| |
| |||||||
Log-Analyse und Auswertung: Internet seit ca. 1 Wochen sehr langsam...Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
01.01.2011, 15:42
| #1 |
| |  Internet seit ca. 1 Wochen sehr langsam... Guten Tag, Ich habe seit einiger seit ein riesiges Problem. Wie haben eine 10'000er Leitung bei Sunrise, dies ist auch schön und gut. Seit einiger zeit jedoch haben wie das Problem dass alles extrem langsam ist. Malewarebytes habe ich beispielsweise gerade mit 12kB/s runtergeladen! Bei Steam hatte ich mal 1MB/s zurzeit lade ich mit +/- 100KB/s runter! Websiten laden sich extrem langsam und in Spielen habe ich zum teil üble Ping Schwankungen. Was habe ich bereits versucht? - Ich habe mir dem Support telefoniert, dieser versicherte mir dass keine Störung auf der leitung liegt. - Ich habe meinen PC neu Aufgesetzt - Mehrere Scans mit Avira Premium Security Suite (Kein Fund) - WLan Funktion unseres Switches deaktiviert Ich hoffe ihr habt noch ein paar Ideen welche ich versuchen kann. Der Supporter am Telefon hat gemeint, ich solle das Netzwerk ohne Filter betreiben, was genau hat er damit gemeint? PC System: CPU Intel i7 six Core Extreme 980X RAM 12 GB DDR3 Grafikkarte Zotac GTX 480 Festplatte(n) Samsung 1TB 7'200rpm Motherboard Asus P6T Deluxe v2 Monitor Acer GD245HQ Betriebssystem Windows 7 Ultimate 64x Antivirus Avira Premium Security Suite OTL: Code:
ATTFilter OTL logfile created on: 01.01.2011 15:13:21 - Run 1 OTL by OldTimer - Version 3.2.19.0 Folder = C:\Users\***\Desktop 64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy 12.00 Gb Total Physical Memory | 10.00 Gb Available Physical Memory | 82.00% Memory free 24.00 Gb Paging File | 22.00 Gb Available in Paging File | 90.00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 200.39 Gb Total Space | 152.79 Gb Free Space | 76.24% Space Free | Partition Type: NTFS Drive D: | 365.53 Gb Total Space | 364.14 Gb Free Space | 99.62% Space Free | Partition Type: NTFS Drive E: | 365.50 Gb Total Space | 350.90 Gb Free Space | 96.01% Space Free | Partition Type: NTFS Computer Name: ***-PC | User Name: *** | Logged in as Administrator. Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011.01.01 15:05:10 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe PRC - [2010.12.03 20:43:34 | 000,912,344 | ---- | M] (Mozilla Corporation) -- D:\Mozilla Firefox\firefox.exe PRC - [2010.12.03 20:43:34 | 000,016,856 | ---- | M] (Mozilla Corporation) -- D:\Mozilla Firefox\plugin-container.exe PRC - [2010.11.30 18:02:55 | 000,135,336 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\sched.exe PRC - [2010.11.30 18:02:44 | 000,403,624 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avwebgrd.exe PRC - [2010.11.30 18:02:42 | 000,339,624 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avmailc.exe PRC - [2010.11.30 18:02:41 | 000,539,304 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avfwsvc.exe PRC - [2010.11.30 18:02:41 | 000,281,768 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avgnt.exe PRC - [2010.11.30 18:02:41 | 000,267,944 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avguard.exe PRC - [2010.11.30 18:02:39 | 000,389,288 | ---- | M] (Avira GmbH) -- D:\Avira\AntiVir Desktop\avcenter.exe PRC - [2010.10.16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010.09.01 05:26:04 | 000,164,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Windows Media Player\wmplayer.exe ========== Modules (SafeList) ========== MOD - [2011.01.01 15:05:10 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe MOD - [2010.08.21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420fe3fa2b8113bd\comctl32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2009.07.14 02:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2010.12.17 20:22:00 | 000,403,240 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010.11.30 18:02:55 | 000,135,336 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService) SRV - [2010.11.30 18:02:44 | 000,403,624 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Avira\AntiVir Desktop\AVWEBGRD.EXE -- (AntiVirWebService) SRV - [2010.11.30 18:02:42 | 000,339,624 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Avira\AntiVir Desktop\avmailc.exe -- (AntiVirMailService) SRV - [2010.11.30 18:02:41 | 000,539,304 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Avira\AntiVir Desktop\avfwsvc.exe -- (AntiVirFirewallService) SRV - [2010.11.30 18:02:41 | 000,267,944 | ---- | M] (Avira GmbH) [Auto | Running] -- D:\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService) SRV - [2010.10.16 11:46:40 | 000,369,256 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2010.12.08 11:53:38 | 000,169,656 | ---- | M] (<Turtle Entertainment>) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\ESLWireACD.sys -- (ESLWireAC) DRV:64bit: - [2010.12.08 11:53:38 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ESLvnic.sys -- (ESLvnic1) DRV:64bit: - [2010.11.30 18:03:07 | 000,126,792 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avfwot.sys -- (avfwot) DRV:64bit: - [2010.11.30 18:03:07 | 000,116,568 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avipbb.sys -- (avipbb) DRV:64bit: - [2010.11.30 18:03:07 | 000,083,120 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\avgntflt.sys -- (avgntflt) DRV:64bit: - [2010.09.07 21:08:55 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA) DRV:64bit: - [2010.06.17 14:22:42 | 000,098,120 | ---- | M] (Avira GmbH) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\avfwim.sys -- (avfwim) DRV:64bit: - [2010.02.24 11:20:40 | 000,191,616 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\acedrv11.sys -- (acedrv11) DRV:64bit: - [2009.12.22 01:54:00 | 001,308,160 | ---- | M] (C-Media Electronics Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CM10864.sys -- (USBPNPA) DRV:64bit: - [2009.09.28 09:22:00 | 000,395,264 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\yk62x64.sys -- (yukonw7) DRV:64bit: - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2008.01.17 16:51:44 | 000,018,816 | ---- | M] (Razer USA Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Lycosa.sys -- (Lycosa) DRV:64bit: - [2005.03.29 01:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV - [2009.01.19 19:32:22 | 000,334,344 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\SysWOW64\drivers\acedrv11.sys -- (acedrv11) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/default.aspx?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 65 F7 F3 53 09 9E CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "www.google.ch" FF - prefs.js..extensions.enabledItems: {c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}:4.0 FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: D:\Mozilla Firefox\components [2010.12.27 18:11:01 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: D:\Mozilla Firefox\plugins [2010.12.19 12:48:08 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Components: D:\Mozilla Thunderbird\components [2010.12.27 18:11:01 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Thunderbird 3.1.7\extensions\\Plugins: D:\Mozilla Thunderbird\plugins [2008.02.22 16:24:06 | 000,095,832 | ---- | M] () [2010.12.17 20:34:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions [2010.12.17 20:34:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2011.01.01 13:29:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\pr542cik.default\extensions [2010.12.21 21:41:38 | 000,000,000 | ---D | M] (Easy Youtube Video Downloader) -- C:\Users\***\AppData\Roaming\mozilla\Firefox\Profiles\pr542cik.default\extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b} O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll File not found O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll File not found O4:64bit: - HKLM..\Run: [Cm108Sound] C:\Windows\Syswow64\cm108.DLL (C-Media Corporation) O4 - HKLM..\Run: [avgnt] D:\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O8:64bit: - Extra context menu item: Nach Microsoft E&xel exportieren - D:\Microsoft Office 2007\Office12\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Nach Microsoft E&xel exportieren - D:\Microsoft Office 2007\Office12\EXCEL.EXE (Microsoft Corporation) O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\Microsoft Office 2007\Office12\REFIEBAR.DLL (Microsoft Corporation) O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000001 - D:\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000002 - D:\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000013 - D:\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - D:\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - D:\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - D:\Avira\AntiVir Desktop\avsda.dll (Avira GmbH) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.1 O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O33 - MountPoints2\{1a7a71b5-09fb-11e0-ba54-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{1a7a71b5-09fb-11e0-ba54-806e6f6e6963}\Shell\AutoRun\command - "" = F:\Setup.exe -- File not found O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011.01.01 15:03:55 | 000,602,624 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2011.01.01 15:00:57 | 007,734,208 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\***\Desktop\mbam-setup.exe [2010.12.30 12:57:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Western Digital [2010.12.29 18:05:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client [2010.12.29 18:04:55 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\FileZilla [2010.12.29 17:37:23 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\web to date Projekte [2010.12.29 17:36:44 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\Erzeugte Websites [2010.12.29 17:31:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DATA BECKER [2010.12.29 17:30:47 | 000,151,552 | ---- | C] (Info-ZIP) -- C:\Windows\SysWow64\w2dzip32.dll [2010.12.29 17:29:21 | 000,290,816 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\Tx4ole.ocx [2010.12.29 17:29:20 | 000,327,680 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\txobj32.dll [2010.12.29 17:29:20 | 000,323,584 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\tx_word.dll [2010.12.29 17:29:20 | 000,152,824 | ---- | C] (Mabry Software, Inc.) -- C:\Windows\SysWow64\EncodeX.dll [2010.12.29 17:29:20 | 000,144,640 | ---- | C] (Mabry Software, Inc.) -- C:\Windows\SysWow64\PopX.ocx [2010.12.29 17:29:20 | 000,135,168 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\tx_htm32.dll [2010.12.29 17:29:20 | 000,131,072 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\tx_rtf32.dll [2010.12.29 17:29:20 | 000,081,920 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\txtls32.dll [2010.12.29 17:29:20 | 000,069,632 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\ic32.dll [2010.12.29 17:29:20 | 000,061,440 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\wndtls32.dll [2010.12.29 17:29:20 | 000,045,056 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\tx_tif32.flt [2010.12.29 17:29:20 | 000,032,768 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\tx_wmf32.flt [2010.12.29 17:29:20 | 000,032,768 | ---- | C] (The Imaging Source Europe GmbH) -- C:\Windows\SysWow64\tx_bmp32.flt [2010.12.29 17:29:19 | 000,628,736 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltocx12n.ocx [2010.12.29 17:29:19 | 000,279,800 | ---- | C] (Mabry Software, Inc.) -- C:\Windows\SysWow64\FtpX.dll [2010.12.29 17:29:19 | 000,173,304 | ---- | C] (Mabry Software, Inc.) -- C:\Windows\SysWow64\MimeX.dll [2010.12.29 17:29:19 | 000,148,736 | ---- | C] (Mabry Software, Inc.) -- C:\Windows\SysWow64\FtpX.ocx [2010.12.29 17:29:19 | 000,132,360 | ---- | C] (Mabry Software, Inc.) -- C:\Windows\SysWow64\EncodeX.ocx [2010.12.29 17:29:19 | 000,132,344 | ---- | C] (Mabry Software, Inc.) -- C:\Windows\SysWow64\PopX.dll [2010.12.29 17:29:19 | 000,099,576 | ---- | C] (Mabry Software, Inc.) -- C:\Windows\SysWow64\MabryObj.dll [2010.12.29 17:29:19 | 000,035,840 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lttwn12n.dll [2010.12.29 17:29:18 | 000,406,016 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltkrn12n.dll [2010.12.29 17:29:18 | 000,328,704 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lfcmp12n.dll [2010.12.29 17:29:18 | 000,260,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msflxgrd.ocx [2010.12.29 17:29:18 | 000,259,072 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltdis12n.dll [2010.12.29 17:29:18 | 000,207,872 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltefx12n.dll [2010.12.29 17:29:18 | 000,164,864 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltimg12n.dll [2010.12.29 17:29:18 | 000,132,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinet.ocx [2010.12.29 17:29:18 | 000,131,072 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\ltfil12n.DLL [2010.12.29 17:29:18 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\flxgdde.dll [2010.12.29 17:29:18 | 000,035,328 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lfgif12n.dll [2010.12.29 17:29:18 | 000,030,720 | ---- | C] (LEAD Technologies, Inc.) -- C:\Windows\SysWow64\lfbmp12n.dll [2010.12.29 17:29:18 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetde.dll [2010.12.29 17:29:17 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\comdlg32.ocx [2010.12.29 17:11:17 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\DATA BECKER [2010.12.27 18:11:25 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\ProtectDisc [2010.12.27 18:11:04 | 000,000,000 | ---D | C] -- C:\ProgramData\DATA BECKER Downloads [2010.12.27 18:11:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ProtectDisc Driver Installer [2010.12.27 18:09:07 | 000,647,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscomct2.ocx [2010.12.27 18:09:07 | 000,158,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscmcde.dll [2010.12.27 18:09:07 | 000,064,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscc2de.dll [2010.12.27 18:09:07 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmdlgde.dll [2010.12.27 18:09:06 | 001,050,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjet35.dll [2010.12.27 18:09:06 | 000,415,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrepl35.dll [2010.12.27 18:09:06 | 000,252,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrd2x35.dll [2010.12.27 18:09:05 | 000,148,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjint35.dll [2010.12.27 18:09:05 | 000,125,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vb6de.dll [2010.12.27 18:09:05 | 000,089,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vb5db.dll [2010.12.27 18:09:05 | 000,024,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msjter35.dll [2010.12.27 14:49:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ [2010.12.27 14:49:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ [2010.12.27 14:49:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Notepad++ [2010.12.27 12:13:06 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Foxit Software [2010.12.27 12:12:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Foxit Reader [2010.12.24 22:55:15 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HLSW [2010.12.24 22:55:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\HLSW [2010.12.24 11:31:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\WinRAR [2010.12.24 11:31:21 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2010.12.24 11:31:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2010.12.22 19:47:11 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\ESL Match Media [2010.12.21 18:53:19 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\ESL Wire Game Client [2010.12.21 18:52:46 | 000,169,656 | ---- | C] (<Turtle Entertainment>) -- C:\Windows\SysNative\drivers\ESLWireACD.sys [2010.12.21 18:52:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESL Wire [2010.12.21 18:52:43 | 000,025,528 | ---- | C] (Turtle Entertainment GmbH) -- C:\Windows\SysNative\drivers\ESLvnic.sys [2010.12.21 18:52:43 | 000,000,000 | ---D | C] -- C:\ProgramData\ESL Wire [2010.12.19 12:48:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office [2010.12.19 12:48:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Works [2010.12.19 12:47:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Visual Studio [2010.12.19 12:47:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DESIGNER [2010.12.19 12:47:46 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010.12.19 12:45:41 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Office [2010.12.19 12:45:17 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Microsoft Help [2010.12.19 12:45:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010.12.18 15:32:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010.12.18 15:32:15 | 000,472,808 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010.12.18 15:13:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation [2010.12.18 15:12:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2010.12.18 15:11:42 | 020,284,008 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvoglv64.dll [2010.12.18 15:11:42 | 018,597,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcompiler.dll [2010.12.18 15:11:42 | 014,899,816 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll [2010.12.18 15:11:42 | 013,019,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll [2010.12.18 15:11:42 | 012,788,840 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvd3dumx.dll [2010.12.18 15:11:42 | 006,471,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuda.dll [2010.12.18 15:11:42 | 005,473,896 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll [2010.12.18 15:11:42 | 004,837,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuda.dll [2010.12.18 15:11:42 | 003,112,552 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvid.dll [2010.12.18 15:11:42 | 002,934,888 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvcuvenc.dll [2010.12.18 15:11:42 | 002,912,360 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll [2010.12.18 15:11:42 | 002,666,600 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll [2010.12.18 15:11:42 | 001,500,264 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdispco642050.dll [2010.12.18 15:11:42 | 001,308,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco642030.dll [2010.12.18 15:11:42 | 001,308,776 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvgenco64.dll [2010.12.18 15:11:42 | 000,386,152 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvdecodemft.dll [2010.12.18 15:11:42 | 000,319,080 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvdecodemft.dll [2010.12.18 15:11:42 | 000,155,752 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvhda64v.sys [2010.12.18 15:11:42 | 000,067,176 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2010.12.18 15:11:42 | 000,057,960 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2010.12.18 15:11:42 | 000,029,288 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\nvhdap64.dll [2010.12.18 15:11:42 | 000,011,240 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysNative\drivers\nvBridge.kmd [2010.12.18 15:11:06 | 000,000,000 | ---D | C] -- C:\NVIDIA [2010.12.18 11:47:20 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\appmgmt [2010.12.18 11:39:35 | 000,468,480 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\deployJava1.dll [2010.12.17 23:24:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarCraft II [2010.12.17 20:56:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam [2010.12.17 20:34:30 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Thunderbird [2010.12.17 20:34:30 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Thunderbird [2010.12.17 20:34:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Thunderbird [2010.12.17 20:32:08 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\TS3Client [2010.12.17 20:31:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client [2010.12.17 20:09:33 | 008,146,944 | ---- | C] (C-Media Corporation) -- C:\Windows\SysWow64\CM108.dll [2010.12.17 20:09:33 | 000,200,704 | ---- | C] (C-Media) -- C:\Windows\SysWow64\cmpa108.dll [2010.12.17 20:08:45 | 000,524,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\difxapi.dll [2010.12.17 20:08:43 | 001,308,160 | ---- | C] (C-Media Electronics Inc) -- C:\Windows\SysNative\drivers\CM10864.sys [2010.12.17 20:08:43 | 000,315,392 | ---- | C] (C-Media Electronics Inc.) -- C:\Windows\System\fltr108.dll [2010.12.17 20:05:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam [2010.12.17 20:05:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam [2010.12.17 19:54:04 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ASUS [2010.12.17 19:34:43 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Avira [2010.12.17 19:29:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira [2010.12.17 19:29:06 | 000,126,792 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avfwot.sys [2010.12.17 19:29:06 | 000,116,568 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avipbb.sys [2010.12.17 19:29:06 | 000,098,120 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avfwim.sys [2010.12.17 19:29:06 | 000,083,120 | ---- | C] (Avira GmbH) -- C:\Windows\SysNative\drivers\avgntflt.sys [2010.12.17 19:29:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira [2010.12.17 18:57:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Macromedia [2010.12.17 18:57:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Adobe [2010.12.17 18:57:41 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010.12.17 18:52:57 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\StarCraft II [2010.12.17 18:52:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft II [2010.12.17 18:52:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010.12.17 18:52:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment [2010.12.17 18:46:03 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\Rechnungen [2010.12.17 18:46:03 | 000,000,000 | ---D | C] -- C:\Users\***\Documents\Laptop [2010.12.17 18:44:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft.NET [2010.12.17 18:41:19 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2010.12.17 18:39:05 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat [2010.12.17 18:39:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat [2010.12.17 18:22:25 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010.12.17 18:22:22 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2010.12.17 18:22:21 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2010.12.17 18:16:23 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll [2010.12.17 18:16:23 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll [2010.12.17 18:16:23 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe [2010.12.17 18:16:23 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe [2010.12.17 18:16:23 | 000,109,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll [2010.12.17 18:16:23 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll [2010.12.17 18:16:23 | 000,049,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll [2010.12.17 18:16:23 | 000,048,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll [2010.12.17 18:16:11 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browserchoice.exe [2010.12.17 17:52:19 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll [2010.12.17 17:52:19 | 001,320,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll [2010.12.17 17:51:14 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll [2010.12.17 17:51:14 | 000,641,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll [2010.12.17 17:51:13 | 000,613,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisdecd.dll [2010.12.17 17:51:13 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll [2010.12.17 17:51:13 | 000,465,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisdecd.dll [2010.12.17 17:51:13 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax [2010.12.17 17:51:13 | 000,258,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax [2010.12.17 17:51:13 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax [2010.12.17 17:51:13 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax [2010.12.17 17:49:46 | 014,627,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll [2010.12.17 17:49:45 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL [2010.12.17 17:49:45 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL [2010.12.17 17:49:45 | 011,406,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll [2010.12.17 17:49:09 | 002,085,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll [2010.12.17 17:49:06 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll [2010.12.17 17:49:06 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll [2010.12.17 17:49:06 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll [2010.12.17 17:49:06 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll [2010.12.17 17:49:06 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe [2010.12.17 17:49:06 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll [2010.12.17 17:49:06 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe [2010.12.17 17:49:06 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe [2010.12.17 17:49:00 | 002,870,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe [2010.12.17 17:49:00 | 002,614,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe [2010.12.17 17:49:00 | 001,736,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll [2010.12.17 17:49:00 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe [2010.12.17 17:48:53 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll [2010.12.17 17:48:52 | 005,507,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2010.12.17 17:48:52 | 003,955,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2010.12.17 17:48:52 | 003,899,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2010.12.17 17:48:51 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll [2010.12.17 17:48:51 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll [2010.12.17 17:48:46 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2010.12.17 17:48:46 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2010.12.17 17:48:46 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll [2010.12.17 17:48:46 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2010.12.17 17:48:46 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2010.12.17 17:48:46 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2010.12.17 17:48:46 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2010.12.17 17:48:46 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2010.12.17 17:48:45 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll [2010.12.17 17:48:45 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll [2010.12.17 17:48:45 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll [2010.12.17 17:48:41 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll [2010.12.17 17:48:41 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll [2010.12.17 17:48:40 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec [2010.12.17 17:48:40 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2010.12.17 17:48:40 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll [2010.12.17 17:48:40 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2010.12.17 17:48:40 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll [2010.12.17 17:48:40 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2010.12.17 17:48:40 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2010.12.17 17:48:40 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2010.12.17 17:48:40 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll [2010.12.17 17:48:40 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll [2010.12.17 17:48:40 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe [2010.12.17 17:48:40 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe [2010.12.17 17:48:39 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll [2010.12.17 17:48:39 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll [2010.12.17 17:48:38 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll [2010.12.17 17:48:37 | 000,424,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll [2010.12.17 17:48:37 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll [2010.12.17 17:48:37 | 000,369,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll [2010.12.17 17:48:37 | 000,365,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll [2010.12.17 17:48:37 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe [2010.12.17 17:48:37 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe [2010.12.17 17:48:37 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe [2010.12.17 17:48:37 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe [2010.12.17 17:48:37 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe [2010.12.17 17:48:37 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe [2010.12.17 17:48:37 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe [2010.12.17 17:48:37 | 000,277,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe [2010.12.17 17:48:37 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll [2010.12.17 17:48:37 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll [2010.12.17 17:48:37 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll [2010.12.17 17:48:37 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll [2010.12.17 17:48:36 | 000,367,104 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll [2010.12.17 17:48:36 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll [2010.12.17 17:48:36 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll [2010.12.17 17:48:36 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll [2010.12.17 17:48:33 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll [2010.12.17 17:48:33 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll [2010.12.17 17:48:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Mozilla [2010.12.17 17:48:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Mozilla [2010.12.17 17:47:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox [2010.12.17 17:47:52 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll [2010.12.17 17:47:39 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll [2010.12.17 17:47:22 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll [2010.12.17 17:47:22 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll [2010.12.17 17:46:49 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll [2010.12.17 17:46:49 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll [2010.12.17 17:46:49 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll [2010.12.17 17:46:49 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll [2010.12.17 17:46:27 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll [2010.12.17 17:46:12 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll [2010.12.17 17:46:12 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll [2010.12.17 17:46:12 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll [2010.12.17 17:46:12 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll [2010.12.17 17:46:12 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll [2010.12.17 17:46:06 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe [2010.12.17 17:46:06 | 000,027,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys [2010.12.17 17:42:47 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll [2010.12.17 17:42:47 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll [2010.12.17 17:42:43 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll [2010.12.17 17:42:43 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll [2010.12.17 17:40:39 | 000,000,000 | R--D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2010.12.17 17:40:39 | 000,000,000 | R--D | C] -- C:\Users\***\Searches [2010.12.17 17:40:39 | 000,000,000 | R--D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2010.12.17 17:40:30 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Identities [2010.12.17 17:40:28 | 000,000,000 | R--D | C] -- C:\Users\***\Contacts [2010.12.17 17:40:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\VirtualStore [2010.12.17 17:40:20 | 000,000,000 | --SD | C] -- C:\Users\***\AppData\Roaming\Microsoft [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Videos [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Saved Games [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Pictures [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Music [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Links [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Favorites [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Downloads [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Documents [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\Desktop [2010.12.17 17:40:20 | 000,000,000 | R--D | C] -- C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Vorlagen [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\AppData\Local\Verlauf [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\AppData\Local\Temporary Internet Files [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Startmenü [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\SendTo [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Recent [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Netzwerkumgebung [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Lokale Einstellungen [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Documents\Eigene Videos [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Documents\Eigene Musik [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Eigene Dateien [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Documents\Eigene Bilder [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Druckumgebung [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Cookies [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\AppData\Local\Anwendungsdaten [2010.12.17 17:40:20 | 000,000,000 | -HSD | C] -- C:\Users\***\Anwendungsdaten [2010.12.17 17:40:20 | 000,000,000 | -H-D | C] -- C:\Users\***\AppData [2010.12.17 17:40:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Temp [2010.12.17 17:40:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Microsoft [2010.12.17 17:40:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Media Center Programs [2010.12.17 17:40:00 | 000,000,000 | -HSD | C] -- C:\Recovery [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\Programme [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2010.12.17 17:39:59 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2010.12.17 17:34:26 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010.12.17 17:31:58 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010.12.17 17:31:36 | 000,000,000 | -HSD | C] -- C:\System Volume Information [2010.12.17 17:30:41 | 000,000,000 | ---D | C] -- C:\Windows\Panther ========== Files - Modified Within 30 Days ========== [2011.01.01 15:12:08 | 007,734,208 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\***\Desktop\mbam-setup.exe [2011.01.01 15:05:10 | 000,602,624 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe [2011.01.01 14:32:58 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011.01.01 14:32:58 | 000,015,024 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011.01.01 14:25:38 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2011.01.01 14:25:33 | 1066,754,046 | -HS- | M] () -- C:\hiberfil.sys [2010.12.29 18:36:23 | 000,004,096 | ---- | M] () -- C:\Users\Public\Documents\00000F38.LCS [2010.12.29 18:31:03 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.12.29 18:31:03 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.12.29 18:31:03 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.12.29 18:31:03 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.12.29 18:31:03 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.12.29 18:08:26 | 000,000,681 | ---- | M] () -- C:\Users\***\Desktop\FileZilla.lnk [2010.12.29 17:36:17 | 000,002,697 | ---- | M] () -- C:\Users\***\Desktop\Microsoft Office Word 2007.lnk [2010.12.29 17:36:13 | 000,002,723 | ---- | M] () -- C:\Users\***\Desktop\Microsoft Office PowerPoint 2007.lnk [2010.12.29 17:36:10 | 000,002,703 | ---- | M] () -- C:\Users\***\Desktop\Microsoft Office Excel 2007.lnk [2010.12.29 17:31:05 | 000,000,852 | ---- | M] () -- C:\Users\Public\Desktop\web to date 6.0.lnk [2010.12.27 18:21:03 | 000,735,744 | ---- | M] () -- C:\Windows\is-SK5KN.exe [2010.12.27 18:21:03 | 000,012,846 | ---- | M] () -- C:\Windows\is-SK5KN.msg [2010.12.27 18:21:03 | 000,003,433 | ---- | M] () -- C:\Windows\is-SK5KN.lst [2010.12.24 22:55:17 | 000,000,513 | ---- | M] () -- C:\Users\***\Desktop\HLSW.lnk [2010.12.21 18:52:46 | 000,000,530 | ---- | M] () -- C:\Users\Public\Desktop\ESL Wire.lnk [2010.12.18 15:32:07 | 000,472,808 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\deployJava1.dll [2010.12.18 11:39:27 | 000,468,480 | ---- | M] (Sun Microsystems, Inc.) -- C:\Windows\SysNative\deployJava1.dll [2010.12.17 20:56:44 | 000,001,387 | ---- | M] () -- C:\Users\***\Desktop\Counter-Strike Source.lnk [2010.12.17 20:31:27 | 000,000,674 | ---- | M] () -- C:\Users\***\Desktop\TeamSpeak 3.lnk [2010.12.17 20:24:05 | 000,000,543 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk [2010.12.17 20:09:34 | 000,000,259 | ---- | M] () -- C:\Windows\Cm108.ini.cfl [2010.12.17 20:09:33 | 000,007,986 | ---- | M] () -- C:\Windows\Cm108.ini.imi [2010.12.17 20:09:33 | 000,000,133 | ---- | M] () -- C:\Windows\System\Dlap.pfx [2010.12.17 20:08:46 | 000,007,935 | ---- | M] () -- C:\Windows\System\Cm108.ini [2010.12.17 19:53:27 | 000,001,769 | ---- | M] () -- C:\Windows\Language_trs.ini [2010.12.17 19:53:23 | 000,024,576 | ---- | M] () -- C:\Windows\SysWow64\AsIO.dll [2010.12.17 19:53:23 | 000,013,440 | ---- | M] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2010.12.17 19:53:23 | 000,013,368 | ---- | M] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys [2010.12.17 19:29:21 | 000,000,758 | ---- | M] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2010.12.17 19:05:05 | 000,000,625 | ---- | M] () -- C:\Users\Public\Desktop\StarCraft II.lnk [2010.12.17 18:45:44 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.12.17 17:36:28 | 000,053,911 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010.12.17 17:36:28 | 000,053,911 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010.12.08 11:53:38 | 000,169,656 | ---- | M] (<Turtle Entertainment>) -- C:\Windows\SysNative\drivers\ESLWireACD.sys [2010.12.08 11:53:38 | 000,025,528 | ---- | M] (Turtle Entertainment GmbH) -- C:\Windows\SysNative\drivers\ESLvnic.sys ========== Files Created - No Company Name ========== [2010.12.29 18:36:23 | 000,004,096 | ---- | C] () -- C:\Users\Public\Documents\00000F38.LCS [2010.12.29 18:08:26 | 000,000,681 | ---- | C] () -- C:\Users\***\Desktop\FileZilla.lnk [2010.12.29 17:36:17 | 000,002,697 | ---- | C] () -- C:\Users\***\Desktop\Microsoft Office Word 2007.lnk [2010.12.29 17:36:13 | 000,002,723 | ---- | C] () -- C:\Users\***\Desktop\Microsoft Office PowerPoint 2007.lnk [2010.12.29 17:36:10 | 000,002,703 | ---- | C] () -- C:\Users\***\Desktop\Microsoft Office Excel 2007.lnk [2010.12.29 17:31:05 | 000,000,852 | ---- | C] () -- C:\Users\Public\Desktop\web to date 6.0.lnk [2010.12.29 17:29:20 | 000,446,464 | ---- | C] () -- C:\Windows\SysWow64\Tx32.dll [2010.12.29 17:29:20 | 000,000,151 | ---- | C] () -- C:\Windows\SysWow64\ic32.ini [2010.12.27 18:21:03 | 000,735,744 | ---- | C] () -- C:\Windows\is-SK5KN.exe [2010.12.27 18:21:03 | 000,012,846 | ---- | C] () -- C:\Windows\is-SK5KN.msg [2010.12.27 18:21:03 | 000,003,433 | ---- | C] () -- C:\Windows\is-SK5KN.lst [2010.12.24 22:55:17 | 000,000,513 | ---- | C] () -- C:\Users\***\Desktop\HLSW.lnk [2010.12.21 18:52:46 | 000,000,530 | ---- | C] () -- C:\Users\Public\Desktop\ESL Wire.lnk [2010.12.17 20:56:44 | 000,001,387 | ---- | C] () -- C:\Users\***\Desktop\Counter-Strike Source.lnk [2010.12.17 20:31:27 | 000,000,674 | ---- | C] () -- C:\Users\***\Desktop\TeamSpeak 3.lnk [2010.12.17 20:09:34 | 000,389,120 | ---- | C] () -- C:\Windows\SysNative\CM108.cpl [2010.12.17 20:09:34 | 000,143,360 | ---- | C] () -- C:\Windows\Vmix108.dll [2010.12.17 20:09:33 | 000,792,064 | ---- | C] () -- C:\Windows\SysNative\Cmeau108.exe [2010.12.17 20:09:33 | 000,007,150 | ---- | C] () -- C:\Windows\tray.ico [2010.12.17 20:09:33 | 000,007,150 | ---- | C] () -- C:\Windows\control.ico [2010.12.17 20:09:33 | 000,007,150 | ---- | C] () -- C:\Windows\cmeau108.ico [2010.12.17 20:09:33 | 000,000,259 | ---- | C] () -- C:\Windows\Cm108.ini.cfl [2010.12.17 20:09:33 | 000,000,133 | ---- | C] () -- C:\Windows\System\Dlap.pfx [2010.12.17 20:08:46 | 000,359,424 | ---- | C] () -- C:\Windows\SysNative\CmiInstallResAll64.dll [2010.12.17 20:08:46 | 000,007,986 | ---- | C] () -- C:\Windows\Cm108.ini.imi [2010.12.17 20:08:46 | 000,007,935 | ---- | C] () -- C:\Windows\System\Cm108.ini [2010.12.17 20:08:46 | 000,002,029 | ---- | C] () -- C:\Windows\Cm108.ini.cfg [2010.12.17 20:08:45 | 000,001,320 | ---- | C] () -- C:\Windows\cm108.ini [2010.12.17 20:05:16 | 000,000,543 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk [2010.12.17 19:54:06 | 000,013,368 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsUpIO.sys [2010.12.17 19:54:04 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\AsIO.dll [2010.12.17 19:54:04 | 000,013,440 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys [2010.12.17 19:53:27 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini [2010.12.17 19:29:21 | 000,000,758 | ---- | C] () -- C:\Users\Public\Desktop\Avira AntiVir Control Center.lnk [2010.12.17 18:52:57 | 000,000,625 | ---- | C] () -- C:\Users\Public\Desktop\StarCraft II.lnk [2010.12.17 18:46:02 | 000,012,458 | ---- | C] () -- C:\Users\***\Documents\Gameserver.docx [2010.12.17 18:45:44 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf [2010.12.17 17:31:36 | 1066,754,046 | -HS- | C] () -- C:\hiberfil.sys [2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll ========== LOP Check ========== [2010.12.29 18:38:15 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FileZilla [2010.12.27 12:13:06 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Foxit Software [2010.12.30 23:31:19 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\HLSW [2010.12.27 14:50:17 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Notepad++ [2010.12.29 17:36:51 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\ProtectDisc [2010.12.17 20:34:30 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Thunderbird [2010.12.20 21:58:56 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TS3Client [2009.07.14 06:08:49 | 000,018,522 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== < End of report > Code:
ATTFilter OTL Extras logfile created on: 01.01.2011 15:13:21 - Run 1
OTL by OldTimer - Version 3.2.19.0 Folder = C:\Users\***\Desktop
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
12.00 Gb Total Physical Memory | 10.00 Gb Available Physical Memory | 82.00% Memory free
24.00 Gb Paging File | 22.00 Gb Available in Paging File | 90.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 200.39 Gb Total Space | 152.79 Gb Free Space | 76.24% Space Free | Partition Type: NTFS
Drive D: | 365.53 Gb Total Space | 364.14 Gb Free Space | 99.62% Space Free | Partition Type: NTFS
Drive E: | 365.50 Gb Total Space | 350.90 Gb Free Space | 96.01% Space Free | Partition Type: NTFS
Computer Name: ***-PC | User Name: *** | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
========== Extra Registry (SafeList) ==========
========== File Associations ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.url[@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.url [@ = InternetShortcut] -- C:\Windows\System32\ieframe.DLL (Microsoft Corporation)
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- D:\Mozilla Firefox\firefox.exe (Mozilla Corporation)
========== Shell Spawning ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- "D:\Microsoft Office 2007\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "D:\Microsoft Office 2007\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- "D:\Microsoft Office 2007\Office12\msohtmed.exe" %1 (Microsoft Corporation)
htmlfile [print] -- "D:\Microsoft Office 2007\Office12\msohtmed.exe" /p %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
========== Security Center Settings ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
========== Firewall Settings ==========
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 0
========== Authorized Applications List ==========
========== HKEY_LOCAL_MACHINE Uninstall List ==========
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{3D3E663D-4E7E-4577-A560-7ECDDD45548A}" = PVSonyDll
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{90120000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2007
"{90120000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2007
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 260.99
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 260.99
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.10.0514
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.1.9.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"C-Media CM108 Like Sound Driver" = SteelSeries USB Soundcard v1.20
"ESL Wire_is1" = ESL Wire 1.9.1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"WinRAR archiver" = WinRAR
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{90120000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2007
"{90120000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{91120000-0014-0000-0000-0000000FF1CE}" = Microsoft Office Professional 2007
"{9580813D-94B1-4C28-9426-A441E2BB29A5}" = Counter-Strike: Source
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{B9DB4C76-01A4-46D5-8910-F7AA6376DBAF}" = NVIDIA PhysX
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Avira AntiVir Desktop" = Avira Premium Security Suite
"Foxit Reader" = Foxit Reader
"HLSW_is1" = HLSW v1.3.3.7b
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"Mozilla Thunderbird (3.1.7)" = Mozilla Thunderbird (3.1.7)
"Notepad++" = Notepad++
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"PROR" = Microsoft Office Professional 2007
"ProtectDisc Driver 11" = ProtectDisc Driver, Version 11
"StarCraft II" = StarCraft II
"web to date 6.0_is1" = DATA BECKER web to date 6.0
========== HKEY_CURRENT_USER Uninstall List ==========
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"FileZilla Client" = FileZilla Client 3.3.5.1
"Protect Disc License Helper" = Protect Disc License Helper 1.0.125 (IE)
"TeamSpeak 3 Client" = TeamSpeak 3 Client
========== Last 10 Event Log Errors ==========
[ Application Events ]
Error - 30.12.2010 09:55:53 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x01d8d499
ID
des fehlerhaften Prozesses: 0xc64 Startzeit der fehlerhaften Anwendung: 0x01cba8293bbb467d
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: 83fc50fe-141c-11e0-945c-00ff01000001
Error - 30.12.2010 10:19:59 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0049d499
ID
des fehlerhaften Prozesses: 0x11e4 Startzeit der fehlerhaften Anwendung: 0x01cba82963a991fa
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: e1cc5ae3-141f-11e0-945c-00ff01000001
Error - 30.12.2010 12:37:06 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x01d5d499
ID
des fehlerhaften Prozesses: 0xf4c Startzeit der fehlerhaften Anwendung: 0x01cba83facae8f88
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: 09b1ee7a-1433-11e0-a08e-00ff01000001
Error - 30.12.2010 13:23:52 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x02e8d499
ID
des fehlerhaften Prozesses: 0x9a0 Startzeit der fehlerhaften Anwendung: 0x01cba83ff8f8f1b1
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: 9231f310-1439-11e0-a08e-00ff01000001
Error - 30.12.2010 14:55:59 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x02e2d499
ID
des fehlerhaften Prozesses: 0x10f0 Startzeit der fehlerhaften Anwendung: 0x01cba84e3c3f1b3a
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: 6ffa1ef0-1446-11e0-a08e-00ff01000001
Error - 30.12.2010 15:28:54 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0044d499
ID
des fehlerhaften Prozesses: 0x3ec Startzeit der fehlerhaften Anwendung: 0x01cba8537d02256e
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: 09bc5193-144b-11e0-a08e-00ff01000001
Error - 30.12.2010 19:10:49 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0038d499
ID
des fehlerhaften Prozesses: 0x52c Startzeit der fehlerhaften Anwendung: 0x01cba8644864048d
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: 098697c2-146a-11e0-a08e-00ff01000001
Error - 31.12.2010 09:59:42 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0044d499
ID
des fehlerhaften Prozesses: 0x7b4 Startzeit der fehlerhaften Anwendung: 0x01cba8ef00ad38c4
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: 36d52d47-14e6-11e0-b9f0-00ff01000001
Error - 01.01.2011 09:11:34 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0039d499
ID
des fehlerhaften Prozesses: 0xa0c Startzeit der fehlerhaften Anwendung: 0x01cba9b405227892
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: a7d4aab2-15a8-11e0-b1c6-00ff01000001
Error - 01.01.2011 09:17:30 | Computer Name = ***-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: hl2.exe, Version: 0.0.0.0, Zeitstempel:
0x4d094ebe Name des fehlerhaften Moduls: filesystem_steam.dll_unloaded, Version:
0.0.0.0, Zeitstempel: 0x4d0a5da7 Ausnahmecode: 0xc0000005 Fehleroffset: 0x0044d499
ID
des fehlerhaften Prozesses: 0x9a4 Startzeit der fehlerhaften Anwendung: 0x01cba9b577119c70
Pfad
der fehlerhaften Anwendung: e:\steam\steamapps\***\counter-strike source\hl2.exe
Pfad
des fehlerhaften Moduls: filesystem_steam.dll Berichtskennung: 7c056694-15a9-11e0-b1c6-00ff01000001
[ System Events ]
Error - 01.01.2011 09:26:16 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde: %%-2140993535
Error - 01.01.2011 09:37:35 | Computer Name = ***-PC | Source = PNRPSvc | ID = 102
Description =
Error - 01.01.2011 09:37:35 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
beendet: %%-2140993535
Error - 01.01.2011 09:37:35 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde: %%-2140993535
Error - 01.01.2011 09:38:22 | Computer Name = ***-PC | Source = PNRPSvc | ID = 102
Description =
Error - 01.01.2011 09:38:23 | Computer Name = ***-PC | Source = PNRPSvc | ID = 102
Description =
Error - 01.01.2011 09:38:22 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde: %%-2140993535
Error - 01.01.2011 09:38:22 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
beendet: %%-2140993535
Error - 01.01.2011 09:38:23 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Peernetzwerk-Gruppenzuordnung" ist vom Dienst "Peer Name
Resolution-Protokoll" abhängig, der aufgrund folgenden Fehlers nicht gestartet
wurde: %%-2140993535
Error - 01.01.2011 09:38:23 | Computer Name = ***-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Peer Name Resolution-Protokoll" wurde mit folgendem Fehler
beendet: %%-2140993535
< End of report >
Code:
ATTFilter Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Datenbank Version: 5435
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
01.01.2011 15:37:53
mbam-log-2011-01-01 (15-37-53).txt
Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 153009
Laufzeit: 37 Sekunde(n)
Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0
Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)
Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)
Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)
Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)
Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)
Infizierte Dateien:
(Keine bösartigen Objekte gefunden)
|
|
02.01.2011, 12:15
| #2 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Internet seit ca. 1 Wochen sehr langsam... Hallo und
__________________ hast du den Router mal resettet? Erstmal stromlos machen, 10 Minuten warten und wieder mit Strom versorgen? Wenn das nicht geht, den Router mal in die Werkeinstellungen resetten und nochmal probieren. Hat der Router denn auch die aktuellste Firmware? Zitat:
Die Filterfunktion des WLAN sorgt dafür, dass nur bestimmte Rechner sich mit dem WLAN verbinden dürfen, da wird nach MAC-Adresse gefiltert. Ist kein echter Sicherheitsgewinn, den Filter kann man genausogut deaktivieren. Viel wichtiger ist eine ordentliche Verschlüsselung (WPA/WPA2 mit 63-Zeichen-Schlüssel)
__________________ |
|
02.01.2011, 15:12
| #3 |
| | Internet seit ca. 1 Wochen sehr langsam... Resett habe ich versucht. Hatt keine Besserung gebracht.
__________________Firmware upgrade hatt nicht funktioniert, oder es ist bereits die aktuellste vorhanden. Als ich sie upgraden wollte kam rot die Meldung "Upgrade failed". Warum weis ich nicht, habe sie von der Originalpage von linksys runtergeladen. Firewalls habe ich nur die von Avira auf dem Rechner, die Security Suite benutze ich allerdings schon seit einigen Jahren. Auch das deaktivieren von der Firewall hatt nichts geändert. WLan habe ich wie gesagt komplett deaktiviert, da ich den verdacht hatte, dass jemand auf unsere Kosten traffic beansprucht. Und wenn Wlan an ist, benutze ich WPA2 mit einem Zufallsschlüssel den ich meist selbst nichtmehr weis. |
|
02.01.2011, 15:52
| #4 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Internet seit ca. 1 Wochen sehr langsam...Zitat:
Wenns immer noch nicht geht, sollte man mal rausfinden, ob das nur unter Windows so ist, oder auch mit anderen Betriebssystemen. Lad dir mal sowas wie Knoppix oder Ubuntu herunter, brenn die iso Datei per Imagebrennfunktion auf eine CD und boote den Rechner davon. Teste dann mal ausgiebig die Internetverbindung unter Linux und berichte ob die Verindung dort normal schnell oder auch langsam ist.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
| Themen zu Internet seit ca. 1 Wochen sehr langsam... |
| 64-bit, autorun, avg, avgntflt.sys, avira, bho, c:\windows\system32\rundll32.exe, downloader, error, excel.exe, explorer, firefox, flash player, format, ftp, helper, ieframe.dll, install.exe, internet, kein fund, langsam, location, logfile, media center, microsoft office word, mozilla, mozilla thunderbird, netzwerk, nvidia, office 2007, oldtimer, plug-in, programdata, registry, rundll, saver, security, shell32.dll, shortcut, software, spielen, start menu, system, syswow64, teamspeak, webcheck, wlan |
Linear-Darstellung
