| |
| |||||||
Log-Analyse und Auswertung: Benutzerkontensteuerung deaktiviert sichWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
24.11.2010, 09:06
| #1 |
| |  Benutzerkontensteuerung deaktiviert sich Hallo, ich habe das Problem das sich meine Benutzerkontensteuerung alle paar Neustarts deaktiviert. Woran kann das liegen.Mache mir Sorgen das ich mir etwas eingefangen haben könnte. Ich habe mein System gerade erst neu aufgesetzt. Hier mal mein HijackThis Logfile Code:
ATTFilter Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 09:04:50, on 24.11.2010 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16671) Boot mode: Normal Running processes: C:\Program Files (x86)\Razer\Copperhead\razerhid.exe C:\Program Files (x86)\Razer\Copperhead\razerofa.exe C:\Program Files (x86)\Windows Media Player\wmplayer.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\Desaster\Desktop\HiJackThis204.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: QFX Software KeyScrambler - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\IPSBHO.DLL O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll O4 - HKLM\..\Run: [Copperhead] C:\Program Files (x86)\Razer\Copperhead\razerhid.exe O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun O8 - Extra context menu item: Nach Microsoft E&xel exportieren - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll O9 - Extra 'Tools' menuitem: &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing) O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: EPSON V5 Service4(01) (EPSON_EB_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE O23 - Service: EPSON V3 Service4(01) (EPSON_PM_RPCV4_01) - SEIKO EPSON CORPORATION - C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing) O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe O23 - Service: O&O Defrag (OODefragAgent) - O&O Software GmbH - C:\Program Files\OO Software\Defrag\oodag.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing) O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 6215 bytes Code:
ATTFilter OTL logfile created on: 24.11.2010 08:50:35 - Run 3 OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Desaster\Desktop 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 65,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 150,15 Gb Total Space | 115,44 Gb Free Space | 76,88% Space Free | Partition Type: NTFS Drive D: | 781,35 Gb Total Space | 469,37 Gb Free Space | 60,07% Space Free | Partition Type: NTFS Computer Name: DESASTER-PC | User Name: Desaster | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - C:\Users\Desaster\Desktop\OTL.exe (OldTimer Tools) PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) PRC - C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) PRC - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe (Symantec Corporation) PRC - C:\Program Files (x86)\Razer\Copperhead\razerhid.exe () PRC - C:\Program Files (x86)\Razer\Copperhead\razerofa.exe (Razer Inc.) ========== Modules (SafeList) ========== MOD - C:\Users\Desaster\Desktop\OTL.exe (OldTimer Tools) MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll (Microsoft Corporation) ========== Win32 Services (SafeList) ========== SRV:64bit: - (UxTuneUp) -- C:\Windows\SysNative\uxtuneup.dll (TuneUp Software) SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD) SRV:64bit: - (OODefragAgent) -- C:\Program Files\OO Software\Defrag\oodag.exe (O&O Software GmbH) SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesService64.exe (TuneUp Software) SRV - (UxTuneUp) -- C:\Windows\SysWOW64\uxtuneup.dll (TuneUp Software) SRV - (TomTomHOMEService) -- C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe (TomTom) SRV - (NIS) -- C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\ccSvcHst.exe (Symantec Corporation) SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation) SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation) SRV - (EPSON_EB_RPCV4_01) EPSON V5 Service4(01) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE (SEIKO EPSON CORPORATION) SRV - (EPSON_PM_RPCV4_01) EPSON V3 Service4(01) -- C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE (SEIKO EPSON CORPORATION) ========== Driver Services (SafeList) ========== DRV:64bit: - (sptd) -- C:\Windows\SysNative\drivers\sptd.sys () DRV:64bit: - (SymEvent) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS (Symantec Corporation) DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.) DRV:64bit: - (amdkmdap) -- C:\Windows\SysNative\drivers\atikmpag.sys (Advanced Micro Devices, Inc.) DRV:64bit: - (NVNET) -- C:\Windows\SysNative\drivers\nvmf6264.sys (NVIDIA Corporation) DRV:64bit: - (SymEFA) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymEFA64.sys (Symantec Corporation) DRV:64bit: - (SRTSP) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\srtsp64.sys (Symantec Corporation) DRV:64bit: - (SRTSPX) Symantec Real Time Storage Protection (PEL) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\srtspx64.sys (Symantec Corporation) DRV:64bit: - (SymNetS) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\symnets.sys (Symantec Corporation) DRV:64bit: - (SymIRON) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\Ironx64.sys (Symantec Corporation) DRV:64bit: - (RSUSBSTOR) -- C:\Windows\SysNative\drivers\RtsUStor.sys (Realtek Semiconductor Corp.) DRV:64bit: - (SymDS) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymDS64.sys (Symantec Corporation) DRV:64bit: - (RTHDMIAzAudService) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys (Realtek Semiconductor Corp.) DRV:64bit: - (KeyScrambler) -- C:\Windows\SysNative\drivers\keyscrambler.sys (QFX Software Corporation) DRV:64bit: - (LGVirHid) -- C:\Windows\SysNative\drivers\LGVirHid.sys (Logitech Inc.) DRV:64bit: - (LGBusEnum) -- C:\Windows\SysNative\drivers\LGBusEnum.sys (Logitech Inc.) DRV:64bit: - (copperhd) -- C:\Windows\SysNative\drivers\copperhd.sys (Razer (Asia-Pacific) Pte Ltd) DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices) DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices) DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.) DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation) DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company) DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology) DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof () DRV:64bit: - (NVENETFD) -- C:\Windows\SysNative\drivers\nvm62x64.sys (NVIDIA Corporation) DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation) DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation) DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation) DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.) DRV - (NAVEX15) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20101123.021\EX64.SYS (Symantec Corporation) DRV - (eeCtrl) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys (Symantec Corporation) DRV - (EraserUtilRebootDrv) -- C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation) DRV - (NAVENG) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\VirusDefs\20101123.021\ENG64.SYS (Symantec Corporation) DRV - (IDSVia64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\IPSDefs\20101122.006\IDSviA64.sys (Symantec Corporation) DRV - (BHDrvx64) -- C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\Definitions\BASHDefs\20101104.001\BHDrvx64.sys (Symantec Corporation) DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2011\TuneUpUtilitiesDriver64.sys (TuneUp Software) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.de/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 40 3B 65 BB 09 88 CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.search.defaultenginename: "ICQ Search" FF - prefs.js..browser.search.selectedEngine: "ICQ Search" FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "hxxp://www.t-online.de/" FF - prefs.js..extensions.enabledItems: {BBDA0591-3099-440a-AA10-41764D9DB4DB}:2.0 FF - prefs.js..extensions.enabledItems: {2D3F3651-74B9-4795-BDEC-6DA2F431CB62}:5.1 FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.2 FF - prefs.js..extensions.enabledItems: {0545b830-f0aa-4d7e-8820-50a4629a56fe}:4.6.4 FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.0.11 FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908 FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.1 FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.4 FF - prefs.js..extensions.enabledItems: {dd3d7613-0246-469d-bc65-2a3cc1668adc}:0.7.1.1 FF - prefs.js..extensions.enabledItems: {EF522540-89F5-46b9-B6FE-1829E2B572C6}:4.9.4 FF - prefs.js..extensions.enabledItems: keyscrambler@qfx.software.corporation:2.7.0.0 FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}:6.0.20 FF - prefs.js..extensions.enabledItems: {36C13C8F-54F1-412e-8177-2E411719162D}:4.1.1 FF - prefs.js..keyword.URL: "hxxp://search.icq.com/search/afe_results.php?ch_id=afex&q=" FF - prefs.js..network.proxy.type: 0 FF - HKLM\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\IPSFFPlgn\ [2010.11.19 17:44:21 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}: C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.1.0.37\coFFPlgn\ [2010.11.19 17:43:53 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.11.19 18:29:26 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.12\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.11.20 14:52:44 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.6\extensions\\Components: C:\Program Files (x86)\Mozilla Thunderbird\components [2010.11.19 18:50:18 | 000,000,000 | ---D | M] [2010.11.19 20:52:45 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\mozilla\Extensions [2010.11.19 18:50:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Desaster\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.11.19 20:52:45 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\mozilla\Extensions\home2@tomtom.com [2010.11.19 18:29:35 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\gniekpl7.default\extensions [2010.11.21 02:14:48 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions [2010.11.19 18:41:04 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2010.11.19 18:41:04 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2010.11.19 18:41:05 | 000,000,000 | ---D | M] (Qute) -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\{36C13C8F-54F1-412e-8177-2E411719162D} [2010.11.19 18:41:05 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2010.11.19 18:41:05 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.11.19 18:41:05 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\{dc572301-7619-498c-a57d-39143191b318} [2010.11.19 18:41:05 | 000,000,000 | ---D | M] (BlockSite) -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2010.11.19 18:41:06 | 000,000,000 | ---D | M] (SearchPreview) -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6} [2010.11.19 19:43:37 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\de-DE@dictionaries.addons.mozilla.org [2010.11.19 18:41:04 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\mozilla\Firefox\Profiles\ywu7lw9d.default\extensions\keyscrambler@qfx.software.corporation [2010.09.09 16:45:28 | 000,002,449 | ---- | M] () -- C:\Users\Desaster\AppData\Roaming\Mozilla\FireFox\Profiles\ywu7lw9d.default\searchplugins\safesearch.xml [2010.11.21 02:14:48 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010.11.19 20:07:40 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} [2010.11.19 20:07:30 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Program Files (x86)\mozilla firefox\plugins\npdeployJava1.dll [2010.10.27 06:44:13 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2010.10.27 06:44:13 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2010.10.27 06:44:13 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2010.10.27 06:44:13 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2010.10.27 06:44:13 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (KeyScramblerBHO Class) - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation) O2 - BHO: (KeyScramblerBHO Class) - {2B9F5787-88A5-4945-90E7-C4B18563BC5E} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation) O2 - BHO: (Symantec NCO BHO) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll (Symantec Corporation) O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\IPSBHO.DLL (Symantec Corporation) O3 - HKLM\..\Toolbar: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll (Symantec Corporation) O3 - HKCU\..\Toolbar\WebBrowser: (Norton Toolbar) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\18.1.0.37\coIEPlg.dll (Symantec Corporation) O4:64bit: - HKLM..\Run: [Launch LgDeviceAgent] C:\Program Files\Logitech\GamePanel Software\LgDevAgt.exe (Logitech Inc.) O4 - HKLM..\Run: [Copperhead] C:\Program Files (x86)\Razer\Copperhead\razerhid.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O9:64bit: - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\x64\KeyScramblerIE.dll (QFX Software Corporation) O9 - Extra 'Tools' menuitem : &KeyScrambler Options - {5C106A59-CC3C-4caa-81A4-6D909B5ACE23} - C:\Program Files (x86)\KeyScrambler\KeyScramblerIE.dll (QFX Software Corporation) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O27:64bit: - HKLM IFEO\tomtomhome.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe (TuneUp Software) O27:64bit: - HKLM IFEO\uninstall tomtom home.exe: Debugger - C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe (TuneUp Software) O27 - HKLM IFEO\tomtomhome.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" (TuneUp Software) O27 - HKLM IFEO\uninstall tomtom home.exe: Debugger - "C:\Program Files (x86)\TuneUp Utilities 2011\TUAutoReactivator64.exe" (TuneUp Software) O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk *) - File not found O34 - HKLM BootExecute: (OODBS) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2010.11.24 08:46:54 | 000,000,000 | ---D | C] -- C:\Users\Desaster\Desktop\otl [2010.11.24 08:37:25 | 000,575,488 | ---- | C] (OldTimer Tools) -- C:\Users\Desaster\Desktop\OTL.exe [2010.11.24 08:37:25 | 000,388,608 | ---- | C] (Trend Micro Inc.) -- C:\Users\Desaster\Desktop\HiJackThis204.exe [2010.11.22 17:11:59 | 000,000,000 | ---D | C] -- C:\ProgramData\ATI [2010.11.22 16:33:05 | 000,000,000 | ---D | C] -- C:\Games [2010.11.21 02:30:17 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\NPE [2010.11.19 23:54:15 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\WinRAR [2010.11.19 22:34:34 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Activision [2010.11.19 22:10:42 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\2K Games [2010.11.19 22:10:26 | 002,526,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_43.dll [2010.11.19 22:10:26 | 002,106,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_43.dll [2010.11.19 22:10:26 | 000,527,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_7.dll [2010.11.19 22:10:26 | 000,518,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_7.dll [2010.11.19 22:10:26 | 000,239,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_7.dll [2010.11.19 22:10:26 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_7.dll [2010.11.19 22:10:26 | 000,077,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_5.dll [2010.11.19 22:10:26 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_5.dll [2010.11.19 22:10:25 | 001,907,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_43.dll [2010.11.19 22:10:25 | 001,868,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_43.dll [2010.11.19 22:10:25 | 000,276,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_43.dll [2010.11.19 22:10:25 | 000,248,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_43.dll [2010.11.19 22:10:24 | 000,511,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_43.dll [2010.11.19 22:10:24 | 000,470,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_43.dll [2010.11.19 22:10:23 | 002,401,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_43.dll [2010.11.19 22:10:23 | 001,998,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_43.dll [2010.11.19 22:10:22 | 000,530,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_6.dll [2010.11.19 22:10:22 | 000,528,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_6.dll [2010.11.19 22:10:22 | 000,517,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_5.dll [2010.11.19 22:10:22 | 000,515,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_5.dll [2010.11.19 22:10:22 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_6.dll [2010.11.19 22:10:22 | 000,176,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_6.dll [2010.11.19 22:10:22 | 000,078,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_4.dll [2010.11.19 22:10:22 | 000,074,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_4.dll [2010.11.19 22:10:22 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_7.dll [2010.11.19 22:10:22 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_7.dll [2010.11.19 22:10:21 | 002,582,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_42.dll [2010.11.19 22:10:21 | 001,974,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_42.dll [2010.11.19 22:10:21 | 000,238,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_5.dll [2010.11.19 22:10:21 | 000,176,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_5.dll [2010.11.19 22:10:20 | 005,554,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dcsx_42.dll [2010.11.19 22:10:20 | 005,501,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dcsx_42.dll [2010.11.19 22:10:20 | 000,285,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx11_42.dll [2010.11.19 22:10:20 | 000,235,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx11_42.dll [2010.11.19 22:10:19 | 002,475,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_42.dll [2010.11.19 22:10:19 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll [2010.11.19 22:10:19 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll [2010.11.19 22:10:19 | 001,846,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_41.dll [2010.11.19 22:10:19 | 000,523,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_42.dll [2010.11.19 22:10:19 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll [2010.11.19 22:10:19 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_42.dll [2010.11.19 22:10:19 | 000,453,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_41.dll [2010.11.19 22:10:17 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll [2010.11.19 22:10:17 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll [2010.11.19 22:10:17 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll [2010.11.19 22:10:17 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll [2010.11.19 22:10:17 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll [2010.11.19 22:10:17 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll [2010.11.19 22:10:17 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll [2010.11.19 22:10:17 | 000,069,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll [2010.11.19 22:10:17 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll [2010.11.19 22:10:17 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll [2010.11.19 22:10:16 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll [2010.11.19 22:10:16 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll [2010.11.19 22:10:16 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll [2010.11.19 22:10:16 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll [2010.11.19 22:10:15 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll [2010.11.19 22:10:15 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll [2010.11.19 22:10:15 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll [2010.11.19 22:10:15 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll [2010.11.19 22:10:15 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll [2010.11.19 22:10:15 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll [2010.11.19 22:10:15 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll [2010.11.19 22:10:15 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll [2010.11.19 22:10:15 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll [2010.11.19 22:10:15 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll [2010.11.19 22:10:14 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll [2010.11.19 22:10:14 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll [2010.11.19 22:10:14 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll [2010.11.19 22:10:14 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll [2010.11.19 22:10:14 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll [2010.11.19 22:10:14 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll [2010.11.19 22:10:14 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll [2010.11.19 22:10:14 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll [2010.11.19 22:10:14 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll [2010.11.19 22:10:14 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll [2010.11.19 22:10:13 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll [2010.11.19 22:10:13 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll [2010.11.19 22:10:13 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll [2010.11.19 22:10:13 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll [2010.11.19 22:10:13 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll [2010.11.19 22:10:13 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll [2010.11.19 22:10:12 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll [2010.11.19 22:10:12 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll [2010.11.19 22:10:12 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll [2010.11.19 22:10:12 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll [2010.11.19 22:10:11 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll [2010.11.19 22:10:11 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll [2010.11.19 22:10:11 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll [2010.11.19 22:10:11 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll [2010.11.19 22:10:11 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll [2010.11.19 22:10:11 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll [2010.11.19 22:10:10 | 000,489,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_0.dll [2010.11.19 22:10:10 | 000,479,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_0.dll [2010.11.19 22:10:09 | 001,860,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_37.dll [2010.11.19 22:10:09 | 001,420,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_37.dll [2010.11.19 22:10:09 | 000,529,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_37.dll [2010.11.19 22:10:09 | 000,462,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_37.dll [2010.11.19 22:10:09 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_0.dll [2010.11.19 22:10:09 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_0.dll [2010.11.19 22:10:09 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_3.dll [2010.11.19 22:10:09 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_3.dll [2010.11.19 22:10:08 | 004,910,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_37.dll [2010.11.19 22:10:08 | 003,786,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_37.dll [2010.11.19 22:10:08 | 000,411,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_10.dll [2010.11.19 22:10:08 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_10.dll [2010.11.19 22:10:07 | 005,081,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_36.dll [2010.11.19 22:10:07 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_36.dll [2010.11.19 22:10:07 | 002,006,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_36.dll [2010.11.19 22:10:07 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_36.dll [2010.11.19 22:10:07 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_36.dll [2010.11.19 22:10:07 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_36.dll [2010.11.19 22:10:07 | 000,411,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_9.dll [2010.11.19 22:10:07 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_9.dll [2010.11.19 22:10:06 | 005,073,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_35.dll [2010.11.19 22:10:06 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_35.dll [2010.11.19 22:10:06 | 001,985,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_35.dll [2010.11.19 22:10:06 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_35.dll [2010.11.19 22:10:06 | 000,508,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_35.dll [2010.11.19 22:10:06 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_35.dll [2010.11.19 22:10:05 | 004,496,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_34.dll [2010.11.19 22:10:05 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_34.dll [2010.11.19 22:10:05 | 001,401,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_34.dll [2010.11.19 22:10:05 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_34.dll [2010.11.19 22:10:05 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_34.dll [2010.11.19 22:10:05 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_34.dll [2010.11.19 22:10:05 | 000,409,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_8.dll [2010.11.19 22:10:05 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_8.dll [2010.11.19 22:10:05 | 000,021,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_2.dll [2010.11.19 22:10:05 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_2.dll [2010.11.19 22:10:04 | 000,403,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_7.dll [2010.11.19 22:10:04 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_7.dll [2010.11.19 22:10:04 | 000,107,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_3.dll [2010.11.19 22:10:04 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_3.dll [2010.11.19 22:10:03 | 004,494,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_33.dll [2010.11.19 22:10:03 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_33.dll [2010.11.19 22:10:03 | 001,400,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_33.dll [2010.11.19 22:10:03 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_33.dll [2010.11.19 22:10:03 | 000,506,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_33.dll [2010.11.19 22:10:03 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_33.dll [2010.11.19 22:10:02 | 000,469,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10.dll [2010.11.19 22:10:02 | 000,440,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10.dll [2010.11.19 22:10:02 | 000,393,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_6.dll [2010.11.19 22:10:02 | 000,390,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_5.dll [2010.11.19 22:10:02 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_6.dll [2010.11.19 22:10:02 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_5.dll [2010.11.19 22:10:01 | 004,398,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_32.dll [2010.11.19 22:10:01 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_32.dll [2010.11.19 22:10:00 | 003,977,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_31.dll [2010.11.19 22:10:00 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_31.dll [2010.11.19 22:10:00 | 000,364,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_4.dll [2010.11.19 22:10:00 | 000,363,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_3.dll [2010.11.19 22:10:00 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_4.dll [2010.11.19 22:10:00 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_3.dll [2010.11.19 22:10:00 | 000,017,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_1.dll [2010.11.19 22:10:00 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_1.dll [2010.11.19 22:09:59 | 000,354,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_2.dll [2010.11.19 22:09:59 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_2.dll [2010.11.19 22:09:59 | 000,083,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_2.dll [2010.11.19 22:09:59 | 000,083,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xinput1_1.dll [2010.11.19 22:09:59 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_2.dll [2010.11.19 22:09:59 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xinput1_1.dll [2010.11.19 22:09:58 | 000,352,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_1.dll [2010.11.19 22:09:58 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_1.dll [2010.11.19 22:09:56 | 003,927,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_30.dll [2010.11.19 22:09:55 | 000,355,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine2_0.dll [2010.11.19 22:09:55 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine2_0.dll [2010.11.19 22:09:55 | 000,016,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\x3daudio1_0.dll [2010.11.19 22:09:55 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\x3daudio1_0.dll [2010.11.19 22:09:54 | 003,830,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_29.dll [2010.11.19 22:09:54 | 003,815,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_28.dll [2010.11.19 22:09:54 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_29.dll [2010.11.19 22:09:53 | 003,823,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_25.dll [2010.11.19 22:09:53 | 003,807,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_27.dll [2010.11.19 22:09:53 | 003,767,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_26.dll [2010.11.19 22:09:53 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_25.dll [2010.11.19 22:09:53 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_27.dll [2010.11.19 22:09:53 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_26.dll [2010.11.19 22:09:52 | 003,544,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx9_24.dll [2010.11.19 22:09:52 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_24.dll [2010.11.19 22:00:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2010.11.19 21:53:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\2K Games [2010.11.19 21:14:40 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\oodag [2010.11.19 21:13:04 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\O&O [2010.11.19 21:12:42 | 000,000,000 | ---D | C] -- C:\Programme\OO Software [2010.11.19 20:54:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2010.11.19 20:53:56 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\DAEMON Tools Lite [2010.11.19 20:53:54 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2010.11.19 20:52:56 | 000,000,000 | ---D | C] -- C:\Users\Desaster\Documents\TomTom [2010.11.19 20:52:44 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\TomTom [2010.11.19 20:52:44 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\TomTom [2010.11.19 20:52:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TomTom International B.V [2010.11.19 20:52:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TomTom HOME 2 [2010.11.19 20:50:51 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\RightClickFiles [2010.11.19 20:41:24 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\mp3DirectCut [2010.11.19 20:39:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\mp3DirectCut [2010.11.19 20:38:43 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\Mp3tag [2010.11.19 20:38:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mp3tag [2010.11.19 20:38:25 | 000,000,000 | ---D | C] -- C:\Programme\7-Zip [2010.11.19 20:33:24 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\CrashDumps [2010.11.19 20:26:29 | 000,000,000 | ---D | C] -- C:\Users\Desaster\Documents\MP3-DJ [2010.11.19 20:26:19 | 001,064,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSJET35.DLL [2010.11.19 20:26:19 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSREPL35.DLL [2010.11.19 20:26:19 | 000,252,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSRD2X35.DLL [2010.11.19 20:26:19 | 000,148,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSJINT35.DLL [2010.11.19 20:26:19 | 000,124,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSWINSCK.OCX [2010.11.19 20:26:19 | 000,024,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSJTER35.DLL [2010.11.19 20:26:18 | 001,355,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvbvm50.dll [2010.11.19 20:26:18 | 000,525,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DBGRID32.OCX [2010.11.19 20:26:18 | 000,466,592 | ---- | C] (Namtuk.com) -- C:\Windows\SysWow64\MyCommandButton.ocx [2010.11.19 20:26:18 | 000,312,320 | ---- | C] (Stefan Toengi) -- C:\Windows\SysWow64\AudioGenie2.dll [2010.11.19 20:26:18 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSEXCL35.DLL [2010.11.19 20:26:18 | 000,246,304 | ---- | C] (Namtuk.com) -- C:\Windows\SysWow64\MyFramePanel.ocx [2010.11.19 20:26:18 | 000,212,992 | ---- | C] (audiocdtools.com) -- C:\Windows\SysWow64\AudioDataBurnerOCX.ocx [2010.11.19 20:26:18 | 000,198,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comdlg32.ocx [2010.11.19 20:26:18 | 000,198,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MCI32.OCX [2010.11.19 20:26:18 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCDE.DLL [2010.11.19 20:26:18 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6DE.DLL [2010.11.19 20:26:18 | 000,089,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB5DB.DLL [2010.11.19 20:26:18 | 000,035,328 | ---- | C] (Apex Software Corporation) -- C:\Windows\SysWow64\DBGRDDE.DLL [2010.11.19 20:26:18 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CMDLGDE.DLL [2010.11.19 20:26:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MP3-DJ [2010.11.19 20:22:20 | 000,000,000 | ---D | C] -- C:\Programme\Paint.NET [2010.11.19 20:22:10 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Paint.NET [2010.11.19 20:07:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010.11.19 20:07:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010.11.19 20:07:38 | 000,411,368 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010.11.19 20:07:38 | 000,153,376 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010.11.19 20:07:38 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010.11.19 20:07:38 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010.11.19 20:07:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010.11.19 20:06:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JDownloader [2010.11.19 20:04:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Wisdom-soft ScreenHunter 5 Free [2010.11.19 19:52:15 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\vlc [2010.11.19 19:51:50 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN [2010.11.19 19:50:00 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\Macromedia [2010.11.19 19:49:56 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010.11.19 19:45:20 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\Adobe [2010.11.19 19:45:20 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Adobe [2010.11.19 19:44:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010.11.19 19:44:30 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010.11.19 19:43:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010.11.19 19:43:30 | 000,000,000 | ---D | C] -- C:\ProgramData\McAfee [2010.11.19 19:37:27 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Ahead [2010.11.19 19:34:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero [2010.11.19 19:34:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Ahead [2010.11.19 19:33:10 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll [2010.11.19 19:33:09 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll [2010.11.19 19:25:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2010.11.19 19:25:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2010.11.19 19:25:23 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010.11.19 19:23:51 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office [2010.11.19 19:23:15 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Microsoft Help [2010.11.19 19:23:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office [2010.11.19 19:23:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010.11.19 19:22:27 | 000,000,000 | RH-D | C] -- C:\MSOCache [2010.11.19 19:19:12 | 000,000,000 | ---D | C] -- C:\Programme\CCleaner [2010.11.19 19:10:59 | 000,000,000 | -H-D | C] -- C:\Windows\Icons [2010.11.19 19:02:55 | 000,034,624 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe [2010.11.19 19:02:53 | 000,036,160 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll [2010.11.19 19:02:53 | 000,029,504 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll [2010.11.19 19:02:53 | 000,025,920 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll [2010.11.19 19:02:52 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll [2010.11.19 19:02:33 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\TuneUp Software [2010.11.19 19:02:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TuneUp Utilities 2011 [2010.11.19 19:02:07 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2010.11.19 19:02:04 | 000,000,000 | -HSD | C] -- C:\ProgramData\{24036256-BFDB-4CD3-BE8A-A3D6160F2E16} [2010.11.19 18:56:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CD-AUF+CD-ZU [2010.11.19 18:50:27 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\Thunderbird [2010.11.19 18:50:27 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Thunderbird [2010.11.19 18:50:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Thunderbird [2010.11.19 18:42:11 | 000,130,696 | ---- | C] (QFX Software Corporation) -- C:\Windows\SysNative\drivers\keyscrambler.sys [2010.11.19 18:42:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KeyScrambler [2010.11.19 18:36:46 | 000,000,000 | ---D | C] -- C:\Users\Desaster\Documents\PersBackup [2010.11.19 18:36:41 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\PersBackup5 [2010.11.19 18:36:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Personal Backup 5 [2010.11.19 18:33:44 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip [2010.11.19 18:33:42 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinZip [2010.11.19 18:29:29 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\Mozilla [2010.11.19 18:29:29 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Mozilla [2010.11.19 18:29:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010.11.19 18:19:50 | 000,083,968 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\SysNative\esxcwiad.dll [2010.11.19 18:19:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\epson [2010.11.19 18:07:37 | 000,108,032 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_ILMEFE.DLL [2010.11.19 18:07:37 | 000,081,408 | ---- | C] (SEIKO EPSON CORPORATION) -- C:\Windows\SysNative\E_IBCBEFE.DLL [2010.11.19 18:07:36 | 000,010,752 | ---- | C] (SEIKO EPSON CORP.) -- C:\Windows\SysNative\E_GCINST.DLL [2010.11.19 18:07:26 | 000,000,000 | ---D | C] -- C:\ProgramData\EPSON [2010.11.19 18:03:18 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Logitech [2010.11.19 18:02:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Logitech [2010.11.19 18:02:47 | 000,000,000 | ---D | C] -- C:\Programme\Logitech [2010.11.19 18:02:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Logitech [2010.11.19 17:51:49 | 000,069,632 | ---- | C] (Razer Inc.) -- C:\Windows\SysNative\copperhd.cpl [2010.11.19 17:51:47 | 000,014,336 | ---- | C] (Razer (Asia-Pacific) Pte Ltd) -- C:\Windows\SysNative\drivers\copperhd.sys [2010.11.19 17:51:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Razer [2010.11.19 17:49:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Symantec Shared [2010.11.19 17:48:30 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\InstallShield [2010.11.19 17:44:49 | 000,000,000 | ---D | C] -- C:\Users\Desaster\Documents\Symantec [2010.11.19 17:44:14 | 000,174,640 | ---- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS [2010.11.19 17:44:14 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Symantec Shared [2010.11.19 17:44:14 | 000,000,000 | ---D | C] -- C:\Programme\Symantec [2010.11.19 17:44:07 | 000,821,808 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymEFA64.sys [2010.11.19 17:44:07 | 000,715,824 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\srtsp64.sys [2010.11.19 17:44:07 | 000,450,096 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymDS64.sys [2010.11.19 17:44:07 | 000,381,488 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\symnets.sys [2010.11.19 17:44:07 | 000,168,496 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\Ironx64.sys [2010.11.19 17:44:07 | 000,040,496 | R--- | C] (Symantec Corporation) -- C:\Windows\SysNative\drivers\NISx64\1201000.025\srtspx64.sys [2010.11.19 17:43:55 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64 [2010.11.19 17:43:55 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\NISx64\1201000.025 [2010.11.19 17:43:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Norton Internet Security [2010.11.19 17:43:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton [2010.11.19 17:43:49 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller [2010.11.19 17:43:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NortonInstaller [2010.11.19 17:37:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010.11.19 17:32:31 | 000,758,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\cohelper.dll [2010.11.19 17:32:31 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2010.11.19 17:14:34 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\LibrariIcon [2010.11.19 17:08:40 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2010.11.19 17:08:40 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2010.11.19 17:08:40 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2010.11.19 17:08:40 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2010.11.19 17:08:40 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2010.11.19 17:08:40 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2010.11.19 17:08:40 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2010.11.19 17:08:40 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2010.11.19 17:08:24 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe [2010.11.19 17:05:11 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Documents\Scanned Documents [2010.11.19 17:05:11 | 000,000,000 | ---D | C] -- C:\Users\Desaster\Documents\Fax [2010.11.19 17:03:46 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2010.11.19 17:03:29 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2010.11.19 17:03:16 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll [2010.11.19 17:03:16 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll [2010.11.19 17:03:04 | 000,702,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2010.11.19 17:03:03 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2010.11.19 17:03:03 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2010.11.19 17:03:03 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2010.11.19 17:03:03 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2010.11.19 17:03:03 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2010.11.19 17:03:03 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2010.11.19 17:03:03 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2010.11.19 17:03:03 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2010.11.19 17:03:03 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2010.11.19 17:03:03 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2010.11.19 17:03:03 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2010.11.19 17:03:03 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2010.11.19 17:03:03 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2010.11.19 17:03:01 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010.11.19 17:03:01 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010.11.19 17:03:01 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2010.11.19 17:03:01 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010.11.19 17:03:01 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010.11.19 17:03:01 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2010.11.19 17:03:01 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010.11.19 17:03:00 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2010.11.19 17:03:00 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2010.11.19 17:02:59 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll [2010.11.19 17:02:59 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll [2010.11.19 17:02:59 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll [2010.11.19 17:02:59 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll [2010.11.19 17:02:59 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe [2010.11.19 17:02:59 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe [2010.11.19 17:02:59 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe [2010.11.19 17:02:59 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe [2010.11.19 17:02:59 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe [2010.11.19 17:02:59 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe [2010.11.19 17:02:59 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe [2010.11.19 17:02:59 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe [2010.11.19 17:02:59 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll [2010.11.19 17:02:59 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll [2010.11.19 17:02:59 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll [2010.11.19 17:02:59 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll [2010.11.19 17:02:58 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2010.11.19 17:02:57 | 005,507,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2010.11.19 17:02:57 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2010.11.19 17:02:56 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2010.11.19 17:02:56 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2010.11.19 17:02:56 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2010.11.19 17:02:55 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2010.11.19 17:02:55 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll [2010.11.19 17:01:53 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2010.11.19 17:01:50 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010.11.19 17:01:50 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2010.11.19 17:01:50 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2010.11.19 17:01:49 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2010.11.19 17:01:49 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll [2010.11.19 17:01:49 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll [2010.11.19 17:01:49 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2010.11.19 17:01:49 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2010.11.19 17:01:49 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2010.11.19 17:01:49 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2010.11.19 17:01:49 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2010.11.19 17:01:48 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2010.11.19 17:01:02 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2010.11.19 17:01:02 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2010.11.19 17:01:02 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll [2010.11.19 17:01:02 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll [2010.11.19 17:01:00 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2010.11.19 17:01:00 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2010.11.19 17:01:00 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010.11.19 17:01:00 | 000,293,888 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010.11.19 17:01:00 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010.11.19 17:01:00 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010.11.19 17:00:59 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll [2010.11.19 17:00:59 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010.11.19 17:00:59 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010.11.19 17:00:58 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2010.11.19 17:00:58 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2010.11.19 17:00:58 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2010.11.19 17:00:55 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll [2010.11.19 17:00:55 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll [2010.11.19 17:00:55 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll [2010.11.19 17:00:54 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys [2010.11.19 17:00:47 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2010.11.19 17:00:46 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2010.11.19 17:00:45 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2010.11.19 17:00:45 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2010.11.19 17:00:43 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll [2010.11.19 16:55:30 | 002,602,528 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkHDM64.dll [2010.11.19 16:55:30 | 000,369,864 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64H.dll [2010.11.19 16:55:30 | 000,253,728 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtHDMIVX.sys [2010.11.19 16:55:30 | 000,095,432 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64H.dll [2010.11.19 16:55:30 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64H.dll [2010.11.19 16:55:29 | 001,964,064 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RHDMEx64.dll [2010.11.19 16:55:29 | 000,307,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DHT64.dll [2010.11.19 16:55:29 | 000,307,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RH3DAA64.dll [2010.11.19 16:55:29 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64H.dll [2010.11.19 16:55:29 | 000,069,664 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RHCoInst64.dll [2010.11.19 16:54:43 | 009,112,168 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysWow64\RtsUStoricon.dll [2010.11.19 16:54:43 | 000,422,504 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtsUStor.dll [2010.11.19 16:54:43 | 000,246,376 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\drivers\RtsUStor.sys [2010.11.19 16:52:35 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\ATI [2010.11.19 16:52:35 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\ATI [2010.11.19 16:51:15 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\ATI Technologies [2010.11.19 16:51:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies [2010.11.19 16:51:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI [2010.11.19 16:50:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies [2010.11.19 16:50:37 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010.11.19 16:50:28 | 000,000,000 | ---D | C] -- C:\Programme\ATI Technologies [2010.11.19 16:50:26 | 000,000,000 | ---D | C] -- C:\Programme\ATI [2010.11.19 16:50:20 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM [2010.11.19 16:50:20 | 000,000,000 | ---D | C] -- C:\Programme\Realtek [2010.11.19 16:50:06 | 002,654,824 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2010.11.19 16:50:06 | 002,580,824 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll [2010.11.19 16:50:06 | 002,096,232 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2010.11.19 16:50:06 | 001,242,728 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2010.11.19 16:50:06 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2010.11.19 16:50:06 | 000,618,600 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2010.11.19 16:50:06 | 000,561,256 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat [2010.11.19 16:50:06 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll [2010.11.19 16:50:06 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll [2010.11.19 16:50:06 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2010.11.19 16:50:06 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll [2010.11.19 16:50:06 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll [2010.11.19 16:50:06 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll [2010.11.19 16:50:06 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll [2010.11.19 16:50:06 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll [2010.11.19 16:50:06 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll [2010.11.19 16:50:06 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll [2010.11.19 16:50:06 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2010.11.19 16:50:06 | 000,118,464 | ---- | C] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll [2010.11.19 16:50:06 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll [2010.11.19 16:50:06 | 000,082,024 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2010.11.19 16:50:06 | 000,081,232 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll [2010.11.19 16:50:06 | 000,078,160 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll [2010.11.19 16:50:06 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll [2010.11.19 16:50:06 | 000,074,064 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll [2010.11.19 16:50:05 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll [2010.11.19 16:50:05 | 001,937,312 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010.11.19 16:50:05 | 001,770,328 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll [2010.11.19 16:50:05 | 001,716,368 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll [2010.11.19 16:50:05 | 001,327,208 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll [2010.11.19 16:50:05 | 001,179,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll [2010.11.19 16:50:05 | 001,111,656 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll [2010.11.19 16:50:05 | 000,504,936 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll [2010.11.19 16:50:05 | 000,491,112 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll [2010.11.19 16:50:05 | 000,475,752 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll [2010.11.19 16:50:05 | 000,419,472 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll [2010.11.19 16:50:05 | 000,341,336 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll [2010.11.19 16:50:05 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll [2010.11.19 16:50:05 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll [2010.11.19 16:50:05 | 000,317,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll [2010.11.19 16:50:05 | 000,269,928 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll [2010.11.19 16:50:05 | 000,266,856 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll [2010.11.19 16:50:05 | 000,200,800 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll [2010.11.19 16:50:05 | 000,126,056 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll [2010.11.19 16:50:05 | 000,125,584 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll [2010.11.19 16:50:05 | 000,125,544 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll [2010.11.19 16:50:05 | 000,125,032 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll [2010.11.19 16:50:05 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll [2010.11.19 16:50:05 | 000,106,640 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll [2010.11.19 16:50:05 | 000,072,336 | ---- | C] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll [2010.11.19 16:50:05 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010.11.19 16:50:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek [2010.11.19 16:50:03 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2010.11.19 16:50:03 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp [2010.11.19 16:50:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010.11.19 16:49:11 | 000,000,000 | ---D | C] -- C:\ATI [2010.11.19 16:43:36 | 000,660,072 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\NVUNINST.EXE [2010.11.19 16:43:32 | 000,000,000 | ---D | C] -- C:\NVIDIA [2010.11.19 16:35:44 | 000,000,000 | ---D | C] -- C:\Users\Desaster\Documents\DriverGenius [2010.11.19 16:34:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Driver-Soft [2010.11.19 16:29:47 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2010.11.19 16:29:47 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll [2010.11.19 16:29:47 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2010.11.19 16:29:47 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2010.11.19 16:28:57 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Searches [2010.11.19 16:28:42 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\Identities [2010.11.19 16:28:38 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Contacts [2010.11.19 16:28:36 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\VirtualStore [2010.11.19 16:28:27 | 000,000,000 | --SD | C] -- C:\Users\Desaster\AppData\Roaming\Microsoft [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Videos [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Saved Games [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Pictures [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Music [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Links [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Favorites [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Downloads [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Documents [2010.11.19 16:28:27 | 000,000,000 | R--D | C] -- C:\Users\Desaster\Desktop [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Vorlagen [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\AppData\Local\Verlauf [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\AppData\Local\Temporary Internet Files [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Startmenü [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\SendTo [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Recent [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Netzwerkumgebung [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Lokale Einstellungen [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Documents\Eigene Videos [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Documents\Eigene Musik [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Eigene Dateien [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Documents\Eigene Bilder [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Druckumgebung [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Cookies [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\AppData\Local\Anwendungsdaten [2010.11.19 16:28:27 | 000,000,000 | -HSD | C] -- C:\Users\Desaster\Anwendungsdaten [2010.11.19 16:28:27 | 000,000,000 | -H-D | C] -- C:\Users\Desaster\AppData [2010.11.19 16:28:27 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Temp [2010.11.19 16:28:27 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Local\Microsoft [2010.11.19 16:28:27 | 000,000,000 | ---D | C] -- C:\Users\Desaster\AppData\Roaming\Media Center Programs [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\Recovery [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\Programme [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2010.11.19 16:28:12 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2010.11.19 16:22:08 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010.11.19 16:19:48 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010.11.19 16:19:28 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010.11.19 16:18:45 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010.11.19 16:18:32 | 000,000,000 | -HSD | C] -- C:\Boot ========== Files - Modified Within 30 Days ========== [2010.11.24 08:36:13 | 000,013,232 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.11.24 08:36:13 | 000,013,232 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.11.24 08:29:01 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.11.24 08:28:57 | 000,629,118 | ---- | M] () -- C:\Windows\SysNative\oodbs.lor [2010.11.24 08:27:32 | 001,455,186 | ---- | M] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\Cat.DB [2010.11.23 19:53:46 | 000,349,876 | ---- | M] () -- C:\Users\Desaster\Documents\Rapidshare.pdf [2010.11.22 15:04:48 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.11.22 15:04:48 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.11.22 15:04:48 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.11.22 15:04:48 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.11.22 15:04:48 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.11.20 15:05:28 | 000,000,866 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2010.11.19 21:12:49 | 000,001,993 | ---- | M] () -- C:\Users\Public\Desktop\O&O Defrag.lnk [2010.11.19 20:55:53 | 000,341,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010.11.19 20:54:27 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2010.11.19 20:07:30 | 000,411,368 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010.11.19 20:07:30 | 000,153,376 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe [2010.11.19 20:07:30 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe [2010.11.19 20:07:30 | 000,145,184 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe [2010.11.19 19:29:27 | 000,001,611 | ---- | M] () -- C:\Users\Desaster\Desktop\Microsoft Office Excel.lnk [2010.11.19 19:29:09 | 000,001,629 | ---- | M] () -- C:\Users\Desaster\Desktop\Microsoft Office Word.lnk [2010.11.19 19:18:35 | 000,001,345 | ---- | M] () -- C:\Users\Desaster\Desktop\Downloads.lnk [2010.11.19 19:04:22 | 000,001,367 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities 2011.lnk [2010.11.19 19:02:52 | 000,002,209 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2010.11.19 19:00:35 | 000,001,219 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk [2010.11.19 18:31:38 | 000,001,089 | ---- | M] () -- C:\Users\Desaster\Desktop\Bibliotheken.lnk [2010.11.19 18:30:27 | 000,001,405 | ---- | M] () -- C:\Users\Desaster\Desktop\Internet Explorer.lnk [2010.11.19 18:29:27 | 000,001,939 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010.11.19 18:03:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_lgSSBW_01_00_00.Wdf [2010.11.19 18:03:13 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_lgSSQVGA_01_00_00.Wdf [2010.11.19 17:44:14 | 000,174,640 | ---- | M] (Symantec Corporation) -- C:\Windows\SysNative\drivers\SYMEVENT64x86.SYS [2010.11.19 17:44:14 | 000,007,440 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT [2010.11.19 17:44:14 | 000,000,854 | ---- | M] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF [2010.11.19 17:44:09 | 000,002,561 | ---- | M] () -- C:\Users\Public\Desktop\Norton Internet Security 2011.lnk [2010.11.19 16:53:07 | 000,000,146 | ---- | M] () -- C:\Users\Desaster\Desktop\Sound.lnk [2010.11.19 16:52:56 | 000,000,477 | ---- | M] () -- C:\Users\Desaster\Desktop\Anzeige.lnk [2010.11.19 16:23:29 | 000,056,735 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010.11.19 16:23:29 | 000,056,735 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010.11.19 16:21:51 | 000,000,000 | ---- | M] () -- C:\Windows\ativpsrm.bin [2010.11.19 16:21:16 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.11.19 16:18:33 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2010.11.16 15:20:18 | 000,388,608 | ---- | M] (Trend Micro Inc.) -- C:\Users\Desaster\Desktop\HiJackThis204.exe [2010.11.16 15:19:56 | 000,575,488 | ---- | M] (OldTimer Tools) -- C:\Users\Desaster\Desktop\OTL.exe [2010.11.02 19:33:34 | 001,146,984 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl [2010.11.02 19:33:22 | 002,096,232 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll [2010.11.02 19:33:22 | 000,332,392 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll [2010.11.02 19:33:00 | 002,654,824 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll [2010.11.02 19:33:00 | 000,618,600 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll [2010.11.02 19:33:00 | 000,149,608 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll [2010.11.02 19:32:48 | 001,242,728 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll [2010.11.02 19:32:48 | 000,561,256 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat [2010.11.02 19:32:48 | 000,082,024 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll [2010.11.02 19:32:26 | 001,327,208 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll [2010.11.02 19:32:26 | 000,491,112 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll [2010.11.02 19:32:26 | 000,475,752 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll [2010.11.02 19:32:14 | 001,179,752 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll [2010.11.02 19:32:14 | 000,317,032 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll [2010.11.02 19:32:14 | 000,269,928 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll [2010.11.02 19:32:14 | 000,126,056 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll [2010.11.02 19:32:14 | 000,125,032 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll [2010.11.02 19:32:02 | 001,111,656 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll [2010.11.02 19:32:02 | 000,504,936 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll [2010.11.02 19:32:02 | 000,266,856 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll [2010.11.02 19:32:02 | 000,125,544 | ---- | M] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll [2010.10.29 10:05:34 | 000,118,464 | ---- | M] (Sony Corporation) -- C:\Windows\SysNative\SFSS_APO.dll [2010.10.28 10:46:00 | 001,251,944 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll [2010.10.26 14:48:48 | 000,034,624 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe [2010.10.26 14:44:06 | 000,025,920 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll [2010.10.26 14:44:04 | 000,021,312 | ---- | M] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll [2010.10.26 14:44:00 | 000,036,160 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll [2010.10.26 14:43:56 | 000,029,504 | ---- | M] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll [2010.10.26 13:03:04 | 001,937,312 | ---- | M] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll [2010.10.26 09:16:00 | 001,716,368 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEP64A.dll [2010.10.26 09:15:58 | 000,419,472 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EED64A.dll [2010.10.26 09:15:58 | 000,125,584 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEL64A.dll [2010.10.26 09:15:58 | 000,072,336 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEG64A.dll [2010.10.26 09:15:56 | 000,106,640 | ---- | M] (Dolby Laboratories) -- C:\Windows\SysNative\R4EEA64A.dll ========== Files Created - No Company Name ========== [2010.11.23 19:53:45 | 000,349,876 | ---- | C] () -- C:\Users\Desaster\Documents\Rapidshare.pdf [2010.11.19 21:40:35 | 000,629,118 | ---- | C] () -- C:\Windows\SysNative\oodbs.lor [2010.11.19 21:12:49 | 000,001,993 | ---- | C] () -- C:\Users\Public\Desktop\O&O Defrag.lnk [2010.11.19 20:54:27 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys [2010.11.19 20:26:19 | 000,753,727 | ---- | C] () -- C:\Windows\SysWow64\ExTvw.ocx [2010.11.19 20:26:18 | 000,060,028 | ---- | C] () -- C:\Windows\SysWow64\Win32.tlb [2010.11.19 19:27:45 | 000,001,629 | ---- | C] () -- C:\Users\Desaster\Desktop\Microsoft Office Word.lnk [2010.11.19 19:27:28 | 000,001,611 | ---- | C] () -- C:\Users\Desaster\Desktop\Microsoft Office Excel.lnk [2010.11.19 19:19:15 | 000,000,866 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2010.11.19 19:02:51 | 000,002,209 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2010.11.19 19:02:51 | 000,001,367 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities 2011.lnk [2010.11.19 18:50:20 | 000,001,219 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Thunderbird.lnk [2010.11.19 18:31:38 | 000,001,089 | ---- | C] () -- C:\Users\Desaster\Desktop\Bibliotheken.lnk [2010.11.19 18:30:27 | 000,001,405 | ---- | C] () -- C:\Users\Desaster\Desktop\Internet Explorer.lnk [2010.11.19 18:29:27 | 000,001,939 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010.11.19 18:23:46 | 000,000,000 | ---- | C] () -- C:\Users\Desaster\Sti_Trace.log [2010.11.19 18:03:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_lgSSBW_01_00_00.Wdf [2010.11.19 18:03:13 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_lgSSQVGA_01_00_00.Wdf [2010.11.19 17:44:17 | 001,455,186 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\Cat.DB [2010.11.19 17:44:14 | 000,007,440 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.CAT [2010.11.19 17:44:14 | 000,000,854 | ---- | C] () -- C:\Windows\SysNative\drivers\SYMEVENT64x86.INF [2010.11.19 17:44:09 | 000,002,561 | ---- | C] () -- C:\Users\Public\Desktop\Norton Internet Security 2011.lnk [2010.11.19 17:44:01 | 000,003,373 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymEFA.inf [2010.11.19 17:44:01 | 000,002,792 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymDS.inf [2010.11.19 17:44:01 | 000,001,445 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymNet.inf [2010.11.19 17:44:01 | 000,001,438 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\srtsp64.inf [2010.11.19 17:44:01 | 000,001,422 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\srtspx64.inf [2010.11.19 17:44:01 | 000,000,771 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\Iron.inf [2010.11.19 17:43:55 | 000,007,414 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\srtspx64.cat [2010.11.19 17:43:55 | 000,007,412 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymEFA64.cat [2010.11.19 17:43:55 | 000,007,410 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\symnet64.cat [2010.11.19 17:43:55 | 000,007,410 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\srtsp64.cat [2010.11.19 17:43:55 | 000,007,406 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\SymDS64.cat [2010.11.19 17:43:55 | 000,007,402 | R--- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\iron.cat [2010.11.19 17:43:55 | 000,000,172 | ---- | C] () -- C:\Windows\SysNative\drivers\NISx64\1201000.025\isolate.ini [2010.11.19 17:32:31 | 000,011,164 | ---- | C] () -- C:\Windows\SysNative\drivers\nvphy.bin [2010.11.19 16:53:56 | 000,001,345 | ---- | C] () -- C:\Users\Desaster\Desktop\Downloads.lnk [2010.11.19 16:53:07 | 000,000,146 | ---- | C] () -- C:\Users\Desaster\Desktop\Sound.lnk [2010.11.19 16:52:56 | 000,000,477 | ---- | C] () -- C:\Users\Desaster\Desktop\Anzeige.lnk [2010.11.19 16:21:51 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2010.11.19 16:21:16 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.11.19 16:18:33 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK [2010.11.19 16:18:32 | 000,383,562 | RHS- | C] () -- C:\bootmgr [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll ========== LOP Check ========== [2010.11.19 21:53:37 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\DAEMON Tools Lite [2010.11.19 19:09:15 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\LibrariIcon [2010.11.19 20:41:24 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\mp3DirectCut [2010.11.19 20:38:48 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\Mp3tag [2010.11.19 18:41:18 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\PersBackup5 [2010.11.19 18:50:28 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\Thunderbird [2010.11.19 20:52:44 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\TomTom [2010.11.19 19:09:57 | 000,000,000 | ---D | M] -- C:\Users\Desaster\AppData\Roaming\TuneUp Software [2009.07.14 06:08:49 | 000,010,458 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > Code:
ATTFilter OTL Extras logfile created on: 24.11.2010 08:50:35 - Run 3
OTL by OldTimer - Version 3.2.17.3 Folder = C:\Users\Desaster\Desktop
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 65,00% Memory free
8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 150,15 Gb Total Space | 115,44 Gb Free Space | 76,88% Space Free | Partition Type: NTFS
Drive D: | 781,35 Gb Total Space | 469,37 Gb Free Space | 60,07% Space Free | Partition Type: NTFS
Computer Name: DESASTER-PC | User Name: Desaster | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{23170F69-40C1-2702-0465-000001000000}" = 7-Zip 4.65 (x64 edition)
"{4B0748C5-2E63-B954-8C3F-71918C599800}" = WMV9/VC-1 Video Playback
"{897C17AE-EC18-052F-9323-E274A5A2075F}" = ccc-utility64
"{8FCBB6DA-069C-8D08-DD99-F0881B9EECC3}" = AMD Drag and Drop Transcoding
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{A1E85B9A-AFAD-4D38-AF01-6B020DD5213A}" = Logitech GamePanel Software 3.06.109
"{A3801BE1-5541-D0DE-18D0-136F8166BFA0}" = ATI Catalyst Install Manager
"{BC84C1E9-F4D4-4B8E-B35C-C88EEA0A5201}" = O&O Defrag Professional
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319
"{F0E2B312-D7FD-4349-A9B6-E90B36DB1BD1}" = Paint.NET v3.5.5
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"CCleaner" = CCleaner
"EPSON Stylus SX200 Series" = Druckerdeinstallation für EPSON Stylus SX200 Series
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"NVIDIA Drivers" = NVIDIA Drivers
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0032D29F-7E8F-40E5-AD12-8857AAB0DBFF}" = Catalyst Control Center - Branding
"{07AA84F8-EF8E-A01C-B6B1-0EC130157CBD}" = CCC Help Greek
"{11083C7A-D0D6-4DA4-8C3A-74B8389EC07B}" = ATI Catalyst Registration
"{2375BC18-66B0-FA52-F110-CF3CF1018E34}" = Catalyst Control Center Localization All
"{24036256-BFDB-4CD3-BE8A-A3D6160F2E16}" = TuneUp Utilities 2011
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20
"{28A946E1-E83B-4662-BC7C-23451851489E}" = Razer Copperhead
"{30DBA5A1-9E59-84A7-5B2D-5A8486096C57}" = CCC Help English
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5449FB4F-1802-4D5B-A6D8-087DB1142147}" = Realtek HDMI Audio Driver for ATI
"{577A6872-1535-0591-E5FE-E23D503D42C8}" = CCC Help Hungarian
"{5D4C60AA-84E6-4E1A-8A68-69970D387BE1}" = TuneUp Utilities Language Pack (de-DE)
"{67EFADAD-D448-CF11-4785-BF7F95D1980B}" = Catalyst Control Center InstallProxy
"{697EEF19-844D-94BD-9E72-986216C6911B}" = ccc-core-static
"{69C44DB6-7E2F-23A1-409D-E5FBA7D73D78}" = Catalyst Control Center Graphics Previews Common
"{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}" = Windows Media Player Firefox Plugin
"{6E58BEA7-DDFB-F4F8-39C5-0723165706F3}" = CCC Help Spanish
"{8ACC73AA-6511-7C55-B1A9-8E5D1DEAFAA3}" = The Lord of the Rings FREE Trial
"{8F3C31C5-9C3A-4AA8-8EFA-71290A7AD533}" = TomTom HOME Visual Studio Merge Modules
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0015-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_ENTERPRISE_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{E64BA721-2310-4B55-BE5A-2925F9706192}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002A-0407-1000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0407-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (German) 2007
"{90120000-0044-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_ENTERPRISE_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00BA-0407-0000-0000000FF1CE}" = Microsoft Office Groove MUI (German) 2007
"{90120000-00BA-0407-0000-0000000FF1CE}_ENTERPRISE_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90A64EC9-64E0-7725-684C-F9CCD67C61A8}" = CCC Help French
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{A9474D45-F7B9-7E7B-609B-671EE5FA508D}" = CCC Help Polish
"{AC76BA86-7AD7-1031-7B44-AA0000000001}" = Adobe Reader X - Deutsch
"{B6CAF3AD-4B86-AFF4-5779-6BDDD92C6CD4}" = CCC Help Italian
"{CA1F6B80-A1D2-A63F-55E4-1195041562FC}" = Catalyst Control Center Graphics Previews Vista
"{CCEB497B-5427-FCA1-3DD8-172CB3AE9378}" = CCC Help Portuguese
"{CD95F661-A5C4-44F5-A6AA-ECDD91C240BB}" = WinZip 14.0
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F14B8ECC-BDA0-4987-9201-D7B7DBE11031}" = Nero 7 Premium
"{F9835182-794B-4F24-902A-E2CA9D43380F}" = NVIDIA PhysX
"{FCC78952-DF5D-C8F1-6A38-8F4CAAAF0D0A}" = CCC Help German
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"CD-AUF+CD-ZU 1.00" = CD-AUF+CD-ZU 1.00
"Driver Genius Professional Edition_is1" = Driver Genius Professional Edition
"ENTERPRISE" = Microsoft Office Enterprise 2007
"EPSON Scanner" = EPSON Scan
"JDownloader" = JDownloader
"KeyScrambler" = KeyScrambler
"Mafia II DLC Jimmy's Vendetta_is1" = Mafia II DLC Jimmy's Vendetta
"Mafia II Update 1_is1" = Mafia II Update 1
"Mafia II_is1" = Mafia II
"Mozilla Firefox (3.6.12)" = Mozilla Firefox (3.6.12)
"Mozilla Thunderbird (3.1.6)" = Mozilla Thunderbird (3.1.6)
"MP3-DJ_is1" = MP3-DJ 11.4.0
"Mp3tag" = Mp3tag v2.47a
"NIS" = Norton Internet Security
"Personal Backup 5_is1" = Personal Backup 5.0
"TomTom HOME" = TomTom HOME 2.7.6.2056
"TuneUp Utilities 2011" = TuneUp Utilities 2011
"VLC media player" = VLC media player 1.1.4
"Wisdom-soft Set up ScreenHunter 5.1 Free" = Wisdom-soft Set up ScreenHunter 5.1 Free
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 19.11.2010 11:27:05 | Computer Name = Desaster-PC | Source = Software Protection Platform Service | ID = 1017
Description = Fehler bei der Installation des Kaufnachweises. 0xC004F050 Teil-Pkey=VF6FP
ACID=?
Genauer
Fehler[?]
Error - 19.11.2010 15:32:45 | Computer Name = Desaster-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: Mp3DJ.exe, Version: 11.4.0.0, Zeitstempel:
0x4cd3cc57 Name des fehlerhaften Moduls: DBGRID32.OCX, Version: 5.1.81.4, Zeitstempel:
0x3533be69 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00040fad ID des fehlerhaften Prozesses:
0x6b4 Startzeit der fehlerhaften Anwendung: 0x01cb882027273110 Pfad der fehlerhaften
Anwendung: C:\Program Files (x86)\MP3-DJ\Mp3DJ.exe Pfad des fehlerhaften Moduls:
C:\WINDOWS\SysWow64\DBGRID32.OCX Berichtskennung: c8475c00-f413-11df-8a95-001d72b78f79
Error - 19.11.2010 15:52:43 | Computer Name = Desaster-PC | Source = TomTomHOMEService | ID = 10000
Description =
Error - 19.11.2010 16:02:49 | Computer Name = Desaster-PC | Source = MsiInstaller | ID = 11500
Description =
[ System Events ]
Error - 22.11.2010 15:49:06 | Computer Name = Desaster-PC | Source = WMPNetworkSvc | ID = 866306
Description =
Error - 22.11.2010 15:49:06 | Computer Name = Desaster-PC | Source = WMPNetworkSvc | ID = 866306
Description =
Error - 23.11.2010 02:40:52 | Computer Name = Desaster-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
Error - 23.11.2010 03:27:00 | Computer Name = Desaster-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
Error - 23.11.2010 03:29:41 | Computer Name = Desaster-PC | Source = Service Control Manager | ID = 7022
Description = Der Dienst "Intelligenter Hintergrundübertragungsdienst" wurde nicht
richtig gestartet.
Error - 23.11.2010 03:32:14 | Computer Name = Desaster-PC | Source = EventLog | ID = 6008
Description = Das System wurde zuvor am ?23.?11.?2010 um 08:30:24 unerwartet heruntergefahren.
Error - 23.11.2010 03:32:26 | Computer Name = Desaster-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
Error - 23.11.2010 13:53:56 | Computer Name = Desaster-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
Error - 24.11.2010 03:23:37 | Computer Name = Desaster-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
Error - 24.11.2010 03:29:15 | Computer Name = Desaster-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Heimnetzgruppen-Anbieter" ist vom Dienst "Funktionssuchanbieter-Host"
abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: %%1058
< End of report >
|
|
24.11.2010, 21:53
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Benutzerkontensteuerung deaktiviert sich Hallo und
__________________ Bitte routinemäßig einen Vollscan mit Malwarebytes machen und Log posten. Denk daran, dass Malwarebytes vor jedem Scan manuell aktualisiert werden muss! Falls Logs aus älteren Scans mit Malwarebytes vorhanden sind, bitte auch davon alle posten!
__________________ |
|
25.11.2010, 06:05
| #3 |
| | Benutzerkontensteuerung deaktiviert sich Hi,
__________________Malewarebytes läuft bei mir nicht durch. Beim 1 mal bekam ich die Aufforderung auf Grund einer beschädigten Datei CHKDSK durchzuführen.Habe ich dann auch gemacht. Beim 2 Verusch bekam ich einen Bluescreen und CHKDSK hat sich nochmal gestartet .Ich kenne mich da nicht so wirklich aus.Was soll ich jetzt tun? |
|
25.11.2010, 13:23
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Benutzerkontensteuerung deaktiviert sich chkdsk der Systempartition unter Windows Vista/7 1. Klick mit rechts auf einen freien Bereich auf dem Desktop und sag "Neu, Verknüpfung erstellen" 2. Tipp als Ziel cmd.exe ein und bestätige mit OK, eine neue Verknüpfung zur Konsole auf dem Desktop müsste sich nun befinden 3. Falls dem so ist, diese neue Verknüpfung rechtsklicken => Als Administrator ausführen => Sicherheitsabfrage von Vista Benutzerkontensteuerung ggf. bestätigen => schwarze Eingabeaufforderung öffnet sich 4. Tipp dort ein: chkdsk c: /f /r /v und bestätige mit enter. 5. Die folgende Abfrage mit j bestätigen und enter drücken. 6. Windows neu starten, es sollte ein Hinweis auf eine geplante Datenträgerüberprüfung erscheinen - die Zeit verstreichen lassen, keine Taste drücken!! 7. Abwarten bis der Vorgang abgeschlossen ist. Bei großen Partitionen kann es u.U. recht lange dauern. Windows bootet automatisch neu.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
25.11.2010, 19:33
| #5 |
| | Benutzerkontensteuerung deaktiviert sich Nachdem ich Deiner Anleitung gefolgt bin und diesen Check gemacht hatte hat Malewarebytes wunderbar funktioniert.Danke. So hier nun das Ergebniss Code:
ATTFilter Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Datenbank Version: 5189
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
25.11.2010 19:22:24
mbam-log-2010-11-25 (19-22-24).txt
Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|)
Durchsuchte Objekte: 241881
Laufzeit: 33 Minute(n), 26 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
|
|
26.11.2010, 06:41
| #6 |
| | Benutzerkontensteuerung deaktiviert sich Ich wollte noch anmerken das mein System seit diesem Check wieder läuft wie ein Uhrwerk.Hab direkt mal etwas gegoogelt was das eigentlich ist und bewirkt.Wieder etwas dazu gelernt  Wenn ich jetzt noch sicher sein kann das ich keine Maleware drauf habe bin ich glücklich. |
|
28.11.2010, 19:32
| #7 |
| | Benutzerkontensteuerung deaktiviert sich Also in den letzten 4 Tagen hat sich nicht's mehr deaktiviert.Ich denke das man den Präfix auf erledigt setzen kann.Seit Chkdsk in ausführlicher Form läuft alles rund.Malewarebytes war auch negativ,Norton meldet auch nicht's .Rechner läuft stabil,Internet normal.............alles gut. Danke für die Hilfe |
|
28.11.2010, 21:35
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Benutzerkontensteuerung deaktiviert sich Dann wären wir durch!  Bitte abschließend die Updates prüfen, unten mein Leitfaden dazu. Für noch mehr Sicherheit solltest Du nach der beseitigten Infektion auch möglichst alle Passwörter ändern. Microsoftupdate Windows XP: Besuch mit dem IE die MS-Updateseite und lass Dir alle wichtigen Updates installieren. Windows Vista/7: Anleitung Windows-Update PDF-Reader aktualisieren Dein Adobe Reader ist nicht aktuell, was ein großes Sicherheitsrisiko darstellt. Du solltest daher besser die alte Version über Systemsteuerung => Software deinstallieren, indem Du dort auf "Adobe Reader x.0" klickst und das Programm entfernst. Ich empfehle einen alternativen PDF-Reader wie SumatraPDF oder Foxit PDF Reader, beide sind sehr viel schlanker und flotter als der AdobeReader. Bitte überprüf bei der Gelegenheit auch die Aktualität des Flashplayers, hier der direkte Downloadlink => http://filepony.de/?q=Flash+Player Java-Update Veraltete Java-Installationen sind ein Sicherheitsrisiko, daher solltest Du die alten Versionen löschen (falls vorhanden, am besten mit JavaRa) und auf die neuste aktualisieren. Beende dazu alle Programme (v.a. die Browser), klick danach auf Start, Systemsteuerung, Software und deinstalliere darüber alle aufgelisteten Java-Versionen. Lad Dir danach von hier das aktuelle Java SE Runtime Environment (JRE) herunter und installiere es.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Benutzerkontensteuerung deaktiviert sich |
| 64-bit, adblock, adobe, bho, c:\windows\system32\rundll32.exe, desktop, driver genius, error, explorer, fehler, firefox, flash player, focus, format, hijack, hijackthis, home, home premium, ieframe.dll, install.exe, installation, internet, internet explorer, intrusion prevention, langs, launch, location, media center, mozilla, mozilla thunderbird, msiinstaller, office 2007, oldtimer, otl logfile, otl.exe, plug-in, problem, programdata, realtek, registry, rundll, saver, searchplugins, security, security update, shell32.dll, shortcut, software, sptd.sys, studio, symantec, system, syswow64, usb 2.0, visual studio, vlc media player, webcheck, windows |
Linear-Darstellung
