Hallo, malwarebytes sagt mir ich hätte einen backdoorbot. Was ist das? Soll ich es jetzt einfach löschen und gut? Oder muss ich was spezielleres machen?

Zitat von Axa88

Hallo, malwarebytes sagt mir ich hätte einen backdoorbot. Was ist das? Soll ich es jetzt einfach löschen und gut? Oder muss ich was spezielleres machen?

Wie wäre es mit lesen? http://www.trojaner-board.de/69886-a...-beachten.html

Gruß

Acid

Hier ist der Malwarebytes scan. Es gibt eine infizierte Datei. wie soll ich nun verfahren? Was ist ein backdoor bot?

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Datenbank Version: 5899

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

28.02.2011 04:36:34
mbam-log-2011-02-28 (04-36-22).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|)
Durchsuchte Objekte: 294251
Laufzeit: 40 Minute(n), 12 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 1

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
c:\Windows\winsxs\amd64_wcf-icardagt_exe_31bf3856ad364e35_6.1.7600.16385_none_ 8dcc9c6f8b58a5eb\icardagt.exe (Backdoor.Bot) -> No action taken.

OTL Logfile:

OTL logfile created on: 28.02.2011 03:31:10 - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\Christian S\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 39,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 67,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 283,40 Gb Total Space | 237,45 Gb Free Space | 83,79% Space Free | Partition Type: NTFS

Computer Name: CHRISTIANS-PC | User Name: Christian S | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days

========== Processes (SafeList) ==========

PRC - [2011.02.28 03:30:16 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Christian S\Downloads\OTL.exe
PRC - [2011.02.23 16:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Programme\Alwil Software\Avast5\AvastUI.exe
PRC - [2011.02.23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Programme\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.12.03 20:43:34 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010.07.09 16:12:25 | 000,072,568 | ---- | M] (RapidSolution Software AG) -- C:\Program Files (x86)\RapidSolution\AudialsOne 4\AudialsOne.exe
PRC - [2010.01.11 19:20:48 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Programme\Dell\DellDock\DockLogin.exe
PRC - [2009.06.24 22:21:38 | 000,409,744 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2009.06.19 03:46:24 | 000,494,064 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe


========== Modules (SafeList) ==========

MOD - [2011.02.28 03:30:16 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Christian S\Downloads\OTL.exe
MOD - [2011.02.23 16:04:17 | 000,197,208 | ---- | M] (AVAST Software) -- C:\Programme\Alwil Software\Avast5\snxhk.dll
MOD - [2010.08.21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420f e3fa2b8113bd\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011.02.23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.01.14 15:06:01 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.11 19:20:48 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Programme\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011.02.23 15:55:05 | 000,064,344 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2011.02.21 04:09:30 | 000,049,752 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SBREDrv.sys -- (SBRE)
DRV:64bit: - [2010.08.25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010.06.23 10:10:56 | 000,344,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009.12.22 03:31:26 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
DRV:64bit: - [2009.12.22 03:31:04 | 000,020,568 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv)
DRV:64bit: - [2009.11.16 15:46:12 | 000,046,112 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tbhsd.sys -- (tbhsd)
DRV:64bit: - [2009.11.16 14:45:48 | 000,031,264 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rrnetcap.sys -- (RRNetCapMP)
DRV:64bit: - [2009.11.16 14:45:48 | 000,031,264 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rrnetcap.sys -- (RRNetCap)
DRV:64bit: - [2009.10.10 03:41:20 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2009.07.14 08:52:08 | 000,100,864 | ---- | M] (VIA Technologies, Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viacr64.sys -- (VIACRX64)
DRV:64bit: - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.09 11:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009.06.15 19:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2009.06.14 12:47:26 | 000,668,672 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2009.06.10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2007.11.02 14:22:30 | 000,145,448 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217mdm.sys -- (s217mdm)
DRV:64bit: - [2007.11.02 14:22:30 | 000,138,792 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217unic.sys -- (s217unic) Sony Ericsson Device 217 USB Ethernet Emulation SEMC217 (WDM)
DRV:64bit: - [2007.11.02 14:22:30 | 000,124,968 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217obex.sys -- (s217obex)
DRV:64bit: - [2007.11.02 14:22:30 | 000,033,832 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217nd5.sys -- (s217nd5) Sony Ericsson Device 217 USB Ethernet Emulation SEMC217 (NDIS)
DRV:64bit: - [2007.11.02 14:22:28 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217bus.sys -- (s217bus) Sony Ericsson Device 217 driver (WDM)
DRV:64bit: - [2007.11.02 14:22:28 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217mdfl.sys -- (s217mdfl)
DRV:64bit: - [2006.11.01 18:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009.12.22 03:31:26 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/de...=ie&l=en&s=gen
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "AutoConfigURL" = file://C:/Users/Christian%20S/AppData/Local/Google/Chrome/User%20Data/Default/Extensions/caehdcpeofiiigpdhbabniblemipncjj/SwitchyAuto.pac?1296966425258

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.gmx.net/|hxxp://www.studivz.net/|https://www.facebook.com/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.8
FF - prefs.js..extensions.enabledItems: tubestop@efinke.com:1.5
FF - prefs.js..extensions.enabledItems: {EF522540-89F5-46b9-B6FE-1829E2B572C6}:4.9.4
FF - prefs.js..extensions.enabledItems: {EDA7B1D7-F793-4e03-B074-E6F303317FB0}:1.2.6
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.0
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.2
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.2
FF - prefs.js..extensions.enabledItems: elemhidehelper@adblockplus.org:1.1
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.1
FF - prefs.js..extensions.enabledItems: {902D2C4A-457A-4EF9-AD43-7014562929FF}:0.4.6
FF - prefs.js..extensions.enabledItems: {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}:0.4.6
FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.48.3
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5pre.110221a
FF - prefs.js..extensions.enabledItems: omnibar@ajitk.com:0.7.2.20110110
FF - prefs.js..extensions.enabledItems: bug489729@alice0775:1.3
FF - prefs.js..extensions.enabledItems: takemetourl@sandeep.kothari:1.3
FF - prefs.js..extensions.enabledItems: {d37dc5d0-431d-44e5-8c91-49419370caa1}:2.6.18
FF - prefs.js..extensions.enabledItems: {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0
FF - prefs.js..extensions.enabledItems: {1280606b-2510-4fe0-97ef-9b5a22eafe41}:1.0.9
FF - prefs.js..extensions.enabledItems: {35106bca-6c78-48c7-ac28-56df30b51d2c}:0.6.4
FF - prefs.js..extensions.enabledItems: tabsontop-darthpalpatine@dummy.addons.mozilla.org:1.4.4
FF - prefs.js..extensions.enabledItems: {57068FBE-1506-42ee-AB02-BD183E7999E4}:4.0
FF - prefs.js..extensions.enabledItems: personasexpression@eddiescorpse.private:2.0.0
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.88
FF - prefs.js..extensions.enabledItems: {b3f91530-1905-11de-8c30-0800200c9a66}:0.9
FF - prefs.js..extensions.enabledItems: {43505cd0-6e9a-11da-8cd6-0800200c9a66}:0.6.2
FF - prefs.js..extensions.enabledItems: {b41cb5f0-2e52-11de-8c30-0800200c9a66}:2.1
FF - prefs.js..extensions.enabledItems: nasanightlaunch@example.com:0.6.20101009
FF - prefs.js..extensions.enabledItems: {D46E8522-6E86-44b1-A622-58C0668AD78E}:3.6.0

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.02.17 20:49:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.02.18 17:45:22 | 000,000,000 | ---D | M]

[2011.02.17 20:50:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Extensions
[2009.12.21 06:26:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011.01.30 21:51:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\1ryexg7 4.default\extensions
[2011.01.30 21:51:28 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\1ryexg7 4.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.01.28 12:46:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\1ryexg7 4.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2011.01.28 12:46:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\1ryexg7 4.default\extensions\elemhidehelper@adblockplus.or g
[2011.01.14 21:36:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\23or0i8 q.default\extensions
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\23or0i8 q.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.09.27 08:45:41 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\23or0i8 q.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.09.19 19:32:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\23or0i8 q.default\extensions\stratareloaded@addons.mozilla .org
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\fo6r0y1 e.default\extensions
[2010.09.06 09:28:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\fo6r0y1 e.default\extensions\{21e48e29-f574-4619-b65d-0f00eea92e5b}
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\fo6r0y1 e.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.09.27 08:45:41 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\fo6r0y1 e.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.02.28 02:08:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions
[2011.02.28 00:51:59 | 000,000,000 | ---D | M] (FireShot) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2011.02.22 22:33:07 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2011.02.22 05:58:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe41}
[2011.02.17 21:57:06 | 000,000,000 | ---D | M] (Image Zoom) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}
[2011.02.27 21:02:32 | 000,000,000 | ---D | M] (Organize Status Bar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2c}
[2011.02.20 20:21:59 | 000,000,000 | ---D | M] (Simpler Glass) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{43505cd0-6e9a-11da-8cd6-0800200c9a66}
[2011.02.17 21:11:57 | 000,000,000 | ---D | M] (Stylish) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
[2011.02.27 17:09:08 | 000,000,000 | ---D | M] (Compact Menu 2) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{57068FBE-1506-42ee-AB02-BD183E7999E4}
[2011.02.17 20:52:29 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011.02.26 15:51:42 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2011.02.28 02:07:26 | 000,000,000 | ---D | M] (Context Search) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{902D2C4A-457A-4EF9-AD43-7014562929FF}
[2011.02.17 20:58:30 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011.02.17 20:53:12 | 000,000,000 | ---D | M] ("Vfox3-Basic") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{b3f91530-1905-11de-8c30-0800200c9a66}
[2011.02.22 09:17:25 | 000,000,000 | ---D | M] (Black Stratini) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{b41cb5f0-2e52-11de-8c30-0800200c9a66}
[2011.02.17 20:51:39 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.02.21 23:28:03 | 000,000,000 | ---D | M] (FoxClocks) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1}
[2011.02.17 22:01:19 | 000,000,000 | ---D | M] ("BetterPrivacy") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
[2011.02.27 19:49:36 | 000,000,000 | ---D | M] (Classic Compact) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}
[2011.02.17 21:00:03 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2011.02.21 21:00:41 | 000,000,000 | ---D | M] ("Tab Mix Plus") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011.02.18 03:58:58 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.02.21 07:23:48 | 000,000,000 | ---D | M] (Menu Editor) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{EDA7B1D7-F793-4e03-B074-E6F303317FB0}
[2011.02.17 20:57:27 | 000,000,000 | ---D | M] (SearchPreview) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
[2011.02.22 05:43:27 | 000,000,000 | ---D | M] ("MultirowBookmarksToolbar") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
[2011.02.21 08:34:34 | 000,000,000 | ---D | M] ("bug489729") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\bug489729@alice0775
[2011.02.17 21:00:52 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2011.02.17 21:03:44 | 000,000,000 | ---D | M] (Element Hiding Helper for Adblock Plus) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\elemhidehelper@adblockplus.or g
[2011.02.27 19:50:35 | 000,000,000 | ---D | M] (foxiFrame basic) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\foxiFrame@basic.am
[2011.02.27 19:43:05 | 000,000,000 | ---D | M] (Hide Caption Titlebar Plus) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\hidecaptionplus-dp@dummy.addons.mozilla.org
[2011.02.24 08:13:47 | 000,000,000 | ---D | M] (Hide Favicons) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\hidefavicons@maarten
[2011.02.24 08:12:11 | 000,000,000 | ---D | M] (NASA Night Launch) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\nasanightlaunch@example.com
[2011.02.24 08:13:04 | 000,000,000 | ---D | M] (Nasa Tabs) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\nasatabs@sonco.com
[2011.02.20 21:29:11 | 000,000,000 | ---D | M] (Omnibar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\omnibar@ajitk.com
[2011.02.27 21:01:33 | 000,000,000 | ---D | M] (Personas Expression) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\personasexpression@eddiescorp se.private
[2011.02.26 16:14:04 | 000,000,000 | ---D | M] (Tabs on top) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\tabsontop-darthpalpatine@dummy.addons.mozilla.org
[2011.02.21 08:35:49 | 000,000,000 | ---D | M] (take me to url) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\takemetourl@sandeep.kothari
[2011.02.17 20:55:04 | 000,000,000 | ---D | M] (TubeStop) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\tubestop@efinke.com
[2011.02.27 19:49:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}\chrome\mozapps\extensions
[2011.02.21 21:00:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\modules\extensions
[2011.01.30 21:51:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011.01.30 21:51:29 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\elemhidehelper@adblockplus.or g
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{00352F14-3F76-4e4d-ACFF-9972D7E4B3B9}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{113c2360-15a3-11de-8c30-0800200c9a66}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{269FB356-C69F-7349-D092-AB28AF836D0E}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{4a1a0a40-7d27-11dd-ad8b-0800200c9a66}
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.09.27 08:45:41 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{b3f91530-1905-11de-8c30-0800200c9a66}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{b5dd1cb0-1888-11df-8a39-0800200c9a66}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{de5809e0-2b07-11dd-bd0b-0800200c9a66}
[2010.06.30 11:58:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010.06.30 11:58:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}-trash
[2010.06.30 11:58:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{F587B2D4-7C09-4a23-AC4A-8D6E3CE8C7DA}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\cfxe@Triton
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\cfxec@Triton
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\chromifox@altmusictv.com
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\fzamaan@gmail.com
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\glaze_black@www.theme-oasis.org
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\GradientBrushedMetalFF3@pumpe l.com
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\nasanightlaunch@example.com
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\operetta@firefox.theme
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\rein@notiz.jp
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\Strata40Lite@SpewBoy.au
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions
[2010.07.07 20:42:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2010.07.07 20:42:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{5F590AA2-1221-4113-A6F4-A4BB62414FAC}
[2010.07.07 20:42:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2010.09.27 08:45:41 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
[2010.07.07 20:42:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\cfxHelper@Triton
[2010.07.07 20:42:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\elemhidehelper@adblockplus.or g
[2010.07.07 20:42:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\googletube@googletube.com
[2010.07.07 20:42:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\personas@christopher.beard
[2010.07.07 20:42:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\tubestop@efinke.com
[2011.02.17 21:34:40 | 000,001,820 | ---- | M] () -- C:\Users\Christian S\AppData\Roaming\Mozilla\Firefox\Profiles\jsl3f23 f.default\searchplugins\bing.xml
[2011.02.17 21:37:23 | 000,004,140 | ---- | M] () -- C:\Users\Christian S\AppData\Roaming\Mozilla\Firefox\Profiles\jsl3f23 f.default\searchplugins\youtube.xml
[2011.02.17 20:49:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010.12.03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.12.03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.12.03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.12.03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.12.03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (no name) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - No CLSID value found.
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D6F180CB-E683-41a3-8CD2-C53DBAA0530D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D6F180CB-E683-41A3-8CD2-C53DBAA0530D} - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKCU..\Run: [KiesTrayAgent] File not found
O4 - Startup: C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorUser = 3
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Reg Error: Key error.)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} hxxp://messenger.zone.msn.com/binary...r.cab56986.cab (Checkers Class)
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} hxxp://messenger.zone.msn.com/binary...n.cab56986.cab (Solitaire Showdown Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/Messen.../GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary...t.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: CabBuilder hxxp://kiw.imgag.com/imgag/kiw/toolb...lerControl.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.e xe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\WB: DllName - Reg Error: Key error. - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 90 Days ==========

[2011.02.28 03:30:17 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\TrackMania
[2011.02.28 03:28:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever
[2011.02.28 03:25:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TmNationsForever
[2011.02.28 02:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\SecTaskMan
[2011.02.28 01:52:26 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{6BE35C5B-07D3-4BCB-AF2D-497D2165A5DD}
[2011.02.28 00:54:22 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\FireShot
[2011.02.26 22:55:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Zattoo
[2011.02.26 22:55:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zattoo4
[2011.02.26 22:55:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Zattoo4
[2011.02.26 22:43:50 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\Podcast Studio
[2011.02.26 22:43:04 | 000,962,560 | ---- | C] (East Wind Software) -- C:\Windows\SysWow64\advdaudio.ocx
[2011.02.26 22:43:04 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\concept design
[2011.02.26 22:43:03 | 000,966,144 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioInformation2.dll
[2011.02.26 22:43:03 | 000,877,568 | ---- | C] (NCT Company Ltd.) -- C:\Windows\SysWow64\NCTAudioFile2.dll
[2011.02.26 22:43:03 | 000,634,880 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioEditor2.dll
[2011.02.26 22:43:03 | 000,522,752 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioTransform2.dll
[2011.02.26 22:43:03 | 000,467,968 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioRecord2.dll
[2011.02.26 22:43:03 | 000,467,456 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioPlayer2.dll
[2011.02.26 22:43:03 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr70.dll
[2011.02.26 22:42:45 | 000,413,696 | ---- | C] (Gabest) -- C:\Windows\SysWow64\flvsplitter.ax
[2011.02.26 22:42:44 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\onlineTV 6
[2011.02.26 22:42:44 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\concept design
[2011.02.26 22:42:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\concept design
[2011.02.26 12:18:49 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{8B983AAA-6DF3-4C13-942F-2CDF3B854F5D}
[2011.02.23 18:22:48 | 000,505,176 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2011.02.23 15:29:16 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.02.23 15:29:16 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011.02.23 15:29:16 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011.02.23 15:29:15 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011.02.23 10:28:56 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{C6293E97-1C33-4A1A-A2EB-829D9740C320}
[2011.02.22 22:27:35 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{A2F7EC7E-2DAF-418B-AA60-876EF8F28F01}
[2011.02.21 21:27:47 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Stardock_Corporation
[2011.02.21 20:55:30 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\Skin-Pack_fuer_Spider-Player-2
[2011.02.21 19:49:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spider Player
[2011.02.21 19:45:45 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Spider Player
[2011.02.21 19:45:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spider Player
[2011.02.21 04:04:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2011.02.21 02:15:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011.02.21 02:14:59 | 000,280,408 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2011.02.21 02:14:59 | 000,022,360 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011.02.21 02:14:57 | 000,031,064 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2011.02.21 02:14:54 | 000,053,592 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2011.02.21 02:14:52 | 000,238,968 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.02.21 02:14:52 | 000,064,344 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011.02.21 02:14:37 | 000,040,648 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2011.02.21 02:14:36 | 000,190,016 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2011.02.21 02:14:32 | 000,000,000 | ---D | C] -- C:\Programme\Alwil Software
[2011.02.21 02:14:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2011.02.21 00:18:59 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011.02.20 15:58:04 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{905634A9-C4BE-4421-BC1C-A339FE1AD36B}
[2011.02.20 15:11:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{56198395-1A8D-4A8B-8A0D-94B416E44791}
[2011.02.20 15:10:58 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{8882D785-57C1-4449-94B3-9C8A90E6E676}
[2011.02.19 17:28:49 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\René's Homepage
[2011.02.19 15:42:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{FFBA8595-8FD1-4BA1-BD19-DB06A649C053}
[2011.02.19 02:46:57 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{2B624AF3-7A6E-4480-8492-8D97E56B829B}
[2011.02.18 23:11:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Opera
[2011.02.18 23:11:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2011.02.18 22:45:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2011.02.18 14:46:05 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{F6B589EA-B1B6-41C0-ACAA-8E8A7CEB821F}
[2011.02.18 00:51:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Messenger Plus!
[2011.02.18 00:51:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Yuna Software
[2011.02.17 21:55:06 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{FC681D94-302A-49C0-9DA8-2893B7ABF708}
[2011.02.17 20:50:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[2011.02.17 11:04:58 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\Opera-Stile
[2011.02.17 10:26:00 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.02.17 10:26:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.02.17 04:59:33 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\RightClickFiles
[2011.02.17 03:40:03 | 000,039,424 | ---- | C] (NirSoft) -- C:\Windows\zipinst.exe
[2011.02.17 03:40:02 | 000,000,000 | -H-D | C] -- C:\Windows\PIF
[2011.02.17 01:47:39 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2011.02.16 22:02:29 | 002,851,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll.backup
[2011.02.16 22:02:27 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll.backup
[2011.02.16 20:24:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2011.02.16 20:24:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011.02.15 17:37:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Opera
[2011.02.14 20:34:38 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{5AD292C8-4418-4A94-BE69-45C3B2F03EE8}
[2011.02.14 02:33:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Stardock
[2011.02.14 02:19:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\{81CD4D13-C212-4D68-94F5-D7EE9A54EA90}
[2011.02.14 02:19:07 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\PackageAware
[2011.02.13 14:45:07 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Application Data
[2011.02.13 14:04:37 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{A201E3EB-85FF-4D0F-8480-C689FC1C3F34}
[2011.02.12 20:39:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{AFE409D1-E2CE-430B-B1A3-88678D11881D}
[2011.02.11 18:18:27 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\DVDVideoSoft
[2011.02.11 15:49:48 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{8FF469BD-C7E9-4A6D-B14B-2F7982AE33CE}
[2011.02.11 07:42:06 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2011.02.11 01:05:30 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{83925C36-624D-48F8-BA99-EF6F07E7C60A}
[2011.02.10 23:25:16 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Paint.NET
[2011.02.10 09:35:27 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{779556B3-595A-44F5-B7BA-13E3BCE868FC}
[2011.02.10 00:18:26 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.02.10 00:18:23 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.02.10 00:18:22 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.02.10 00:18:22 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.02.10 00:18:22 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.02.10 00:18:22 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.02.10 00:18:21 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.02.10 00:18:21 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.02.10 00:18:21 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.02.10 00:18:21 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.02.10 00:18:20 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.02.10 00:18:20 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.02.10 00:08:37 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2011.02.10 00:08:37 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2011.02.10 00:08:35 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2011.02.10 00:08:35 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2011.02.10 00:08:34 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll
[2011.02.10 00:08:34 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2011.02.10 00:08:34 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2011.02.10 00:08:34 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2011.02.10 00:08:28 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2011.02.10 00:08:26 | 000,265,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011.02.10 00:08:26 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.02.10 00:08:21 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.02.10 00:08:20 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.02.10 00:08:20 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.02.10 00:08:16 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.02.10 00:08:15 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2011.02.10 00:08:13 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.02.10 00:08:12 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.02.10 00:08:08 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.02.10 00:08:08 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.02.10 00:08:07 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.02.10 00:08:06 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.02.09 12:43:18 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{AA517A09-F5FF-4564-AE14-F522EB68B540}
[2011.02.09 12:22:26 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{0D43F62E-D788-4A9F-87B9-8324425C79CA}
[2011.02.09 12:18:02 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{CEA96BAD-DD99-48E0-9448-B1D74C1CCFB6}
[2011.02.09 12:11:53 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{03BEE09E-874E-4F30-A72E-B0CA6732C2B3}
[2011.02.08 12:35:26 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{7DC86A8D-7ADF-4E45-96CE-D48B3F364E84}
[2011.02.07 11:11:40 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{6C03D3BD-0A4C-41AB-B1EF-F0A3F5FA9A8E}
[2011.02.06 12:49:40 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{CD52E6CC-8E13-494F-840F-A9AB92CB033E}
[2011.02.05 01:15:53 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{006257C3-D946-4EF9-AD29-BE00DB1DF14D}
[2011.02.04 13:15:26 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{80BD109F-0F76-4330-9271-01AF0B48DBED}
[2011.02.03 16:50:46 | 000,020,480 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\FsExService64.Exe
[2011.02.03 16:50:46 | 000,016,448 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\drivers\TFsExDisk.Sys
[2011.02.03 12:53:02 | 000,015,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_wh.sys
[2011.02.03 12:53:02 | 000,015,360 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_cm.sys
[2011.02.03 12:52:15 | 000,025,960 | ---- | C] (Teruten Inc) -- C:\Windows\SysNative\FsExService64.exe
[2011.02.03 12:52:10 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2011.02.03 12:43:01 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Downloaded Installations
[2011.02.03 12:07:16 | 000,000,000 | ---D | C] -- C:\Programme\SAMSUNG
[2011.02.03 12:06:21 | 000,016,448 | ---- | C] (Teruten Inc) -- C:\Windows\SysNative\drivers\TFsExDisk.sys
[2011.02.03 12:03:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Samsung
[2011.02.03 05:07:37 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{C9CDFF65-DD17-4D6A-A311-B946D7AA59F6}
[2011.02.02 14:31:16 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll
[2011.02.02 12:49:24 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{7620C9A5-906D-4490-8843-842D35B8B09F}
[2011.02.01 09:41:22 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{07999950-A16F-4084-A489-02B0458C9B42}
[2011.01.31 18:24:56 | 000,307,200 | ---- | C] (FLV.com) -- C:\Windows\SysWow64\TubeFinder.exe
[2011.01.31 18:24:52 | 000,119,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6FR.DLL
[2011.01.31 18:24:52 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6STKIT.DLL
[2011.01.31 18:24:52 | 000,084,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PICCLP32.OCX
[2011.01.31 18:24:51 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscomctl.ocx
[2011.01.31 18:24:51 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\COMDLG32.OCX
[2011.01.31 18:24:51 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCFR.DLL
[2011.01.31 18:24:51 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CMDLGFR.DLL
[2011.01.31 18:24:51 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PCCLPFR.DLL
[2011.01.31 14:28:30 | 000,000,000 | ---D | C] -- C:\Users\Christian S\dwhelper
[2011.01.31 12:08:34 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{69818540-A5F7-4D93-ABD2-2751C30ECECD}
[2011.01.30 12:48:04 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{12C253F7-D90B-45A7-A56C-CACD7B3ADE93}
[2011.01.29 22:33:05 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{C3DD5A20-40A9-46CB-8103-16A204165A47}
[2011.01.29 03:40:45 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{84DBDD3B-E90E-4352-BB05-80B740C0E4E5}
[2011.01.28 23:20:42 | 000,098,304 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt.dll
[2011.01.28 10:38:48 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{596B9C21-B321-4322-8384-AF449E24868E}
[2011.01.27 21:19:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Outlook Tools
[2011.01.27 21:19:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2011.01.27 21:18:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache
[2011.01.27 16:49:08 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{42811846-110D-4B52-B36E-23C9286826AF}
[2011.01.27 02:54:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{87239C8D-A360-4E08-9FA3-544D713F9F94}
[2011.01.26 14:47:49 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{33CE7314-D182-4E7A-B56D-52ECE36BF71F}
[2011.01.26 13:29:40 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\Pferde
[2011.01.26 02:47:02 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{D6DDC807-6D4D-43BA-ABA1-123F7319D18D}
[2011.01.25 19:50:38 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\DVDVideoSoft
[2011.01.25 18:25:19 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011.01.25 18:25:19 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011.01.25 18:25:19 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011.01.25 10:41:33 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{7667BA81-5CFB-4AE3-A195-B0D4E18E444E}
[2011.01.25 00:38:25 | 000,000,000 | ---D | C] -- C:\Users\Christian S\.thumbnails
[2011.01.24 15:56:54 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{1E0AC658-2B35-49F8-927A-744A4056C6C1}
[2011.01.23 13:08:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{C3699FA6-7317-467D-97F5-30DC73606E2D}
[2011.01.23 01:07:48 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{D38DA6BB-9ECA-4755-8F54-D7A3E993B8E0}
[2011.01.23 01:07:48 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{1C3BBA38-19ED-4C71-A7C9-E62B23A3AD2B}
[2011.01.23 01:07:28 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Tracing
[2011.01.16 12:27:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.01.14 17:36:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2011.01.14 16:03:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
[2011.01.14 16:01:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
[2011.01.14 15:59:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2011.01.14 15:37:26 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2011.01.14 15:37:26 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2011.01.14 15:37:24 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2011.01.14 15:37:24 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2011.01.14 15:37:23 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2011.01.14 15:37:23 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2011.01.14 15:37:23 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2011.01.14 15:37:23 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2011.01.14 15:37:23 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2011.01.14 15:37:23 | 000,069,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2011.01.14 15:37:22 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2011.01.14 15:37:22 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2011.01.14 15:37:21 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2011.01.14 15:37:21 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2011.01.14 15:37:21 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2011.01.14 15:37:21 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2011.01.14 15:37:20 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2011.01.14 15:37:20 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2011.01.14 15:37:19 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2011.01.14 15:37:19 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2011.01.14 15:37:19 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2011.01.14 15:37:19 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2011.01.14 15:37:19 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2011.01.14 15:37:19 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2011.01.14 15:37:17 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2011.01.14 15:37:17 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2011.01.14 15:37:14 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2011.01.14 15:37:14 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2011.01.14 15:37:14 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2011.01.14 15:37:14 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2011.01.14 15:37:11 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2011.01.14 15:37:11 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2011.01.14 15:37:09 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2011.01.14 15:37:09 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2011.01.14 15:37:09 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2011.01.14 15:37:09 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2011.01.14 15:37:05 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2011.01.14 15:37:05 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2011.01.14 15:37:03 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2011.01.14 15:37:03 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2011.01.14 15:37:03 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2011.01.14 15:37:03 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2011.01.14 15:37:02 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2011.01.14 15:37:02 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2011.01.14 15:37:01 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2011.01.14 15:37:01 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2011.01.14 15:36:58 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2011.01.14 15:36:58 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2011.01.14 15:36:58 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2011.01.14 15:36:58 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2011.01.14 15:36:55 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2011.01.14 15:36:55 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2011.01.14 15:12:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2011.01.14 14:57:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Valve
[2011.01.14 14:57:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Valve
[2011.01.13 18:17:07 | 001,837,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2011.01.13 18:17:07 | 001,540,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011.01.13 18:17:07 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10warp.dll
[2011.01.13 18:17:07 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll
[2011.01.13 18:17:07 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011.01.13 18:17:07 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll
[2011.01.13 18:17:06 | 001,863,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\explorerframe.dll.0.oldcpt
[2011.01.13 18:17:06 | 001,863,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\explorerframe.dll
[2011.01.13 18:17:06 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorerframe.dll
[2011.01.13 18:17:06 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2011.01.13 18:17:06 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2011.01.13 18:17:06 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1core.dll
[2011.01.13 18:17:05 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2011.01.13 18:17:05 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1.dll
[2011.01.13 18:17:05 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2011.01.13 18:16:57 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2011.01.13 18:16:57 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2010.12.26 12:54:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
[2010.12.26 12:44:10 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Windows Live
[2010.12.26 12:42:51 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2010.12.26 12:42:50 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2010.12.26 12:42:49 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2010.12.26 12:42:49 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2010.12.26 12:42:48 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2010.12.26 12:42:45 | 004,068,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2010.12.26 12:42:42 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2010.12.25 13:11:16 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\PC Suite
[2010.12.25 13:09:21 | 000,000,000 | ---D | C] -- C:\Programme\DIFX
[2010.12.25 13:06:34 | 000,000,000 | ---D | C] -- C:\ProgramData\NokiaInstallerCache
[2010.12.25 12:55:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\ElevatedDiagnostics
[2010.12.15 19:10:57 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2010.12.15 19:10:57 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2010.12.15 19:10:57 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2010.12.15 19:10:57 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2010.12.15 19:10:57 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2010.12.15 19:10:57 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2010.12.15 19:10:57 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2010.12.15 19:10:57 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2010.12.15 19:10:36 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2010.12.15 19:10:36 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2010.12.15 19:09:42 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2010.12.15 19:09:31 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010.12.15 19:09:31 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2009.12.08 23:22:08 | 001,982,464 | ---- | C] (Dell, Inc. ) -- C:\Users\Christian S\AppData\Roaming\DataSafeDotNet.exe

========== Files - Modified Within 90 Days ==========

[2011.02.28 03:28:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\TmNationsForever.lnk
[2011.02.28 03:21:00 | 000,001,142 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4028111442-2157058971-3987070049-1000UA1cbd15435f45b02.job
[2011.02.28 02:51:05 | 000,001,118 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.02.28 00:21:01 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4028111442-2157058971-3987070049-1000Core1cbd15435789982.job
[2011.02.27 17:51:01 | 000,001,114 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.02.27 15:55:58 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.02.27 15:55:58 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.02.27 15:48:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.02.27 15:48:36 | 2388,238,336 | -HS- | M] () -- C:\hiberfil.sys
[2011.02.26 23:01:11 | 000,021,504 | ---- | M] () -- C:\Users\Christian S\AppData\Local\WebpageIcons.db
[2011.02.23 18:22:47 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2011.02.23 16:04:21 | 000,040,648 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2011.02.23 16:04:17 | 000,190,016 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2011.02.23 16:04:07 | 000,238,968 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.02.23 15:57:04 | 000,280,408 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2011.02.23 15:57:01 | 000,505,176 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2011.02.23 15:55:53 | 000,053,592 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2011.02.23 15:55:13 | 000,031,064 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2011.02.23 15:55:05 | 000,064,344 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011.02.23 15:54:58 | 000,022,360 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011.02.22 23:21:43 | 000,020,245 | ---- | M] () -- C:\Users\Christian S\Documents\FlashBlockt (.css).js
[2011.02.22 23:16:32 | 000,020,245 | ---- | M] () -- C:\Users\Christian S\Documents\FlashBlock.js
[2011.02.22 09:05:27 | 000,002,440 | ---- | M] () -- C:\Users\Christian S\Desktop\Google Chrome.lnk
[2011.02.21 04:09:30 | 000,049,752 | ---- | M] (Sunbelt Software) -- C:\Windows\SysNative\drivers\SBREDrv.sys
[2011.02.21 02:15:00 | 000,001,893 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011.02.21 00:18:34 | 000,001,834 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2011.02.18 16:36:06 | 000,002,023 | ---- | M] () -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2011.02.17 10:06:39 | 000,039,424 | ---- | M] (NirSoft) -- C:\Windows\zipinst.exe
[2011.02.16 22:02:29 | 002,851,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2011.02.16 22:02:27 | 000,332,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll
[2011.02.15 05:36:21 | 000,001,302 | ---- | M] () -- C:\ProgramData\ss.ini
[2011.02.14 02:41:07 | 020,943,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imageres.dll
[2011.02.14 02:41:07 | 020,007,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imageres.dll.0.oldcpt
[2011.02.11 15:15:54 | 000,000,849 | ---- | M] () -- C:\Users\Christian S\.recently-used.xbel
[2011.02.10 00:38:52 | 000,363,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.02.04 18:42:37 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.02.04 18:42:37 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.02.04 18:42:37 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.02.04 18:42:37 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.02.04 18:42:37 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.02.03 16:47:54 | 000,002,006 | ---- | M] () -- C:\aqua_bitmap.cpp
[2011.02.02 14:31:16 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll
[2011.01.28 23:20:42 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt.dll
[2011.01.26 07:53:10 | 000,265,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011.01.26 07:31:20 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.01.07 09:07:24 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.01.07 09:07:24 | 000,475,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011.01.07 09:06:50 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.01.07 08:31:10 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011.01.07 08:31:10 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011.01.07 08:27:11 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.01.07 06:49:20 | 000,366,080 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.01.07 06:33:11 | 000,294,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.01.05 22:23:38 | 000,025,960 | ---- | M] (Teruten Inc) -- C:\Windows\SysNative\FsExService64.exe
[2011.01.05 07:20:30 | 000,612,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.01.05 07:16:55 | 000,852,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.01.05 06:34:32 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.01.04 16:11:18 | 004,659,712 | ---- | M] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2011.01.04 16:10:56 | 000,143,360 | ---- | M] () -- C:\Windows\SysWow64\3DAudio.ax
[2010.12.25 13:14:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriv er_01_09_00.Wdf
[2010.12.25 13:13:56 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64 _01009.Wdf
[2010.12.21 07:16:27 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2010.12.21 07:16:16 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2010.12.21 07:15:55 | 000,264,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2010.12.21 07:15:31 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2010.12.21 07:10:22 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2010.12.21 06:55:02 | 000,015,872 | ---- | M] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_wh.sys
[2010.12.21 06:55:02 | 000,015,360 | ---- | M] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_cm.sys
[2010.12.21 06:38:24 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2010.12.21 06:38:19 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2010.12.21 06:38:16 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2010.12.21 06:34:12 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll
[2010.12.20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.12.20 18:08:40 | 000,024,152 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.12.18 07:12:18 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010.12.18 07:12:14 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010.12.18 07:11:41 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010.12.18 07:11:16 | 000,256,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010.12.18 07:08:11 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010.12.18 06:30:10 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010.12.18 06:30:07 | 000,599,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010.12.18 06:29:40 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010.12.18 06:29:18 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010.12.18 06:26:52 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010.12.18 05:55:03 | 000,482,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010.12.18 05:20:55 | 000,386,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec

========== Files Created - No Company Name ==========

[2011.02.28 03:28:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\TmNationsForever.lnk
[2011.02.26 22:43:04 | 000,110,080 | ---- | C] () -- C:\Windows\SysWow64\advd.dll
[2011.02.26 22:43:04 | 000,023,040 | ---- | C] () -- C:\Windows\SysWow64\auth.dll
[2011.02.26 22:43:03 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll
[2011.02.22 23:21:43 | 000,020,245 | ---- | C] () -- C:\Users\Christian S\Documents\FlashBlockt (.css).js
[2011.02.22 23:11:55 | 000,020,245 | ---- | C] () -- C:\Users\Christian S\Documents\FlashBlock.js
[2011.02.21 02:15:00 | 000,001,893 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011.02.21 01:22:50 | 000,002,161 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 4.0 Beta 11.lnk
[2011.02.21 00:19:03 | 000,002,440 | ---- | C] () -- C:\Users\Christian S\Desktop\Google Chrome.lnk
[2011.02.21 00:18:34 | 000,001,846 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2011.02.21 00:18:34 | 000,001,834 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2011.02.21 00:16:32 | 000,001,142 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4028111442-2157058971-3987070049-1000UA1cbd15435f45b02.job
[2011.02.21 00:16:31 | 000,001,090 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4028111442-2157058971-3987070049-1000Core1cbd15435789982.job
[2011.02.18 16:36:06 | 000,002,023 | ---- | C] () -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2011.02.16 20:24:51 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011.02.15 05:36:21 | 000,001,302 | ---- | C] () -- C:\ProgramData\ss.ini
[2011.02.14 02:33:07 | 000,053,552 | ---- | C] () -- C:\Windows\SysNative\wbload.dll
[2011.02.11 15:15:54 | 000,000,849 | ---- | C] () -- C:\Users\Christian S\.recently-used.xbel
[2011.02.03 12:03:28 | 000,002,006 | ---- | C] () -- C:\aqua_bitmap.cpp
[2011.01.31 18:24:52 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\PropertyGrid.ocx
[2011.01.31 18:24:52 | 000,208,500 | ---- | C] () -- C:\Windows\SysWow64\ReyXpBasics.tlb
[2011.01.31 18:24:51 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\ControlSubX.ocx
[2011.01.04 16:10:56 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\3DAudio.ax
[2010.12.25 13:14:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriv er_01_09_00.Wdf
[2010.12.25 13:13:56 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64 _01009.Wdf
[2010.09.22 04:25:46 | 000,000,017 | ---- | C] () -- C:\Users\Christian S\AppData\Local\resmon.resmoncfg
[2010.04.21 18:14:56 | 000,439,308 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin
[2010.04.21 18:14:54 | 000,982,240 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin
[2010.04.21 18:14:54 | 000,092,356 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin
[2010.03.25 20:24:42 | 000,021,504 | ---- | C] () -- C:\Users\Christian S\AppData\Local\WebpageIcons.db
[2010.02.03 12:44:01 | 000,000,065 | ---- | C] () -- C:\Windows\wininit.ini
[2010.02.01 11:11:40 | 000,134,592 | ---- | C] () -- C:\Windows\SysWow64\igfcg500.bin
[2010.01.29 23:03:16 | 000,000,106 | ---- | C] () -- C:\Windows\Podcasts.INI
[2010.01.14 16:29:32 | 001,499,556 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009.12.25 14:59:06 | 000,131,584 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall.exe
[2009.12.24 19:24:16 | 000,000,026 | ---- | C] () -- C:\Windows\neosetup.INI
[2009.12.15 02:42:44 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll
[2009.12.15 02:42:44 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll
[2009.12.06 10:15:43 | 000,006,144 | ---- | C] () -- C:\Users\Christian S\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.11.25 13:40:50 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2009.10.06 08:16:00 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2008.12.15 15:06:44 | 000,058,672 | ---- | C] () -- C:\Windows\SysWow64\wbload.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:1CE11B51

< End of report >
         

--- --- ---

OTL Logfile:

OTL logfile created on: 28.02.2011 03:31:10 - Run 1
OTL by OldTimer - Version 3.2.22.2 Folder = C:\Users\Christian S\Downloads
64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

3,00 Gb Total Physical Memory | 1,00 Gb Available Physical Memory | 39,00% Memory free
6,00 Gb Paging File | 4,00 Gb Available in Paging File | 67,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 283,40 Gb Total Space | 237,45 Gb Free Space | 83,79% Space Free | Partition Type: NTFS

Computer Name: CHRISTIANS-PC | User Name: Christian S | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 90 Days

========== Processes (SafeList) ==========

PRC - [2011.02.28 03:30:16 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Christian S\Downloads\OTL.exe
PRC - [2011.02.23 16:04:20 | 003,451,496 | ---- | M] (AVAST Software) -- C:\Programme\Alwil Software\Avast5\AvastUI.exe
PRC - [2011.02.23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) -- C:\Programme\Alwil Software\Avast5\AvastSvc.exe
PRC - [2010.12.03 20:43:34 | 000,912,344 | ---- | M] (Mozilla Corporation) -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe
PRC - [2010.07.09 16:12:25 | 000,072,568 | ---- | M] (RapidSolution Software AG) -- C:\Program Files (x86)\RapidSolution\AudialsOne 4\AudialsOne.exe
PRC - [2010.01.11 19:20:48 | 000,155,648 | ---- | M] (Stardock Corporation) -- C:\Programme\Dell\DellDock\DockLogin.exe
PRC - [2009.06.24 22:21:38 | 000,409,744 | ---- | M] (Creative Technology Ltd) -- C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
PRC - [2009.06.19 03:46:24 | 000,494,064 | ---- | M] () -- C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe


========== Modules (SafeList) ==========

MOD - [2011.02.28 03:30:16 | 000,581,120 | ---- | M] (OldTimer Tools) -- C:\Users\Christian S\Downloads\OTL.exe
MOD - [2011.02.23 16:04:17 | 000,197,208 | ---- | M] (AVAST Software) -- C:\Programme\Alwil Software\Avast5\snxhk.dll
MOD - [2010.08.21 06:21:32 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16661_none_420f e3fa2b8113bd\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011.02.23 16:04:19 | 000,042,184 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\Alwil Software\Avast5\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011.01.14 15:06:01 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\msco rsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2010.01.11 19:20:48 | 000,155,648 | ---- | M] (Stardock Corporation) [Auto | Running] -- C:\Programme\Dell\DellDock\DockLogin.exe -- (DockLoginService)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe -- (clr_optimization_v2.0.50727_32)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2011.02.23 15:55:05 | 000,064,344 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2011.02.21 04:09:30 | 000,049,752 | ---- | M] (Sunbelt Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SBREDrv.sys -- (SBRE)
DRV:64bit: - [2010.08.25 20:36:04 | 010,611,552 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010.06.23 10:10:56 | 000,344,680 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009.12.22 03:31:26 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TFsExDisk.sys -- (TFsExDisk)
DRV:64bit: - [2009.12.22 03:31:04 | 000,020,568 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\dgderdrv.sys -- (dgderdrv)
DRV:64bit: - [2009.11.16 15:46:12 | 000,046,112 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\tbhsd.sys -- (tbhsd)
DRV:64bit: - [2009.11.16 14:45:48 | 000,031,264 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\rrnetcap.sys -- (RRNetCapMP)
DRV:64bit: - [2009.11.16 14:45:48 | 000,031,264 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\rrnetcap.sys -- (RRNetCap)
DRV:64bit: - [2009.10.10 03:41:20 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2009.07.14 08:52:08 | 000,100,864 | ---- | M] (VIA Technologies, Inc. ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viacr64.sys -- (VIACRX64)
DRV:64bit: - [2009.07.14 02:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009.07.14 02:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.09 11:00:00 | 000,055,280 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2009.06.15 19:06:42 | 000,172,704 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2009.06.14 12:47:26 | 000,668,672 | ---- | M] (Conexant Systems Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CHDRT64.sys -- (CnxtHdAudService)
DRV:64bit: - [2009.06.10 21:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2007.11.02 14:22:30 | 000,145,448 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217mdm.sys -- (s217mdm)
DRV:64bit: - [2007.11.02 14:22:30 | 000,138,792 | ---- | M] (MCCI) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217unic.sys -- (s217unic) Sony Ericsson Device 217 USB Ethernet Emulation SEMC217 (WDM)
DRV:64bit: - [2007.11.02 14:22:30 | 000,124,968 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217obex.sys -- (s217obex)
DRV:64bit: - [2007.11.02 14:22:30 | 000,033,832 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217nd5.sys -- (s217nd5) Sony Ericsson Device 217 USB Ethernet Emulation SEMC217 (NDIS)
DRV:64bit: - [2007.11.02 14:22:28 | 000,108,072 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217bus.sys -- (s217bus) Sony Ericsson Device 217 driver (WDM)
DRV:64bit: - [2007.11.02 14:22:28 | 000,019,496 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\s217mdfl.sys -- (s217mdfl)
DRV:64bit: - [2006.11.01 18:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2009.12.22 03:31:26 | 000,016,448 | ---- | M] (Teruten Inc) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\TFsExDisk.Sys -- (TFsExDisk)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/de...=ie&l=en&s=gen
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
IE - HKCU\..\URLSearchHook: - Reg Error: Key error. File not found
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings: "AutoConfigURL" = file://C:/Users/Christian%20S/AppData/Local/Google/Chrome/User%20Data/Default/Extensions/caehdcpeofiiigpdhbabniblemipncjj/SwitchyAuto.pac?1296966425258

========== FireFox ==========

FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "hxxp://www.gmx.net/|hxxp://www.studivz.net/|https://www.facebook.com/"
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.3.3
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.9.8
FF - prefs.js..extensions.enabledItems: tubestop@efinke.com:1.5
FF - prefs.js..extensions.enabledItems: {EF522540-89F5-46b9-B6FE-1829E2B572C6}:4.9.4
FF - prefs.js..extensions.enabledItems: {EDA7B1D7-F793-4e03-B074-E6F303317FB0}:1.2.6
FF - prefs.js..extensions.enabledItems: {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}:20100908
FF - prefs.js..extensions.enabledItems: {1018e4d6-728f-4b20-ad56-37578a4de76b}:4.1.0
FF - prefs.js..extensions.enabledItems: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}:0.9.7.2
FF - prefs.js..extensions.enabledItems: de-DE@dictionaries.addons.mozilla.org:2.0.2
FF - prefs.js..extensions.enabledItems: elemhidehelper@adblockplus.org:1.1
FF - prefs.js..extensions.enabledItems: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8}:1.1
FF - prefs.js..extensions.enabledItems: {902D2C4A-457A-4EF9-AD43-7014562929FF}:0.4.6
FF - prefs.js..extensions.enabledItems: {1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}:0.4.6
FF - prefs.js..extensions.enabledItems: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}:1.48.3
FF - prefs.js..extensions.enabledItems: {e4a8a97b-f2ed-450b-b12d-ee082ba24781}:0.9.1
FF - prefs.js..extensions.enabledItems: {dc572301-7619-498c-a57d-39143191b318}:0.3.8.5pre.110221a
FF - prefs.js..extensions.enabledItems: omnibar@ajitk.com:0.7.2.20110110
FF - prefs.js..extensions.enabledItems: bug489729@alice0775:1.3
FF - prefs.js..extensions.enabledItems: takemetourl@sandeep.kothari:1.3
FF - prefs.js..extensions.enabledItems: {d37dc5d0-431d-44e5-8c91-49419370caa1}:2.6.18
FF - prefs.js..extensions.enabledItems: {FBF6D7FB-F305-4445-BB3D-FEF66579A033}:5.0
FF - prefs.js..extensions.enabledItems: {1280606b-2510-4fe0-97ef-9b5a22eafe41}:1.0.9
FF - prefs.js..extensions.enabledItems: {35106bca-6c78-48c7-ac28-56df30b51d2c}:0.6.4
FF - prefs.js..extensions.enabledItems: tabsontop-darthpalpatine@dummy.addons.mozilla.org:1.4.4
FF - prefs.js..extensions.enabledItems: {57068FBE-1506-42ee-AB02-BD183E7999E4}:4.0
FF - prefs.js..extensions.enabledItems: personasexpression@eddiescorpse.private:2.0.0
FF - prefs.js..extensions.enabledItems: {0b457cAA-602d-484a-8fe7-c1d894a011ba}:0.88
FF - prefs.js..extensions.enabledItems: {b3f91530-1905-11de-8c30-0800200c9a66}:0.9
FF - prefs.js..extensions.enabledItems: {43505cd0-6e9a-11da-8cd6-0800200c9a66}:0.6.2
FF - prefs.js..extensions.enabledItems: {b41cb5f0-2e52-11de-8c30-0800200c9a66}:2.1
FF - prefs.js..extensions.enabledItems: nasanightlaunch@example.com:0.6.20101009
FF - prefs.js..extensions.enabledItems: {D46E8522-6E86-44b1-A622-58C0668AD78E}:3.6.0

FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.02.17 20:49:58 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.02.18 17:45:22 | 000,000,000 | ---D | M]

[2011.02.17 20:50:24 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Extensions
[2009.12.21 06:26:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6}
[2011.01.30 21:51:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\1ryexg7 4.default\extensions
[2011.01.30 21:51:28 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\1ryexg7 4.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.01.28 12:46:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\1ryexg7 4.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2011.01.28 12:46:57 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\1ryexg7 4.default\extensions\elemhidehelper@adblockplus.or g
[2011.01.14 21:36:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\23or0i8 q.default\extensions
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\23or0i8 q.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.09.27 08:45:41 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\23or0i8 q.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.09.19 19:32:48 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\23or0i8 q.default\extensions\stratareloaded@addons.mozilla .org
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\fo6r0y1 e.default\extensions
[2010.09.06 09:28:37 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\fo6r0y1 e.default\extensions\{21e48e29-f574-4619-b65d-0f00eea92e5b}
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\fo6r0y1 e.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.09.27 08:45:41 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\fo6r0y1 e.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.02.28 02:08:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions
[2011.02.28 00:51:59 | 000,000,000 | ---D | M] (FireShot) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}
[2011.02.22 22:33:07 | 000,000,000 | ---D | M] (Flagfox) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2011.02.22 05:58:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{1280606b-2510-4fe0-97ef-9b5a22eafe41}
[2011.02.17 21:57:06 | 000,000,000 | ---D | M] (Image Zoom) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}
[2011.02.27 21:02:32 | 000,000,000 | ---D | M] (Organize Status Bar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2c}
[2011.02.20 20:21:59 | 000,000,000 | ---D | M] (Simpler Glass) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{43505cd0-6e9a-11da-8cd6-0800200c9a66}
[2011.02.17 21:11:57 | 000,000,000 | ---D | M] (Stylish) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}
[2011.02.27 17:09:08 | 000,000,000 | ---D | M] (Compact Menu 2) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{57068FBE-1506-42ee-AB02-BD183E7999E4}
[2011.02.17 20:52:29 | 000,000,000 | ---D | M] (NoScript) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011.02.26 15:51:42 | 000,000,000 | ---D | M] (ReloadEvery) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644}
[2011.02.28 02:07:26 | 000,000,000 | ---D | M] (Context Search) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{902D2C4A-457A-4EF9-AD43-7014562929FF}
[2011.02.17 20:58:30 | 000,000,000 | ---D | M] (WOT) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011.02.17 20:53:12 | 000,000,000 | ---D | M] ("Vfox3-Basic") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{b3f91530-1905-11de-8c30-0800200c9a66}
[2011.02.22 09:17:25 | 000,000,000 | ---D | M] (Black Stratini) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{b41cb5f0-2e52-11de-8c30-0800200c9a66}
[2011.02.17 20:51:39 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.02.21 23:28:03 | 000,000,000 | ---D | M] (FoxClocks) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{d37dc5d0-431d-44e5-8c91-49419370caa1}
[2011.02.17 22:01:19 | 000,000,000 | ---D | M] ("BetterPrivacy") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}
[2011.02.27 19:49:36 | 000,000,000 | ---D | M] (Classic Compact) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}
[2011.02.17 21:00:03 | 000,000,000 | ---D | M] (Download Statusbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2011.02.21 21:00:41 | 000,000,000 | ---D | M] ("Tab Mix Plus") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2011.02.18 03:58:58 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2011.02.21 07:23:48 | 000,000,000 | ---D | M] (Menu Editor) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{EDA7B1D7-F793-4e03-B074-E6F303317FB0}
[2011.02.17 20:57:27 | 000,000,000 | ---D | M] (SearchPreview) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
[2011.02.22 05:43:27 | 000,000,000 | ---D | M] ("MultirowBookmarksToolbar") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{FBF6D7FB-F305-4445-BB3D-FEF66579A033}
[2011.02.21 08:34:34 | 000,000,000 | ---D | M] ("bug489729") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\bug489729@alice0775
[2011.02.17 21:00:52 | 000,000,000 | ---D | M] (German Dictionary) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\de-DE@dictionaries.addons.mozilla.org
[2011.02.17 21:03:44 | 000,000,000 | ---D | M] (Element Hiding Helper for Adblock Plus) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\elemhidehelper@adblockplus.or g
[2011.02.27 19:50:35 | 000,000,000 | ---D | M] (foxiFrame basic) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\foxiFrame@basic.am
[2011.02.27 19:43:05 | 000,000,000 | ---D | M] (Hide Caption Titlebar Plus) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\hidecaptionplus-dp@dummy.addons.mozilla.org
[2011.02.24 08:13:47 | 000,000,000 | ---D | M] (Hide Favicons) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\hidefavicons@maarten
[2011.02.24 08:12:11 | 000,000,000 | ---D | M] (NASA Night Launch) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\nasanightlaunch@example.com
[2011.02.24 08:13:04 | 000,000,000 | ---D | M] (Nasa Tabs) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\nasatabs@sonco.com
[2011.02.20 21:29:11 | 000,000,000 | ---D | M] (Omnibar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\omnibar@ajitk.com
[2011.02.27 21:01:33 | 000,000,000 | ---D | M] (Personas Expression) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\personasexpression@eddiescorp se.private
[2011.02.26 16:14:04 | 000,000,000 | ---D | M] (Tabs on top) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\tabsontop-darthpalpatine@dummy.addons.mozilla.org
[2011.02.21 08:35:49 | 000,000,000 | ---D | M] (take me to url) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\takemetourl@sandeep.kothari
[2011.02.17 20:55:04 | 000,000,000 | ---D | M] (TubeStop) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\tubestop@efinke.com
[2011.02.27 19:49:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{D46E8522-6E86-44b1-A622-58C0668AD78E}\chrome\mozapps\extensions
[2011.02.21 21:00:41 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\jsl3f23 f.default\extensions\{dc572301-7619-498c-a57d-39143191b318}\modules\extensions
[2011.01.30 21:51:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2011.01.30 21:51:29 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
[2011.01.19 00:09:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\kh3fiqg r.default\extensions\elemhidehelper@adblockplus.or g
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{00352F14-3F76-4e4d-ACFF-9972D7E4B3B9}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{113c2360-15a3-11de-8c30-0800200c9a66}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{269FB356-C69F-7349-D092-AB28AF836D0E}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{4a1a0a40-7d27-11dd-ad8b-0800200c9a66}
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.09.27 08:45:41 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{b3f91530-1905-11de-8c30-0800200c9a66}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{b5dd1cb0-1888-11df-8a39-0800200c9a66}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{de5809e0-2b07-11dd-bd0b-0800200c9a66}
[2010.06.30 11:58:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010.06.30 11:58:45 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}-trash
[2010.06.30 11:58:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\{F587B2D4-7C09-4a23-AC4A-8D6E3CE8C7DA}
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\cfxe@Triton
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\cfxec@Triton
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\chromifox@altmusictv.com
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\fzamaan@gmail.com
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\glaze_black@www.theme-oasis.org
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\GradientBrushedMetalFF3@pumpe l.com
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\nasanightlaunch@example.com
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\operetta@firefox.theme
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\rein@notiz.jp
[2010.06.30 11:58:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\p3ypjc8 4.default\extensions\Strata40Lite@SpewBoy.au
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions
[2010.07.07 20:42:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}
[2010.07.07 20:42:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{5F590AA2-1221-4113-A6F4-A4BB62414FAC}
[2010.07.07 20:42:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2011.01.14 21:36:31 | 000,000,000 | ---D | M] (DVDVideoSoftTB Toolbar) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{872b5b88-9db5-4310-bdd0-ac189557e5f5}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2010.09.27 08:45:41 | 000,000,000 | ---D | M] ("DVDVideoSoft Menu") -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{dc572301-7619-498c-a57d-39143191b318}
[2010.07.07 20:42:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\{EF522540-89F5-46b9-B6FE-1829E2B572C6}
[2010.07.07 20:42:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\cfxHelper@Triton
[2010.07.07 20:42:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\elemhidehelper@adblockplus.or g
[2010.07.07 20:42:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\googletube@googletube.com
[2010.07.07 20:42:29 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\personas@christopher.beard
[2010.07.07 20:42:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Christian S\AppData\Roaming\mozilla\Firefox\Profiles\r7e1s27 1.default\extensions\tubestop@efinke.com
[2011.02.17 21:34:40 | 000,001,820 | ---- | M] () -- C:\Users\Christian S\AppData\Roaming\Mozilla\Firefox\Profiles\jsl3f23 f.default\searchplugins\bing.xml
[2011.02.17 21:37:23 | 000,004,140 | ---- | M] () -- C:\Users\Christian S\AppData\Roaming\Mozilla\Firefox\Profiles\jsl3f23 f.default\searchplugins\youtube.xml
[2011.02.17 20:49:56 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions
[2010.12.03 19:14:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\amazondotcom-de.xml
[2010.12.03 19:14:08 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\eBay-de.xml
[2010.12.03 19:14:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\leo_ende_de.xml
[2010.12.03 19:14:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\wikipedia-de.xml
[2010.12.03 19:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\Mozilla Firefox\searchplugins\yahoo-de.xml

O1 HOSTS File: ([2009.06.10 22:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (no name) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - No CLSID value found.
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {D6F180CB-E683-41a3-8CD2-C53DBAA0530D} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D6F180CB-E683-41A3-8CD2-C53DBAA0530D} - No CLSID value found.
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast5] C:\Program Files\Alwil Software\Avast5\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Dell Webcam Central] C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKCU..\Run: [KiesTrayAgent] File not found
O4 - Startup: C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk = File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\pol icies\System: ConsentPromptBehaviorUser = 3
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - Reg Error: Key error. File not found
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - Reg Error: Key error. File not found
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Reg Error: Key error.)
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} hxxp://messenger.zone.msn.com/binary...r.cab56986.cab (Checkers Class)
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} hxxp://messenger.zone.msn.com/binary...n.cab56986.cab (Solitaire Showdown Class)
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} hxxp://messenger.zone.msn.com/Messen.../GAME_UNO1.cab (UnoCtrl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} hxxp://messenger.zone.msn.com/binary...t.cab56907.cab (MessengerStatsClient Class)
O16 - DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_16)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_22)
O16 - DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_23)
O16 - DPF: CabBuilder hxxp://kiw.imgag.com/imgag/kiw/toolb...lerControl.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.e xe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - Reg Error: Key error. - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O20:64bit: - Winlogon\Notify\WB: DllName - Reg Error: Key error. - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 90 Days ==========

[2011.02.28 03:30:17 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\TrackMania
[2011.02.28 03:28:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmNationsForever
[2011.02.28 03:25:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TmNationsForever
[2011.02.28 02:47:10 | 000,000,000 | ---D | C] -- C:\ProgramData\SecTaskMan
[2011.02.28 01:52:26 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{6BE35C5B-07D3-4BCB-AF2D-497D2165A5DD}
[2011.02.28 00:54:22 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\FireShot
[2011.02.26 22:55:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Zattoo
[2011.02.26 22:55:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zattoo4
[2011.02.26 22:55:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Zattoo4
[2011.02.26 22:43:50 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\Podcast Studio
[2011.02.26 22:43:04 | 000,962,560 | ---- | C] (East Wind Software) -- C:\Windows\SysWow64\advdaudio.ocx
[2011.02.26 22:43:04 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\concept design
[2011.02.26 22:43:03 | 000,966,144 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioInformation2.dll
[2011.02.26 22:43:03 | 000,877,568 | ---- | C] (NCT Company Ltd.) -- C:\Windows\SysWow64\NCTAudioFile2.dll
[2011.02.26 22:43:03 | 000,634,880 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioEditor2.dll
[2011.02.26 22:43:03 | 000,522,752 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioTransform2.dll
[2011.02.26 22:43:03 | 000,467,968 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioRecord2.dll
[2011.02.26 22:43:03 | 000,467,456 | ---- | C] (Online Media Technologies Ltd.) -- C:\Windows\SysWow64\NCTAudioPlayer2.dll
[2011.02.26 22:43:03 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr70.dll
[2011.02.26 22:42:45 | 000,413,696 | ---- | C] (Gabest) -- C:\Windows\SysWow64\flvsplitter.ax
[2011.02.26 22:42:44 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\onlineTV 6
[2011.02.26 22:42:44 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\concept design
[2011.02.26 22:42:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\concept design
[2011.02.26 12:18:49 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{8B983AAA-6DF3-4C13-942F-2CDF3B854F5D}
[2011.02.23 18:22:48 | 000,505,176 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2011.02.23 15:29:16 | 000,662,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.02.23 15:29:16 | 000,475,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011.02.23 15:29:16 | 000,442,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011.02.23 15:29:15 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011.02.23 10:28:56 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{C6293E97-1C33-4A1A-A2EB-829D9740C320}
[2011.02.22 22:27:35 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{A2F7EC7E-2DAF-418B-AA60-876EF8F28F01}
[2011.02.21 21:27:47 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Stardock_Corporation
[2011.02.21 20:55:30 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\Skin-Pack_fuer_Spider-Player-2
[2011.02.21 19:49:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spider Player
[2011.02.21 19:45:45 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Spider Player
[2011.02.21 19:45:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spider Player
[2011.02.21 04:04:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2011.02.21 02:15:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2011.02.21 02:14:59 | 000,280,408 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2011.02.21 02:14:59 | 000,022,360 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011.02.21 02:14:57 | 000,031,064 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2011.02.21 02:14:54 | 000,053,592 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2011.02.21 02:14:52 | 000,238,968 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.02.21 02:14:52 | 000,064,344 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011.02.21 02:14:37 | 000,040,648 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2011.02.21 02:14:36 | 000,190,016 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2011.02.21 02:14:32 | 000,000,000 | ---D | C] -- C:\Programme\Alwil Software
[2011.02.21 02:14:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Alwil Software
[2011.02.21 00:18:59 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
[2011.02.20 15:58:04 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{905634A9-C4BE-4421-BC1C-A339FE1AD36B}
[2011.02.20 15:11:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{56198395-1A8D-4A8B-8A0D-94B416E44791}
[2011.02.20 15:10:58 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{8882D785-57C1-4449-94B3-9C8A90E6E676}
[2011.02.19 17:28:49 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\René's Homepage
[2011.02.19 15:42:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{FFBA8595-8FD1-4BA1-BD19-DB06A649C053}
[2011.02.19 02:46:57 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{2B624AF3-7A6E-4480-8492-8D97E56B829B}
[2011.02.18 23:11:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Opera
[2011.02.18 23:11:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2011.02.18 22:45:43 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2011.02.18 14:46:05 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{F6B589EA-B1B6-41C0-ACAA-8E8A7CEB821F}
[2011.02.18 00:51:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Messenger Plus!
[2011.02.18 00:51:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Yuna Software
[2011.02.17 21:55:06 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{FC681D94-302A-49C0-9DA8-2893B7ABF708}
[2011.02.17 20:50:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[2011.02.17 11:04:58 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\Opera-Stile
[2011.02.17 10:26:00 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.02.17 10:26:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.02.17 04:59:33 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\RightClickFiles
[2011.02.17 03:40:03 | 000,039,424 | ---- | C] (NirSoft) -- C:\Windows\zipinst.exe
[2011.02.17 03:40:02 | 000,000,000 | -H-D | C] -- C:\Windows\PIF
[2011.02.17 01:47:39 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
[2011.02.16 22:02:29 | 002,851,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll.backup
[2011.02.16 22:02:27 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll.backup
[2011.02.16 20:24:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2011.02.16 20:24:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011.02.15 17:37:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Opera
[2011.02.14 20:34:38 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{5AD292C8-4418-4A94-BE69-45C3B2F03EE8}
[2011.02.14 02:33:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Stardock
[2011.02.14 02:19:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\{81CD4D13-C212-4D68-94F5-D7EE9A54EA90}
[2011.02.14 02:19:07 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\PackageAware
[2011.02.13 14:45:07 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Application Data
[2011.02.13 14:04:37 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{A201E3EB-85FF-4D0F-8480-C689FC1C3F34}
[2011.02.12 20:39:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{AFE409D1-E2CE-430B-B1A3-88678D11881D}
[2011.02.11 18:18:27 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\DVDVideoSoft
[2011.02.11 15:49:48 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{8FF469BD-C7E9-4A6D-B14B-2F7982AE33CE}
[2011.02.11 07:42:06 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_42.dll
[2011.02.11 01:05:30 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{83925C36-624D-48F8-BA99-EF6F07E7C60A}
[2011.02.10 23:25:16 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Paint.NET
[2011.02.10 09:35:27 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{779556B3-595A-44F5-B7BA-13E3BCE868FC}
[2011.02.10 00:18:26 | 000,599,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.02.10 00:18:23 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.02.10 00:18:22 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.02.10 00:18:22 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.02.10 00:18:22 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.02.10 00:18:22 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.02.10 00:18:21 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.02.10 00:18:21 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.02.10 00:18:21 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.02.10 00:18:21 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.02.10 00:18:20 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.02.10 00:18:20 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.02.10 00:08:37 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2011.02.10 00:08:37 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2011.02.10 00:08:35 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2011.02.10 00:08:35 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2011.02.10 00:08:34 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll
[2011.02.10 00:08:34 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2011.02.10 00:08:34 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2011.02.10 00:08:34 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2011.02.10 00:08:28 | 000,214,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2011.02.10 00:08:26 | 000,265,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011.02.10 00:08:26 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.02.10 00:08:21 | 000,852,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.02.10 00:08:20 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.02.10 00:08:20 | 000,612,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.02.10 00:08:16 | 005,510,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.02.10 00:08:15 | 001,739,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2011.02.10 00:08:13 | 003,901,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.02.10 00:08:12 | 003,957,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.02.10 00:08:08 | 000,366,080 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.02.10 00:08:08 | 000,294,400 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.02.10 00:08:07 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.02.10 00:08:06 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.02.09 12:43:18 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{AA517A09-F5FF-4564-AE14-F522EB68B540}
[2011.02.09 12:22:26 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{0D43F62E-D788-4A9F-87B9-8324425C79CA}
[2011.02.09 12:18:02 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{CEA96BAD-DD99-48E0-9448-B1D74C1CCFB6}
[2011.02.09 12:11:53 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{03BEE09E-874E-4F30-A72E-B0CA6732C2B3}
[2011.02.08 12:35:26 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{7DC86A8D-7ADF-4E45-96CE-D48B3F364E84}
[2011.02.07 11:11:40 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{6C03D3BD-0A4C-41AB-B1EF-F0A3F5FA9A8E}
[2011.02.06 12:49:40 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{CD52E6CC-8E13-494F-840F-A9AB92CB033E}
[2011.02.05 01:15:53 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{006257C3-D946-4EF9-AD29-BE00DB1DF14D}
[2011.02.04 13:15:26 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{80BD109F-0F76-4330-9271-01AF0B48DBED}
[2011.02.03 16:50:46 | 000,020,480 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\FsExService64.Exe
[2011.02.03 16:50:46 | 000,016,448 | ---- | C] (Teruten Inc) -- C:\Windows\SysWow64\drivers\TFsExDisk.Sys
[2011.02.03 12:53:02 | 000,015,872 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_wh.sys
[2011.02.03 12:53:02 | 000,015,360 | ---- | C] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_cm.sys
[2011.02.03 12:52:15 | 000,025,960 | ---- | C] (Teruten Inc) -- C:\Windows\SysNative\FsExService64.exe
[2011.02.03 12:52:10 | 004,659,712 | ---- | C] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2011.02.03 12:43:01 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Downloaded Installations
[2011.02.03 12:07:16 | 000,000,000 | ---D | C] -- C:\Programme\SAMSUNG
[2011.02.03 12:06:21 | 000,016,448 | ---- | C] (Teruten Inc) -- C:\Windows\SysNative\drivers\TFsExDisk.sys
[2011.02.03 12:03:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Samsung
[2011.02.03 05:07:37 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{C9CDFF65-DD17-4D6A-A311-B946D7AA59F6}
[2011.02.02 14:31:16 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll
[2011.02.02 12:49:24 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{7620C9A5-906D-4490-8843-842D35B8B09F}
[2011.02.01 09:41:22 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{07999950-A16F-4084-A489-02B0458C9B42}
[2011.01.31 18:24:56 | 000,307,200 | ---- | C] (FLV.com) -- C:\Windows\SysWow64\TubeFinder.exe
[2011.01.31 18:24:52 | 000,119,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6FR.DLL
[2011.01.31 18:24:52 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VB6STKIT.DLL
[2011.01.31 18:24:52 | 000,084,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PICCLP32.OCX
[2011.01.31 18:24:51 | 001,081,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscomctl.ocx
[2011.01.31 18:24:51 | 000,152,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\COMDLG32.OCX
[2011.01.31 18:24:51 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSCMCFR.DLL
[2011.01.31 18:24:51 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CMDLGFR.DLL
[2011.01.31 18:24:51 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PCCLPFR.DLL
[2011.01.31 14:28:30 | 000,000,000 | ---D | C] -- C:\Users\Christian S\dwhelper
[2011.01.31 12:08:34 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{69818540-A5F7-4D93-ABD2-2751C30ECECD}
[2011.01.30 12:48:04 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{12C253F7-D90B-45A7-A56C-CACD7B3ADE93}
[2011.01.29 22:33:05 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{C3DD5A20-40A9-46CB-8103-16A204165A47}
[2011.01.29 03:40:45 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{84DBDD3B-E90E-4352-BB05-80B740C0E4E5}
[2011.01.28 23:20:42 | 000,098,304 | ---- | C] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt.dll
[2011.01.28 10:38:48 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{596B9C21-B321-4322-8384-AF449E24868E}
[2011.01.27 21:19:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Outlook Tools
[2011.01.27 21:19:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Office
[2011.01.27 21:18:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache
[2011.01.27 16:49:08 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{42811846-110D-4B52-B36E-23C9286826AF}
[2011.01.27 02:54:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{87239C8D-A360-4E08-9FA3-544D713F9F94}
[2011.01.26 14:47:49 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{33CE7314-D182-4E7A-B56D-52ECE36BF71F}
[2011.01.26 13:29:40 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\Pferde
[2011.01.26 02:47:02 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{D6DDC807-6D4D-43BA-ABA1-123F7319D18D}
[2011.01.25 19:50:38 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Documents\DVDVideoSoft
[2011.01.25 18:25:19 | 000,157,472 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaws.exe
[2011.01.25 18:25:19 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\javaw.exe
[2011.01.25 18:25:19 | 000,145,184 | ---- | C] (Sun Microsystems, Inc.) -- C:\Windows\SysWow64\java.exe
[2011.01.25 10:41:33 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{7667BA81-5CFB-4AE3-A195-B0D4E18E444E}
[2011.01.25 00:38:25 | 000,000,000 | ---D | C] -- C:\Users\Christian S\.thumbnails
[2011.01.24 15:56:54 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{1E0AC658-2B35-49F8-927A-744A4056C6C1}
[2011.01.23 13:08:14 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{C3699FA6-7317-467D-97F5-30DC73606E2D}
[2011.01.23 01:07:48 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{D38DA6BB-9ECA-4755-8F54-D7A3E993B8E0}
[2011.01.23 01:07:48 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\{1C3BBA38-19ED-4C71-A7C9-E62B23A3AD2B}
[2011.01.23 01:07:28 | 000,000,000 | ---D | C] -- C:\Users\Christian S\Tracing
[2011.01.16 12:27:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.01.14 17:36:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam
[2011.01.14 16:03:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
[2011.01.14 16:01:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Electronic Arts
[2011.01.14 15:59:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Electronic Arts
[2011.01.14 15:37:26 | 002,430,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_41.dll
[2011.01.14 15:37:26 | 000,520,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_41.dll
[2011.01.14 15:37:24 | 005,425,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_41.dll
[2011.01.14 15:37:24 | 004,178,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_41.dll
[2011.01.14 15:37:23 | 000,521,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_4.dll
[2011.01.14 15:37:23 | 000,517,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_4.dll
[2011.01.14 15:37:23 | 000,235,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_4.dll
[2011.01.14 15:37:23 | 000,174,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_4.dll
[2011.01.14 15:37:23 | 000,073,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_3.dll
[2011.01.14 15:37:23 | 000,069,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_3.dll
[2011.01.14 15:37:22 | 000,024,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_6.dll
[2011.01.14 15:37:22 | 000,022,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_6.dll
[2011.01.14 15:37:21 | 002,605,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_40.dll
[2011.01.14 15:37:21 | 002,036,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_40.dll
[2011.01.14 15:37:21 | 000,519,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_40.dll
[2011.01.14 15:37:21 | 000,452,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_40.dll
[2011.01.14 15:37:20 | 005,631,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_40.dll
[2011.01.14 15:37:20 | 004,379,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_40.dll
[2011.01.14 15:37:19 | 000,518,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_3.dll
[2011.01.14 15:37:19 | 000,514,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_3.dll
[2011.01.14 15:37:19 | 000,235,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_3.dll
[2011.01.14 15:37:19 | 000,175,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_3.dll
[2011.01.14 15:37:19 | 000,074,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_2.dll
[2011.01.14 15:37:19 | 000,070,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_2.dll
[2011.01.14 15:37:17 | 000,025,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_5.dll
[2011.01.14 15:37:17 | 000,023,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_5.dll
[2011.01.14 15:37:14 | 000,513,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_2.dll
[2011.01.14 15:37:14 | 000,509,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_2.dll
[2011.01.14 15:37:14 | 000,072,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_1.dll
[2011.01.14 15:37:14 | 000,068,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_1.dll
[2011.01.14 15:37:11 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_2.dll
[2011.01.14 15:37:11 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_2.dll
[2011.01.14 15:37:09 | 001,942,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_39.dll
[2011.01.14 15:37:09 | 001,493,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_39.dll
[2011.01.14 15:37:09 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_39.dll
[2011.01.14 15:37:09 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_39.dll
[2011.01.14 15:37:05 | 004,992,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_39.dll
[2011.01.14 15:37:05 | 003,851,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_39.dll
[2011.01.14 15:37:03 | 000,511,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAudio2_1.dll
[2011.01.14 15:37:03 | 000,507,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAudio2_1.dll
[2011.01.14 15:37:03 | 000,068,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XAPOFX1_0.dll
[2011.01.14 15:37:03 | 000,065,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XAPOFX1_0.dll
[2011.01.14 15:37:02 | 000,238,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xactengine3_1.dll
[2011.01.14 15:37:02 | 000,177,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xactengine3_1.dll
[2011.01.14 15:37:01 | 000,028,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\X3DAudio1_4.dll
[2011.01.14 15:37:01 | 000,025,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\X3DAudio1_4.dll
[2011.01.14 15:36:58 | 001,941,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DCompiler_38.dll
[2011.01.14 15:36:58 | 001,491,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DCompiler_38.dll
[2011.01.14 15:36:58 | 000,540,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3dx10_38.dll
[2011.01.14 15:36:58 | 000,467,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx10_38.dll
[2011.01.14 15:36:55 | 004,991,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\D3DX9_38.dll
[2011.01.14 15:36:55 | 003,850,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\D3DX9_38.dll
[2011.01.14 15:12:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
[2011.01.14 14:57:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Valve
[2011.01.14 14:57:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Valve
[2011.01.13 18:17:07 | 001,837,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2011.01.13 18:17:07 | 001,540,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011.01.13 18:17:07 | 001,170,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10warp.dll
[2011.01.13 18:17:07 | 001,074,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll
[2011.01.13 18:17:07 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011.01.13 18:17:07 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll
[2011.01.13 18:17:06 | 001,863,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\explorerframe.dll.0.oldcpt
[2011.01.13 18:17:06 | 001,863,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\explorerframe.dll
[2011.01.13 18:17:06 | 001,495,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorerframe.dll
[2011.01.13 18:17:06 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2011.01.13 18:17:06 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2011.01.13 18:17:06 | 000,218,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1core.dll
[2011.01.13 18:17:05 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2011.01.13 18:17:05 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1.dll
[2011.01.13 18:17:05 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2011.01.13 18:16:57 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2011.01.13 18:16:57 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2010.12.26 12:54:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live
[2010.12.26 12:44:10 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\Windows Live
[2010.12.26 12:42:51 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2010.12.26 12:42:50 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2010.12.26 12:42:49 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2010.12.26 12:42:49 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2010.12.26 12:42:48 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2010.12.26 12:42:45 | 004,068,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2010.12.26 12:42:42 | 003,181,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2010.12.25 13:11:16 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Roaming\PC Suite
[2010.12.25 13:09:21 | 000,000,000 | ---D | C] -- C:\Programme\DIFX
[2010.12.25 13:06:34 | 000,000,000 | ---D | C] -- C:\ProgramData\NokiaInstallerCache
[2010.12.25 12:55:20 | 000,000,000 | ---D | C] -- C:\Users\Christian S\AppData\Local\ElevatedDiagnostics
[2010.12.15 19:10:57 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2010.12.15 19:10:57 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2010.12.15 19:10:57 | 000,496,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2010.12.15 19:10:57 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2010.12.15 19:10:57 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2010.12.15 19:10:57 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2010.12.15 19:10:57 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2010.12.15 19:10:57 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2010.12.15 19:10:36 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2010.12.15 19:10:36 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2010.12.15 19:09:42 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2010.12.15 19:09:31 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2010.12.15 19:09:31 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2009.12.08 23:22:08 | 001,982,464 | ---- | C] (Dell, Inc. ) -- C:\Users\Christian S\AppData\Roaming\DataSafeDotNet.exe

========== Files - Modified Within 90 Days ==========

[2011.02.28 03:28:41 | 000,001,113 | ---- | M] () -- C:\Users\Public\Desktop\TmNationsForever.lnk
[2011.02.28 03:21:00 | 000,001,142 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4028111442-2157058971-3987070049-1000UA1cbd15435f45b02.job
[2011.02.28 02:51:05 | 000,001,118 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2011.02.28 00:21:01 | 000,001,090 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4028111442-2157058971-3987070049-1000Core1cbd15435789982.job
[2011.02.27 17:51:01 | 000,001,114 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2011.02.27 15:55:58 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.02.27 15:55:58 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.02.27 15:48:40 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.02.27 15:48:36 | 2388,238,336 | -HS- | M] () -- C:\hiberfil.sys
[2011.02.26 23:01:11 | 000,021,504 | ---- | M] () -- C:\Users\Christian S\AppData\Local\WebpageIcons.db
[2011.02.23 18:22:47 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2011.02.23 16:04:21 | 000,040,648 | ---- | M] (AVAST Software) -- C:\Windows\avastSS.scr
[2011.02.23 16:04:17 | 000,190,016 | ---- | M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2011.02.23 16:04:07 | 000,238,968 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2011.02.23 15:57:04 | 000,280,408 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2011.02.23 15:57:01 | 000,505,176 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2011.02.23 15:55:53 | 000,053,592 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2011.02.23 15:55:13 | 000,031,064 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr.sys
[2011.02.23 15:55:05 | 000,064,344 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2011.02.23 15:54:58 | 000,022,360 | ---- | M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2011.02.22 23:21:43 | 000,020,245 | ---- | M] () -- C:\Users\Christian S\Documents\FlashBlockt (.css).js
[2011.02.22 23:16:32 | 000,020,245 | ---- | M] () -- C:\Users\Christian S\Documents\FlashBlock.js
[2011.02.22 09:05:27 | 000,002,440 | ---- | M] () -- C:\Users\Christian S\Desktop\Google Chrome.lnk
[2011.02.21 04:09:30 | 000,049,752 | ---- | M] (Sunbelt Software) -- C:\Windows\SysNative\drivers\SBREDrv.sys
[2011.02.21 02:15:00 | 000,001,893 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011.02.21 00:18:34 | 000,001,834 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2011.02.18 16:36:06 | 000,002,023 | ---- | M] () -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2011.02.17 10:06:39 | 000,039,424 | ---- | M] (NirSoft) -- C:\Windows\zipinst.exe
[2011.02.16 22:02:29 | 002,851,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2011.02.16 22:02:27 | 000,332,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\uxtheme.dll
[2011.02.15 05:36:21 | 000,001,302 | ---- | M] () -- C:\ProgramData\ss.ini
[2011.02.14 02:41:07 | 020,943,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imageres.dll
[2011.02.14 02:41:07 | 020,007,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\imageres.dll.0.oldcpt
[2011.02.11 15:15:54 | 000,000,849 | ---- | M] () -- C:\Users\Christian S\.recently-used.xbel
[2011.02.10 00:38:52 | 000,363,888 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.02.04 18:42:37 | 001,498,506 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.02.04 18:42:37 | 000,653,928 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.02.04 18:42:37 | 000,615,810 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.02.04 18:42:37 | 000,129,800 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.02.04 18:42:37 | 000,106,190 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.02.03 16:47:54 | 000,002,006 | ---- | M] () -- C:\aqua_bitmap.cpp
[2011.02.02 14:31:16 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msvcr71.dll
[2011.01.28 23:20:42 | 000,098,304 | ---- | M] (Sony DADC Austria AG.) -- C:\Windows\SysWow64\CmdLineExt.dll
[2011.01.26 07:53:10 | 000,265,088 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011.01.26 07:31:20 | 000,144,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.01.07 09:07:24 | 000,662,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.01.07 09:07:24 | 000,475,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011.01.07 09:06:50 | 000,046,080 | ---- | M] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.01.07 08:31:10 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011.01.07 08:31:10 | 000,288,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011.01.07 08:27:11 | 000,034,304 | ---- | M] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.01.07 06:49:20 | 000,366,080 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.01.07 06:33:11 | 000,294,400 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.01.05 22:23:38 | 000,025,960 | ---- | M] (Teruten Inc) -- C:\Windows\SysNative\FsExService64.exe
[2011.01.05 07:20:30 | 000,612,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.01.05 07:16:55 | 000,852,480 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.01.05 06:34:32 | 000,716,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.01.04 16:11:18 | 004,659,712 | ---- | M] (Dmitry Streblechenko) -- C:\Windows\SysWow64\Redemption.dll
[2011.01.04 16:10:56 | 000,143,360 | ---- | M] () -- C:\Windows\SysWow64\3DAudio.ax
[2010.12.25 13:14:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriv er_01_09_00.Wdf
[2010.12.25 13:13:56 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64 _01009.Wdf
[2010.12.21 07:16:27 | 000,062,976 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2010.12.21 07:16:16 | 000,214,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2010.12.21 07:15:55 | 000,264,192 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2010.12.21 07:15:31 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2010.12.21 07:10:22 | 000,100,864 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2010.12.21 06:55:02 | 000,015,872 | ---- | M] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_wh.sys
[2010.12.21 06:55:02 | 000,015,360 | ---- | M] (MCCI Corporation) -- C:\Windows\SysNative\drivers\ss_cm.sys
[2010.12.21 06:38:24 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2010.12.21 06:38:19 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2010.12.21 06:38:16 | 000,014,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2010.12.21 06:34:12 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll
[2010.12.20 18:09:00 | 000,038,224 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2010.12.20 18:08:40 | 000,024,152 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2010.12.18 07:12:18 | 000,097,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2010.12.18 07:12:14 | 000,703,488 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2010.12.18 07:11:41 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2010.12.18 07:11:16 | 000,256,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2010.12.18 07:08:11 | 000,012,288 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2010.12.18 06:30:10 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2010.12.18 06:30:07 | 000,599,040 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2010.12.18 06:29:40 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2010.12.18 06:29:18 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2010.12.18 06:26:52 | 000,012,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2010.12.18 05:55:03 | 000,482,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2010.12.18 05:20:55 | 000,386,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec

========== Files Created - No Company Name ==========

[2011.02.28 03:28:41 | 000,001,113 | ---- | C] () -- C:\Users\Public\Desktop\TmNationsForever.lnk
[2011.02.26 22:43:04 | 000,110,080 | ---- | C] () -- C:\Windows\SysWow64\advd.dll
[2011.02.26 22:43:04 | 000,023,040 | ---- | C] () -- C:\Windows\SysWow64\auth.dll
[2011.02.26 22:43:03 | 000,237,568 | ---- | C] () -- C:\Windows\SysWow64\lame_enc.dll
[2011.02.22 23:21:43 | 000,020,245 | ---- | C] () -- C:\Users\Christian S\Documents\FlashBlockt (.css).js
[2011.02.22 23:11:55 | 000,020,245 | ---- | C] () -- C:\Users\Christian S\Documents\FlashBlock.js
[2011.02.21 02:15:00 | 000,001,893 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2011.02.21 01:22:50 | 000,002,161 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox 4.0 Beta 11.lnk
[2011.02.21 00:19:03 | 000,002,440 | ---- | C] () -- C:\Users\Christian S\Desktop\Google Chrome.lnk
[2011.02.21 00:18:34 | 000,001,846 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[2011.02.21 00:18:34 | 000,001,834 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2011.02.21 00:16:32 | 000,001,142 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4028111442-2157058971-3987070049-1000UA1cbd15435f45b02.job
[2011.02.21 00:16:31 | 000,001,090 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4028111442-2157058971-3987070049-1000Core1cbd15435789982.job
[2011.02.18 16:36:06 | 000,002,023 | ---- | C] () -- C:\Users\Christian S\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dell Dock.lnk
[2011.02.16 20:24:51 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011.02.15 05:36:21 | 000,001,302 | ---- | C] () -- C:\ProgramData\ss.ini
[2011.02.14 02:33:07 | 000,053,552 | ---- | C] () -- C:\Windows\SysNative\wbload.dll
[2011.02.11 15:15:54 | 000,000,849 | ---- | C] () -- C:\Users\Christian S\.recently-used.xbel
[2011.02.03 12:03:28 | 000,002,006 | ---- | C] () -- C:\aqua_bitmap.cpp
[2011.01.31 18:24:52 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\PropertyGrid.ocx
[2011.01.31 18:24:52 | 000,208,500 | ---- | C] () -- C:\Windows\SysWow64\ReyXpBasics.tlb
[2011.01.31 18:24:51 | 000,024,576 | ---- | C] () -- C:\Windows\SysWow64\ControlSubX.ocx
[2011.01.04 16:10:56 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\3DAudio.ax
[2010.12.25 13:14:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_PCCSWpdDriv er_01_09_00.Wdf
[2010.12.25 13:13:56 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_ccdcmbx64 _01009.Wdf
[2010.09.22 04:25:46 | 000,000,017 | ---- | C] () -- C:\Users\Christian S\AppData\Local\resmon.resmoncfg
[2010.04.21 18:14:56 | 000,439,308 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng500.bin
[2010.04.21 18:14:54 | 000,982,240 | ---- | C] () -- C:\Windows\SysWow64\igkrng500.bin
[2010.04.21 18:14:54 | 000,092,356 | ---- | C] () -- C:\Windows\SysWow64\igfcg500m.bin
[2010.03.25 20:24:42 | 000,021,504 | ---- | C] () -- C:\Users\Christian S\AppData\Local\WebpageIcons.db
[2010.02.03 12:44:01 | 000,000,065 | ---- | C] () -- C:\Windows\wininit.ini
[2010.02.01 11:11:40 | 000,134,592 | ---- | C] () -- C:\Windows\SysWow64\igfcg500.bin
[2010.01.29 23:03:16 | 000,000,106 | ---- | C] () -- C:\Windows\Podcasts.INI
[2010.01.14 16:29:32 | 001,499,556 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2009.12.25 14:59:06 | 000,131,584 | ---- | C] () -- C:\Windows\SysWow64\SpoonUninstall.exe
[2009.12.24 19:24:16 | 000,000,026 | ---- | C] () -- C:\Windows\neosetup.INI
[2009.12.15 02:42:44 | 000,208,896 | ---- | C] () -- C:\Windows\SysWow64\iglhsip32.dll
[2009.12.15 02:42:44 | 000,143,360 | ---- | C] () -- C:\Windows\SysWow64\iglhcp32.dll
[2009.12.06 10:15:43 | 000,006,144 | ---- | C] () -- C:\Users\Christian S\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2009.11.25 13:40:50 | 000,085,504 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
[2009.10.06 08:16:00 | 000,819,200 | ---- | C] () -- C:\Windows\SysWow64\xvidcore.dll
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[2008.12.15 15:06:44 | 000,058,672 | ---- | C] () -- C:\Windows\SysWow64\wbload.dll

========== Alternate Data Streams ==========

@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:1CE11B51

< End of report >
         

--- --- ---