD47A7491} [2011.12.18 14:02:39 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{58873B82-53A5-44BA-9AF8-39C587DE9C73} [2011.12.18 08:42:00 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{AA95FC52-1607-4B14-A1E5-DC8446589B2C} [2011.12.17 20:24:43 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9BBEE408-A96F-49FD-9469-E05B0E005E27} [2011.12.17 08:24:13 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{1A853848-EB16-46C9-B453-E88E007EB4FF} [2011.12.17 08:23:06 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{FC38D65F-9C45-4EEC-8CE8-C69C8856D615} [2011.12.16 18:37:14 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{2A963B25-A1CB-43D5-9486-D20F133450E9} [2011.12.16 18:36:08 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{66EFB3B2-1A59-4AE9-BBF2-EA5B40D9BE4E} [2011.12.16 13:24:56 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{1431528A-602C-44C8-8916-15A1513532E8} [2011.12.15 07:37:42 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{63826A7D-F8E0-4B45-A75A-52A3EF445E21} [2011.12.15 07:37:40 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8C283677-64AF-4435-A474-4DA186223FA7} [2011.12.15 07:37:21 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{D7FB4F26-BBF9-45A6-9D30-EC3E7FD3FC11} [2011.12.15 07:36:47 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{F613507C-29BC-48C3-BA8E-1A409360B1F7} [2011.12.14 20:47:40 | 000,000,000 | ---D | C] -- C:\Users\Melanie\Desktop\Oma [2011.12.14 09:33:45 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{67DE2EAD-5110-4A73-BB51-FB95D495F6D8} [2011.12.14 09:33:41 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9A469D07-EA33-419C-9AC6-A009ECD6E3E6} [2011.12.14 09:21:57 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8AFC1481-07EC-41F7-8B7D-5646D36010E9} [2011.12.14 08:03:07 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8E1F7189-D03E-4BDE-BD70-43D4021975A0} [2011.12.13 09:03:32 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{34BD0A82-1116-45C8-93F9-A063C5D79652} [2011.12.13 09:03:29 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{D961C47C-3080-4E1E-B97C-EE21C76B7ED0} [2011.12.13 09:03:27 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{75137F38-10AB-4BCA-AEBC-B350E4AEAC18} [2011.12.13 09:03:22 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{17B894CE-7ADE-4BE5-924C-6E0642E062A9} [2011.12.12 21:03:05 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A456E8DF-8B45-4B72-831E-6D2757E242F7} [2011.12.12 21:02:56 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{6106FCEA-F2B8-4648-B6EF-57D164BB3C19} [2011.12.12 09:02:39 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{020F9144-8A43-4022-8B01-DFD9EAF96663} [2011.12.12 09:02:37 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{DB16066E-C5AC-4EDB-B4B3-020B60563DF9} [2011.12.12 07:22:58 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{AFB611E1-110C-4F84-A9E9-1314EBC3D928} [2011.12.11 07:27:55 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{124B2E4A-8121-445A-9531-E30F015572E7} [2011.12.11 07:26:35 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{C0B0C912-BBD5-496F-AF86-34823B1CE9E2} [2011.12.10 11:12:49 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E2A146F7-1D25-4BDE-9421-F872433CF224} [2011.12.10 11:11:16 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{66C1955E-126B-4357-A011-3434CBBE71B9} [2011.12.09 15:01:30 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{67DDB368-2375-4B22-95C1-A333F20C7AAC} [2011.12.08 10:09:19 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{5400887F-09EF-4262-AE35-F17EC5F8DEA1} [2011.12.08 10:07:59 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{026285FF-1EB8-4E70-A41C-DE530542B3FD} [2011.12.07 19:33:53 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{B123BC4C-9FC2-4AF7-AEA5-0160A8B5B836} [2011.12.07 19:33:46 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{14656086-B0E7-44B8-97B7-02FCD3554831} [2011.12.07 07:33:20 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A7B1DE72-1348-4B4E-BEEE-1166C4B1DB56} [2011.12.07 07:32:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{7F480852-2C69-47A2-9A06-30B297D56B52} [2011.12.06 14:06:46 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{55461443-7DE0-4F25-9C7D-049E5EFB0BD6} [2011.12.06 14:06:44 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{7944DF64-81D5-40B4-AC02-B0470749C305} [2011.12.06 13:49:19 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{9FF378D3-0F76-45A9-BAA4-E4CCAF8BB05D} [2011.12.06 08:22:45 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{344229AD-3A98-4E45-AB4D-6821E0225644} [2011.12.06 08:19:11 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{427918FB-4745-45CA-8D54-5FEB12E69B1C} [2011.12.05 20:18:55 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{A9264B01-3C0D-456C-B383-CA4BA5D37D81} [2011.12.05 20:15:52 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{EEC4F366-3DCC-485C-AEEB-6D08C5E7EA1D} [2011.12.05 08:15:36 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{8775383A-E006-4F5C-9735-09A3B713181B} [2011.12.05 08:15:34 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{602B0339-652D-4E37-8DEA-7985FCCDA4A9} [2011.12.05 08:15:31 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{4171BC5F-FFC2-4E7C-A693-0C97DF14BEF2} [2011.12.05 08:15:27 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{D0582C9C-0931-4361-B854-BD7B0351EC25} [2011.12.04 20:15:09 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{E38BE7EA-EEC1-4EC0-BBDA-5C08DBF963FC} [2011.12.04 20:14:07 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{F8E449C2-53F1-45F3-8AEF-911B13316921} [2011.12.04 08:13:27 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{054BFAB3-E0AC-47A0-B57C-E572F2054FAC} [2011.12.03 21:37:33 | 000,000,000 | ---D | C] -- C:\Users\Melanie\Documents\Sony Ericsson [2011.12.03 21:32:10 | 000,148,736 | ---- | C] (Avanquest Software) -- C:\ProgramData\hpeD5F6.dll [2011.12.03 21:24:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avanquest update [2011.12.03 21:24:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Avanquest [2011.12.03 21:24:12 | 000,000,000 | ---D | C] -- C:\ProgramData\BVRP Software [2011.12.03 20:13:11 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{BDA1F246-9F47-4638-A5EC-B62BDBC038F1} [2011.12.03 20:13:08 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{03326FDC-986F-4139-8FCF-A56D226ED0E8} [2011.12.03 20:13:06 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{85355FCC-B146-4708-A588-6FDB519CC3BC} [2011.12.03 20:13:03 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{B58F16A9-2CDF-48E7-AB79-D2127C621FB4} [2011.12.03 08:12:45 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{79C4D86D-752F-4A66-8244-CE8A3022C319} [2011.12.03 08:11:35 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{2FB6220B-FDEF-46A7-8045-7F17F6D0A7A8} [2011.12.02 14:25:48 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{950D60A7-3F80-47A7-B0CE-102C439191ED} [2011.12.02 14:22:15 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{35A7BB2F-DE3C-4C0E-A712-6DCDA3C5E6E7} [2011.12.02 12:17:54 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{223B3896-BA27-4847-8EAB-FFA4D4373E97} [2011.12.01 07:58:32 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{3DBDF462-CDE6-4D32-880E-AA7BF5169846} [2011.12.01 07:57:19 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{BE81199E-09AB-4106-9C4C-AC4975BA9286} [2011.11.30 18:08:07 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{DD2F633C-B248-4397-B372-1CE08AF2C2F3} [2011.11.30 18:08:03 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{59AB754E-7353-496A-9FF8-38A31AC3C890} [2011.11.30 06:07:44 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{990BEC23-7267-4E30-B71A-8EA081A6419A} [2011.11.30 06:06:40 | 000,000,000 | ---D | C] -- C:\Users\Melanie\AppData\Local\{B70C4F3E-B950-4C51-A4FF-08CEAEF5E360} [1 C:\Users\Melanie\Desktop\*.tmp files -> C:\Users\Melanie\Desktop\*.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011.12.29 10:44:06 | 001,507,342 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011.12.29 10:44:06 | 000,657,910 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2011.12.29 10:44:06 | 000,619,146 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2011.12.29 10:44:06 | 000,131,250 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2011.12.29 10:44:06 | 000,107,466 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2011.12.29 10:20:20 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.12.29 10:20:20 | 000,023,248 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.12.29 10:12:47 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011.12.29 10:12:44 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.12.29 10:12:11 | 3062,255,616 | -HS- | M] () -- C:\hiberfil.sys [2011.12.25 10:51:11 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011.12.23 16:00:07 | 000,016,200 | ---- | M] (McAfee, Inc.) -- C:\Windows\stinger.sys [2011.12.22 07:03:42 | 000,000,340 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForMelanie.job [2011.12.19 18:10:37 | 000,024,471 | ---- | M] () -- C:\Users\Melanie\Desktop\1194985207511978749calzettoni.svg.med.png [2011.12.14 19:26:27 | 000,432,648 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011.12.11 09:58:45 | 000,024,032 | ---- | M] () -- C:\Users\Melanie\Desktop\groessentabelle_socken.gif [2011.12.03 21:32:10 | 000,148,736 | ---- | M] (Avanquest Software) -- C:\ProgramData\hpeD5F6.dll [1 C:\Users\Melanie\Desktop\*.tmp files -> C:\Users\Melanie\Desktop\*.tmp -> ] ========== Files Created - No Company Name ========== [2011.12.19 18:10:36 | 000,024,471 | ---- | C] () -- C:\Users\Melanie\Desktop\1194985207511978749calzettoni.svg.med.png [2011.12.11 09:58:40 | 000,024,032 | ---- | C] () -- C:\Users\Melanie\Desktop\groessentabelle_socken.gif [2011.09.28 18:02:20 | 000,041,021 | R-S- | C] () -- C:\Users\Melanie\AppData\Roaming\igfxtray.dat [2011.09.28 18:02:17 | 000,000,253 | -H-- | C] () -- C:\Users\Melanie\AppData\Roaming\wndsksi.inf [2011.06.28 13:51:17 | 000,000,000 | ---- | C] () -- C:\Users\Melanie\AppData\Local\{B97A963C-44CB-467E-B4B7-3EE18883ABBF} [2011.05.25 08:52:26 | 000,000,000 | ---- | C] () -- C:\Users\Melanie\AppData\Local\{FCC8B979-13AA-4E66-AEA2-1D3391993287} [2011.05.21 09:52:00 | 000,000,000 | ---- | C] () -- C:\Windows\eDrawingOfficeAutomator.INI [2011.02.23 17:58:00 | 000,001,854 | ---- | C] () -- C:\Users\Melanie\AppData\Roaming\GhostObjGAFix.xml [2011.01.25 16:45:19 | 001,526,948 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011.01.11 16:37:41 | 000,003,584 | ---- | C] () -- C:\Users\Melanie\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.12.21 14:13:34 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat [2010.09.29 14:25:27 | 000,000,268 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog2.ini [2010.09.29 14:25:27 | 000,000,209 | ---- | C] () -- C:\Windows\SysWow64\RStoneLog.ini [2010.09.29 14:23:30 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010.08.25 19:34:30 | 000,127,868 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng575.bin [2010.08.25 19:34:30 | 000,104,796 | ---- | C] () -- C:\Windows\SysWow64\igfcg575m.bin [2010.07.17 13:17:50 | 000,000,202 | ---- | C] () -- C:\Windows\SysWow64\HPWA.ini [2010.07.17 12:27:48 | 000,009,988 | ---- | C] () -- C:\Windows\SysWow64\ezdigsgn.dat [2010.07.17 10:47:25 | 000,000,186 | ---- | C] () -- C:\Windows\SysWow64\HP Documentation.ini [2010.05.14 19:27:50 | 000,870,560 | ---- | C] () -- C:\Windows\SysWow64\igkrng575.bin [2010.05.14 18:16:12 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll [2010.05.14 18:16:12 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll [2010.02.09 17:58:12 | 000,012,800 | ---- | C] () -- C:\Windows\LPRES.DLL [2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat [2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT [2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat [2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:59:36 | 001,498,564 | ---- | C] () -- C:\Windows\SysWow64\igkrng400.bin [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat [1997.06.14 09:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll ========== LOP Check ========== [2011.12.22 07:08:52 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\3DataManager [2011.05.21 09:54:52 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\DassaultSystemes [2011.05.21 10:21:12 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\EDrawings [2011.06.28 17:45:19 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\FrostWire [2011.12.12 21:12:31 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\HartlauerFotoService3 [2011.09.28 18:02:16 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\MicroST [2010.12.25 11:05:05 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Program Files (x86) [2011.04.03 14:01:53 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Sony [2011.04.03 14:01:01 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Sony Setup [2011.01.11 17:47:43 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\WildTangent [2011.04.12 13:10:09 | 000,000,000 | ---D | M] -- C:\Users\Melanie\AppData\Roaming\Windows Live Writer [2011.12.06 13:48:36 | 000,032,632 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*. > [2011.01.10 18:36:45 | 000,000,000 | -HSD | M] -- C:\$Recycle.Bin [2010.07.17 23:34:26 | 000,000,000 | -HSD | M] -- C:\boot [2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2010.12.21 10:14:53 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen [2010.09.29 14:51:46 | 000,000,000 | -H-D | M] -- C:\HP [2010.09.29 14:27:46 | 000,000,000 | ---D | M] -- C:\Intel [2010.12.21 14:17:57 | 000,000,000 | RH-D | M] -- C:\MSOCache [2009.07.14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs [2010.12.21 17:21:42 | 000,000,000 | ---D | M] -- C:\persönlich [2011.08.16 18:23:03 | 000,000,000 | R--D | M] -- C:\Program Files [2011.12.03 21:24:36 | 000,000,000 | R--D | M] -- C:\Program Files (x86) [2011.12.24 08:49:13 | 000,000,000 | -H-D | M] -- C:\ProgramData [2010.12.21 10:14:53 | 000,000,000 | -HSD | M] -- C:\Programme [2010.12.21 10:15:43 | 000,000,000 | -HSD | M] -- C:\Recovery [2011.03.30 18:44:48 | 000,000,000 | ---D | M] -- C:\SwSetup [2011.12.29 10:42:20 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2010.12.21 10:15:47 | 000,000,000 | -H-D | M] -- C:\SYSTEM.SAV [2011.01.22 08:15:38 | 000,000,000 | R--D | M] -- C:\Users [2011.12.24 08:49:42 | 000,000,000 | ---D | M] -- C:\Windows < %PROGRAMFILES%\*.exe > < %LOCALAPPDATA%\*.exe > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.manifest /3 > < MD5 for: AFD.SYS > [2011.04.25 03:44:02 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=6EF20DDF3172E97D69F596FB90602F29 -- C:\Windows\SysNative\drivers\afd.sys [2011.04.25 03:44:02 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=6EF20DDF3172E97D69F596FB90602F29 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16802_none_3430bc3977dfec2d\afd.sys [2009.07.14 00:21:42 | 000,500,224 | ---- | M] (Microsoft Corporation) MD5=B9384E03479D2506BC924C16A3DB87BC -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_33dd3439781e25f7\afd.sys [2010.11.20 10:23:34 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=D31DC7A16DEA4A9BAF179F3D6FBDB38C -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991\afd.sys [2011.04.25 03:34:03 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=D5B031C308A409A0A576BFF4CF083D30 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17603_none_3618198975057170\afd.sys [2011.04.25 04:09:35 | 000,499,200 | ---- | M] (Microsoft Corporation) MD5=F4AD06143EAC303F55D0E86C40802976 -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.21712_none_3695e61e8e2c13d4\afd.sys [2011.04.25 03:44:27 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=FBFF8B7C9D116229E9208A0D1CAEB49B -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.20951_none_3483491e9126fe55\afd.sys < MD5 for: EXPLORER.EXE > [2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\explorer.exe [2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe [2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe [2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe [2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe [2010.07.17 19:56:45 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe [2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\SysWOW64\explorer.exe [2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe [2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe [2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe [2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe [2010.07.17 19:52:23 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe [2010.07.17 19:56:45 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe [2010.07.17 19:52:23 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe [2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe [2010.07.17 19:56:45 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe [2010.07.17 19:52:23 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe [2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe [2010.07.17 19:56:45 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe [2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe [2010.07.17 19:52:23 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe < MD5 for: REGEDIT.EXE > [2009.07.14 02:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=2E2C937846A0B8789E5E91739284D17A -- C:\Windows\winsxs\amd64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5023a70bf589ad3e\regedit.exe [2009.07.14 02:39:29 | 000,427,008 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\regedit.exe [2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\SysWOW64\regedit.exe [2009.07.14 02:14:30 | 000,398,336 | ---- | M] (Microsoft Corporation) MD5=8A4883F5E7AC37444F23279239553878 -- C:\Windows\winsxs\wow64_microsoft-windows-registry-editor_31bf3856ad364e35_6.1.7600.16385_none_5a78515e29ea6f39\regedit.exe < MD5 for: USERINIT.EXE > [2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\SysWOW64\userinit.exe [2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe [2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\SysNative\userinit.exe [2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe [2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe < MD5 for: WININIT.EXE > [2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe [2009.07.14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe [2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe [2009.07.14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe < MD5 for: WINLOGON.EXE > [2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SoftwareDistribution\Download\488053cdbca3231eeb2c2af7236d09ed\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe [2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2010.07.17 19:56:45 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe [2010.07.17 19:56:45 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\SysNative\winlogon.exe [2010.07.17 19:56:45 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe < HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data] HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16 < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > < End of report > |
|
| Themen zu Fehlermeldung "Bezahlen und installieren" mit Windows 7 |
| 50 euro, aufforderung, bezahlen, bildschirm, erwischt, euro, fehlermeldung, helfer, hoffe, installiere, installieren, inter, interne, internet, kosten, laptop, liebe, runterzuladen, schwarzer, schwarzer bildschirm, update, windows, windows 7 |
