Miniaturansicht angehängter Grafiken

 

---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:20:34, on 08.09.2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
C:\Users\User\AppData\Local\Meebo\Meebo Notifier\MeeboNotifier.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
D:\Program Files (x86)\Winamp\winampa.exe
C:\Windows\V0330Mon.exe
D:\Program Files (x86)\CyberLink\PowerCinema\PCMAgent.exe
C:\Program Files (x86)\Everything\Everything.exe
D:\Program Files (x86)\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe
C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
D:\Program Files (x86)\CyberLink\PlayMovie\PMVService.exe
D:\Program Files (x86)\CyberLink\TV Enhance\TVEService.exe
C:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe
I:\HiJackThis.exe
C:\Windows\SysWOW64\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] "D:\Program Files (x86)\Winamp\winampa.exe"
O4 - HKLM\..\Run: [V0330Mon.exe] C:\Windows\V0330Mon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Everything] "C:\Program Files (x86)\Everything\Everything.exe" -startup
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [Standby] "c:\Program Files (x86)\Common Files\Corel\Standby\Standby.exe" -START
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [TrueImageMonitor.exe] C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
O4 - HKLM\..\Run: [PCMAgent] "D:\Program Files (x86)\CyberLink\PowerCinema\PCMAgent.exe"
O4 - HKLM\..\Run: [CLMLServer] "D:\Program Files (x86)\CyberLink\PowerCinema\Kernel\CLML\CLMLSvc.exe"
O4 - HKLM\..\Run: [PlayMovie] "D:\Program Files (x86)\CyberLink\PlayMovie\PMVService.exe"
O4 - HKLM\..\Run: [TVEService] "D:\Program Files (x86)\CyberLink\TV Enhance\TVEService.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RGSC] D:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
O4 - HKCU\..\Run: [Meebo Notifier] "C:\Users\User\AppData\Local\Meebo\Meebo Notifier\MeeboNotifier.exe" /startup
O4 - HKCU\..\Run: [Steam] "D:\Program Files (x86)\Steam\Steam.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST')
O4 - Startup: OggSync.lnk = C:\Program Files (x86)\ICOA Inc\OggSync for Outlook 4.28.3\OggSyncOutlook2010.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Unknown owner - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Acronis Nonstop Backup service (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Planer (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Dragon Age: Origins - Inhaltsupdater (DAUpdaterSvc) - BioWare - D:\Games\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: KMService - Unknown owner - C:\Windows\system32\srvany.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: OpenVPN Service (OpenVPNService) - Unknown owner - C:\Program Files (x86)\OpenVPN\bin\openvpnserv.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files (x86)\Cyberlink\Shared files\RichVideo.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe
O23 - Service: TVEnhance Background Capture Service (TBCS) (TVECapSvc) - Unknown owner - D:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVECapSvc.exe
O23 - Service: TVEnhance Task Scheduler (TTS)) (TVESched) - Unknown owner - D:\Program Files (x86)\CyberLink\TV Enhance\Kernel\TV\TVESched.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Virtual CD v9 Management Service (VC9SecS) - Unknown owner - C:\Program Files (x86)\Virtual CD v9\System\VC9SecS.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~2\COMMON~1\X10\Common\x10nets.exe

--
End of file - 11692 bytes

---

Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Datenbank Version: 4550 Windows 6.1.7600 Internet Explorer 8.0.7600.16385 05.09.2010 18:25:23 mbam-log-2010-09-05 (18-25-23).txt Art des Suchlaufs: Quick-Scan Durchsuchte Objekte: 133350 Laufzeit: 3 Minute(n), 12 Sekunde(n) Infizierte Speicherprozesse: 0 Infizierte Speichermodule: 0 Infizierte Registrierungsschlüssel: 0 Infizierte Registrierungswerte: 0 Infizierte Dateiobjekte der Registrierung: 1 Infizierte Verzeichnisse: 0 Infizierte Dateien: 0 Infizierte Speicherprozesse: (Keine bösartigen Objekte gefunden) Infizierte Speichermodule: (Keine bösartigen Objekte gefunden) Infizierte Registrierungsschlüssel: (Keine bösartigen Objekte gefunden) Infizierte Registrierungswerte: (Keine bösartigen Objekte gefunden) Infizierte Dateiobjekte der Registrierung: HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> Quarantined and deleted successfully. Infizierte Verzeichnisse: (Keine bösartigen Objekte gefunden) Infizierte Dateien: (Keine bösartigen Objekte gefunden)

OTL logfile created on: 05.09.2010 18:31:00 - Run 1 OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\Anton\Desktop\MFTools 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 70,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 232,88 Gb Total Space | 127,18 Gb Free Space | 54,61% Space Free | Partition Type: NTFS Drive D: | 66,60 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ANTON-PC Current User Name: Anton Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 90 Days Output = Standard Quick Scan ========== Processes (SafeList) ========== PRC - [2010.09.05 18:13:44 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Anton\Desktop\MFTools\OTL.exe PRC - [2010.09.02 18:32:26 | 002,065,760 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgtray.exe PRC - [2010.09.02 18:32:24 | 002,331,032 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgfws9.exe PRC - [2010.09.02 18:32:03 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgemc.exe PRC - [2010.09.02 18:32:03 | 000,723,296 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe PRC - [2010.09.02 18:32:02 | 000,842,592 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgam.exe PRC - [2010.09.02 18:32:01 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe PRC - [2010.09.02 18:31:49 | 000,596,560 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\Identity Protection\agent\bin\avgidsmonitor.exe PRC - [2010.09.02 18:31:48 | 005,897,808 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe PRC - [2010.09.01 08:39:18 | 001,164,584 | ---- | M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe PRC - [2010.08.13 12:58:56 | 000,144,672 | ---- | M] (Apple Inc.) -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe PRC - [2010.08.08 22:08:42 | 000,215,104 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrB.exe PRC - [2010.08.08 21:45:31 | 000,075,064 | ---- | M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2010.06.28 09:20:30 | 000,173,352 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe PRC - [2010.06.07 17:05:06 | 000,240,232 | ---- | M] (NVIDIA Corporation) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2010.01.21 22:08:28 | 000,117,800 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision\Bundle\OSDServer\RTSS.exe PRC - [2010.01.21 22:08:24 | 000,293,928 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision\EVGAPrecision.exe PRC - [2008.12.02 21:34:40 | 000,070,144 | ---- | M] (AlcaTech) -- C:\Windows\SysWOW64\mmrtkrnl.exe ========== Modules (SafeList) ========== MOD - [2010.09.05 18:13:44 | 000,574,976 | ---- | M] (OldTimer Tools) -- C:\Users\Anton\Desktop\MFTools\OTL.exe MOD - [2010.06.30 08:21:47 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Internet Explorer\ieproxy.dll MOD - [2009.11.07 03:57:14 | 000,053,248 | ---- | M] () -- C:\Program Files (x86)\EVGA Precision\Bundle\OSDServer\RTSSHooks.dll MOD - [2009.07.14 03:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rsaenh.dll MOD - [2009.07.14 03:16:18 | 001,011,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WindowsCodecs.dll MOD - [2009.07.14 03:16:16 | 000,348,160 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Common Files\microsoft shared\ink\tiptsf.dll MOD - [2009.07.14 03:16:16 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\thumbcache.dll MOD - [2009.07.14 03:16:15 | 000,363,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\StructuredQuery.dll MOD - [2009.07.14 03:16:15 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srvcli.dll MOD - [2009.07.14 03:16:15 | 000,027,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\slc.dll MOD - [2009.07.14 03:16:13 | 000,643,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\SearchFolder.dll MOD - [2009.07.14 03:16:13 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\RpcRtRemote.dll MOD - [2009.07.14 03:16:11 | 000,442,880 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntshrui.dll MOD - [2009.07.14 03:15:14 | 000,189,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\EhStorShell.dll MOD - [2009.07.14 03:15:07 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cscapi.dll MOD - [2009.07.14 03:14:52 | 000,309,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\actxprxy.dll MOD - [2009.07.14 03:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009.07.14 03:03:50 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrB.exe -- (PnkBstrB) SRV:64bit: - File not found [Auto | Running] -- C:\Windows\SysNative\PnkBstrA.exe -- (PnkBstrA) SRV:64bit: - [2010.08.26 14:40:32 | 000,036,160 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysNative\uxtuneup.dll -- (UxTuneUp) SRV:64bit: - [2010.07.29 22:27:24 | 002,287,488 | ---- | M] (Microsoft Corp.) [Auto | Running] -- C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE -- (wlidsvc) SRV - [2010.09.02 22:58:35 | 000,607,040 | ---- | M] (TuneUp Software) [On_Demand | Stopped] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag) SRV - [2010.09.02 18:32:24 | 002,331,032 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgfws9.exe -- (avgfws9) SRV - [2010.09.02 18:32:03 | 000,921,952 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgemc.exe -- (avg9emc) SRV - [2010.09.02 18:32:01 | 000,308,136 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe -- (avg9wd) SRV - [2010.09.02 18:31:48 | 005,897,808 | ---- | M] (AVG Technologies CZ, s.r.o.) [Auto | Running] -- C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Bin\AVGIDSAgent.exe -- (AVGIDSAgent) SRV - [2010.08.26 14:45:00 | 001,403,200 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe -- (TuneUp.UtilitiesSvc) SRV - [2010.08.26 14:40:24 | 000,030,016 | ---- | M] (TuneUp Software) [Auto | Running] -- C:\Windows\SysWOW64\uxtuneup.dll -- (UxTuneUp) SRV - [2010.08.13 12:58:56 | 000,144,672 | ---- | M] (Apple Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe -- (Apple Mobile Device) SRV - [2010.08.08 22:08:42 | 000,215,104 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrB.exe -- (PnkBstrB) SRV - [2010.08.08 21:45:31 | 000,075,064 | ---- | M] () [Auto | Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2010.07.03 18:31:06 | 000,395,048 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service) SRV - [2010.06.28 09:20:30 | 000,173,352 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe -- (TeamViewer5) SRV - [2010.06.07 17:05:06 | 000,240,232 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2010.03.30 11:16:14 | 001,823,112 | ---- | M] (LogMeIn Inc.) [Auto | Running] -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe -- (Hamachi2Svc) SRV - [2009.08.01 23:00:00 | 000,065,536 | ---- | M] (CodeGear) [Auto | Running] -- C:\Program Files (x86)\Embarcadero\RAD Studio\7.0\bin\BSQLServer.exe -- (BlackfishSQL) ========== Driver Services (SafeList) ========== DRV:64bit: - [2010.09.02 18:33:12 | 000,027,216 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AVGIDSwa.sys -- (AVGIDSErHrw7a) DRV:64bit: - [2010.09.02 18:33:11 | 000,056,008 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\avgrkx64.sys -- (AvgRkx64) DRV:64bit: - [2010.09.02 18:33:10 | 000,317,520 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgtdia.sys -- (AvgTdiA) DRV:64bit: - [2010.09.02 18:33:07 | 000,269,904 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgldx64.sys -- (AvgLdx64) DRV:64bit: - [2010.09.02 18:33:06 | 000,035,536 | ---- | M] (AVG Technologies CZ, s.r.o.) [File_System | System | Running] -- C:\Windows\SysNative\drivers\avgmfx64.sys -- (AvgMfx64) DRV:64bit: - [2010.09.02 18:31:42 | 000,029,976 | ---- | M] (AVG Technologies CZ, s.r.o.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\avgfwd6a.sys -- (Avgfwfd) DRV:64bit: - [2010.07.06 21:10:57 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2010.04.19 20:47:42 | 000,050,688 | ---- | M] (Apple, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\usbaapl64.sys -- (USBAAPL64) DRV:64bit: - [2010.02.03 15:56:56 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\hamachi.sys -- (hamachi) DRV:64bit: - [2009.07.14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2009.07.14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 22:38:56 | 000,000,308 | ---- | M] () [File_System | On_Demand | Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:64bit: - [2009.06.10 22:35:42 | 000,187,392 | ---- | M] (Realtek Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.18 13:17:08 | 000,034,152 | ---- | M] (GEAR Software Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV:64bit: - [2009.05.14 19:16:46 | 001,306,624 | ---- | M] (C-Media Electronics Inc) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\CM10664.sys -- (USBMULCD) DRV:64bit: - [2009.05.09 01:14:20 | 000,015,752 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nuidfltr.sys -- (NuidFltr) DRV:64bit: - [2005.03.29 01:30:38 | 000,008,192 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ASACPI.sys -- (MTsensor) DRV - [2010.09.02 18:31:50 | 000,132,688 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSDriver.sys -- (AVGIDSDriverw7a) DRV - [2010.09.02 18:31:49 | 000,035,920 | ---- | M] (AVG Technologies CZ, s.r.o. ) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\AVG\AVG9\Identity Protection\Agent\Driver\Platform_WIN764\AVGIDSFilter.sys -- (AVGIDSFilterw7a) DRV - [2010.02.24 14:41:50 | 000,011,856 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Running] -- C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesDriver64.sys -- (TuneUpUtilitiesDrv) DRV - [2010.01.21 22:08:22 | 000,014,376 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Program Files (x86)\EVGA Precision\RTCore64.sys -- (RTCore64) DRV - [2007.02.07 20:27:46 | 000,014,104 | ---- | M] (Windows (R) Server 2003 DDK provider) [Kernel | Boot | Running] -- C:\Windows\SysWOW64\speedfan.sys -- (speedfan) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = D2 7D 5A AA CA 1A CB 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local ========== FireFox ========== FF - prefs.js..browser.search.useDBForOrder: true FF - prefs.js..browser.startup.homepage: "www.google.de" FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2 FF - prefs.js..extensions.enabledItems: {3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}:2.2 FF - prefs.js..extensions.enabledItems: {3f963a5b-e555-4543-90e2-c3908898db71}:9.0.0.845 FF - prefs.js..extensions.enabledItems: {DDC359D1-844A-42a7-9AA1-88A850A938A8}:1.1.10 FF - prefs.js..extensions.enabledItems: nasanightlaunch@example.com:0.6.20100805 FF - prefs.js..extensions.enabledItems: fzamaan@gmail.com:1.25 FF - HKLM\software\mozilla\Firefox\Extensions\\{3252b9ae-c69a-4eaf-9502-dc9c1f6c009e}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DMExtension\ [2010.08.17 11:38:21 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Firefox\Extensions\\{3f963a5b-e555-4543-90e2-c3908898db71}: C:\Program Files (x86)\AVG\AVG9\Firefox [2010.09.02 18:31:41 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2010.09.05 11:03:30 | 000,000,000 | ---D | M] FF - HKLM\software\mozilla\Mozilla Firefox 3.6.8\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2010.09.05 11:03:30 | 000,000,000 | ---D | M] [2010.09.03 23:20:32 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\mozilla\Extensions [2010.09.05 11:13:10 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\mozilla\Firefox\Profiles\lak0e96z.default\extensions [2010.08.19 00:42:18 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Users\Anton\AppData\Roaming\mozilla\Firefox\Profiles\lak0e96z.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2010.09.04 15:47:17 | 000,000,000 | ---D | M] (DownThemAll!) -- C:\Users\Anton\AppData\Roaming\mozilla\Firefox\Profiles\lak0e96z.default\extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8} [2010.09.04 15:43:29 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\mozilla\Firefox\Profiles\lak0e96z.default\extensions\fzamaan@gmail.co m [2010.09.04 15:42:44 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\mozilla\Firefox\Profiles\lak0e96z.default\extensions\nasanightlaunch@ example.com [2010.08.30 14:58:06 | 000,001,574 | ---- | M] () -- C:\Users\Anton\AppData\Roaming\Mozilla\FireFox\Profiles\lak0e96z.default\searchplugins\bing.xml [2010.09.03 23:22:24 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\mozilla firefox\extensions [2010.07.23 02:48:56 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml [2010.07.23 02:48:56 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml [2010.07.23 02:48:56 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml [2010.07.23 02:48:56 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml [2010.07.23 02:48:56 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml O1 HOSTS File: ([2010.08.22 22:50:39 | 000,000,865 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 activation.guitar-pro.com O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.) O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.) O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.) O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O4:64bit: - HKLM..\Run: [Cm106Sound] C:\Windows\Syswow64\cm106.DLL (C-Media Corporation) O4 - HKLM..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [EVGAPrecision] C:\Program Files (x86)\EVGA Precision\EVGAPrecisionWrapper.exe () O4 - HKLM..\Run: [Microsoft Default Manager] C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Default Manager\DefMgr.exe (Microsoft Corporation) O4 - HKLM..\Run: [Realtime Audio Engine] C:\Windows\SysWow64\mmrtkrnl.exe (AlcaTech) O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) O4 - HKCU..\Run: [msnmsgr] C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation) O4 - HKCU..\Run: [Steam] c:\program files (x86)\steam\steam.exe (Valve Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O9 - Extra Button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation) O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000009 [] - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20) O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.) O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.) O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation) O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll (Microsoft Corporation) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation) O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O30:64bit: - LSA: Security Packages - (livessp) - C:\Windows\SysNative\livessp.dll (Microsoft Corp.) O30 - LSA: Security Packages - (livessp) - C:\Windows\SysWow64\livessp.dll (Microsoft Corp.) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2007.03.15 17:15:36 | 000,000,038 | R--- | M] () - D:\AUTORUN.INF -- [ CDFS ] O33 - MountPoints2\{c7b64b1f-86b4-11df-b84d-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{c7b64b1f-86b4-11df-b84d-806e6f6e6963}\Shell\AutoRun\command - "" = D:\Setup.exe -- [2009.07.21 10:25:07 | 000,930,472 | R--- | M] () O34 - HKLM BootExecute: (autocheck autochk *) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* NetSvcs:64bit: UxTuneUp - C:\Windows\SysNative\uxtuneup.dll (TuneUp Software) MsConfig:64bit - StartUpReg: DAEMON Tools Lite - hkey= - key= - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd) MsConfig:64bit - StartUpReg: LogMeIn Hamachi Ui - hkey= - key= - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.) MsConfig:64bit - StartUpReg: QuickTime Task - hkey= - key= - C:\Program Files (x86)\QuickTime\QTTask.exe (Apple Inc.) MsConfig:64bit - State: "startup" - Reg Error: Key error. Drivers32:64bit: aux - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: midi - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: midi1 - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: midi2 - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: midimapper - midimap.dll (Microsoft Corporation) Drivers32:64bit: mixer - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: mixer1 - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: mixer2 - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: msacm.imaadpcm - imaadp32.acm (Microsoft Corporation) Drivers32:64bit: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32:64bit: msacm.msadpcm - msadp32.acm (Microsoft Corporation) Drivers32:64bit: msacm.msg711 - msg711.acm (Microsoft Corporation) Drivers32:64bit: msacm.msgsm610 - msgsm32.acm (Microsoft Corporation) Drivers32:64bit: VIDC.FPS1 - frapsv64.dll (Beepa P/L) Drivers32:64bit: vidc.i420 - iyuv_32.dll (Microsoft Corporation) Drivers32:64bit: vidc.iyuv - iyuv_32.dll (Microsoft Corporation) Drivers32:64bit: vidc.mrle - msrle32.dll (Microsoft Corporation) Drivers32:64bit: vidc.msvc - msvidc32.dll (Microsoft Corporation) Drivers32:64bit: vidc.uyvy - msyuv.dll (Microsoft Corporation) Drivers32:64bit: vidc.yuy2 - msyuv.dll (Microsoft Corporation) Drivers32:64bit: vidc.yvu9 - tsbyuv.dll (Microsoft Corporation) Drivers32:64bit: vidc.yvyu - msyuv.dll (Microsoft Corporation) Drivers32:64bit: wave - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: wave1 - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: wave2 - wdmaud.drv (Microsoft Corporation) Drivers32:64bit: wavemapper - msacm32.drv (Microsoft Corporation) Drivers32: aux - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: midi - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: midi1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: midi2 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: midimapper - C:\Windows\SysWow64\midimap.dll (Microsoft Corporation) Drivers32: mixer - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: mixer1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: mixer2 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: msacm.imaadpcm - C:\Windows\SysWow64\imaadp32.acm (Microsoft Corporation) Drivers32: msacm.l3acm - C:\Windows\SysWOW64\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS) Drivers32: msacm.msadpcm - C:\Windows\SysWow64\msadp32.acm (Microsoft Corporation) Drivers32: msacm.msg711 - C:\Windows\SysWow64\msg711.acm (Microsoft Corporation) Drivers32: msacm.msgsm610 - C:\Windows\SysWow64\msgsm32.acm (Microsoft Corporation) Drivers32: msacm.siren - C:\Windows\SysWow64\sirenacm.dll (Microsoft Corporation) Drivers32: msacm.vorbis - C:\Windows\SysWow64\vorbis.acm (HMS hxxp://hp.vector.co.jp/authors/VA012897/) Drivers32: vidc.cvid - C:\Windows\SysWow64\iccvid.dll (Radius Inc.) Drivers32: vidc.DIVX - C:\Windows\SysWow64\DivX.dll (DivX, Inc.) Drivers32: VIDC.FPS1 - C:\Windows\SysWow64\frapsvid.dll (Beepa P/L) Drivers32: vidc.i420 - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation) Drivers32: vidc.iyuv - C:\Windows\SysWow64\iyuv_32.dll (Microsoft Corporation) Drivers32: vidc.mrle - C:\Windows\SysWow64\msrle32.dll (Microsoft Corporation) Drivers32: vidc.msvc - C:\Windows\SysWow64\msvidc32.dll (Microsoft Corporation) Drivers32: vidc.uyvy - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation) Drivers32: vidc.yuy2 - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation) Drivers32: vidc.yv12 - C:\Windows\SysWow64\DivX.dll (DivX, Inc.) Drivers32: vidc.yvu9 - C:\Windows\SysWow64\tsbyuv.dll (Microsoft Corporation) Drivers32: vidc.yvyu - C:\Windows\SysWow64\msyuv.dll (Microsoft Corporation) Drivers32: wave - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: wave1 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: wave2 - C:\Windows\SysWow64\wdmaud.drv (Microsoft Corporation) Drivers32: wavemapper - C:\Windows\SysWow64\msacm32.drv (Microsoft Corporation) CREATERESTOREPOINT Restore point Set: OTL Restore Point ========== Files/Folders - Created Within 90 Days ========== [2010.09.05 18:20:16 | 000,000,000 | ---D | C] -- C:\Windows\ERDNT [2010.09.05 18:19:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ERUNT [2010.09.05 18:14:33 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Malwarebytes [2010.09.05 18:14:24 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys [2010.09.05 18:14:23 | 000,024,664 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys [2010.09.05 18:14:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware [2010.09.05 18:14:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes [2010.09.05 18:14:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip [2010.09.05 18:13:08 | 000,000,000 | ---D | C] -- C:\Users\Anton\Desktop\MFTools [2010.09.05 15:05:09 | 000,000,000 | ---D | C] -- C:\Windows\de [2010.09.05 14:57:05 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live [2010.09.05 11:04:25 | 000,000,000 | ---D | C] -- C:\Programme\iTunes [2010.09.05 11:04:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunes [2010.09.05 11:04:25 | 000,000,000 | ---D | C] -- C:\Programme\iPod [2010.09.05 11:03:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2010.09.04 21:06:52 | 000,000,000 | R-SD | C] -- C:\Users\Anton\Documents\My Stationery [2010.09.04 19:59:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft SQL Server Compact Edition [2010.09.04 19:58:14 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH [2010.09.04 08:56:14 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\vlc [2010.09.03 23:22:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2010.09.02 21:23:32 | 000,000,000 | -H-D | C] -- C:\$AVG [2010.09.02 18:33:12 | 000,027,216 | ---- | C] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\SysNative\drivers\AVGIDSwa.sys [2010.09.02 18:33:12 | 000,013,048 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgrssta.dll [2010.09.02 18:33:11 | 000,056,008 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgrkx64.sys [2010.09.02 18:33:10 | 000,317,520 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys [2010.09.02 18:33:07 | 000,269,904 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys [2010.09.02 18:33:05 | 000,035,536 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys [2010.09.02 18:33:05 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\drivers\Avg [2010.09.02 18:31:42 | 000,029,976 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgfwd6a.sys [2010.09.02 18:30:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVG [2010.09.02 18:30:29 | 000,000,000 | ---D | C] -- C:\ProgramData\avg9 [2010.08.31 17:01:42 | 000,000,000 | ---D | C] -- C:\Users\Anton\Desktop\iPod Photo Cache [2010.08.28 07:22:58 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\2K Games [2010.08.25 21:24:09 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\76561198015317694 [2010.08.22 23:14:04 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\aicon [2010.08.22 22:49:42 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Guitar Pro 6 [2010.08.20 20:04:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Guitar Pro 6 [2010.08.20 20:01:05 | 000,000,000 | ---D | C] -- C:\ProgramData\KLC [2010.08.20 19:39:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Guitar Pro 6 [2010.08.18 20:17:03 | 000,000,000 | -H-D | C] -- C:\ProgramData\{CB052CFF-327B-4C15-93F6-9526BA789D9F} [2010.08.18 20:14:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DAEMON Tools Lite [2010.08.17 23:12:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield [2010.08.17 14:37:36 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\My Weblog Posts [2010.08.17 14:37:35 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Windows Live Writer [2010.08.17 14:37:35 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Windows Live Writer [2010.08.17 14:32:55 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\My Received Files [2010.08.17 12:35:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSECache [2010.08.17 11:39:21 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Silverlight [2010.08.17 11:35:23 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Windows Live [2010.08.15 19:45:45 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\EA Games [2010.08.13 17:01:18 | 000,000,000 | -H-D | C] -- C:\ProgramData\{E160FB76-707C-491F-B8A0-C3220F6D3C1C} [2010.08.13 17:00:37 | 000,000,000 | -H-D | C] -- C:\ProgramData\{55368B49-3888-4F1E-8356-388D0A20BF77} [2010.08.13 16:58:48 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Embarcadero [2010.08.13 16:58:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\CodeGear Shared [2010.08.13 16:53:51 | 000,000,000 | -H-D | C] -- C:\ProgramData\{BBD31133-40F8-4B57-9BA6-DB76C03D153B} [2010.08.12 23:23:10 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\2K Games [2010.08.12 14:32:41 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\JDownloader [2010.08.09 21:57:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\{2D559015-4C05-4AE5-8C8B-7E13E1EAB09D} [2010.08.09 07:42:38 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\storage [2010.08.09 02:10:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LucasArts [2010.08.08 22:34:27 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\My Games [2010.08.08 21:45:20 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\PunkBuster [2010.08.08 17:47:18 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\StarCraft II [2010.08.08 17:47:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Blizzard Entertainment [2010.08.08 17:47:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Blizzard Entertainment [2010.08.08 02:16:56 | 000,253,952 | ---- | C] (Flo) -- C:\Users\Anton\Desktop\Vista-ShutdownTimer.exe [2010.08.08 01:04:02 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Xilisoft [2010.08.08 01:03:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Xilisoft [2010.08.04 23:04:04 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe [2010.08.04 23:04:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe [2010.08.04 23:04:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe [2010.08.04 23:03:18 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Adobe [2010.08.04 01:00:20 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\4A Games [2010.08.04 00:47:51 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\METRO 2033 [2010.08.01 20:01:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Hobbyist Software [2010.07.31 21:07:36 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\4A Games [2010.07.31 21:04:12 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\bizarre creations [2010.07.14 23:45:44 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\SEGA Corporation [2010.07.14 23:45:36 | 000,000,000 | ---D | C] -- C:\ProgramData\SEGA Corporation [2010.07.13 17:49:58 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\NFS Most Wanted [2010.07.13 13:05:26 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Square Enix [2010.07.12 14:26:15 | 000,000,000 | ---D | C] -- C:\ProgramData\Futuremark [2010.07.12 14:19:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Wise Installation Wizard [2010.07.12 10:47:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iTunesControl [2010.07.12 10:47:25 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\iTunesControl [2010.07.11 18:51:59 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Downloads [2010.07.11 18:51:57 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\DMCache [2010.07.11 18:46:03 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\gtk-2.0 [2010.07.11 14:00:16 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Activision [2010.07.09 20:36:33 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Ubisoft [2010.07.09 11:38:36 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Tific [2010.07.09 11:38:33 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Symantec [2010.07.09 10:54:11 | 000,000,000 | ---D | C] -- C:\ProgramData\explauncher [2010.07.09 10:54:08 | 000,000,000 | ---D | C] -- C:\ProgramData\launcher [2010.07.09 10:38:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VideoLAN [2010.07.09 10:35:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Paragon Software [2010.07.09 01:34:13 | 000,000,000 | ---D | C] -- C:\ProgramData\TrackMania [2010.07.09 01:34:04 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\TrackMania [2010.07.08 23:44:47 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\NVIDIA [2010.07.08 23:33:51 | 000,000,000 | ---D | C] -- C:\Users\Anton\Gitarre [2010.07.08 20:07:56 | 000,000,000 | ---D | C] -- C:\Windows\Sun [2010.07.08 12:08:59 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\DivX [2010.07.08 12:08:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\PX Storage Engine [2010.07.08 12:08:38 | 000,000,000 | ---D | C] -- C:\Programme\DivX [2010.07.08 12:08:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DivX Shared [2010.07.08 12:05:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DivX [2010.07.08 12:05:19 | 000,000,000 | ---D | C] -- C:\ProgramData\DivX [2010.07.07 23:21:45 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SpeedFan [2010.07.07 22:53:53 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA [2010.07.07 22:52:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation [2010.07.07 22:52:16 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation [2010.07.07 22:52:09 | 000,000,000 | ---D | C] -- C:\Programme\NVIDIA Corporation [2010.07.07 22:51:17 | 000,065,128 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2010.07.07 22:51:17 | 000,056,936 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2010.07.07 22:51:08 | 000,000,000 | ---D | C] -- C:\NVIDIA [2010.07.07 22:36:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\EVGA Precision [2010.07.07 16:05:36 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Mozilla [2010.07.07 16:05:36 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Mozilla [2010.07.07 13:23:42 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\TeamViewer [2010.07.07 13:23:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer [2010.07.06 22:35:08 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Ubisoft [2010.07.06 22:35:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Ubisoft [2010.07.06 22:18:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ubisoft [2010.07.06 22:18:20 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information [2010.07.06 21:25:52 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Microsoft Games [2010.07.06 21:10:25 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\DAEMON Tools Lite [2010.07.06 21:10:23 | 000,000,000 | ---D | C] -- C:\ProgramData\DAEMON Tools Lite [2010.07.06 20:55:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Sun [2010.07.06 20:55:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java [2010.07.06 20:55:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Java [2010.07.06 17:21:50 | 000,000,000 | ---D | C] -- C:\Fraps [2010.07.06 16:58:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\HTML Help Workshop [2010.07.06 16:49:52 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Visual Studio 2008 [2010.07.06 16:49:51 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Microsoft Help [2010.07.06 16:49:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help [2010.07.06 12:56:48 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\LogMeIn Hamachi [2010.07.06 12:56:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LogMeIn Hamachi [2010.07.06 12:53:21 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Ascaron Entertainment [2010.07.06 12:53:12 | 000,000,000 | RH-D | C] -- C:\Users\Anton\AppData\Roaming\SecuROM [2010.07.05 17:19:01 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\PokerStars.NET [2010.07.05 17:17:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\PokerStars.NET [2010.07.04 17:46:46 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Meine empfangenen Dateien [2010.07.04 17:29:34 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Verlauf [2010.07.04 13:14:56 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\CrashDumps [2010.07.04 12:15:50 | 000,000,000 | -H-D | C] -- C:\ProgramData\~2 [2010.07.04 11:39:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\~1 [2010.07.04 11:32:01 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\RAD Studio [2010.07.04 11:05:50 | 000,000,000 | -H-D | C] -- C:\ProgramData\{6A883631-DE6E-4096-9348-4D606A536BCB} [2010.07.04 11:05:27 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\CodeGear [2010.07.04 11:03:32 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\DBPack_Rad_Studio_2010_UP5_Downloads [2010.07.04 11:03:29 | 000,000,000 | -H-D | C] -- C:\ProgramData\{2563F97A-045F-4E4C-9DB1-D5D26C269882} [2010.07.04 11:01:25 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\RAD Studio [2010.07.04 11:01:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Embarcadero [2010.07.04 11:01:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Embarcadero [2010.07.04 11:01:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Borland Shared [2010.07.04 10:25:25 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Rad_Studio_2010_UP4_Downloads [2010.07.04 10:25:10 | 000,000,000 | -H-D | C] -- C:\ProgramData\~0 [2010.07.04 09:25:17 | 000,034,624 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe [2010.07.04 09:25:14 | 000,036,160 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll [2010.07.04 09:25:14 | 000,030,016 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll [2010.07.04 09:25:14 | 000,025,920 | ---- | C] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll [2010.07.04 09:25:13 | 000,021,312 | ---- | C] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll [2010.07.04 09:24:54 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\TuneUp Software [2010.07.04 09:24:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TuneUp Utilities 2010 [2010.07.04 09:24:26 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software [2010.07.04 09:24:23 | 000,000,000 | -HSD | C] -- C:\ProgramData\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC} [2010.07.03 23:18:49 | 000,225,280 | ---- | C] (Propellerhead Software AB) -- C:\Windows\SysWow64\rewire.dll [2010.07.03 23:18:45 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Image-Line [2010.07.03 23:18:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VstPlugins [2010.07.03 23:18:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Outsim [2010.07.03 23:17:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Image-Line [2010.07.03 22:44:29 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Diagnostics [2010.07.03 22:32:34 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\AlcaTech [2010.07.03 22:32:12 | 000,000,000 | ---D | C] -- C:\ProgramData\AlcaTech [2010.07.03 22:13:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Symantec Shared [2010.07.03 22:01:41 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Macromedia [2010.07.03 22:01:41 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Adobe [2010.07.03 21:59:40 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed [2010.07.03 20:42:13 | 000,000,000 | ---D | C] -- C:\Users\Anton\Documents\Spiele [2010.07.03 20:42:11 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Gas Powered Games [2010.07.03 20:20:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Supreme Commander 2 [2010.07.03 20:10:15 | 000,466,456 | ---- | C] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2010.07.03 20:10:15 | 000,444,952 | ---- | C] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2010.07.03 20:10:15 | 000,122,904 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2010.07.03 20:10:15 | 000,109,080 | ---- | C] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2010.07.03 20:10:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenAL [2010.07.03 20:08:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Norton [2010.07.03 20:08:34 | 000,000,000 | ---D | C] -- C:\ProgramData\NortonInstaller [2010.07.03 19:52:54 | 000,000,000 | ---D | C] -- C:\ProgramData\Messenger Plus! [2010.07.03 19:27:19 | 000,360,580 | ---- | C] (eSellerate Inc.) -- C:\Windows\eSellerateEngine.dll [2010.07.03 19:27:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Album Cover Finder [2010.07.03 19:20:01 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\DRVSTORE [2010.07.03 19:19:54 | 000,000,000 | ---D | C] -- C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001} [2010.07.03 19:19:23 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2010.07.03 19:19:15 | 000,000,000 | ---D | C] -- C:\Programme\Common Files\Apple [2010.07.03 19:19:10 | 000,000,000 | ---D | C] -- C:\Programme\Bonjour [2010.07.03 19:19:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bonjour [2010.07.03 19:18:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Messenger Plus! Live [2010.07.03 19:09:29 | 000,000,000 | ---D | C] -- C:\Users\Anton\Tracing [2010.07.03 19:05:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft [2010.07.03 19:05:09 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft [2010.07.03 19:04:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live [2010.07.03 18:45:59 | 008,126,464 | R--- | C] (C-Media Corporation) -- C:\Windows\SysWow64\CM106.dll [2010.07.03 18:45:58 | 000,200,704 | R--- | C] (C-Media) -- C:\Windows\SysWow64\cmpa106.dll [2010.07.03 18:45:41 | 001,306,624 | ---- | C] (C-Media Electronics Inc) -- C:\Windows\SysNative\drivers\CM10664.sys [2010.07.03 18:45:41 | 000,315,392 | ---- | C] (C-Media Electronics Inc.) -- C:\Windows\System\fltr106.dll [2010.07.03 18:44:37 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\skypePM [2010.07.03 18:44:02 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Skype [2010.07.03 18:41:13 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype [2010.07.03 18:41:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype [2010.07.03 18:41:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype [2010.07.03 18:37:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Windows Live [2010.07.03 18:28:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Steam [2010.07.03 18:28:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Steam [2010.07.03 18:19:20 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Apple Computer [2010.07.03 18:19:20 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Apple Computer [2010.07.03 18:19:14 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2010.07.03 18:18:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2010.07.03 18:18:51 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Apple [2010.07.03 18:18:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2010.07.03 18:17:42 | 000,000,000 | -HSD | C] -- C:\Windows\Installer [2010.07.03 18:08:14 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\WinRAR [2010.07.03 18:08:00 | 000,000,000 | ---D | C] -- C:\Programme\WinRAR [2010.07.03 18:07:10 | 000,000,000 | ---D | C] -- C:\Windows\Panther [2010.07.03 18:06:57 | 000,000,000 | -HSD | C] -- C:\Boot [2010.07.03 18:02:59 | 000,000,000 | R--D | C] -- C:\Users\Anton\Searches [2010.07.03 18:02:53 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Identities [2010.07.03 18:02:51 | 000,000,000 | R--D | C] -- C:\Users\Anton\Contacts [2010.07.03 18:02:51 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\VirtualStore [2010.07.03 18:02:45 | 000,000,000 | --SD | C] -- C:\Users\Anton\AppData\Roaming\Microsoft [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Videos [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Saved Games [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Pictures [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Music [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Links [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Favorites [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Downloads [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Documents [2010.07.03 18:02:45 | 000,000,000 | R--D | C] -- C:\Users\Anton\Desktop [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Vorlagen [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\AppData\Local\Verlauf [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\AppData\Local\Temporary Internet Files [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Startmenü [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\SendTo [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Recent [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Netzwerkumgebung [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Lokale Einstellungen [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Documents\Eigene Videos [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Documents\Eigene Musik [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Eigene Dateien [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Documents\Eigene Bilder [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Druckumgebung [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Cookies [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\AppData\Local\Anwendungsdaten [2010.07.03 18:02:45 | 000,000,000 | -HSD | C] -- C:\Users\Anton\Anwendungsdaten [2010.07.03 18:02:45 | 000,000,000 | -H-D | C] -- C:\Users\Anton\AppData [2010.07.03 18:02:45 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Temp [2010.07.03 18:02:45 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Local\Microsoft [2010.07.03 18:02:45 | 000,000,000 | ---D | C] -- C:\Users\Anton\AppData\Roaming\Media Center Programs [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\Recovery [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\Programme [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\Programme\Gemeinsame Dateien [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente [2010.07.03 18:02:34 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten [2010.07.03 17:10:51 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution [2010.07.03 17:08:29 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch [2010.07.03 17:08:08 | 000,000,000 | -HSD | C] -- C:\System Volume Information ========== Files - Modified Within 90 Days ========== [2010.09.05 18:33:05 | 006,291,456 | -HS- | M] () -- C:\Users\Anton\ntuser.dat [2010.09.05 18:26:49 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT [2010.09.05 18:26:45 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2010.09.05 18:26:42 | 3220,529,152 | -HS- | M] () -- C:\hiberfil.sys [2010.09.05 18:25:41 | 004,429,962 | -H-- | M] () -- C:\Users\Anton\AppData\Local\IconCache.db [2010.09.05 18:24:43 | 000,019,312 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2010.09.05 18:24:43 | 000,019,312 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2010.09.05 18:19:43 | 000,000,978 | ---- | M] () -- C:\Users\Anton\Desktop\NTREGOPT.lnk [2010.09.05 18:19:43 | 000,000,959 | ---- | M] () -- C:\Users\Anton\Desktop\ERUNT.lnk [2010.09.05 18:14:26 | 000,001,063 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.09.05 18:08:18 | 000,388,197 | ---- | M] () -- C:\Users\Anton\Desktop\Load.exe [2010.09.05 14:17:33 | 064,339,327 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm [2010.09.05 11:04:35 | 000,002,429 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.09.04 17:42:28 | 000,000,020 | ---- | M] () -- C:\Windows\TùÍ [2010.09.03 23:22:21 | 000,001,993 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010.09.03 22:58:30 | 000,001,120 | ---- | M] () -- C:\Users\Public\Desktop\VLC media player.lnk [2010.09.02 22:58:35 | 000,002,261 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2010.09.02 22:58:35 | 000,002,219 | ---- | M] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk [2010.09.02 18:33:13 | 000,013,048 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\avgrssta.dll [2010.09.02 18:33:13 | 000,001,908 | ---- | M] () -- C:\Users\Public\Desktop\AVG 9.0.lnk [2010.09.02 18:33:12 | 000,027,216 | ---- | M] (AVG Technologies CZ, s.r.o. ) -- C:\Windows\SysNative\drivers\AVGIDSwa.sys [2010.09.02 18:33:11 | 000,056,008 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgrkx64.sys [2010.09.02 18:33:10 | 000,317,520 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgtdia.sys [2010.09.02 18:33:07 | 000,269,904 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgldx64.sys [2010.09.02 18:33:06 | 000,035,536 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgmfx64.sys [2010.09.02 18:33:05 | 000,616,965 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\iavifw.avm [2010.09.02 18:33:05 | 000,113,461 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\iavichjw.avm [2010.09.02 18:31:42 | 000,029,976 | ---- | M] (AVG Technologies CZ, s.r.o.) -- C:\Windows\SysNative\drivers\avgfwd6a.sys [2010.08.30 19:15:56 | 000,001,531 | ---- | M] () -- C:\Users\Anton\Desktop\iwbtgbeta(slomo).exe.lnk [2010.08.28 07:47:00 | 000,001,192 | ---- | M] () -- C:\Users\Anton\Desktop\Mafia II.lnk [2010.08.26 14:45:36 | 000,034,624 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\TURegOpt.exe [2010.08.26 14:40:38 | 000,025,920 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\authuitu.dll [2010.08.26 14:40:34 | 000,021,312 | ---- | M] (TuneUp Software) -- C:\Windows\SysWow64\authuitu.dll [2010.08.26 14:40:32 | 000,036,160 | ---- | M] (TuneUp Software) -- C:\Windows\SysNative\uxtuneup.dll [2010.08.26 14:40:24 | 000,030,016 | ---- | M] (TuneUp Software) -- C:\Windows\SysWow64\uxtuneup.dll [2010.08.25 21:23:54 | 000,466,456 | ---- | M] (Creative Labs) -- C:\Windows\SysNative\wrap_oal.dll [2010.08.25 21:23:54 | 000,444,952 | ---- | M] (Creative Labs) -- C:\Windows\SysWow64\wrap_oal.dll [2010.08.25 21:23:54 | 000,122,904 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysNative\OpenAL32.dll [2010.08.25 21:23:54 | 000,109,080 | ---- | M] (Portions (C) Creative Labs Inc. and NVIDIA Corp.) -- C:\Windows\SysWow64\OpenAL32.dll [2010.08.25 17:16:34 | 000,000,857 | ---- | M] () -- C:\Windows\Cm106.ini.imi [2010.08.23 15:21:40 | 000,000,748 | ---- | M] () -- C:\Windows\Cm106.ini.cfl [2010.08.23 15:21:30 | 000,000,133 | ---- | M] () -- C:\Windows\System\Dlap.pfx [2010.08.23 15:21:20 | 000,000,693 | ---- | M] () -- C:\Windows\System\Cm106.ini [2010.08.20 21:11:24 | 000,001,022 | ---- | M] () -- C:\Users\Public\Desktop\Guitar Pro 6.lnk [2010.08.15 19:29:45 | 000,001,770 | ---- | M] () -- C:\Users\Public\Desktop\Mirror's Edge™.lnk [2010.08.13 17:11:46 | 000,001,276 | ---- | M] () -- C:\Users\Anton\Desktop\Delphi 2010.lnk [2010.08.13 15:21:00 | 000,088,664 | -H-- | M] () -- C:\Windows\SysWow64\mlfcache.dat [2010.08.12 14:33:02 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\JDownloader.lnk [2010.08.11 13:01:44 | 000,266,992 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2010.08.08 22:08:42 | 000,215,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2010.08.08 22:08:42 | 000,215,104 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010.08.08 21:45:31 | 000,075,064 | ---- | M] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010.08.08 02:16:58 | 000,253,952 | ---- | M] (Flo) -- C:\Users\Anton\Desktop\Vista-ShutdownTimer.exe [2010.08.08 01:03:31 | 000,002,196 | ---- | M] () -- C:\Users\Public\Desktop\Xilisoft Video Converter Ultimate 6.lnk [2010.08.04 23:04:17 | 000,002,014 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2010.08.04 00:48:28 | 001,472,002 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2010.08.04 00:48:28 | 000,643,628 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat [2010.08.04 00:48:28 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat [2010.08.04 00:48:28 | 000,126,188 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat [2010.08.04 00:48:28 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat [2010.07.31 11:52:52 | 000,000,219 | ---- | M] () -- C:\Users\Anton\Desktop\Alien Swarm.url [2010.07.09 11:48:41 | 000,524,288 | -HS- | M] () -- C:\Users\Anton\ntuser.dat{9c46dda7-8b3d-11df-904b-002215bf886f}.TMContainer00000000000000000002.regtrans-ms [2010.07.09 11:48:41 | 000,524,288 | -HS- | M] () -- C:\Users\Anton\ntuser.dat{9c46dda7-8b3d-11df-904b-002215bf886f}.TMContainer00000000000000000001.regtrans-ms [2010.07.09 11:48:41 | 000,065,536 | -HS- | M] () -- C:\Users\Anton\ntuser.dat{9c46dda7-8b3d-11df-904b-002215bf886f}.TM.blf [2010.07.08 11:32:48 | 000,000,056 | -H-- | M] () -- C:\Windows\SysWow64\ezsidmv.dat [2010.07.07 23:21:45 | 000,000,045 | ---- | M] () -- C:\Windows\SysWow64\initdebug.nfo [2010.07.07 23:21:44 | 000,000,000 | ---- | M] () -- C:\Windows\initdebug.nfo [2010.07.07 13:23:32 | 000,001,162 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 5.lnk [2010.07.06 21:10:57 | 000,834,544 | ---- | M] () -- C:\Windows\SysNative\drivers\sptd.sys [2010.07.06 17:21:51 | 000,000,562 | ---- | M] () -- C:\Users\Anton\Desktop\Fraps.lnk [2010.07.04 10:07:49 | 000,057,960 | ---- | M] () -- C:\Users\Anton\AppData\Local\GDIPFONTCACHEV1.DAT [2010.07.03 23:34:52 | 000,000,221 | ---- | M] () -- C:\Users\Anton\Desktop\Call of Duty Modern Warfare 2.url [2010.07.03 23:34:52 | 000,000,221 | ---- | M] () -- C:\Users\Anton\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.url [2010.07.03 19:27:20 | 000,001,043 | ---- | M] () -- C:\Users\Anton\Desktop\Album Cover Finder.lnk [2010.07.03 19:05:38 | 000,000,020 | ---- | M] () -- C:\Windows\xöÇ [2010.07.03 18:41:14 | 000,002,517 | ---- | M] () -- C:\Users\Public\Desktop\Skype.lnk [2010.07.03 18:32:03 | 000,000,917 | ---- | M] () -- C:\Users\Public\Desktop\Steam.lnk [2010.07.03 18:26:08 | 000,033,134 | ---- | M] () -- C:\Users\Anton\AppData\Roaming\UserTile.png [2010.07.03 18:10:21 | 000,524,288 | -HS- | M] () -- C:\Users\Anton\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010.07.03 18:10:21 | 000,524,288 | -HS- | M] () -- C:\Users\Anton\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010.07.03 18:10:21 | 000,065,536 | -HS- | M] () -- C:\Users\Anton\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010.07.03 18:09:43 | 000,303,434 | RHS- | M] () -- C:\RMZOJ [2010.07.03 18:09:43 | 000,000,020 | RHS- | M] () -- C:\winx.ld [2010.07.03 18:06:58 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2010.07.03 18:04:05 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_NuidFltr_01005.Wdf [2010.07.03 18:02:45 | 000,000,020 | -HS- | M] () -- C:\Users\Anton\ntuser.ini [2010.07.03 17:12:26 | 000,052,953 | ---- | M] () -- C:\Windows\SysWow64\license.rtf [2010.07.03 17:12:26 | 000,052,953 | ---- | M] () -- C:\Windows\SysNative\license.rtf [2010.07.03 17:11:17 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010.06.08 01:58:00 | 000,065,128 | ---- | M] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll [2010.06.08 01:58:00 | 000,056,936 | ---- | M] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll [2010.06.08 01:58:00 | 000,012,507 | ---- | M] () -- C:\Windows\SysNative\nvinfo.pb ========== Files Created - No Company Name ========== [2010.09.05 18:19:43 | 000,000,978 | ---- | C] () -- C:\Users\Anton\Desktop\NTREGOPT.lnk [2010.09.05 18:19:43 | 000,000,959 | ---- | C] () -- C:\Users\Anton\Desktop\ERUNT.lnk [2010.09.05 18:14:26 | 000,001,063 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk [2010.09.05 18:08:17 | 000,388,197 | ---- | C] () -- C:\Users\Anton\Desktop\Load.exe [2010.09.05 17:09:59 | 000,034,421 | ---- | C] () -- C:\Users\Anton\Desktop\potlog.pdf [2010.09.05 15:10:05 | 000,366,978 | ---- | C] () -- C:\Users\Anton\Desktop\FORMELSAMMLUNGAnalysis.pdf [2010.09.05 11:04:35 | 000,002,429 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk [2010.09.04 17:42:28 | 000,000,020 | ---- | C] () -- C:\Windows\TùÍ [2010.09.03 23:22:21 | 000,001,993 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk [2010.09.03 22:58:30 | 000,001,120 | ---- | C] () -- C:\Users\Public\Desktop\VLC media player.lnk [2010.09.02 18:33:13 | 000,001,908 | ---- | C] () -- C:\Users\Public\Desktop\AVG 9.0.lnk [2010.09.02 18:33:05 | 064,339,327 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm [2010.09.02 18:33:05 | 000,616,965 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\iavifw.avm [2010.09.02 18:33:05 | 000,113,461 | ---- | C] () -- C:\Windows\SysNative\drivers\Avg\iavichjw.avm [2010.08.30 16:54:38 | 000,001,531 | ---- | C] () -- C:\Users\Anton\Desktop\iwbtgbeta(slomo).exe.lnk [2010.08.28 07:47:00 | 000,001,192 | ---- | C] () -- C:\Users\Anton\Desktop\Mafia II.lnk [2010.08.20 21:03:55 | 000,001,022 | ---- | C] () -- C:\Users\Public\Desktop\Guitar Pro 6.lnk [2010.08.15 19:29:45 | 000,001,770 | ---- | C] () -- C:\Users\Public\Desktop\Mirror's Edge™.lnk [2010.08.13 17:11:46 | 000,001,276 | ---- | C] () -- C:\Users\Anton\Desktop\Delphi 2010.lnk [2010.08.13 15:21:00 | 000,088,664 | -H-- | C] () -- C:\Windows\SysWow64\mlfcache.dat [2010.08.12 14:33:02 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\JDownloader.lnk [2010.08.09 20:38:02 | 000,008,704 | -HS- | C] () -- C:\Users\Anton\AppData\Roaming\Thumbs.db [2010.08.08 21:45:36 | 000,215,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.xtr [2010.08.08 21:45:36 | 000,215,104 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2010.08.08 21:45:31 | 000,075,064 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2010.08.08 01:03:30 | 000,002,196 | ---- | C] () -- C:\Users\Public\Desktop\Xilisoft Video Converter Ultimate 6.lnk [2010.08.04 23:04:16 | 000,002,014 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader 9.lnk [2010.07.31 11:52:52 | 000,000,219 | ---- | C] () -- C:\Users\Anton\Desktop\Alien Swarm.url [2010.07.09 11:38:31 | 000,524,288 | -HS- | C] () -- C:\Users\Anton\ntuser.dat{9c46dda7-8b3d-11df-904b-002215bf886f}.TMContainer00000000000000000002.regtrans-ms [2010.07.09 11:38:31 | 000,524,288 | -HS- | C] () -- C:\Users\Anton\ntuser.dat{9c46dda7-8b3d-11df-904b-002215bf886f}.TMContainer00000000000000000001.regtrans-ms [2010.07.09 11:38:31 | 000,065,536 | -HS- | C] () -- C:\Users\Anton\ntuser.dat{9c46dda7-8b3d-11df-904b-002215bf886f}.TM.blf [2010.07.08 11:32:48 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat [2010.07.07 23:21:44 | 000,000,045 | ---- | C] () -- C:\Windows\SysWow64\initdebug.nfo [2010.07.07 23:21:44 | 000,000,000 | ---- | C] () -- C:\Windows\initdebug.nfo [2010.07.07 22:51:17 | 000,012,507 | ---- | C] () -- C:\Windows\SysNative\nvinfo.pb [2010.07.07 13:23:32 | 000,001,162 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 5.lnk [2010.07.06 21:10:57 | 000,834,544 | ---- | C] () -- C:\Windows\SysNative\drivers\sptd.sys [2010.07.06 17:21:50 | 000,000,562 | ---- | C] () -- C:\Users\Anton\Desktop\Fraps.lnk [2010.07.04 11:32:24 | 000,000,535 | ---- | C] () -- C:\Users\Anton\regwizard.log [2010.07.04 11:03:30 | 000,189,958 | ---- | C] () -- C:\Users\Anton\sanct.log [2010.07.04 09:25:08 | 000,002,261 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp 1-Klick-Wartung.lnk [2010.07.04 09:25:08 | 000,002,219 | ---- | C] () -- C:\Users\Public\Desktop\TuneUp Utilities.lnk [2010.07.03 23:34:52 | 000,000,221 | ---- | C] () -- C:\Users\Anton\Desktop\Call of Duty Modern Warfare 2 - Multiplayer.url [2010.07.03 23:34:51 | 000,000,221 | ---- | C] () -- C:\Users\Anton\Desktop\Call of Duty Modern Warfare 2.url [2010.07.03 19:27:20 | 000,001,043 | ---- | C] () -- C:\Users\Anton\Desktop\Album Cover Finder.lnk [2010.07.03 19:05:38 | 000,000,020 | ---- | C] () -- C:\Windows\xöÇ [2010.07.03 18:46:08 | 000,143,360 | R--- | C] () -- C:\Windows\Vmix106.dll [2010.07.03 18:46:07 | 000,491,520 | R--- | C] () -- C:\Windows\System\cmau106.dll [2010.07.03 18:46:07 | 000,389,120 | R--- | C] () -- C:\Windows\SysNative\CM106.cpl [2010.07.03 18:46:07 | 000,221,184 | R--- | C] () -- C:\Windows\System\cm106eye.exe [2010.07.03 18:45:58 | 000,779,776 | R--- | C] () -- C:\Windows\SysNative\Cmeau106.exe [2010.07.03 18:45:58 | 000,003,262 | R--- | C] () -- C:\Windows\Trustlogo.ico [2010.07.03 18:45:58 | 000,003,262 | R--- | C] () -- C:\Windows\Taskbaricon.ICO [2010.07.03 18:45:58 | 000,003,262 | R--- | C] () -- C:\Windows\Mic.ico [2010.07.03 18:45:58 | 000,000,748 | ---- | C] () -- C:\Windows\Cm106.ini.cfl [2010.07.03 18:45:58 | 000,000,133 | ---- | C] () -- C:\Windows\System\Dlap.pfx [2010.07.03 18:45:39 | 000,000,857 | ---- | C] () -- C:\Windows\Cm106.ini.imi [2010.07.03 18:45:38 | 000,354,304 | R--- | C] () -- C:\Windows\SysNative\CmiInstallResAll64.dll [2010.07.03 18:45:38 | 000,002,391 | R--- | C] () -- C:\Windows\Cm106.ini.cfg [2010.07.03 18:41:14 | 000,002,517 | ---- | C] () -- C:\Users\Public\Desktop\Skype.lnk [2010.07.03 18:28:55 | 000,000,917 | ---- | C] () -- C:\Users\Public\Desktop\Steam.lnk [2010.07.03 18:26:08 | 000,033,134 | ---- | C] () -- C:\Users\Anton\AppData\Roaming\UserTile.png [2010.07.03 18:09:43 | 000,303,434 | RHS- | C] () -- C:\RMZOJ [2010.07.03 18:09:43 | 000,000,020 | RHS- | C] () -- C:\winx.ld [2010.07.03 18:06:58 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK [2010.07.03 18:06:57 | 000,383,562 | RHS- | C] () -- C:\bootmgr [2010.07.03 18:04:05 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_NuidFltr_01005.Wdf [2010.07.03 18:02:45 | 006,291,456 | -HS- | C] () -- C:\Users\Anton\ntuser.dat [2010.07.03 18:02:45 | 000,524,288 | -HS- | C] () -- C:\Users\Anton\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2010.07.03 18:02:45 | 000,524,288 | -HS- | C] () -- C:\Users\Anton\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2010.07.03 18:02:45 | 000,262,144 | -HS- | C] () -- C:\Users\Anton\ntuser.dat.LOG1 [2010.07.03 18:02:45 | 000,065,536 | -HS- | C] () -- C:\Users\Anton\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2010.07.03 18:02:45 | 000,000,020 | -HS- | C] () -- C:\Users\Anton\ntuser.ini [2010.07.03 18:02:45 | 000,000,000 | -HS- | C] () -- C:\Users\Anton\ntuser.dat.LOG2 [2010.07.03 17:11:17 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf [2010.07.03 17:08:08 | 3220,529,152 | -HS- | C] () -- C:\hiberfil.sys [2009.08.19 23:00:00 | 000,375,296 | ---- | C] () -- C:\Windows\SysWow64\wsihk32.dll [2009.08.19 23:00:00 | 000,131,584 | ---- | C] () -- C:\Windows\SysWow64\wsiwin32.dll [2009.08.19 23:00:00 | 000,027,136 | ---- | C] () -- C:\Windows\SysWow64\BDSShellRes140.dll [2009.08.19 23:00:00 | 000,027,136 | ---- | C] () -- C:\Windows\SysWow64\BDSShellRes.dll [2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2007.12.28 09:22:04 | 000,010,296 | ---- | C] () -- C:\Windows\SysWow64\drivers\ASUSHWIO.SYS [2007.11.29 17:45:10 | 000,000,806 | R--- | C] () -- C:\Windows\cm106.ini ========== LOP Check ========== [2010.08.22 23:14:04 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\aicon [2010.07.03 22:32:34 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\AlcaTech [2010.07.31 21:04:12 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\bizarre creations [2010.07.04 11:32:01 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\CodeGear [2010.07.06 22:16:17 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\DAEMON Tools Lite [2010.07.11 18:56:52 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\DMCache [2010.08.13 16:58:48 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\Embarcadero [2010.07.11 18:46:03 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\gtk-2.0 [2010.08.22 22:49:58 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\Guitar Pro 6 [2010.07.12 10:47:43 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\iTunesControl [2010.07.14 23:45:44 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\SEGA Corporation [2010.07.07 14:02:45 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\TeamViewer [2010.07.09 11:38:36 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\Tific [2010.07.04 09:24:54 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\TuneUp Software [2010.07.06 22:35:08 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\Ubisoft [2010.08.17 14:43:22 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\Windows Live Writer [2010.08.08 01:04:02 | 000,000,000 | ---D | M] -- C:\Users\Anton\AppData\Roaming\Xilisoft [2009.07.14 07:08:49 | 000,028,602 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT ========== Purity Check ========== ========== Custom Scans ========== < %SYSTEMDRIVE%\*.* > [2009.07.14 03:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr [2010.07.03 18:06:58 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK [2010.09.05 18:26:42 | 3220,529,152 | -HS- | M] () -- C:\hiberfil.sys [2010.09.05 18:26:46 | 4294,041,600 | -HS- | M] () -- C:\pagefile.sys [2010.07.03 18:09:43 | 000,303,434 | RHS- | M] () -- C:\RMZOJ [2010.07.03 18:09:43 | 000,000,020 | RHS- | M] () -- C:\winx.ld < %systemroot%\system32\*.wt > < %systemroot%\system32\*.ruy > < %systemroot%\Fonts\*.com > [2009.07.14 07:32:31 | 000,026,040 | ---- | M] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont [2009.07.14 07:32:31 | 000,026,489 | ---- | M] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont [2009.07.14 07:32:31 | 000,029,779 | ---- | M] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont [2009.07.14 07:32:31 | 000,043,318 | ---- | M] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont < %systemroot%\Fonts\*.dll > < %systemroot%\Fonts\*.ini > [2009.06.10 22:49:50 | 000,000,065 | ---- | M] () -- C:\Windows\Fonts\desktop.ini < %systemroot%\Fonts\*.ini2 > < %systemroot%\system32\spool\prtprocs\w32x86\*.* > < %systemroot%\REPAIR\*.bak1 > < %systemroot%\REPAIR\*.ini > < %systemroot%\system32\*.jpg > < %systemroot%\*.scr > [2010.08.10 19:39:02 | 000,297,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\WLXPGSS.SCR < %systemroot%\*._sy > < %APPDATA%\Adobe\Update\*.* > < %ALLUSERSPROFILE%\Favorites\*.* > < %APPDATA%\Microsoft\*.* > < %PROGRAMFILES%\*.* > [2009.07.14 06:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini < %APPDATA%\Update\*.* > < %systemroot%\*. /mp /s > < %systemroot%\system32\*.dll /lockedfiles > < %systemroot%\Tasks\*.job /lockedfiles > < %systemroot%\System32\config\*.sav > < %systemroot%\system32\user32.dll /md5 > [2009.07.14 03:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\SysWOW64\user32.dll < %systemroot%\system32\ws2_32.dll /md5 > [2009.07.14 03:16:20 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=DAAE8A9B8C0ACC7F858454132553C30D -- C:\Windows\SysWOW64\ws2_32.dll < %systemroot%\system32\ws2help.dll /md5 > [2009.07.14 03:11:26 | 000,004,608 | ---- | M] (Microsoft Corporation) MD5=808AABDF9337312195CAFF76D1804786 -- C:\Windows\SysWOW64\ws2help.dll < HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU > < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install|LastSuccessTime /rs > ========== Alternate Data Streams ========== @Alternate Data Stream - 55920 bytes -> C:\ProgramData:$SS_DESCRIPTOR_LVVWVBGV0VFBTLX4D06YH7LVUTPXGJMBKE1R0WT1VH7E24F7PHCTVF4VMVFVVX4VM < End of report >

OTL Extras logfile created on: 05.09.2010 18:31:00 - Run 1 OTL by OldTimer - Version 3.2.11.0 Folder = C:\Users\Anton\Desktop\MFTools 64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 8.0.7600.16385) Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy 4,00 Gb Total Physical Memory | 3,00 Gb Available Physical Memory | 70,00% Memory free 8,00 Gb Paging File | 7,00 Gb Available in Paging File | 83,00% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 232,88 Gb Total Space | 127,18 Gb Free Space | 54,61% Space Free | Partition Type: NTFS Drive D: | 66,60 Mb Total Space | 0,00 Mb Free Space | 0,00% Space Free | Partition Type: CDFS E: Drive not present or media not loaded F: Drive not present or media not loaded G: Drive not present or media not loaded H: Drive not present or media not loaded I: Drive not present or media not loaded Computer Name: ANTON-PC Current User Name: Anton Logged in as Administrator. Current Boot Mode: Normal Scan Mode: Current user Include 64bit Scans Company Name Whitelist: On Skip Microsoft Files: On File Age = 90 Days Output = Standard Quick Scan ========== Extra Registry (SafeList) ========== ========== File Associations ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>] .cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation) [HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>] .html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation) ========== Shell Spawning ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* File not found cmdfile [open] -- "%1" %* File not found comfile [open] -- "%1" %* File not found exefile [open] -- "%1" %* File not found helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* File not found regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" File not found scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S File not found txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command] batfile [open] -- "%1" %* cmdfile [open] -- "%1" %* comfile [open] -- "%1" %* cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation) exefile [open] -- "%1" %* helpfile [open] -- Reg Error: Key error. htmlfile [edit] -- Reg Error: Key error. htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation) InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation) piffile [open] -- "%1" %* regfile [merge] -- Reg Error: Key error. scrfile [config] -- "%1" scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation) scrfile [open] -- "%1" /S txtfile [edit] -- Reg Error: Key error. Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 Directory [AddToPlaylistVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" () Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation) Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Directory [PlayWithVLC] -- "C:\Program Files (x86)\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" () Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) Folder [explore] -- Reg Error: Value error. Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation) ========== Security Center Settings ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] "cval" = 1 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring] 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] "VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data] "AntiVirusOverride" = 0 "AntiSpywareOverride" = 0 "FirewallOverride" = 0 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Standard Profile] "DisableNotifications" = 0 "EnableFirewall" = 0 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicPr ofile] "DisableNotifications" = 0 "EnableFirewall" = 0 ========== Authorized Applications List ========== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List] "svchost2.exe" = C:\windows\svchost2.exe -- File not found "svchost2.exe" = C:\windows\svchost2.exe -- File not found ========== HKEY_LOCAL_MACHINE Uninstall List ========== 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{33EB1061-ABF1-4470-A540-32E97A610536}" = Apple Mobile Device Support "{40B38ACD-8720-48F0-B5B0-29C37ADCDECB}" = Windows Live Language Selector "{5F02C14D-A630-4771-8409-0BA89FCCA8D6}" = iTunes "{79A68C93-ED14-4E92-A960-FBB5B6578562}" = Windows Live MIME IFilter "{9151385C-9B53-4058-8DC6-6257BE5CB4E9}" = Windows Live ID Sign-in Assistant "{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting "{B91110FB-33B4-468B-90C2-4D5E8AE3FAE1}" = Bonjour "C-Media CM106 Like Sound Driver" = Trust USB Audio "NVIDIA Display Control Panel" = NVIDIA Display Control Panel "NVIDIA Drivers" = NVIDIA Drivers "WinRAR archiver" = WinRAR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall] "{002D9D5E-29BA-3E6D-9BC4-3D7D6DBC735C}" = Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 "{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam "{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1" = Guitar Pro 6 "{19910E33-E495-42F9-84FF-7569931CC021}_is1" = Mafia 2 "{19DD26A7-F0DD-472E-887F-44128C31163C}" = Windows Live Messenger "{1CAC7A41-583B-4483-9FA5-3E5465AFF8C2}" = Microsoft Default Manager "{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java(TM) 6 Update 20 "{2FDBBCEA-62DB-45F4-B6E5-0E1FB2A1F29D}" = Visual C++ 8.0 Runtime Setup Package (x64) "{3274D32D-3DA2-4AB9-9BD0-B4EDC6E03B7F}" = Windows Live Essentials-Betaversion "{380B7FE0-32A3-439A-B65C-B4ED55CADBF4}" = Windows Live Fotogalerie-Betaversion "{3932CA01-E514-48A1-8D2D-B9DA712C58B5}" = Windows Live Writer "{394A36B7-A693-48FD-AA14-DC17E291A378}" = Windows Live Writer "{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}" = NVIDIA PhysX "{41A15ABD-081B-43DC-91A5-8727265E8D77}" = Windows Live Photo Common "{488A77D4-7D18-4030-881D-37E7C5AE02FF}" = iTunesControl 0.52 "{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater "{4ACDC413-AF13-3934-8D8A-1F8CEF70D1A5}" = Microsoft Document Explorer 2008 Language Pack - DEU "{4F88F5D8-767A-4EB4-9AFA-A7CBCC69D767}" = Windows Live SOXE "{52CDDA92-56B6-4BA5-BD8D-E13B186008CB}" = D3DX10 "{54488589-76BC-4A3F-AC4F-71EBAD657850}" = Windows Live Communications Platform "{586509F0-350D-48B5-B763-9CC2F8D96C4C}" = Windows Live Sync "{5EE59813-493A-4C10-A2BF-3647670CD7D6}" = Windows Live UX Platform Language Pack "{5EE7D259-D137-4438-9A5F-42F432EC0421}" = VC80CRTRedist - 8.0.50727.4053 "{66069562-D3AF-4515-B1FD-7EE4DE5CE7D2}" = Windows Live PIMT Platform "{6753B40C-0FBD-3BED-8A9D-0ACAC2DCD85D}" = Microsoft Document Explorer 2008 "{68A35043-C55A-4237-88C9-37EE1C63ED71}" = Microsoft Visual J# 2.0 Redistributable Package "{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable "{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 "{7E432D8D-D78A-44A8-9FE8-B8942F7FD01F}" = Windows Live UX Platform "{7EE873AF-46BB-4B5D-BA6F-CFE4B0566E22}" = TuneUp Utilities Language Pack (de-DE) "{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable "{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}" = Assassin's Creed II "{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher "{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight "{8A74DEFD-A224-49CC-AB80-4E88BC730125}" = LogMeIn Hamachi "{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT "{91973772-A002-446D-8A67-B410553AD8F9}" = Windows Live SOXE Definitions "{94B8E8AF-7F52-4AEB-8731-450942059E89}" = Boost Libraries for C++Builder 2010 "{95A4E899-87EF-43C7-99E3-9ED5342FBF12}" = Windows Live Movie Maker "{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars "{9D6FAA1A-D87C-4F3E-B6C0-2646DC238CCF}" = Windows Live Mail "{AC76BA86-7AD7-1033-7B44-A93000000001}" = Adobe Reader 9.3.3 "{AD58D257-F7A6-4AB5-B5E1-364EAC098B94}" = Embarcadero RAD Studio 2010 "{ADFCF98D-9CB4-414F-B2F0-AF96E0302A3C}" = Windows Live Photo Common-Betaversion "{AEDBD563-24BB-4EE3-8366-A654DAC2D988}" = Mirror's Edge™ "{B9D682DD-724A-4F18-B714-1B6AB423FD08}" = Windows Live Writer "{B9FF6943-D487-4C97-AF8D-DF0A46E692BF}" = Mirror's Edge Time Trails Pur "{C0A30BAA-295D-4F7F-8776-FD09FD57E2E2}" = Windows Live Installer "{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update "{C7A6AD68-9152-482B-9769-6E08231F0BD7}" = Windows Live Messenger "{CED9B1E8-FFCB-4497-9DFC-F0B20146896E}" = Windows Live Mail "{CF092689-6ADF-4C86-A8DA-31B0B448A36C}" = Junk Mail filter update "{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64 "{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2 "{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities "{D75608C0-FBE2-4A0D-9A7A-871F08305949}" = Windows Live Writer Resources "{DAEAFD68-BB4A-4507-A241-C8804D2EA66D}" = Apple Application Support "{E716CF3C-1F40-4373-9271-07DAA12EA0AD}" = Embarcadero Delphi and C++Builder 2010 Database Pack "{E966F0CC-76B3-11D3-945B-00C04FB1760A}" = BDE_ENT "{EB900AF8-CC61-4E15-871B-98D1EA3E8025}" = QuickTime "{EE7F36D6-F67D-486A-A9D5-01DE1B6F6933}" = Windows Live Movie Maker "{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU] "{F4FC05EB-94A9-418A-ABC4-A2FBBB4F6C15}" = Embarcadero Delphi and C++Builder 2010 Help System "{FCE7CF00-581E-4B9B-8794-24A196BBFBC0}" = Windows Live Photo Gallery "{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 "7-Zip" = 7-Zip 4.65 "Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin "Album Cover Finder_is1" = Album Cover Finder v.6.8.0 "AVG9Uninstall" = AVG 9.0 "Boost Libraries for C++Builder 2010" = Boost Libraries for C++Builder 2010 "DivX Setup.divx.com" = DivX-Setup "Embarcadero Delphi and C++Builder 2010 Database Pack" = Embarcadero Delphi and C++Builder 2010 Database Pack "Embarcadero Delphi and C++Builder 2010 Help System" = Embarcadero Delphi and C++Builder 2010 Help System "Embarcadero RAD Studio 2010" = Embarcadero RAD Studio 2010 "ERUNT_is1" = ERUNT 1.1j "Fraps" = Fraps (remove only) "JDownloader" = JDownloader "LogMeIn Hamachi" = LogMeIn Hamachi "Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware "Messenger Plus! Live" = Messenger Plus! Live "Microsoft Document Explorer 2008" = Microsoft Document Explorer 2008 "Microsoft Document Explorer 2008 Language Pack - DEU" = Microsoft Document Explorer 2008 Language Pack - DEU "Microsoft Visual J# 2.0 Redistributable Package" = Microsoft Visual J# 2.0 Redistributable Package "Mozilla Firefox (3.6.8)" = Mozilla Firefox (3.6.8) "NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver "OpenAL" = OpenAL "Precision" = EVGA Precision 1.9.1 "SpeedFan" = SpeedFan (remove only) "StarCraft II" = StarCraft II "Steam App 10180" = Call of Duty: Modern Warfare 2 "Steam App 10190" = Call of Duty: Modern Warfare 2 - Multiplayer "Steam App 18800" = Zero Gear Demo "Steam App 50280" = Mafia II - Demo "Steam App 630" = Alien Swarm "TeamViewer 5" = TeamViewer 5 "TuneUp Utilities" = TuneUp Utilities "VLC media player" = VLC media player 1.1.4 "VLC Setup Helper_is1" = VLC Setup Helper 3.00 "WinLiveSuite" = Windows Live Essentials-Betaversion "Xilisoft Video Converter Ultimate 6" = Xilisoft Video Converter Ultimate 6 ========== Last 10 Event Log Errors ========== [ Application Events ] Error - 03.09.2010 10:34:04 | Computer Name = Anton-PC | Source = Bonjour Service | ID = 100 Description = 412: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 03.09.2010 17:42:40 | Computer Name = Anton-PC | Source = Application Hang | ID = 1002 Description = Programm GuitarPro.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 70c Startzeit: 01cb4bb0b0d5a40d Endzeit: 4 Anwendungspfad: C:\Program Files (x86)\Guitar Pro 6\GuitarPro.exe Berichts-ID: Error - 04.09.2010 10:14:10 | Computer Name = Anton-PC | Source = Application Error | ID = 1000 Description = Name der fehlerhaften Anwendung: stdrt.exe, Version: 3.0.239.0, Zeitstempel: 0x4462f982 Name des fehlerhaften Moduls: oggflt.sft, Version: 1.0.1.0, Zeitstempel: 0x4460ff48 Ausnahmecode: 0xc0000005 Fehleroffset: 0x00016300 ID des fehlerhaften Prozesses: 0x65c Startzeit der fehlerhaften Anwendung: 0x01cb4c3b5f8af8ac Pfad der fehlerhaften Anwendung: C:\Users\Anton\AppData\Local\Temp\mrt6B12.tmp\stdrt.exe Pfad des fehlerhaften Moduls: C:\Users\Anton\AppData\Local\Temp\mrt6B12.tmp\oggflt.sft Berichtskennung: af2e9110-b82e-11df-a6b2-00242146da1b Error - 05.09.2010 05:02:41 | Computer Name = Anton-PC | Source = Bonjour Service | ID = 100 Description = 360: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 05.09.2010 05:02:41 | Computer Name = Anton-PC | Source = Bonjour Service | ID = 100 Description = 412: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 05.09.2010 05:02:41 | Computer Name = Anton-PC | Source = Bonjour Service | ID = 100 Description = 220: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 05.09.2010 05:02:41 | Computer Name = Anton-PC | Source = Bonjour Service | ID = 100 Description = 492: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 05.09.2010 05:02:41 | Computer Name = Anton-PC | Source = Bonjour Service | ID = 100 Description = 224: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 05.09.2010 05:02:41 | Computer Name = Anton-PC | Source = Bonjour Service | ID = 100 Description = 484: ERROR: read_msg errno 10054 (Eine vorhandene Verbindung wurde vom Remotehost geschlossen.) Error - 05.09.2010 08:56:09 | Computer Name = Anton-PC | Source = Microsoft-Windows-RestartManager | ID = 10006 Description = Die Anwendung oder der Dienst "Windows Live Messenger" konnte nicht heruntergefahren werden. [ System Events ] Error - 16.08.2010 09:09:10 | Computer Name = Anton-PC | Source = bowser | ID = 8003 Description = Error - 23.08.2010 05:29:56 | Computer Name = Anton-PC | Source = DCOM | ID = 10010 Description = Error - 30.08.2010 17:37:46 | Computer Name = Anton-PC | Source = DCOM | ID = 10010 Description = Error - 02.09.2010 09:17:45 | Computer Name = Anton-PC | Source = EventLog | ID = 6008 Description = Das System wurde zuvor am ?02.?09.?2010 um 15:15:29 unerwartet heruntergefahren. Error - 02.09.2010 11:55:28 | Computer Name = Anton-PC | Source = NetBT | ID = 4321 Description = Der Name "WORKGROUP :1d" konnte nicht auf der Schnittstelle mit IP-Adresse 5.35.184.40 registriert werden. Der Computer mit IP-Adresse 5.37.29.255 hat nicht zugelassen, dass dieser Computer diesen Namen verwendet. Error - 04.09.2010 05:12:19 | Computer Name = Anton-PC | Source = Disk | ID = 262155 Description = Der Treiber hat einen Controllerfehler auf \Device\Harddisk1\DR1 gefunden. Error - 05.09.2010 05:02:51 | Computer Name = Anton-PC | Source = Service Control Manager | ID = 7031 Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error - 05.09.2010 05:03:01 | Computer Name = Anton-PC | Source = Service Control Manager | ID = 7031 Description = Der Dienst "Apple Mobile Device" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts. Error - 05.09.2010 05:04:01 | Computer Name = Anton-PC | Source = Service Control Manager | ID = 7032 Description = Der Versuch des Dienststeuerungs-Managers, nach dem unerwarteten Beenden des Dienstes "Apple Mobile Device" Korrekturmaßnahmen (Neustart des Diensts) durchzuführen, ist fehlgeschlagen. Fehler: %%1056 Error - 05.09.2010 12:15:33 | Computer Name = Anton-PC | Source = Service Control Manager | ID = 7034 Description = Dienst "AVG9IDSAgent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert. < End of report >

Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 13:18:50, on 04.09.2010 Platform: Windows 7 (WinNT 6.00.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe C:\Program Files (x86)\Skype\Phone\Skype.exe C:\Program Files (x86)\ICQ7.2\ICQ.exe C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe C:\Program Files (x86)\AVG\AVG9\avgtray.exe C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVH.EXE C:\Program Files (x86)\Hotspot Shield\bin\openvpntray.exe C:\Program Files (x86)\Skype\Plugin Manager\skypePM.exe Q:\140062.deu\Office14\ONENOTEM.EXE C:\Program Files (x86)\Common Files\microsoft shared\virtualization handler\OfficeVirt.exe C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe C:\Users\Alexander\Downloads\HiJackThis204.exe C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Users\Alexander\Downloads\Desktop\HiJackThis204.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkId=69157 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: ICQToolBar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll F2 - REG:system.ini: UserInit=userinit.exe O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll O2 - BHO: Windows Live Anmelde-Hilfsprogramm - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files (x86)\Hotspot Shield\HssIE\HssIE.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files (x86)\DAEMON Tools Toolbar\DTToolbar.dll O3 - Toolbar: ICQToolBar - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files (x86)\SlySoft\CloneCD\CloneCDTray.exe" /s O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files (x86)\Unlocker\UnlockerAssistant.exe" O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [DS3 Tool] C:\Program Files\MotioninJoy\ds3\DS3_Tool.exe -mini O4 - HKCU\..\Run: [EA Core] "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7.2\ICQ.exe" silent loginmode=4 O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOKALER DIENST') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOKALER DIENST') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETZWERKDIENST') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETZWERKDIENST') O4 - Startup: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk = C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVH.EXE O8 - Extra context menu item: Free YouTube Download - C:\Users\Alexander\AppData\Roaming\DVDVideoSoftIEHelpers\youtubedownload.htm O8 - Extra context menu item: Free YouTube to Mp3 Converter - C:\Users\Alexander\AppData\Roaming\DVDVideoSoftIEHelpers\youtubetomp3.htm O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files (x86)\ICQ7.2\ICQ.exe O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - hxxp://messenger.zone.msn.com/MessengerGamesContent/GameContent/de/uno1/GAME_UNO1.cab O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgemc.exe O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe O23 - Service: Dienst "Bonjour" (Bonjour Service) - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: LogMeIn Hamachi 2.0 Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\openvpnas.exe O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\HssTrayService.EXE O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files (x86)\Hotspot Shield\bin\hsswd.exe O23 - Service: ICQ Service - Unknown owner - C:\Program Files (x86)\ICQ6Toolbar\ICQ Service.exe O23 - Service: iPod-Dienst (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: NMSAccess - Unknown owner - C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe O23 - Service: Adobe SwitchBoard (SwitchBoard) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe O23 - Service: TeamViewer 5 (TeamViewer5) - TeamViewer GmbH - C:\Program Files (x86)\TeamViewer\Version5\TeamViewer_Service.exe O23 - Service: @C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpDefragService.exe O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files (x86)\TuneUp Utilities 2010\TuneUpUtilitiesService64.exe O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: Service for Update by HTTP (WDAdminExeSvc) - Unknown owner - C:\Users\Alexander\Downloads\Desktop\360WavesPatcher\WDAdminEXE.EXE O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing) O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing) -- End of file - 10083 bytes

---

OTL logfile created on: 02.09.2010 18:27:17 - Run 1
OTL by OldTimer - Version 3.2.11.0    Folder = E:\Neue Downloads
64bit- Enterprise Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000807 | Country: Schweiz | Language: DES | Date Format: dd.MM.yyyy
 
2.00 Gb Total Physical Memory | 0.00 Gb Available Physical Memory | 27.00% Memory free
3.00 Gb Paging File | 2.00 Gb Available in Paging File | 45.00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 153.29 Gb Total Space | 0.00 Gb Free Space | 0.00% Space Free | Partition Type: NTFS
Drive D: | 1397.26 Gb Total Space | 931.08 Gb Free Space | 66.64% Space Free | Partition Type: NTFS
Drive E: | 1397.26 Gb Total Space | 91.24 Gb Free Space | 6.53% Space Free | Partition Type: NTFS
Drive F: | 1397.26 Gb Total Space | 165.85 Gb Free Space | 11.87% Space Free | Partition Type: NTFS
Drive G: | 1397.26 Gb Total Space | 6.14 Gb Free Space | 0.44% Space Free | Partition Type: NTFS
Drive H: | 1863.01 Gb Total Space | 93.80 Gb Free Space | 5.03% Space Free | Partition Type: NTFS
Drive I: | 1397.26 Gb Total Space | 8.56 Gb Free Space | 0.61% Space Free | Partition Type: NTFS
Drive J: | 931.51 Gb Total Space | 0.58 Gb Free Space | 0.06% Space Free | Partition Type: NTFS
Drive K: | 931.51 Gb Total Space | 864.62 Gb Free Space | 92.82% Space Free | Partition Type: NTFS
Drive L: | 465.76 Gb Total Space | 343.14 Gb Free Space | 73.67% Space Free | Partition Type: NTFS
Drive M: | 1863.01 Gb Total Space | 149.80 Gb Free Space | 8.04% Space Free | Partition Type: NTFS
Drive N: | 1863.01 Gb Total Space | 138.85 Gb Free Space | 7.45% Space Free | Partition Type: NTFS
Drive O: | 465.76 Gb Total Space | 397.18 Gb Free Space | 85.28% Space Free | Partition Type: NTFS
Drive P: | 931.51 Gb Total Space | 500.33 Gb Free Space | 53.71% Space Free | Partition Type: NTFS
 
Computer Name: ***
Current User Name: ***
Logged in as Administrator.
 
Current Boot Mode: Normal
Scan Mode: Current user
Include 64bit Scans
Company Name Whitelist: Off
Skip Microsoft Files: Off
File Age = 30 Days
Output = Minimal
 
========== Processes (SafeList) ==========
 
PRC - E:\Neue Downloads\OTL.exe (OldTimer Tools)
PRC - E:\Neue Downloads\mbam-setup.exe (Malwarebytes Corporation                                    )
PRC - E:\Neue Downloads\Load.exe ()
PRC - C:\Users\***\AppData\Local\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Program Files (x86)\SmartFTP Client\SmartFTP.exe (SmartSoft Ltd.)
PRC - C:\Program Files (x86)\Wuala Dokan\mounter.exe ()
PRC - C:\Program Files (x86)\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgcsrvx.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgcfgex.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
PRC - C:\Users\***\AppData\Roaming\Wuala\Wuala.exe (Wuala)
PRC - E:\progis\TrojanHunter 5.3\TrojanHunter.exe (Mischel Internet Security)
PRC - C:\Users\***\AppData\Local\Temp\Rar$EX00.829\TreeSizeFree.exe (JAM Software)
 
 
========== Modules (SafeList) ==========
 
MOD - E:\Neue Downloads\OTL.exe (OldTimer Tools)
MOD - C:\Windows\SysWOW64\winsta.dll (Microsoft Corporation)
MOD - C:\Windows\SysWOW64\msscript.ocx (Microsoft Corporation)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7600.16385_none_421189da2b7fabfc\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (AMD External Events Utility) -- C:\Windows\SysNative\atiesrxx.exe (AMD)
SRV:64bit: - (UmRdpService) -- C:\Windows\SysNative\umrdp.dll (Microsoft Corporation)
SRV:64bit: - (StorSvc) -- C:\Windows\SysNative\StorSvc.dll (Microsoft Corporation)
SRV:64bit: - (PeerDistSvc) -- C:\Windows\SysNative\PeerDistSvc.dll (Microsoft Corporation)
SRV:64bit: - (CscService) -- C:\Windows\SysNative\cscsvc.dll (Microsoft Corporation)
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (wDokanMounter) -- C:\Program Files (x86)\Wuala Dokan\mounter.exe ()
SRV - (avg9emc) -- C:\Program Files (x86)\AVG\AVG9\avgemc.exe (AVG Technologies CZ, s.r.o.)
SRV - (avg9wd) -- C:\Program Files (x86)\AVG\AVG9\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (wDokan) -- C:\Windows\SysNative\drivers\wdokan.sys ()
DRV:64bit: - (AvgTdiA) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgLdx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (AvgMfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
DRV:64bit: - (atikmdag) -- C:\Windows\SysNative\drivers\atikmdag.sys (ATI Technologies Inc.)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (vmbus) -- C:\Windows\SysNative\drivers\vmbus.sys (Microsoft Corporation)
DRV:64bit: - (storflt) -- C:\Windows\SysNative\drivers\vmstorfl.sys (Microsoft Corporation)
DRV:64bit: - (storvsc) -- C:\Windows\SysNative\drivers\storvsc.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (s3cap) -- C:\Windows\SysNative\drivers\vms3cap.sys (Microsoft Corporation)
DRV:64bit: - (VMBusHID) -- C:\Windows\SysNative\drivers\VMBusHID.sys (Microsoft Corporation)
DRV:64bit: - (CSC) -- C:\Windows\SysNative\drivers\csc.sys (Microsoft Corporation)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (RTL8167) -- C:\Windows\SysNative\drivers\Rt64win7.sys (Realtek Corporation                                            )
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://ch.msn.com/default.aspx
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-ch
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F3 5C 6B 18 03 29 CB 01  [binary data]
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssiea.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (AVG Safe Search) - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files (x86)\AVG\AVG9\avgssie.dll (AVG Technologies CZ, s.r.o.)
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O4:64bit: - HKLM..\Run: [PtiuPbmd] C:\Windows\SysNative\ulutil2.dll (Promise Technology,Inc.)
O4 - HKLM..\Run: [AVG9_TRAY] C:\PROGRA~2\AVG\AVG9\avgtray.exe (AVG Technologies CZ, s.r.o.)
O4 - HKLM..\Run: [THGuard] E:\progis\TrojanHunter 5.3\THGuard.exe (Mischel Internet Security)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer-Networking Ltd.)
O4 - HKLM..\RunOnce: [InstallDokanDriver] C:\Program Files (x86)\Wuala Dokan\dokanctl.exe ()
O4 - Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Wuala.lnk = C:\Users\***\AppData\Roaming\Wuala\Wuala.exe (Wuala)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgppa.dll (AVG Technologies CZ, s.r.o.)
O18 - Protocol\Handler\linkscanner {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files (x86)\AVG\AVG9\avgpp.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - AppInit_DLLs: (avgrssta.dll) - C:\Windows\SysNative\avgrssta.dll (AVG Technologies CZ, s.r.o.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2010.09.02 18:18:35 | 000,000,000 | ---D | C] -- C:\Users\***\Desktop\MFTools
[2010.09.02 17:27:11 | 000,000,000 | ---D | C] -- C:\ProgramData\TrojanHunter
[2010.09.02 16:29:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
[2010.09.02 16:29:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy
[2010.09.01 18:57:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\JAM Software
[2010.08.26 22:39:23 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\Diagnostics
[2010.08.20 10:01:02 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\Mp3tag
[2010.08.20 10:00:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mp3tag
[2010.08.16 11:54:53 | 000,000,000 | -H-D | C] -- C:\$AVG
[2010.08.12 11:20:33 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Roaming\SmartFTP
[2010.08.12 11:16:40 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SmartFTP Client
 
========== Files - Modified Within 30 Days ==========
 
[2010.09.02 18:28:24 | 001,048,576 | -HS- | M] () -- C:\Users\***\NTUSER.DAT
[2010.09.02 18:21:38 | 000,012,288 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2010.09.02 18:21:38 | 000,012,288 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2010.09.02 17:49:07 | 000,001,122 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-964574403-1611699587-3884322098-1001UA.job
[2010.09.02 17:27:16 | 000,059,392 | R--- | M] () -- C:\Windows\SysWow64\streamhlp.dll
[2010.09.02 17:27:14 | 000,000,650 | ---- | M] () -- C:\Users\***\Desktop\TrojanHunter.lnk
[2010.09.02 16:29:19 | 000,001,258 | ---- | M] () -- C:\Users\***\Desktop\Spybot - Search & Destroy.lnk
[2010.09.01 20:49:03 | 000,001,070 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-964574403-1611699587-3884322098-1001Core.job
[2010.09.01 16:24:29 | 000,001,990 | -H-- | M] () -- C:\Users\***\Documents\Default.rdp
[2010.09.01 08:09:37 | 064,139,718 | ---- | M] () -- C:\Windows\SysNative\drivers\Avg\incavi.avm
[2010.08.20 20:15:07 | 001,472,002 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2010.08.20 20:15:07 | 000,643,628 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2010.08.20 20:15:07 | 000,606,992 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2010.08.20 20:15:07 | 000,126,188 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2010.08.20 20:15:07 | 000,103,370 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2010.08.20 10:00:55 | 000,000,979 | ---- | M] () -- C:\Users\Public\Desktop\Mp3tag.lnk
[2010.08.12 11:16:41 | 000,002,485 | ---- | M] () -- C:\Users\Public\Desktop\SmartFTP Client.lnk
[2010.08.11 16:57:22 | 000,086,392 | ---- | M] () -- C:\Windows\SysNative\drivers\wdokan.sys
[2010.08.11 16:57:06 | 000,032,768 | ---- | M] () -- C:\Windows\SysWow64\wdokanusr.dll
[2010.08.04 19:15:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2010.08.04 03:17:41 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
[2010.08.04 03:17:23 | 1408,729,088 | -HS- | M] () -- C:\hiberfil.sys
[2010.08.03 22:54:20 | 001,270,397 | -H-- | M] () -- C:\Users\***\AppData\Local\IconCache.db
 
========== Files Created - No Company Name ==========
 
[2010.09.02 17:27:14 | 000,000,650 | ---- | C] () -- C:\Users\***\Desktop\TrojanHunter.lnk
[2010.09.02 17:27:07 | 000,059,392 | R--- | C] () -- C:\Windows\SysWow64\streamhlp.dll
[2010.09.02 16:29:19 | 000,001,258 | ---- | C] () -- C:\Users\***\Desktop\Spybot - Search & Destroy.lnk
[2010.08.30 17:44:18 | 000,001,990 | -H-- | C] () -- C:\Users\***\Documents\Default.rdp
[2010.08.20 10:00:55 | 000,000,979 | ---- | C] () -- C:\Users\Public\Desktop\Mp3tag.lnk
[2010.08.12 11:16:41 | 000,002,485 | ---- | C] () -- C:\Users\Public\Desktop\SmartFTP Client.lnk
[2010.08.11 16:57:22 | 000,086,392 | ---- | C] () -- C:\Windows\SysNative\drivers\wdokan.sys
[2010.08.11 16:57:06 | 000,032,768 | ---- | C] () -- C:\Windows\SysWow64\wdokanusr.dll
[2010.05.20 13:51:12 | 000,011,264 | ---- | C] () -- C:\Windows\SysWow64\wdokannp.dll
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
 
========== LOP Check ==========
 
[2010.09.01 18:57:58 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\JAM Software
[2010.08.20 13:48:11 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Mp3tag
[2010.07.22 21:31:27 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Wuala
[2009.07.14 07:08:49 | 000,003,654 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
< End of report >

---

---

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Datenbank Version: 4531

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

02.09.2010 18:59:30
mbam-log-2010-09-02 (18-59-30).txt

Art des Suchlaufs: Quick-Scan
Durchsuchte Objekte: 166926
Laufzeit: 4 Minute(n), 50 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)

---