Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


Plagegeister aller Art und deren Bekämpfung: Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 25.07.2011, 22:06   #1
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


So also zu meiner Frage,
ich hatte das Problem dass ich ständig wenn ich in google was gesucht hab und dann auf ein link geklickt hab immer auf andere seiten(meist pornoseiten) geschickt wurde. Malwarebytes hat ständig irgendeine russische IP geblockt. Ich hab mein Laptop neu aufgesetzt doch Malwarebytes blockiert weiterhin ständig iwelche IPs(meist russische). Das passiert auf jedem Rechner denn ich daheim habe. Grad bin ich auf der ARbeit und online über ein Umts stick und da blockiert Malwarebytes garnichts. Könnte es sein dass ich vllt ein Virus oder so in meine Router/Modem oder sonst was befindet? Gibts sowas? Hab schon mehrere Stunden in google verbracht und nach dem Problem gesucht aber nix gefunden hoffentlich könnt ihr mir helfen =)

Alt 26.07.2011, 07:45   #2
kira
/// Helfer-Team
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


Hallo und Herzlich Willkommen!

Bevor wir unsere Zusammenarbeit beginnen, [Bitte Vollständig lesen]:
Zitat:
  • "Fernbehandlungen/Fernhilfe" und die damit verbundenen Haftungsrisken:
    - da die Fehlerprüfung und Handlung werden über große Entfernungen durchgeführt, besteht keine Haftung unsererseits für die daraus entstehenden Folgen.
    - also, jede Haftung für die daraus entstandene Schäden wird ausgeschlossen, ANWEISUNGEN UND DEREN BEFOLGUNG, ERFOLGT AUF DEINE EIGENE VERANTWORTUNG!
  • Charakteristische Merkmale/Profilinformationen:
    - aus der verwendeten Loglisten oder Logdateien - wie z.B. deinen Realnamen, Seriennummer in Programm etc)- kannst Du herauslöschen oder durch [X] ersetzen
  • Die Systemprüfung und Bereinigung:
    - kann einige Zeit in Anspruch nehmen (je nach Art der Infektion), kann aber sogar so stark kompromittiert sein, so dass eine wirkungsvolle technische Säuberung ist nicht mehr möglich bzw Du es neu installieren musst
  • Ich empfehle Dir die Anweisungen erst einmal komplett durchzulesen, bevor du es anwendest, weil wenn du etwas falsch machst, kann es wirklich gefährlich werden. Wenn du meinen Anweisungen Schritt für Schritt folgst, kann eigentlich nichts schief gehen.
  • Innerhalb der Betreuungszeit:
    - ohne Abspräche bitte nicht auf eigene Faust handeln!- bei Problemen nachfragen.
  • Die Reihenfolge:
    - genau so wie beschrieben bitte einhalten, nicht selbst die Reihenfolge wählen!
  • GECRACKTE SOFTWARE werden hier nicht geduldet!!!!
  • Ansonsten unsere Forumsregeln:
    - Bitte erst lesen, dann posten!-> Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?
  • Alle Logfile mit einem vBCode Tag eingefügen, das bietet hier eine gute Übersicht, erleichtert mir die Arbeit! Falls das Logfile zu groß, teile es in mehrere Teile auf.

Sobald Du diesen Einführungstext gelesen hast, kannst Du beginnen
- Wieviele Rechner stehen bei Dir zu Hause?
- Hast Du nur einen PC formatiert, oder alle "gleichzeitig"?
- Router Passwort geschützt?
- Neustart des Routers gemacht (Reset des Routers auf die Ausgangseinstellungen)?

gruß
kira
__________________

__________________
Geändert von kira (26.07.2011 um 07:55 Uhr)

Alt 26.07.2011, 12:02   #3
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


Hi, 3 Win Rechner. Zwei sind formatiert, im abstand von paar tagen, beide Router hab ich resetted und sind mit Passwort geschützt
__________________
Alt 26.07.2011, 15:37   #4
kira
/// Helfer-Team
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


wenn Du möchtest (mit ein bisschen Aufwand zu verbunden), könnten wir alle 3 untersuchen?
Mein Vorschlag lautet:
hier beginnend mit "PC1"
für "PC2" und "PC3" (also separat voneinander) einen neuen Thema eröffnen

also für "PC1":

Für Vista und Win7:
Wichtig: Alle Befehle bitte als Administrator ausführen! rechte Maustaste auf die Eingabeaufforderung und "als Administrator ausführen" auswählen
Auf der angewählten Anwendung einen Rechtsklick (rechte Maustaste) und "Als Administrator ausführen" wählen!

1.
** Update Malwarebytes Anti-Malware, lass es nochmal anhand der folgenden Anleitung laufen:
  • per Doppelklick starten.
  • gleich mal die Datenbanken zu aktualisieren - online updaten
  • Vollständiger Suchlauf wählen (überall Haken setzen)
  • wenn der Scanvorgang beendet ist, klicke auf "Zeige Resultate"
  • alle Funde bis auf - falls MBAM meldet in C:\System Volume Information - den Haken bitte entfernen - markieren und auf "Löschen" - "Ausgewähltes entfernen") klicken.
  • Poste das Ergebnis hier in den Thread - den Bericht findest Du unter "Scan-Berichte"
eine bebilderte Anleitung findest Du hier: Anleitung

2.
Systemscan mit OTL

Lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Doppelklick auf die OTL.exe
  • Vista User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen
  • Oben findest Du ein Kästchen mit Output. Wähle bitte Minimal Output
  • Unter Extra Registry, wähle bitte Use SafeList
  • Klicke nun auf Run Scan links oben
  • Wenn der Scan beendet wurde werden 2 Logfiles erstellt
  • Poste die Logfiles in Code-Tags hier in den Thread.

3.
→ Lade Dir HJTscanlist.zip herunter
→ entpacke die Datei auf deinem Desktop
→ Bei WindowsXP Home musst vor dem Scan zusätzlich tasklist.zip installieren
→ per Doppelklick starten
→ Wähle dein Betriebsystem aus - bei Win7 wähle Vista
→ Wenn Du gefragt wirst, die Option "Einstellung" (1) - scanlist" wählen
→ Nach kurzer Zeit sollte sich Dein Editor öffnen und die Datei hjtscanlist.txt präsentieren
→ Bitte kopiere den Inhalt hier in Deinen Thread.
** Falls es klappt auf einmal nicht, kannst den Text in mehrere Teile teilen und so posten

4.
Ich würde gerne noch all deine installierten Programme sehen:
Lade dir das Tool Ccleaner herunter
→ Download
installieren (Software-Lizenzvereinbarung lesen, falls angeboten wird "Füge CCleaner Yahoo! Toolbar hinzu" abwählen)→ starten→ falls nötig - unter Options settings-> "german" einstellen
dann klick auf "Extra (um die installierten Programme auch anzuzeigen)→ weiter auf "Als Textdatei speichern..."
wird eine Textdatei (*.txt) erstellt, kopiere dazu den Inhalt und füge ihn da ein

Zitat:
Damit dein Thread übersichtlicher und schön lesbar bleibt, am besten nutze den Code-Tags für deinen Post:
→ vor dein Log schreibst Du (also am Anfang des Logfiles):[code]
hier kommt dein Logfile rein - z.B hjtsanlist o. sonstiges
→ dahinter - also am Ende der Logdatei: [/code]
** Möglichst nicht ins internet gehen, kein Online-Banking, File-sharing, Chatprogramme usw
gruß
kira
__________________

Warnung!:
Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein!
Anhang nicht öffnen, in unserem Forum erst nachfragen!
Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
Bitte diese Warnung weitergeben, wo Du nur kannst!
Alt 26.07.2011, 17:24   #5
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


Also fangen wir mal an =)
Malwarebytes:
Code:
ATTFilter
Malwarebytes' Anti-Malware 1.51.1.1800
www.malwarebytes.org

Datenbank Version: 7283

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

26.07.2011 17:51:29
mbam-log-2011-07-26 (17-51-29).txt

Art des Suchlaufs: Vollständiger Suchlauf (C:\|D:\|E:\|F:\|H:\|)
Durchsuchte Objekte: 285346
Laufzeit: 39 Minute(n), 50 Sekunde(n)

Infizierte Speicherprozesse: 0
Infizierte Speichermodule: 0
Infizierte Registrierungsschlüssel: 0
Infizierte Registrierungswerte: 0
Infizierte Dateiobjekte der Registrierung: 0
Infizierte Verzeichnisse: 0
Infizierte Dateien: 0

Infizierte Speicherprozesse:
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel:
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte:
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung:
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse:
(Keine bösartigen Objekte gefunden)

Infizierte Dateien:
(Keine bösartigen Objekte gefunden)


Alt 26.07.2011, 17:28   #6
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


ich muss den otl code teilen auf zwei posts da er zu lang ist:
OTL:
Code:
ATTFilter
OTL logfile created on: 26.07.2011 18:08:04 - Run 1
OTL by OldTimer - Version 3.2.26.1     Folder = C:\Users\Milosh\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,87 Gb Total Physical Memory | 1,92 Gb Available Physical Memory | 49,74% Memory free
7,73 Gb Paging File | 5,76 Gb Available in Paging File | 74,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 224,61 Gb Total Space | 191,91 Gb Free Space | 85,44% Space Free | Partition Type: NTFS
Drive D: | 13,00 Gb Total Space | 4,30 Gb Free Space | 33,04% Space Free | Partition Type: NTFS
Drive E: | 228,05 Gb Total Space | 7,78 Gb Free Space | 3,41% Space Free | Partition Type: NTFS
 
Computer Name: MILOSH-PC | User Name: Milosh | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - C:\Users\Milosh\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Program Files (x86)\Sophos\AutoUpdate\ALMon.exe (Sophos Limited)
PRC - C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe (Sophos Limited)
PRC - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe (Sophos Limited)
PRC - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe (Sophos Limited)
PRC - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe (Sophos Limited)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\SRWare Iron\iron.exe (SRWare)
PRC - C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.)
PRC - C:\Program Files (x86)\Launch Manager\LMworker.exe (Dritek System Inc.)
PRC - C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexStoreSvr.exe (Nero AG)
PRC - C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
 
 
========== Modules (SafeList) ==========
 
MOD - C:\Users\Milosh\Desktop\OTL.exe (OldTimer Tools)
MOD - C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL (Sophos Limited)
MOD - C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll (Microsoft Corporation)
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)
SRV - (Sophos AutoUpdate Service) -- C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe (Sophos Limited)
SRV - (SAVService) -- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe (Sophos Limited)
SRV - (SAVAdminService) -- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe (Sophos Limited)
SRV - (swi_service) -- C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe (Sophos Limited)
SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (DsiWMIService) -- C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.)
SRV - (ePowerSvc) -- C:\Programme\Acer\Acer ePower Management\ePowerSvc.exe (Acer Incorporated)
SRV - (IAStorDataMgrSvc) Intel(R) -- C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (SAVOnAccess) -- C:\Windows\SysNative\drivers\savonaccess.sys (Sophos Limited)
DRV:64bit: - (sdcfilter) -- C:\Windows\SysNative\drivers\sdcfilter.sys (Sophos Plc)
DRV:64bit: - (BCM43XX) -- C:\Windows\SysNative\drivers\BCMWL664.SYS (Broadcom Corporation)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (iaStor) -- C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (hwdatacard) -- C:\Windows\SysNative\drivers\ewusbmdm.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (ewusbnet) -- C:\Windows\SysNative\drivers\ewusbnet.sys (Huawei Technologies Co., Ltd.)
DRV:64bit: - (ElbyCDIO) -- C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (SynTP) -- C:\Windows\SysNative\drivers\SynTP.sys (Synaptics Incorporated)
DRV:64bit: - (VClone) -- C:\Windows\SysNative\drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (Ntfs) -- C:\Windows\SysNative\wbem\ntfs.mof ()
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (SophosBootDriver) -- C:\Windows\SysNative\drivers\SophosBootDriver.sys (Sophos Plc)
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.07.23 19:04:36 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.13\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2011.07.25 19:22:25 | 000,000,000 | ---D | M]
 
[2011.07.23 19:29:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Milosh\AppData\Roaming\mozilla\Extensions
[2011.07.23 19:29:26 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Milosh\AppData\Roaming\mozilla\Firefox\Profiles\7oxyhp48.default\extensions
[2011.07.23 19:04:35 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2010.12.03 20:14:08 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2010.12.03 20:14:08 | 000,002,344 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2010.12.03 20:14:08 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2010.12.03 20:14:08 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2010.12.03 20:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Sophos Web Content Scanner) - {39EA7695-B3F2-4C44-A4BC-297ADA8FD235} - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosBHOX64.dll (Sophos Limited)
O2 - BHO: (Sophos Web Content Scanner) - {39EA7695-B3F2-4C44-A4BC-297ADA8FD235} - C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SophosBHO.dll (Sophos Limited)
O4:64bit: - HKLM..\Run: [Acer ePower Management] C:\Programme\Acer\Acer ePower Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Sophos AutoUpdate Monitor] C:\Program Files (x86)\Sophos\AutoUpdate\almon.exe (Sophos Limited)
O4 - HKCU..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] C:\Program Files (x86)\Common Files\Nero\Lib\NMBgMonitor.exe (Nero AG)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O13 - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 82.212.62.62 192.168.0.1
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL) - C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~2.DLL (Sophos Limited)
O20 - AppInit_DLLs: (C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL) - C:\PROGRA~2\Sophos\SOPHOS~1\SOPHOS~1.DLL (Sophos Limited)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3ae0d4ef-b6ae-11e0-8772-9abdf88782d6}\Shell - "" = AutoRun
O33 - MountPoints2\{3ae0d4ef-b6ae-11e0-8772-9abdf88782d6}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3ae0d4f2-b6ae-11e0-8772-9abdf88782d6}\Shell - "" = AutoRun
O33 - MountPoints2\{3ae0d4f2-b6ae-11e0-8772-9abdf88782d6}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{ed1ab98e-b54c-11e0-ae87-ac901c8700d4}\Shell - "" = AutoRun
O33 - MountPoints2\{ed1ab98e-b54c-11e0-ae87-ac901c8700d4}\Shell\AutoRun\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{ed1ab98e-b54c-11e0-ae87-ac901c8700d4}\Shell\configure\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{ed1ab98e-b54c-11e0-ae87-ac901c8700d4}\Shell\install\command - "" = H:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *) -  File not found
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2011.07.26 17:13:48 | 003,216,552 | ---- | C] (Piriform Ltd) -- C:\Users\Milosh\Desktop\ccsetup308.exe
[2011.07.26 17:11:52 | 000,579,584 | ---- | C] (OldTimer Tools) -- C:\Users\Milosh\Desktop\OTL.exe
[2011.07.26 03:02:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2011.07.25 22:45:17 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Media Player Classic
[2011.07.25 22:31:44 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Adobe
[2011.07.25 22:12:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mobile Partner
[2011.07.25 22:12:02 | 001,001,472 | ---- | C] (DiBcom SA) -- C:\Windows\SysNative\drivers\mod7700.sys
[2011.07.25 22:12:02 | 000,249,856 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbnet.sys
[2011.07.25 22:12:02 | 000,120,704 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbmdm.sys
[2011.07.25 22:12:02 | 000,114,560 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ewusbdev.sys
[2011.07.25 22:12:02 | 000,032,768 | ---- | C] (Huawei Tech. Co., Ltd.) -- C:\Windows\SysNative\drivers\ewdcsc.sys
[2011.07.25 22:12:02 | 000,013,952 | ---- | C] (Huawei Technologies Co., Ltd.) -- C:\Windows\SysNative\drivers\ew_usbenumfilter.sys
[2011.07.25 22:11:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mobile Partner
[2011.07.25 19:22:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
[2011.07.25 19:22:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
[2011.07.25 19:21:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2011.07.25 19:19:36 | 000,404,640 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011.07.25 18:22:38 | 000,000,000 | ---D | C] -- C:\Users\Milosh\WELT_DER_WUNDER
[2011.07.25 17:34:24 | 000,000,000 | ---D | C] -- C:\Users\Milosh\Desktop\Neuer Ordner
[2011.07.25 13:18:44 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe
[2011.07.25 13:18:44 | 000,123,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe
[2011.07.25 13:18:41 | 000,961,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CPFilters.dll
[2011.07.25 13:18:41 | 000,723,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2011.07.25 13:18:40 | 001,118,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sbe.dll
[2011.07.25 13:18:40 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sbe.dll
[2011.07.25 13:18:40 | 000,642,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CPFilters.dll
[2011.07.25 13:18:40 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2011.07.25 13:18:40 | 000,259,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mpg2splt.ax
[2011.07.25 13:18:40 | 000,199,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mpg2splt.ax
[2011.07.25 13:18:37 | 005,562,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe
[2011.07.25 13:18:35 | 003,967,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe
[2011.07.25 13:18:35 | 003,912,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe
[2011.07.25 13:18:23 | 000,702,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2011.07.25 13:18:23 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeeds.dll
[2011.07.25 13:18:23 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2011.07.25 13:18:23 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2011.07.25 13:18:21 | 000,919,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll
[2011.07.25 13:18:21 | 000,716,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll
[2011.07.25 13:18:21 | 000,613,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbscript.dll
[2011.07.25 13:18:17 | 001,395,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42.dll
[2011.07.25 13:18:17 | 001,359,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfc42u.dll
[2011.07.25 13:18:17 | 001,164,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42u.dll
[2011.07.25 13:18:17 | 001,137,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc42.dll
[2011.07.25 13:18:16 | 000,367,616 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysNative\atmfd.dll
[2011.07.25 13:18:16 | 000,294,912 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\atmfd.dll
[2011.07.25 13:18:16 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontsub.dll
[2011.07.25 13:18:16 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontsub.dll
[2011.07.25 13:18:16 | 000,046,080 | ---- | C] (Adobe Systems) -- C:\Windows\SysNative\atmlib.dll
[2011.07.25 13:18:16 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\SysWow64\atmlib.dll
[2011.07.25 13:18:15 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnsapi.dll
[2011.07.25 13:18:15 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscacheugc.exe
[2011.07.25 13:18:15 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscacheugc.exe
[2011.07.25 13:18:05 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KernelBase.dll
[2011.07.25 13:18:05 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64win.dll
[2011.07.25 13:18:04 | 001,162,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kernel32.dll
[2011.07.25 13:18:04 | 000,338,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\conhost.exe
[2011.07.25 13:18:04 | 000,243,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64.dll
[2011.07.25 13:18:04 | 000,214,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsrv.dll
[2011.07.25 13:18:04 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe
[2011.07.25 13:18:03 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntvdm64.dll
[2011.07.25 13:18:03 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll
[2011.07.25 13:18:03 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wow64cpu.dll
[2011.07.25 13:18:03 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe
[2011.07.25 13:18:03 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll
[2011.07.25 13:18:03 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processthreads-l1-1-0.dll
[2011.07.25 13:18:03 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localregistry-l1-1-0.dll
[2011.07.25 13:18:03 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.25 13:18:03 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-libraryloader-l1-1-0.dll
[2011.07.25 13:18:02 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
[2011.07.25 13:18:02 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-security-base-l1-1-0.dll
[2011.07.25 13:18:02 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll
[2011.07.25 13:18:02 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-file-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-threadpool-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-sysinfo-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-synch-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll
[2011.07.25 13:18:02 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-localization-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-processenvironment-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-namedpipe-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-misc-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-memory-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-heap-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-xstate-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-util-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-string-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-profile-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-io-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-interlocked-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-handle-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-fibers-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-errorhandling-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-delayload-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-debug-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-datetime-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll
[2011.07.25 13:18:02 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-console-l1-1-0.dll
[2011.07.25 13:18:02 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe
[2011.07.25 13:17:59 | 000,642,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.efi
[2011.07.25 13:17:59 | 000,605,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winload.exe
[2011.07.25 13:17:59 | 000,566,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.efi
[2011.07.25 13:17:59 | 000,518,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winresume.exe
[2011.07.25 13:17:59 | 000,020,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdusb.dll
[2011.07.25 13:17:59 | 000,019,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kd1394.dll
[2011.07.25 13:17:59 | 000,017,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kdcom.dll
[2011.07.25 13:17:58 | 000,861,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\oleaut32.dll
[2011.07.25 13:17:57 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvinst.exe
[2011.07.25 13:17:57 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\devrtl.dll
[2011.07.25 13:17:55 | 000,267,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSCOVER.exe
[2011.07.23 19:29:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Sophos Web Intelligence
[2011.07.23 19:29:24 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Mozilla
[2011.07.23 19:29:24 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Mozilla
[2011.07.23 19:29:20 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sophos
[2011.07.23 19:29:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Cisco Systems
[2011.07.23 19:29:19 | 000,037,400 | ---- | C] (Sophos Limited) -- C:\Windows\SysNative\SophosBootTasks.exe
[2011.07.23 19:27:27 | 000,144,160 | ---- | C] (Sophos Limited) -- C:\Windows\SysNative\drivers\savonaccess.sys
[2011.07.23 19:27:25 | 000,026,104 | ---- | C] (Sophos Plc) -- C:\Windows\SysNative\drivers\sdcfilter.sys
[2011.07.23 19:27:13 | 000,183,024 | ---- | C] (Sophos Plc) -- C:\Windows\SysNative\sdccoinstaller.dll
[2011.07.23 19:25:06 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Macromedia
[2011.07.23 19:25:06 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Adobe
[2011.07.23 19:12:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
[2011.07.23 19:12:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Elaborate Bytes
[2011.07.23 19:12:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SRWare Iron
[2011.07.23 19:12:37 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Chromium
[2011.07.23 19:12:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\SRWare Iron
[2011.07.23 19:11:58 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack
[2011.07.23 19:11:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Combined Community Codec Pack
[2011.07.23 19:11:35 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.07.23 19:11:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2011.07.23 19:11:33 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2011.07.23 19:10:21 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Ahead
[2011.07.23 19:10:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nero 8
[2011.07.23 19:08:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Nero
[2011.07.23 19:08:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Nero
[2011.07.23 19:08:27 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Nero
[2011.07.23 19:07:11 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_30.dll
[2011.07.23 19:07:10 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3dx9_28.dll
[2011.07.23 19:05:33 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Sophos
[2011.07.23 19:04:48 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Macromed
[2011.07.23 19:04:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox
[2011.07.23 19:04:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2011.07.23 19:03:12 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Malwarebytes
[2011.07.23 19:03:06 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.07.23 19:03:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2011.07.23 19:03:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2011.07.23 19:03:02 | 000,025,912 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2011.07.23 19:03:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2011.07.23 18:51:16 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\SPReview
[2011.07.23 18:33:37 | 000,000,000 | ---D | C] -- C:\Windows\Panther
[2011.07.23 18:26:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Cisco
[2011.07.23 18:25:46 | 004,171,328 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\BCMWL664.SYS
[2011.07.23 18:25:46 | 003,896,632 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\bcmihvsrv64.dll
[2011.07.23 18:25:46 | 003,561,272 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\bcmihvui64.dll
[2011.07.23 18:25:46 | 000,095,544 | ---- | C] (Broadcom Corporation) -- C:\Windows\SysNative\bcmwlcoi.dll
[2011.07.23 18:25:46 | 000,000,000 | ---D | C] -- C:\Program Files\Broadcom
[2011.07.23 18:24:53 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2011.07.23 18:14:09 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSAC3ENC.DLL
[2011.07.23 18:14:09 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MMDevAPI.dll
[2011.07.23 18:14:09 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprddm.dll
[2011.07.23 18:14:09 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mobsync.exe
[2011.07.23 18:14:09 | 000,101,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mobsync.exe
[2011.07.23 18:14:08 | 001,808,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pnidui.dll
[2011.07.23 18:14:08 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RacEngn.dll
[2011.07.23 18:14:08 | 001,050,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\printui.dll
[2011.07.23 18:14:08 | 000,762,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdcpl.dll
[2011.07.23 18:14:08 | 000,552,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdri.dll
[2011.07.23 18:14:08 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qedit.dll
[2011.07.23 18:14:08 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate.exe
[2011.07.23 18:14:08 | 000,318,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\raschap.dll
[2011.07.23 18:14:08 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MediaMetadataHandler.dll
[2011.07.23 18:14:08 | 000,241,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Ribbons.scr
[2011.07.23 18:14:08 | 000,219,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iTVData.dll
[2011.07.23 18:14:08 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstask.dll
[2011.07.23 18:14:08 | 000,194,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\itircl.dll
[2011.07.23 18:14:08 | 000,171,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\scsiport.sys
[2011.07.23 18:14:08 | 000,125,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inseng.dll
[2011.07.23 18:14:08 | 000,102,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kstvtune.ax
[2011.07.23 18:14:08 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\Robocopy.exe
[2011.07.23 18:14:08 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logagent.exe
[2011.07.23 18:14:08 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscories.dll
[2011.07.23 18:14:08 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksxbar.ax
[2011.07.23 18:14:08 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetmib1.dll
[2011.07.23 18:14:08 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2011.07.23 18:14:08 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pifmgr.dll
[2011.07.23 18:14:08 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\lsmproxy.dll
[2011.07.23 18:14:08 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2011.07.23 18:14:08 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDCZ1.DLL
[2011.07.23 18:14:08 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBLR.DLL
[2011.07.23 18:14:08 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDLT1.DLL
[2011.07.23 18:14:08 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTEL.DLL
[2011.07.23 18:14:07 | 003,391,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbgeng.dll
[2011.07.23 18:14:07 | 002,652,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netshell.dll
[2011.07.23 18:14:07 | 001,796,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certmgr.dll
[2011.07.23 18:14:07 | 001,731,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2011.07.23 18:14:07 | 001,340,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diagperf.dll
[2011.07.23 18:14:07 | 001,003,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cryptui.dll
[2011.07.23 18:14:07 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OobeFldr.dll
[2011.07.23 18:14:07 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cdosys.dll
[2011.07.23 18:14:07 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netlogon.dll
[2011.07.23 18:14:07 | 000,573,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10level9.dll
[2011.07.23 18:14:07 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10level9.dll
[2011.07.23 18:14:07 | 000,460,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\certcli.dll
[2011.07.23 18:14:07 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcfgx.dll
[2011.07.23 18:14:07 | 000,321,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2011.07.23 18:14:07 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmd.exe
[2011.07.23 18:14:07 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgent.dll
[2011.07.23 18:14:07 | 000,212,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbctrac.dll
[2011.07.23 18:14:07 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpclip.exe
[2011.07.23 18:14:07 | 000,210,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncsi.dll
[2011.07.23 18:14:07 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netjoin.dll
[2011.07.23 18:14:07 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schtasks.exe
[2011.07.23 18:14:07 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiohlp.dll
[2011.07.23 18:14:07 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfmon.exe
[2011.07.23 18:14:07 | 000,147,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RDPENCDD.dll
[2011.07.23 18:14:07 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdd.dll
[2011.07.23 18:14:07 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nslookup.exe
[2011.07.23 18:14:07 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertPolEng.dll
[2011.07.23 18:14:07 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntlanman.dll
[2011.07.23 18:14:07 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlsbres.dll
[2011.07.23 18:14:07 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncryptui.dll
[2011.07.23 18:14:07 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MultiDigiMon.exe
[2011.07.23 18:14:07 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdhui.dll
[2011.07.23 18:14:07 | 000,027,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys
[2011.07.23 18:14:07 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netiougc.exe
[2011.07.23 18:14:07 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdprefdrvapi.dll
[2011.07.23 18:14:07 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\C_ISCII.DLL
[2011.07.23 18:14:06 | 002,067,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d9.dll
[2011.07.23 18:14:06 | 001,927,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\authui.dll
[2011.07.23 18:14:06 | 001,792,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll
[2011.07.23 18:14:06 | 001,244,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2fs.dll
[2011.07.23 18:14:06 | 001,087,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dbghelp.dll
[2011.07.23 18:14:06 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Display.dll
[2011.07.23 18:14:06 | 000,665,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuxiliaryDisplayCpl.dll
[2011.07.23 18:14:06 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comdlg32.dll
[2011.07.23 18:14:06 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AdmTmpl.dll
[2011.07.23 18:14:06 | 000,508,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxgi.dll
[2011.07.23 18:14:06 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\evr.dll
[2011.07.23 18:14:06 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imkr80.ime
[2011.07.23 18:14:06 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aeinv.dll
[2011.07.23 18:14:06 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aepdu.dll
[2011.07.23 18:14:06 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2.dll
[2011.07.23 18:14:06 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2011.07.23 18:14:06 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdedit.exe
[2011.07.23 18:14:06 | 000,258,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\dxgmms1.sys
[2011.07.23 18:14:06 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2011.07.23 18:14:06 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\activeds.dll
[2011.07.23 18:14:06 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dskquoui.dll
[2011.07.23 18:14:06 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AudioSes.dll
[2011.07.23 18:14:06 | 000,168,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdsrv.dll
[2011.07.23 18:14:06 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayServices.dll
[2011.07.23 18:14:06 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskpart.exe
[2011.07.23 18:14:06 | 000,112,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\consent.exe
[2011.07.23 18:14:06 | 000,107,904 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdsata.sys
[2011.07.23 18:14:06 | 000,078,720 | ---- | C] (Hewlett-Packard Company) -- C:\Windows\SysNative\drivers\HpSAMD.sys
[2011.07.23 18:14:06 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\acppage.dll
[2011.07.23 18:14:06 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ftp.exe
[2011.07.23 18:14:06 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\g711codc.ax
[2011.07.23 18:14:06 | 000,027,008 | ---- | C] (Advanced Micro Devices) -- C:\Windows\SysNative\drivers\amdxata.sys
[2011.07.23 18:14:06 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\elsTrans.dll
[2011.07.23 18:14:05 | 001,866,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ExplorerFrame.dll
[2011.07.23 18:14:05 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ExplorerFrame.dll
[2011.07.23 18:14:05 | 000,867,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SearchFolder.dll
[2011.07.23 18:14:05 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\systemcpl.dll
[2011.07.23 18:14:05 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sysmon.ocx
[2011.07.23 18:14:05 | 000,355,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Faultrep.dll
[2011.07.23 18:14:05 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscfgwmi.dll
[2011.07.23 18:14:03 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themecpl.dll
[2011.07.23 18:14:03 | 001,888,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVDECOD.DLL
[2011.07.23 18:14:03 | 001,232,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMADMOD.DLL
[2011.07.23 18:14:03 | 001,197,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskschd.dll
[2011.07.23 18:14:03 | 000,978,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMSPDMOD.DLL
[2011.07.23 18:14:03 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpmde.dll
[2011.07.23 18:14:03 | 000,684,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TabletPC.cpl
[2011.07.23 18:14:03 | 000,636,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmdev.dll
[2011.07.23 18:14:03 | 000,605,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpeffects.dll
[2011.07.23 18:14:03 | 000,527,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmnet.dll
[2011.07.23 18:14:03 | 000,451,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shwebsvc.dll
[2011.07.23 18:14:03 | 000,340,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srchadmin.dll
[2011.07.23 18:14:03 | 000,244,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqmapi.dll
[2011.07.23 18:14:03 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spp.dll
[2011.07.23 18:14:03 | 000,207,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysclass.dll
[2011.07.23 18:14:03 | 000,189,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\storport.sys
[2011.07.23 18:14:03 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpsrcwp.dll
[2011.07.23 18:14:03 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpipcfg.dll
[2011.07.23 18:14:03 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\thumbcache.dll
[2011.07.23 18:14:03 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shsetup.dll
[2011.07.23 18:14:03 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppinst.dll
[2011.07.23 18:14:03 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tabcal.exe
[2011.07.23 18:14:03 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spbcd.dll
[2011.07.23 18:14:02 | 002,621,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wucltux.dll
[2011.07.23 18:14:02 | 001,753,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vssapi.dll
[2011.07.23 18:14:02 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdc.dll
[2011.07.23 18:14:02 | 000,611,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpd_ci.dll
[2011.07.23 18:14:02 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wvc.dll
[2011.07.23 18:14:02 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiadefui.dll
[2011.07.23 18:14:02 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2011.07.23 18:14:02 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WPDSp.dll
[2011.07.23 18:14:02 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\untfs.dll
[2011.07.23 18:14:02 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2011.07.23 18:14:02 | 000,297,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ws2_32.dll
[2011.07.23 18:14:02 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsqmcons.exe
[2011.07.23 18:14:02 | 000,222,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanconn.dll
[2011.07.23 18:14:02 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wavemsp.dll
[2011.07.23 18:14:02 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdwcn.dll
[2011.07.23 18:14:02 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuwebv.dll
[2011.07.23 18:14:02 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsRasterService.dll
[2011.07.23 18:14:02 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shacct.dll
[2011.07.23 18:14:02 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vss_ps.dll
[2011.07.23 18:14:02 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\umb.dll
[2011.07.23 18:14:02 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2011.07.23 18:14:02 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tzutil.exe
[2011.07.23 18:14:02 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vbisurf.ax
[2011.07.23 18:14:02 | 000,040,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wtsapi32.dll
[2011.07.23 18:14:02 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unlodctr.exe
[2011.07.23 18:14:02 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapp.exe
[2011.07.23 18:14:02 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsdchngr.dll
[2011.07.23 18:14:02 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WerFaultSecure.exe
[2011.07.23 18:14:01 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc.dll
[2011.07.23 18:14:01 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupugc.exe
[2011.07.23 18:14:00 | 004,120,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mf.dll
[2011.07.23 18:14:00 | 000,957,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mblctr.exe
[2011.07.23 18:14:00 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40u.dll
[2011.07.23 18:14:00 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfds.dll
[2011.07.23 18:14:00 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSAC3ENC.DLL
[2011.07.23 18:14:00 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ksproxy.ax
[2011.07.23 18:14:00 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MFPlay.dll
[2011.07.23 18:14:00 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfps.dll
[2011.07.23 18:14:00 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprapi.dll
[2011.07.23 18:14:00 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\itircl.dll
[2011.07.23 18:14:00 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscorier.dll
[2011.07.23 18:14:00 | 000,154,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscorier.dll
[2011.07.23 18:14:00 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logoncli.dll
[2011.07.23 18:14:00 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\logman.exe
[2011.07.23 18:14:00 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\luainstall.dll
[2011.07.23 18:14:00 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mimefilt.dll
[2011.07.23 18:14:00 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\LogonUI.exe
[2011.07.23 18:14:00 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoff.exe
[2011.07.23 18:14:00 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUF.DLL
[2011.07.23 18:14:00 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGKL.DLL
[2011.07.23 18:14:00 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINBEN.DLL
[2011.07.23 18:14:00 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUS.DLL
[2011.07.23 18:14:00 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSF.DLL
[2011.07.23 18:13:59 | 002,086,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ole32.dll
[2011.07.23 18:13:59 | 001,911,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OpcServices.dll
[2011.07.23 18:13:59 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshipsec.dll
[2011.07.23 18:13:59 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msinfo32.exe
[2011.07.23 18:13:59 | 000,221,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\OnLineIDCpl.dll
[2011.07.23 18:13:59 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OnLineIDCpl.dll
[2011.07.23 18:13:59 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetup.exe
[2011.07.23 18:13:59 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ocsetapi.dll
[2011.07.23 18:13:59 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netutils.dll
[2011.07.23 18:13:58 | 001,401,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssrch.dll
[2011.07.23 18:13:58 | 001,049,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstsc.exe
[2011.07.23 18:13:58 | 000,902,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2011.07.23 18:13:58 | 000,787,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d11.dll
[2011.07.23 18:13:58 | 000,668,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autochk.exe
[2011.07.23 18:13:58 | 000,666,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssvp.dll
[2011.07.23 18:13:58 | 000,571,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mspbda.dll
[2011.07.23 18:13:58 | 000,457,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdrm.dll
[2011.07.23 18:13:58 | 000,363,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskraid.exe
[2011.07.23 18:13:58 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll
[2011.07.23 18:13:58 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3ui.dll
[2011.07.23 18:13:58 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drvstore.dll
[2011.07.23 18:13:58 | 000,219,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10_1core.dll
[2011.07.23 18:13:58 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mssphtb.dll
[2011.07.23 18:13:58 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\credui.dll
[2011.07.23 18:13:58 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CscMig.dll
[2011.07.23 18:13:58 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3cfg.dll
[2011.07.23 18:13:58 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll
[2011.07.23 18:13:58 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MuiUnattend.exe
[2011.07.23 18:13:58 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3cfg.dll
[2011.07.23 18:13:58 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPCRYPT.DLL
[2011.07.23 18:13:58 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPCRYPT.DLL
[2011.07.23 18:13:58 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\choice.exe
[2011.07.23 18:13:58 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdmo.dll
[2011.07.23 18:13:58 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgusr.exe
[2011.07.23 18:13:58 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\muifontsetup.dll
[2011.07.23 18:13:58 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2011.07.23 18:13:57 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\accessibilitycpl.dll
[2011.07.23 18:13:57 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DxpTaskSync.dll
[2011.07.23 18:13:57 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertEnroll.dll
[2011.07.23 18:13:57 | 001,148,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IMJP10.IME
[2011.07.23 18:13:57 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IMJP10.IME
[2011.07.23 18:13:57 | 000,899,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Bubbles.scr
[2011.07.23 18:13:57 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Bubbles.scr
[2011.07.23 18:13:57 | 000,675,328 | ---- | C] (Microsoft Corporation) --

Alt 26.07.2011, 17:31   #7
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


teil2 des otl codes:
Code:
ATTFilter
C:\Windows\SysNative\DXPTaskRingtone.dll
[2011.07.23 18:13:57 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gpprefcl.dll
[2011.07.23 18:13:57 | 000,549,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenterCPL.dll
[2011.07.23 18:13:57 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imapi2.dll
[2011.07.23 18:13:57 | 000,438,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AdmTmpl.dll
[2011.07.23 18:13:57 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fveapi.dll
[2011.07.23 18:13:57 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\apphelp.dll
[2011.07.23 18:13:57 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapp3hst.dll
[2011.07.23 18:13:57 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eapphost.dll
[2011.07.23 18:13:57 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxdiagn.dll
[2011.07.23 18:13:57 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe
[2011.07.23 18:13:57 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabview.dll
[2011.07.23 18:13:57 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IcCoinstall.dll
[2011.07.23 18:13:57 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cca.dll
[2011.07.23 18:13:57 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eappgnui.dll
[2011.07.23 18:13:57 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll
[2011.07.23 18:13:57 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imgutil.dll
[2011.07.23 18:13:57 | 000,027,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\HotStartUserAgent.dll
[2011.07.23 18:13:57 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chgport.exe
[2011.07.23 18:13:57 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\chglogon.exe
[2011.07.23 18:13:57 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\change.exe
[2011.07.23 18:13:56 | 003,860,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbon.dll
[2011.07.23 18:13:56 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbon.dll
[2011.07.23 18:13:56 | 002,755,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\themeui.dll
[2011.07.23 18:13:56 | 002,616,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\explorer.exe
[2011.07.23 18:13:56 | 001,698,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\esent.dll
[2011.07.23 18:13:56 | 001,548,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tquery.dll
[2011.07.23 18:13:56 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UIRibbonRes.dll
[2011.07.23 18:13:56 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UIRibbonRes.dll
[2011.07.23 18:13:56 | 000,861,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fontext.dll
[2011.07.23 18:13:56 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsmf.dll
[2011.07.23 18:13:56 | 000,281,600 | ---- | C] (Microsoft) -- C:\Windows\SysNative\DShowRdpFilter.dll
[2011.07.23 18:13:56 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\efscore.dll
[2011.07.23 18:13:56 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fde.dll
[2011.07.23 18:13:56 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tskill.exe
[2011.07.23 18:13:56 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tscon.exe
[2011.07.23 18:13:56 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\elsTrans.dll
[2011.07.23 18:13:56 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsdiscon.exe
[2011.07.23 18:13:56 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TRAPI.dll
[2011.07.23 18:13:56 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TRAPI.dll
[2011.07.23 18:13:56 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyExtension.dll
[2011.07.23 18:13:56 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbRedirectionGroupPolicyControl.exe
[2011.07.23 18:13:55 | 003,957,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSAT.exe
[2011.07.23 18:13:55 | 002,543,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpdshext.dll
[2011.07.23 18:13:55 | 002,504,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVCORE.DLL
[2011.07.23 18:13:55 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SyncCenter.dll
[2011.07.23 18:13:55 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPEncEn.dll
[2011.07.23 18:13:55 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVDECOD.DLL
[2011.07.23 18:13:55 | 001,363,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdc.dll
[2011.07.23 18:13:55 | 001,243,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMNetMgr.dll
[2011.07.23 18:13:55 | 000,800,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usp10.dll
[2011.07.23 18:13:55 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMSPDMOD.DLL
[2011.07.23 18:13:55 | 000,666,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVSDECD.DLL
[2011.07.23 18:13:55 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\usercpl.dll
[2011.07.23 18:13:55 | 000,594,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wvc.dll
[2011.07.23 18:13:55 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskschd.dll
[2011.07.23 18:13:55 | 000,474,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sysmon.ocx
[2011.07.23 18:13:55 | 000,470,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsGdiConverter.dll
[2011.07.23 18:13:55 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanui.dll
[2011.07.23 18:13:55 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\zipfldr.dll
[2011.07.23 18:13:55 | 000,307,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wusa.exe
[2011.07.23 18:13:55 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskmgr.exe
[2011.07.23 18:13:55 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskbarcpl.dll
[2011.07.23 18:13:55 | 000,229,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsRasterService.dll
[2011.07.23 18:13:55 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\upnp.dll
[2011.07.23 18:13:55 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VBICodec.ax
[2011.07.23 18:13:55 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wdscore.dll
[2011.07.23 18:13:55 | 000,178,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuwebv.dll
[2011.07.23 18:13:55 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\t2embed.dll
[2011.07.23 18:13:55 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDShServiceObj.dll
[2011.07.23 18:13:55 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\t2embed.dll
[2011.07.23 18:13:55 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WSTPager.ax
[2011.07.23 18:13:55 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\UserAccountControlSettings.dll
[2011.07.23 18:13:55 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wsnmp32.dll
[2011.07.23 18:13:55 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\takeown.exe
[2011.07.23 18:13:55 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TsUsbGDCoInstaller.dll
[2011.07.23 18:13:55 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapp.exe
[2011.07.23 18:13:55 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syssetup.dll
[2011.07.23 18:13:54 | 002,262,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SyncCenter.dll
[2011.07.23 18:13:54 | 000,751,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll
[2011.07.23 18:13:54 | 000,633,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched20.dll
[2011.07.23 18:13:54 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PerfCenterCPL.dll
[2011.07.23 18:13:54 | 000,492,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll
[2011.07.23 18:13:54 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercpl.dll
[2011.07.23 18:13:54 | 000,406,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scesrv.dll
[2011.07.23 18:13:54 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastls.dll
[2011.07.23 18:13:54 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scansetting.dll
[2011.07.23 18:13:54 | 000,274,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpdd.dll
[2011.07.23 18:13:54 | 000,244,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicsvc.exe
[2011.07.23 18:13:54 | 000,236,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pdh.dll
[2011.07.23 18:13:54 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Ribbons.scr
[2011.07.23 18:13:54 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qcap.dll
[2011.07.23 18:13:54 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceSyncProvider.dll
[2011.07.23 18:13:54 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\perfmon.exe
[2011.07.23 18:13:54 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\powercfg.cpl
[2011.07.23 18:13:54 | 000,128,000 | ---- | C] (Microsoft) -- C:\Windows\SysNative\Robocopy.exe
[2011.07.23 18:13:54 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\regapi.dll
[2011.07.23 18:13:54 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rastapi.dll
[2011.07.23 18:13:54 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\runonce.exe
[2011.07.23 18:13:54 | 000,053,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmicres.dll
[2011.07.23 18:13:54 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rtutils.dll
[2011.07.23 18:13:54 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmictimeprovider.dll
[2011.07.23 18:13:54 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\relog.exe
[2011.07.23 18:13:54 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rwinsta.exe
[2011.07.23 18:13:54 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\schedcli.dll
[2011.07.23 18:13:54 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\reset.exe
[2011.07.23 18:13:54 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\riched32.dll
[2011.07.23 18:13:53 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2011.07.23 18:13:53 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmiEngine.dll
[2011.07.23 18:13:53 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sud.dll
[2011.07.23 18:13:53 | 000,598,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spinstall.exe
[2011.07.23 18:13:53 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2011.07.23 18:13:53 | 000,483,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\StructuredQuery.dll
[2011.07.23 18:13:53 | 000,418,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppwinob.dll
[2011.07.23 18:13:53 | 000,349,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slui.exe
[2011.07.23 18:13:53 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spreview.exe
[2011.07.23 18:13:53 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srrstr.dll
[2011.07.23 18:13:53 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizui.dll
[2011.07.23 18:13:53 | 000,250,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdv.dll
[2011.07.23 18:13:53 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppcomapi.dll
[2011.07.23 18:13:53 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppcomapi.dll
[2011.07.23 18:13:53 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\splwow64.exe
[2011.07.23 18:13:53 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PushPrinterConnections.exe
[2011.07.23 18:13:53 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qprocess.exe
[2011.07.23 18:13:53 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qappsrv.exe
[2011.07.23 18:13:53 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\query.exe
[2011.07.23 18:13:53 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\slwga.dll
[2011.07.23 18:13:53 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shunimpl.dll
[2011.07.23 18:13:52 | 000,357,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sharemediacpl.dll
[2011.07.23 18:13:52 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setupcln.dll
[2011.07.23 18:13:52 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shadow.exe
[2011.07.23 18:13:51 | 001,447,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2011.07.23 18:13:51 | 000,955,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll
[2011.07.23 18:13:51 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imapi2fs.dll
[2011.07.23 18:13:51 | 000,653,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lpksetup.exe
[2011.07.23 18:13:51 | 000,345,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MediaMetadataHandler.dll
[2011.07.23 18:13:51 | 000,272,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcbuilder.exe
[2011.07.23 18:13:51 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\IPHLPAPI.DLL
[2011.07.23 18:13:51 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Kswdmcap.ax
[2011.07.23 18:13:51 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logman.exe
[2011.07.23 18:13:51 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\migisol.dll
[2011.07.23 18:13:51 | 000,096,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll
[2011.07.23 18:13:51 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\manage-bde.exe
[2011.07.23 18:13:51 | 000,072,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mpeg2Data.ax
[2011.07.23 18:13:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSG.DLL
[2011.07.23 18:13:51 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\kbdlk41a.dll
[2011.07.23 18:13:51 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUF.DLL
[2011.07.23 18:13:51 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDSG.DLL
[2011.07.23 18:13:51 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDNEPR.DLL
[2011.07.23 18:13:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDUGHR1.DLL
[2011.07.23 18:13:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTAJIK.DLL
[2011.07.23 18:13:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDPO.DLL
[2011.07.23 18:13:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINORI.DLL
[2011.07.23 18:13:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINKAN.DLL
[2011.07.23 18:13:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINKAN.DLL
[2011.07.23 18:13:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINHIN.DLL
[2011.07.23 18:13:51 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBULG.DLL
[2011.07.23 18:13:51 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUGHR1.DLL
[2011.07.23 18:13:51 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMAORI.DLL
[2011.07.23 18:13:51 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBLR.DLL
[2011.07.23 18:13:50 | 002,494,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netshell.dll
[2011.07.23 18:13:50 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\networkmap.dll
[2011.07.23 18:13:50 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pnidui.dll
[2011.07.23 18:13:50 | 000,758,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceApi.dll
[2011.07.23 18:13:50 | 000,720,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbc32.dll
[2011.07.23 18:13:50 | 000,658,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PerfCenterCPL.dll
[2011.07.23 18:13:50 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nshwfp.dll
[2011.07.23 18:13:50 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mscms.dll
[2011.07.23 18:13:50 | 000,435,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceStatus.dll
[2011.07.23 18:13:50 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ipsmsnap.dll
[2011.07.23 18:13:50 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdrm.dll
[2011.07.23 18:13:50 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iTVData.dll
[2011.07.23 18:13:50 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iprtrmgr.dll
[2011.07.23 18:13:50 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iprtrmgr.dll
[2011.07.23 18:13:50 | 000,224,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PortableDeviceSyncProvider.dll
[2011.07.23 18:13:50 | 000,165,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netid.dll
[2011.07.23 18:13:50 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbctrac.dll
[2011.07.23 18:13:50 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsicli.exe
[2011.07.23 18:13:50 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\isoburn.exe
[2011.07.23 18:13:50 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\olethk32.dll
[2011.07.23 18:13:50 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nlsbres.dll
[2011.07.23 18:13:50 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PnPUnattend.exe
[2011.07.23 18:13:50 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSDvbNP.ax
[2011.07.23 18:13:50 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcconf.dll
[2011.07.23 18:13:50 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iscsium.dll
[2011.07.23 18:13:50 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netbtugc.exe
[2011.07.23 18:13:50 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nrpsrv.dll
[2011.07.23 18:13:49 | 001,975,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\CertEnroll.dll
[2011.07.23 18:13:49 | 001,065,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cryptui.dll
[2011.07.23 18:13:49 | 000,799,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msftedit.dll
[2011.07.23 18:13:49 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\calc.exe
[2011.07.23 18:13:49 | 000,739,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d2d1.dll
[2011.07.23 18:13:49 | 000,641,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msscp.dll
[2011.07.23 18:13:49 | 000,339,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appmgr.dll
[2011.07.23 18:13:49 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msnetobj.dll
[2011.07.23 18:13:49 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\clusapi.dll
[2011.07.23 18:13:49 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msieftp.dll
[2011.07.23 18:13:49 | 000,242,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mystify.scr
[2011.07.23 18:13:49 | 000,240,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscobj.dll
[2011.07.23 18:13:49 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstask.dll
[2011.07.23 18:13:49 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DevicePairingFolder.dll
[2011.07.23 18:13:49 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DevicePairingFolder.dll
[2011.07.23 18:13:49 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSNP.ax
[2011.07.23 18:13:49 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msorcl32.dll
[2011.07.23 18:13:49 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabview.dll
[2011.07.23 18:13:49 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NAPHLPR.DLL
[2011.07.23 18:13:49 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\desk.cpl
[2011.07.23 18:13:49 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nci.dll
[2011.07.23 18:13:49 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\napdsnap.dll
[2011.07.23 18:13:49 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\napdsnap.dll
[2011.07.23 18:13:49 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\CertPolEng.dll
[2011.07.23 18:13:49 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\acppage.dll
[2011.07.23 18:13:49 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\muifontsetup.dll
[2011.07.23 18:13:48 | 001,076,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DWrite.dll
[2011.07.23 18:13:48 | 000,934,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FirewallControlPanel.dll
[2011.07.23 18:13:48 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FirewallControlPanel.dll
[2011.07.23 18:13:48 | 000,840,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\blackbox.dll
[2011.07.23 18:13:48 | 000,777,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autochk.exe
[2011.07.23 18:13:48 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenter.dll
[2011.07.23 18:13:48 | 000,740,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\batmeter.dll
[2011.07.23 18:13:48 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuxiliaryDisplayCpl.dll
[2011.07.23 18:13:48 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DXPTaskRingtone.dll
[2011.07.23 18:13:48 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ActionCenterCPL.dll
[2011.07.23 18:13:48 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\biocpl.dll
[2011.07.23 18:13:48 | 000,495,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drmmgrtn.dll
[2011.07.23 18:13:48 | 000,459,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DXP.dll
[2011.07.23 18:13:48 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gdi32.dll
[2011.07.23 18:13:48 | 000,332,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgcpl.dll
[2011.07.23 18:13:48 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hgcpl.dll
[2011.07.23 18:13:48 | 000,298,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcryptprimitives.dll
[2011.07.23 18:13:48 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpx.dll
[2011.07.23 18:13:48 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hgprint.dll
[2011.07.23 18:13:48 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\FWPUCLNT.DLL
[2011.07.23 18:13:48 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2011.07.23 18:13:48 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ie4uinit.exe
[2011.07.23 18:13:48 | 000,166,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\basecsp.dll
[2011.07.23 18:13:48 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\diskpart.exe
[2011.07.23 18:13:48 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fphc.dll
[2011.07.23 18:13:48 | 000,116,224 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysNative\fms.dll
[2011.07.23 18:13:48 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dnscmmc.dll
[2011.07.23 18:13:48 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\hidclass.sys
[2011.07.23 18:13:48 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2011.07.23 18:13:48 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\findstr.exe
[2011.07.23 18:13:48 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\g711codc.ax
[2011.07.23 18:13:48 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BlbEvents.dll
[2011.07.23 18:13:48 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ftp.exe
[2011.07.23 18:13:48 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSMON.dll
[2011.07.23 18:13:48 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsauth.dll
[2011.07.23 18:13:48 | 000,018,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSUNATD.exe
[2011.07.23 18:13:48 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dpnaddr.dll
[2011.07.23 18:13:47 | 002,565,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\esent.dll
[2011.07.23 18:13:47 | 002,193,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themecpl.dll
[2011.07.23 18:13:47 | 001,457,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DxpTaskSync.dll
[2011.07.23 18:13:47 | 000,515,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\timedate.cpl
[2011.07.23 18:13:47 | 000,403,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\untfs.dll
[2011.07.23 18:13:47 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eudcedit.exe
[2011.07.23 18:13:47 | 000,313,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3ui.dll
[2011.07.23 18:13:47 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\eudcedit.exe
[2011.07.23 18:13:47 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tlscsp.dll
[2011.07.23 18:13:47 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tcpmonui.dll
[2011.07.23 18:13:47 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fdeploy.dll
[2011.07.23 18:13:47 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\takeown.exe
[2011.07.23 18:13:47 | 000,032,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\USBCAMD2.sys
[2011.07.23 18:13:46 | 001,190,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsCodecs.dll
[2011.07.23 18:13:46 | 000,781,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmdrmsdk.dll
[2011.07.23 18:13:46 | 000,475,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlangpui.dll
[2011.07.23 18:13:46 | 000,442,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winspool.drv
[2011.07.23 18:13:46 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanmsm.dll
[2011.07.23 18:13:46 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanmsm.dll
[2011.07.23 18:13:46 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPhoto.dll
[2011.07.23 18:13:46 | 000,390,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winlogon.exe
[2011.07.23 18:13:46 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WindowsAnytimeUpgradeResults.exe
[2011.07.23 18:13:46 | 000,264,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\upnp.dll
[2011.07.23 18:13:46 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpsrcwp.dll
[2011.07.23 18:13:46 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2011.07.23 18:13:46 | 000,172,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\twext.dll
[2011.07.23 18:13:46 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\twext.dll
[2011.07.23 18:13:46 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2011.07.23 18:13:46 | 000,134,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSCard.dll
[2011.07.23 18:13:46 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wkscli.dll
[2011.07.23 18:13:46 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdmat.dll
[2011.07.23 18:13:46 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys
[2011.07.23 18:13:46 | 000,058,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tzutil.exe
[2011.07.23 18:13:46 | 000,029,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2011.07.23 18:13:45 | 002,311,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdshext.dll
[2011.07.23 18:13:45 | 001,281,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\werconcpl.dll
[2011.07.23 18:13:45 | 001,158,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webservices.dll
[2011.07.23 18:13:45 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Vault.dll
[2011.07.23 18:13:45 | 000,870,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsPrint.dll
[2011.07.23 18:13:45 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webservices.dll
[2011.07.23 18:13:45 | 000,695,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuapi.dll
[2011.07.23 18:13:45 | 000,691,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VAN.dll
[2011.07.23 18:13:45 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMVSDECD.DLL
[2011.07.23 18:13:45 | 000,462,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiadefui.dll
[2011.07.23 18:13:45 | 000,431,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WPDSp.dll
[2011.07.23 18:13:45 | 000,424,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rastls.dll
[2011.07.23 18:13:45 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_isv.dll
[2011.07.23 18:13:45 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimgapi.dll
[2011.07.23 18:13:45 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wer.dll
[2011.07.23 18:13:45 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wimserv.exe
[2011.07.23 18:13:45 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wusa.exe
[2011.07.23 18:13:45 | 000,255,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wavemsp.dll
[2011.07.23 18:13:45 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsutil.dll
[2011.07.23 18:13:45 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\remotepg.dll
[2011.07.23 18:13:45 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wiavideo.dll
[2011.07.23 18:13:45 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wudriver.dll
[2011.07.23 18:13:45 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\w32tm.exe
[2011.07.23 18:13:45 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpd3d.dll
[2011.07.23 18:13:45 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsnmp32.dll
[2011.07.23 18:13:45 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wwanprotdim.dll
[2011.07.23 18:13:45 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\relog.exe
[2011.07.23 18:13:45 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups.dll
[2011.07.23 18:13:45 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ReAgentc.exe
[2011.07.23 18:13:44 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Query.dll
[2011.07.23 18:13:44 | 001,556,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RacEngn.dll
[2011.07.23 18:13:44 | 001,219,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpcrt4.dll
[2011.07.23 18:13:44 | 001,212,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\propsys.dll
[2011.07.23 18:13:44 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll
[2011.07.23 18:13:44 | 000,446,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlcese30.dll
[2011.07.23 18:13:44 | 000,337,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\raschap.dll
[2011.07.23 18:13:44 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_isv.exe
[2011.07.23 18:13:44 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVol.exe
[2011.07.23 18:13:44 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp_isv.exe
[2011.07.23 18:13:44 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rstrui.exe
[2011.07.23 18:13:44 | 000,266,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QAGENT.DLL
[2011.07.23 18:13:44 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scecli.dll
[2011.07.23 18:13:44 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SndVolSSO.dll
[2011.07.23 18:13:44 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scecli.dll
[2011.07.23 18:13:44 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QAGENT.DLL
[2011.07.23 18:13:44 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll
[2011.07.23 18:13:44 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp_isv.dll
[2011.07.23 18:13:44 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prntvpt.dll
[2011.07.23 18:13:44 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QUTIL.DLL
[2011.07.23 18:13:44 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QCLIPROV.DLL
[2011.07.23 18:13:44 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\psisrndr.ax
[2011.07.23 18:13:44 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QCLIPROV.DLL
[2011.07.23 18:13:44 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\proquota.exe
[2011.07.23 18:13:44 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prevhost.exe
[2011.07.23 18:13:44 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2011.07.23 18:13:43 | 000,102,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppnp.dll
[2011.07.23 18:13:43 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spopk.dll
[2011.07.23 18:13:42 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mf.dll
[2011.07.23 18:13:42 | 003,205,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmcndmgr.dll
[2011.07.23 18:13:42 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmcndmgr.dll
[2011.07.23 18:13:42 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onexui.dll
[2011.07.23 18:13:42 | 000,905,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mmsys.cpl
[2011.07.23 18:13:42 | 000,850,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mmsys.cpl
[2011.07.23 18:13:42 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbc32.dll
[2011.07.23 18:13:42 | 000,509,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntshrui.dll
[2011.07.23 18:13:42 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceStatus.dll
[2011.07.23 18:13:42 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfds.dll
[2011.07.23 18:13:42 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mprddm.dll
[2011.07.23 18:13:42 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mcbuilder.exe
[2011.07.23 18:13:42 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netplwiz.dll
[2011.07.23 18:13:42 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\logoncli.dll
[2011.07.23 18:13:42 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetup.exe
[2011.07.23 18:13:42 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ocsetapi.dll
[2011.07.23 18:13:42 | 000,133,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Kswdmcap.ax
[2011.07.23 18:13:42 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntlanman.dll
[2011.07.23 18:13:42 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netid.dll
[2011.07.23 18:13:42 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\IPHLPAPI.DLL
[2011.07.23 18:13:42 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nslookup.exe
[2011.07.23 18:13:42 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciavi32.dll
[2011.07.23 18:13:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mapistub.dll
[2011.07.23 18:13:42 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mapi32.dll
[2011.07.23 18:13:42 | 000,048,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netfxperf.dll
[2011.07.23 18:13:42 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pifmgr.dll
[2011.07.23 18:13:42 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTUQ.DLL
[2011.07.23 18:13:42 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDSF.DLL
[2011.07.23 18:13:42 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDPO.DLL
[2011.07.23 18:13:42 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGR1.DLL
[2011.07.23 18:13:42 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDNEPR.DLL
[2011.07.23 18:13:42 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMON.DLL
[2011.07.23 18:13:42 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINMAR.DLL
[2011.07.23 18:13:42 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTURME.DLL
[2011.07.23 18:13:42 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGEO.DLL
[2011.07.23 18:13:42 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGEO.DLL
[2011.07.23 18:13:41 | 002,223,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssrch.dll
[2011.07.23 18:13:41 | 001,116,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstsc.exe
[2011.07.23 18:13:41 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssvp.dll
[2011.07.23 18:13:41 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msieftp.dll
[2011.07.23 18:13:41 | 000,319,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbcjt32.dll
[2011.07.23 18:13:41 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mssphtb.dll
[2011.07.23 18:13:41 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Mystify.scr
[2011.07.23 18:13:41 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\onex.dll
[2011.07.23 18:13:41 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll
[2011.07.23 18:13:41 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll
[2011.07.23 18:13:41 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\net1.exe
[2011.07.23 18:13:41 | 000,143,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mydocs.dll
[2011.07.23 18:13:41 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msvfw32.dll
[2011.07.23 18:13:41 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ncryptui.dll
[2011.07.23 18:13:41 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbcconf.dll
[2011.07.23 18:13:41 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msasn1.dll
[2011.07.23 18:13:40 | 003,745,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\accessibilitycpl.dll
[2011.07.23 18:13:40 | 001,838,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2011.07.23 18:13:40 | 001,828,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d9.dll
[2011.07.23 18:13:40 | 001,133,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cdosys.dll
[2011.07.23 18:13:40 | 001,130,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfshim.dll
[2011.07.23 18:13:40 | 000,958,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\actxprxy.dll
[2011.07.23 18:13:40 | 000,780,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionCenter.dll
[2011.07.23 18:13:40 | 000,763,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autofmt.exe
[2011.07.23 18:13:40 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d11.dll
[2011.07.23 18:13:40 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DeviceCenter.dll
[2011.07.23 18:13:40 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll
[2011.07.23 18:13:40 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ActionQueue.dll
[2011.07.23 18:13:40 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cfgmgr32.dll
[2011.07.23 18:13:40 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adsldp.dll
[2011.07.23 18:13:40 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bcdboot.exe
[2011.07.23 18:13:40 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoplay.dll
[2011.07.23 18:13:40 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\basecsp.dll
[2011.07.23 18:13:40 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\davclnt.dll
[2011.07.23 18:13:40 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cabinet.dll
[2011.07.23 18:13:40 | 000,092,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmstp.exe
[2011.07.23 18:13:40 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\avifil32.dll
[2011.07.23 18:13:40 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\davclnt.dll
[2011.07.23 18:13:39 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AuthFWSnapin.dll
[2011.07.23 18:13:39 | 002,872,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\explorer.exe
[2011.07.23 18:13:39 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Display.dll
[2011.07.23 18:13:39 | 000,828,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fontext.dll
[2011.07.23 18:13:39 | 000,630,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\evr.dll
[2011.07.23 18:13:39 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2011.07.23 18:13:39 | 000,422,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drvstore.dll
[2011.07.23 18:13:39 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\intl.cpl
[2011.07.23 18:13:39 | 000,304,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\efscore.dll
[2011.07.23 18:13:39 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHost.exe
[2011.07.23 18:13:39 | 000,288,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\FWPKCLNT.SYS
[2011.07.23 18:13:39 | 000,263,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hal.dll
[2011.07.23 18:13:39 | 000,253,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tcpipcfg.dll
[2011.07.23 18:13:39 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedynos.dll
[2011.07.23 18:13:39 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\framedyn.dll
[2011.07.23 18:13:39 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\syncui.dll
[2011.07.23 18:13:39 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fde.dll
[2011.07.23 18:13:39 | 000,166,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetpp.dll
[2011.07.23 18:13:39 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imagehlp.dll
[2011.07.23 18:13:39 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmredir.dll
[2011.07.23 18:13:39 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3msm.dll
[2011.07.23 18:13:39 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dot3api.dll
[2011.07.23 18:13:39 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsauth.dll
[2011.07.23 18:13:39 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\httpapi.dll
[2011.07.23 18:13:38 | 002,314,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tquery.dll
[2011.07.23 18:13:38 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlsrv32.dll
[2011.07.23 18:13:38 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizeng.dll
[2011.07.23 18:13:38 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMPhoto.dll
[2011.07.23 18:13:38 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqlcese30.dll
[2011.07.23 18:13:38 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\srchadmin.dll
[2011.07.23 18:13:38 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ssText3d.scr
[2011.07.23 18:13:38 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVol.exe
[2011.07.23 18:13:38 | 000,225,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SndVolSSO.dll
[2011.07.23 18:13:38 | 000,217,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSCard.dll
[2011.07.23 18:13:38 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpps.dll
[2011.07.23 18:13:38 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\srvcli.dll
[2011.07.23 18:13:38 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sppc.dll
[2011.07.23 18:13:38 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wdiasqmmodule.dll
[2011.07.23 18:13:38 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwizres.dll
[2011.07.23 18:13:37 | 001,098,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Vault.dll
[2011.07.23 18:13:37 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMADMOD.DLL
[2011.07.23 18:13:37 | 000,529,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wbemcomn.dll
[2011.07.23 18:13:37 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmdev.dll
[2011.07.23 18:13:37 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmnet.dll
[2011.07.23 18:13:37 | 000,358,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpdxm.dll
[2011.07.23 18:13:37 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdm.tsp
[2011.07.23 18:13:37 | 000,299,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpdxm.dll
[2011.07.23 18:13:37 | 000,285,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schtasks.exe
[2011.07.23 18:13:37 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnike.dll
[2011.07.23 18:13:37 | 000,129,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmdCoinstall.dll
[2011.07.23 18:13:37 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_ssp.dll
[2011.07.23 18:13:37 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\uxlib.dll
[2011.07.23 18:13:37 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wscapi.dll
[2011.07.23 18:13:37 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vpnikeapi.dll
[2011.07.23 18:13:37 | 000,038,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmstorfltres.dll
[2011.07.23 18:13:37 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\utildll.dll
[2011.07.23 18:13:37 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\schedcli.dll
[2011.07.23 18:13:36 | 002,250,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SensorsCpl.dll
[2011.07.23 18:13:36 | 001,900,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupapi.dll
[2011.07.23 18:13:36 | 001,572,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2011.07.23 18:13:36 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2011.07.23 18:13:36 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2011.07.23 18:13:36 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\riched20.dll
[2011.07.23 18:13:36 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shlwapi.dll
[2011.07.23 18:13:36 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prnfldr.dll
[2011.07.23 18:13:36 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_ssp.exe
[2011.07.23 18:13:36 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdv.dll
[2011.07.23 18:13:36 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qasf.dll
[2011.07.23 18:13:36 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shdocvw.dll
[2011.07.23 18:13:36 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rpchttp.dll
[2011.07.23 18:13:36 | 000,183,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prncache.dll
[2011.07.23 18:13:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationSettings.exe
[2011.07.23 18:13:36 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSHVHOST.DLL
[2011.07.23 18:13:36 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recovery.dll
[2011.07.23 18:13:36 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shacct.dll
[2011.07.23 18:13:36 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QUTIL.DLL
[2011.07.23 18:13:36 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\QSVRMGMT.DLL
[2011.07.23 18:13:36 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setbcdlocale.dll
[2011.07.23 18:13:36 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shimgvw.dll
[2011.07.23 18:13:36 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\proquota.exe
[2011.07.23 18:13:36 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdprefdrvapi.dll
[2011.07.23 18:13:36 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\riched32.dll
[2011.07.23 18:13:35 | 001,538,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl
[2011.07.23 18:13:35 | 001,326,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\NaturalLanguage6.dll
[2011.07.23 18:13:35 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfc40.dll
[2011.07.23 18:13:35 | 000,519,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcfgx.dll
[2011.07.23 18:13:35 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\main.cpl
[2011.07.23 18:13:35 | 000,433,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MCEWMDRMNDBootstrap.dll
[2011.07.23 18:13:35 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\localsec.dll
[2011.07.23 18:13:35 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\intl.cpl
[2011.07.23 18:13:35 | 000,215,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netiohlp.dll
[2011.07.23 18:13:35 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\input.dll
[2011.07.23 18:13:35 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ncsi.dll
[2011.07.23 18:13:35 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsicli.exe
[2011.07.23 18:13:35 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MdSched.exe
[2011.07.23 18:13:35 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mydocs.dll
[2011.07.23 18:13:35 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\NAPHLPR.DLL
[2011.07.23 18:13:35 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\isoburn.exe
[2011.07.23 18:13:35 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kstvtune.ax
[2011.07.23 18:13:35 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2011.07.23 18:13:35 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2011.07.23 18:13:35 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsmproxy.dll
[2011.07.23 18:13:35 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netfxperf.dll
[2011.07.23 18:13:35 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksxbar.ax
[2011.07.23 18:13:35 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\httpapi.dll
[2011.07.23 18:13:35 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mimefilt.dll
[2011.07.23 18:13:35 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mciqtz32.dll
[2011.07.23 18:13:35 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iscsium.dll
[2011.07.23 18:13:35 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mciqtz32.dll
[2011.07.23 18:13:35 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDCZ1.DLL
[2011.07.23 18:13:35 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\kbdlk41a.dll
[2011.07.23 18:13:35 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTAM.DLL
[2011.07.23 18:13:35 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDGR1.DLL
[2011.07.23 18:13:35 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDGKL.DLL
[2011.07.23 18:13:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTURME.DLL
[2011.07.23 18:13:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDMAORI.DLL
[2011.07.23 18:13:35 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINBEN.DLL
[2011.07.23 18:13:35 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBULG.DLL
[2011.07.23 18:13:35 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDBASH.DLL
[2011.07.23 18:13:34 | 003,215,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mstscax.dll
[2011.07.23 18:13:34 | 003,211,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msi.dll
[2011.07.23 18:13:34 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbgeng.dll
[2011.07.23 18:13:34 | 002,341,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msi.dll
[2011.07.23 18:13:34 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bootres.dll
[2011.07.23 18:13:34 | 001,689,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netcenter.dll
[2011.07.23 18:13:34 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certmgr.dll
[2011.07.23 18:13:34 | 001,509,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdtctm.dll
[2011.07.23 18:13:34 | 001,456,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\crypt32.dll
[2011.07.23 18:13:34 | 001,171,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\d3d10warp.dll
[2011.07.23 18:13:34 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSMPEG2ENC.DLL
[2011.07.23 18:13:34 | 000,854,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dbghelp.dll
[2011.07.23 18:13:34 | 000,721,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bthprops.cpl
[2011.07.23 18:13:34 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msscp.dll
[2011.07.23 18:13:34 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nltest.exe
[2011.07.23 18:13:34 | 000,372,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mtxclu.dll
[2011.07.23 18:13:34 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cmd.exe
[2011.07.23 18:13:34 | 000,344,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntprint.dll
[2011.07.23 18:13:34 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mtxclu.dll
[2011.07.23 18:13:34 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntprint.dll
[2011.07.23 18:13:34 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSNP.ax
[2011.07.23 18:13:34 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msnetobj.dll
[2011.07.23 18:13:34 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\defaultlocationcpl.dll
[2011.07.23 18:13:34 | 000,230,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\clusapi.dll
[2011.07.23 18:13:34 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mprapi.dll
[2011.07.23 18:13:34 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\credui.dll
[2011.07.23 18:13:34 | 000,179,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Classpnp.sys
[2011.07.23 18:13:34 | 000,175,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netplwiz.dll
[2011.07.23 18:13:34 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netjoin.dll
[2011.07.23 18:13:34 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cscobj.dll
[2011.07.23 18:13:34 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Mpeg2Data.ax
[2011.07.23 18:13:34 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cmstp.exe
[2011.07.23 18:13:34 | 000,075,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\MSDvbNP.ax
[2011.07.23 18:13:34 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\BWUnpairElevated.dll
[2011.07.23 18:13:34 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msdxm.ocx
[2011.07.23 18:13:34 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysNative\api-ms-win-core-ums-l1-1-0.dll
[2011.07.23 18:13:33 | 002,746,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gameux.dll
[2011.07.23 18:13:33 | 001,544,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2011.07.23 18:13:33 | 000,897,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroles.dll
[2011.07.23 18:13:33 | 000,793,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\autoconv.exe
[2011.07.23 18:13:33 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroles.dll
[2011.07.23 18:13:33 | 000,749,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\batmeter.dll
[2011.07.23 18:13:33 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\blackbox.dll
[2011.07.23 18:13:33 | 000,685,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dsuiext.dll
[2011.07.23 18:13:33 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxgi.dll
[2011.07.23 18:13:33 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autofmt.exe
[2011.07.23 18:13:33 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapp3hst.dll
[2011.07.23 18:13:33 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Faultrep.dll
[2011.07.23 18:13:33 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eapphost.dll
[2011.07.23 18:13:33 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AudioSes.dll
[2011.07.23 18:13:33 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxdiagn.dll
[2011.07.23 18:13:33 | 000,243,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\audiodev.dll
[2011.07.23 18:13:33 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsadmin.exe
[2011.07.23 18:13:33 | 000,155,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\ataport.sys
[2011.07.23 18:13:33 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoplay.dll
[2011.07.23 18:13:33 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\aaclient.dll
[2011.07.23 18:13:33 | 000,126,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\audiodg.exe
[2011.07.23 18:13:33 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aitagent.exe
[2011.07.23 18:13:33 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\eappgnui.dll
[2011.07.23 18:13:33 | 000,089,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\amstream.dll
[2011.07.23 18:13:33 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\hbaapi.dll
[2011.07.23 18:13:33 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdProxy.dll
[2011.07.23 18:13:33 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\amstream.dll
[2011.07.23 18:13:33 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AzSqlExt.dll
[2011.07.23 18:13:33 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\AzSqlExt.dll
[2011.07.23 18:13:33 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsperf.dll
[2011.07.23 18:13:33 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dxmasf.dll
[2011.07.23 18:13:32 | 001,942,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfshim.dll
[2011.07.23 18:13:32 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dfrgui.exe
[2011.07.23 18:13:32 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\DeviceCenter.dll
[2011.07.23 18:13:32 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\drmmgrtn.dll
[2011.07.23 18:13:32 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpx.dll
[2011.07.23 18:13:32 | 000,295,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedynos.dll
[2011.07.23 18:13:32 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\framedyn.dll
[2011.07.23 18:13:32 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\diskraid.exe
[2011.07.23 18:13:32 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\SysWow64\DShowRdpFilter.dll
[2011.07.23 18:13:32 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3msm.dll
[2011.07.23 18:13:32 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\fphc.dll
[2011.07.23 18:13:32 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dot3api.dll
[2011.07.23 18:13:32 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\djoin.exe
[2011.07.23 18:13:31 | 014,633,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmp.dll
[2011.07.23 18:13:31 | 003,027,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMVCORE.DLL
[2011.07.23 18:13:31 | 001,082,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppobjs.dll
[2011.07.23 18:13:31 | 001,008,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\user32.dll
[2011.07.23 18:13:31 | 000,769,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sud.dll
[2011.07.23 18:13:31 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\TSWorkspace.dll
[2011.07.23 18:13:31 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\timedate.cpl
[2011.07.23 18:13:31 | 000,473,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskcomp.dll
[2011.07.23 18:13:31 | 000,464,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskeng.exe
[2011.07.23 18:13:31 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ssText3d.scr
[2011.07.23 18:13:31 | 000,281,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\unimdm.tsp
[2011.07.23 18:13:31 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsmf.dll
[2011.07.23 18:13:31 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\odbccp32.dll
[2011.07.23 18:13:31 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syncui.dll
[2011.07.23 18:13:31 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\unimdmat.dll
[2011.07.23 18:13:31 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tlscsp.dll
[2011.07.23 18:13:31 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\taskhost.exe
[2011.07.23 18:13:31 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\tsgqec.dll
[2011.07.23 18:13:31 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbrpm.sys
[2011.07.23 18:13:31 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spopk.dll
[2011.07.23 18:13:31 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\syssetup.dll
[2011.07.23 18:13:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sscore.dll
[2011.07.23 18:13:31 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwmp.dll
[2011.07.23 18:13:30 | 012,625,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmploc.DLL
[2011.07.23 18:13:30 | 003,008,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\xpsservices.dll
[2011.07.23 18:13:30 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\xpsservices.dll
[2011.07.23 18:13:30 | 001,441,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanpref.dll
[2011.07.23 18:13:30 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlanpref.dll
[2011.07.23 18:13:30 | 001,024,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpmde.dll
[2011.07.23 18:13:30 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WFS.exe
[2011.07.23 18:13:30 | 000,932,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\printui.dll
[2011.07.23 18:13:30 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OobeFldr.dll
[2011.07.23 18:13:30 | 000,681,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFx.dll
[2011.07.23 18:13:30 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmdrmsdk.dll
[2011.07.23 18:13:30 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PortableDeviceApi.dll
[2011.07.23 18:13:30 | 000,501,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WinSATAPI.dll
[2011.07.23 18:13:30 | 000,486,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercpl.dll
[2011.07.23 18:13:30 | 000,429,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\puiobj.dll
[2011.07.23 18:13:30 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prnfldr.dll
[2011.07.23 18:13:30 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wlanui.dll
[2011.07.23 18:13:30 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wlangpui.dll
[2011.07.23 18:13:30 | 000,409,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\photowiz.dll
[2011.07.23 18:13:30 | 000,405,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wisptis.exe
[2011.07.23 18:13:30 | 000,320,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHost.exe
[2011.07.23 18:13:30 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ReAgent.dll
[2011.07.23 18:13:30 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Wldap32.dll
[2011.07.23 18:13:30 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\pdh.dll
[2011.07.23 18:13:30 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\XpsGdiConverter.dll
[2011.07.23 18:13:30 | 000,254,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qasf.dll
[2011.07.23 18:13:30 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\winsta.dll
[2011.07.23 18:13:30 | 000,226,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFHost.exe
[2011.07.23 18:13:30 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSHVHOST.DLL
[2011.07.23 18:13:30 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rasppp.dll
[2011.07.23 18:13:30 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PkgMgr.exe
[2011.07.23 18:13:30 | 000,199,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PkgMgr.exe
[2011.07.23 18:13:30 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wpdwcn.dll
[2011.07.23 18:13:30 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vdsbas.dll
[2011.07.23 18:13:30 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpencom.dll
[2011.07.23 18:13:30 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFPlatform.dll
[2011.07.23 18:13:30 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rasppp.dll
[2011.07.23 18:13:30 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpendp.dll
[2011.07.23 18:13:30 | 000,153,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\remotepg.dll
[2011.07.23 18:13:30 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2011.07.23 18:13:30 | 000,140,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpendp.dll
[2011.07.23 18:13:30 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\VmbusCoinstaller.dll
[2011.07.23 18:13:30 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\QSVRMGMT.DLL
[2011.07.23 18:13:30 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\odbccp32.dll
[2011.07.23 18:13:30 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prncache.dll
[2011.07.23 18:13:30 | 000,109,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PresentationHostProxy.dll
[2011.07.23 18:13:30 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\psisrndr.ax
[2011.07.23 18:13:30 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PresentationHostProxy.dll
[2011.07.23 18:13:30 | 000,088,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\setupcl.exe
[2011.07.23 18:13:30 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2011.07.23 18:13:30 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\regapi.dll
[2011.07.23 18:13:30 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\resutils.dll
[2011.07.23 18:13:30 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpd3d.dll
[2011.07.23 18:13:30 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WavDest.dll
[2011.07.23 18:13:30 | 000,052,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\winhv.sys
[2011.07.23 18:13:30 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PrintIsolationProxy.dll
[2011.07.23 18:13:30 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WUDFCoinstaller.dll
[2011.07.23 18:13:30 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbusres.dll
[2011.07.23 18:13:30 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vbisurf.ax
[2011.07.23 18:13:30 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\prevhost.exe
[2011.07.23 18:13:30 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WerFaultSecure.exe
[2011.07.23 18:13:30 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vpnikeapi.dll
[2011.07.23 18:13:30 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\perfts.dll
[2011.07.23 18:13:30 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\vmbuspipe.dll
[2011.07.23 18:13:29 | 002,202,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SensorsCpl.dll
[2011.07.23 18:13:29 | 000,758,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samsrv.dll
[2011.07.23 18:13:29 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msftedit.dll
[2011.07.23 18:13:29 | 000,568,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scrptadm.dll
[2011.07.23 18:13:29 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc.dll
[2011.07.23 18:13:29 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mscms.dll
[2011.07.23 18:13:29 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shwebsvc.dll
[2011.07.23 18:13:29 | 000,359,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate.exe
[2011.07.23 18:13:29 | 000,300,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msconfig.exe
[2011.07.23 18:13:29 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sethc.exe
[2011.07.23 18:13:29 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp_isv.exe
[2011.07.23 18:13:29 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sethc.exe
[2011.07.23 18:13:29 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scansetting.dll
[2011.07.23 18:13:29 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\SmartcardCredentialProvider.dll
[2011.07.23 18:13:29 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\SmartcardCredentialProvider.dll
[2011.07.23 18:13:29 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\scavengeui.dll
[2011.07.23 18:13:29 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\rmcast.sys
[2011.07.23 18:13:29 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shsetup.dll
[2011.07.23 18:13:29 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp_isv.dll
[2011.07.23 18:13:29 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\samcli.dll
[2011.07.23 18:13:29 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RpcRtRemote.dll
[2011.07.23 18:13:29 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\runonce.exe
[2011.07.23 18:13:29 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shimgvw.dll
[2011.07.23 18:13:29 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rtutils.dll
[2011.07.23 18:13:29 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdmo.dll
[2011.07.23 18:13:29 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\shgina.dll
[2011.07.23 18:13:29 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sisbkup.dll
[2011.07.23 18:13:29 | 000,020,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shgina.dll
[2011.07.23 18:13:29 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sisbkup.dll
[2011.07.23 18:13:29 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\slwga.dll
[2011.07.23 18:13:29 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\shunimpl.dll
[2011.07.23 18:13:29 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msdxm.ocx
[2011.07.23 18:13:28 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmploc.DLL
[2011.07.23 18:13:28 | 011,410,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmp.dll
[2011.07.23 18:13:28 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\AuthFWSnapin.dll
[2011.07.23 18:13:28 | 002,072,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\WMPEncEn.dll
[2011.07.23 18:13:28 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WMNetMgr.dll
[2011.07.23 18:13:28 | 000,726,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appwiz.cpl
[2011.07.23 18:13:28 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\autoconv.exe
[2011.07.23 18:13:28 | 000,649,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appwiz.cpl
[2011.07.23 18:13:28 | 000,582,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sxs.dll
[2011.07.23 18:13:28 | 000,524,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmicmiplugin.dll
[2011.07.23 18:13:28 | 000,481,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpps.dll
[2011.07.23 18:13:28 | 000,479,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\appmgr.dll
[2011.07.23 18:13:28 | 000,472,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\azroleui.dll
[2011.07.23 18:13:28 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpeffects.dll
[2011.07.23 18:13:28 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WinSATAPI.dll
[2011.07.23 18:13:28 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\azroleui.dll
[2011.07.23 18:13:28 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\stobject.dll
[2011.07.23 18:13:28 | 000,248,832 | ---- | C] (Microsoft Corporation) --

Alt 26.07.2011, 17:32   #8
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


teil3 -.-
Code:
ATTFilter
C:\Windows\SysNative\wksprt.exe
[2011.07.23 18:13:28 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll
[2011.07.23 18:13:28 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winsta.dll
[2011.07.23 18:13:28 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll
[2011.07.23 18:13:28 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll
[2011.07.23 18:13:28 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.07.23 18:13:28 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.07.23 18:13:28 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wkscli.dll
[2011.07.23 18:13:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2011.07.23 18:13:28 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sscore.dll
[2011.07.23 18:13:27 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2011.07.23 18:13:27 | 002,146,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkmap.dll
[2011.07.23 18:13:27 | 001,672,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkexplorer.dll
[2011.07.23 18:13:27 | 001,264,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2011.07.23 18:13:27 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll
[2011.07.23 18:13:27 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdengin2.dll
[2011.07.23 18:13:27 | 001,080,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onexui.dll
[2011.07.23 18:13:27 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlsrv32.dll
[2011.07.23 18:13:27 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pmcsnap.dll
[2011.07.23 18:13:27 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoScreensaver.scr
[2011.07.23 18:13:27 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrptadm.dll
[2011.07.23 18:13:27 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshipsec.dll
[2011.07.23 18:13:27 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll
[2011.07.23 18:13:27 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\termmgr.dll
[2011.07.23 18:13:27 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2011.07.23 18:13:27 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoScreensaver.scr
[2011.07.23 18:13:27 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\termmgr.dll
[2011.07.23 18:13:27 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scesrv.dll
[2011.07.23 18:13:27 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2011.07.23 18:13:27 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\photowiz.dll
[2011.07.23 18:13:27 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recdisc.exe
[2011.07.23 18:13:27 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ppcsnap.dll
[2011.07.23 18:13:27 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onex.dll
[2011.07.23 18:13:27 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskmgr.exe
[2011.07.23 18:13:27 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll
[2011.07.23 18:13:27 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl
[2011.07.23 18:13:27 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prntvpt.dll
[2011.07.23 18:13:27 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll
[2011.07.23 18:13:27 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll
[2011.07.23 18:13:27 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\repair-bde.exe
[2011.07.23 18:13:27 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tdi.sys
[2011.07.23 18:13:27 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
[2011.07.23 18:13:27 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizres.dll
[2011.07.23 18:13:26 | 003,715,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2011.07.23 18:13:26 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcenter.dll
[2011.07.23 18:13:26 | 001,465,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.07.23 18:13:26 | 001,363,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Query.dll
[2011.07.23 18:13:26 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Narrator.exe
[2011.07.23 18:13:26 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2011.07.23 18:13:26 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll
[2011.07.23 18:13:26 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2011.07.23 18:13:26 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipsmsnap.dll
[2011.07.23 18:13:26 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2011.07.23 18:13:26 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localsec.dll
[2011.07.23 18:13:26 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2011.07.23 18:13:26 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe
[2011.07.23 18:13:26 | 000,376,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2011.07.23 18:13:26 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2011.07.23 18:13:26 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2011.07.23 18:13:26 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.exe
[2011.07.23 18:13:26 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\puiobj.dll
[2011.07.23 18:13:26 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netdiagfx.dll
[2011.07.23 18:13:26 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2011.07.23 18:13:26 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netdiagfx.dll
[2011.07.23 18:13:26 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll
[2011.07.23 18:13:26 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksproxy.ax
[2011.07.23 18:13:26 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qcap.dll
[2011.07.23 18:13:26 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msutb.dll
[2011.07.23 18:13:26 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
[2011.07.23 18:13:26 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\net1.exe
[2011.07.23 18:13:26 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nci.dll
[2011.07.23 18:13:26 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2011.07.23 18:13:26 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2011.07.23 18:13:26 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSTPager.ax
[2011.07.23 18:13:26 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2011.07.23 18:13:26 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetmib1.dll
[2011.07.23 18:13:26 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2011.07.23 18:13:26 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PushPrinterConnections.exe
[2011.07.23 18:13:26 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2011.07.23 18:13:26 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profprov.dll
[2011.07.23 18:13:26 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2011.07.23 18:13:26 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsdchngr.dll
[2011.07.23 18:13:26 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshirda.dll
[2011.07.23 18:13:26 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshirda.dll
[2011.07.23 18:13:26 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcfgex.dll
[2011.07.23 18:13:25 | 001,466,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2011.07.23 18:13:25 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DiagCpl.dll
[2011.07.23 18:13:25 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll
[2011.07.23 18:13:25 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2011.07.23 18:13:25 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll
[2011.07.23 18:13:25 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll
[2011.07.23 18:13:25 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\main.cpl
[2011.07.23 18:13:25 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2011.07.23 18:13:25 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2011.07.23 18:13:25 | 000,299,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2011.07.23 18:13:25 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2011.07.23 18:13:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2011.07.23 18:13:25 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll
[2011.07.23 18:13:25 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vdsbas.dll
[2011.07.23 18:13:25 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxlib.dll
[2011.07.23 18:13:25 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VBICodec.ax
[2011.07.23 18:13:25 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiavideo.dll
[2011.07.23 18:13:25 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userenv.dll
[2011.07.23 18:13:25 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapistub.dll
[2011.07.23 18:13:25 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapi32.dll
[2011.07.23 18:13:25 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountControlSettings.dll
[2011.07.23 18:13:25 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vfwwdm32.dll
[2011.07.23 18:13:25 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\luainstall.dll
[2011.07.23 18:13:25 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUQ.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDLT1.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTEL.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTAM.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINORI.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINMAR.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINHIN.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBASH.DLL
[2011.07.23 18:13:25 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUS.DLL
[2011.07.23 18:13:25 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTAJIK.DLL
[2011.07.23 18:13:25 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMON.DLL
[2011.07.23 18:13:23 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
[2011.07.23 18:13:23 | 001,632,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2011.07.23 18:13:23 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2011.07.23 18:13:23 | 000,784,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpprefcl.dll
[2011.07.23 18:13:23 | 000,780,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
[2011.07.23 18:13:23 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsuiext.dll
[2011.07.23 18:13:23 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl
[2011.07.23 18:13:23 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2011.07.23 18:13:23 | 000,623,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSAPI.dll
[2011.07.23 18:13:23 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe
[2011.07.23 18:13:23 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscui.dll
[2011.07.23 18:13:23 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSTIFF.dll
[2011.07.23 18:13:23 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imkr80.ime
[2011.07.23 18:13:23 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll
[2011.07.23 18:13:23 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dskquoui.dll
[2011.07.23 18:13:23 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsadmin.exe
[2011.07.23 18:13:23 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\defaultlocationcpl.dll
[2011.07.23 18:13:23 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifsutil.dll
[2011.07.23 18:13:23 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifsutil.dll
[2011.07.23 18:13:23 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorAPI.dll
[2011.07.23 18:13:23 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EhStorAPI.dll
[2011.07.23 18:13:23 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\desk.cpl
[2011.07.23 18:13:23 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscmmc.dll
[2011.07.23 18:13:23 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2011.07.23 18:13:23 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll
[2011.07.23 18:13:23 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2011.07.23 18:13:23 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabinet.dll
[2011.07.23 18:13:23 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdeploy.dll
[2011.07.23 18:13:23 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\findstr.exe
[2011.07.23 18:13:23 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hbaapi.dll
[2011.07.23 18:13:23 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cca.dll
[2011.07.23 18:13:23 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2011.07.23 18:13:23 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscapi.dll
[2011.07.23 18:13:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscdll.dll
[2011.07.23 18:13:23 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsperf.dll
[2011.07.23 18:13:23 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fixmapi.exe
[2011.07.23 18:13:23 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_ISCII.DLL
[2011.07.23 18:13:23 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
[2011.07.23 18:13:23 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnaddr.dll
[2011.07.23 18:11:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders
[2011.07.23 18:09:19 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Intel Corporation
[2011.07.23 18:05:03 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games
[2011.07.23 18:01:10 | 000,000,000 | ---D | C] -- C:\ProgramData\OEM
[2011.07.23 18:01:02 | 000,000,000 | ---D | C] -- C:\Program Files\Acer
[2011.07.23 17:59:42 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2011.07.23 17:58:15 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2011.07.23 17:57:47 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011.07.23 17:57:42 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2011.07.23 17:57:42 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2011.07.23 17:57:42 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll
[2011.07.23 17:57:42 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2011.07.23 17:57:42 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2011.07.23 17:57:42 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2011.07.23 17:57:41 | 002,004,072 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2011.07.23 17:57:41 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2011.07.23 17:57:41 | 000,078,672 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll
[2011.07.23 17:57:41 | 000,078,672 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll
[2011.07.23 17:57:41 | 000,071,504 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2011.07.23 17:57:40 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2011.07.23 17:57:39 | 002,622,056 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2011.07.23 17:57:39 | 001,216,104 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2011.07.23 17:57:39 | 000,476,264 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2011.07.23 17:57:39 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2011.07.23 17:57:39 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2011.07.23 17:57:39 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2011.07.23 17:57:39 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2011.07.23 17:57:39 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2011.07.23 17:57:38 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2011.07.23 17:57:38 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2011.07.23 17:57:38 | 000,155,752 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2011.07.23 17:57:38 | 000,073,832 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll
[2011.07.23 17:57:37 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2011.07.23 17:57:37 | 001,736,536 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
[2011.07.23 17:57:37 | 000,335,192 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2011.07.23 17:57:37 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2011.07.23 17:57:37 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2011.07.23 17:57:36 | 001,325,328 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2011.07.23 17:57:36 | 000,489,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2011.07.23 17:57:36 | 000,474,896 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2011.07.23 17:57:36 | 000,330,656 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2011.07.23 17:57:35 | 001,178,384 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2011.07.23 17:57:35 | 001,110,800 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2011.07.23 17:57:35 | 000,504,592 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2011.07.23 17:57:35 | 000,315,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2011.07.23 17:57:35 | 000,268,560 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2011.07.23 17:57:35 | 000,265,488 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2011.07.23 17:57:35 | 000,168,288 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2011.07.23 17:57:35 | 000,124,176 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2011.07.23 17:57:35 | 000,123,664 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2011.07.23 17:57:35 | 000,123,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2011.07.23 17:57:35 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2011.07.23 17:57:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2011.07.23 17:57:33 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2011.07.23 17:57:32 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2011.07.23 17:57:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2011.07.23 17:57:13 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Liteon
[2011.07.23 17:57:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye webcam
[2011.07.23 17:57:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acer Crystal Eye webcam
[2011.07.23 17:55:38 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2011.07.23 17:55:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
[2011.07.23 17:54:40 | 000,540,696 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iaStor.sys
[2011.07.23 17:54:40 | 000,000,000 | ---D | C] -- C:\Intel
[2011.07.23 17:54:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2011.07.23 17:54:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2011.07.23 17:54:36 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\InstallShield
[2011.07.23 17:54:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Launch Manager
[2011.07.23 17:49:47 | 000,025,608 | ---- | C] (Sophos Plc) -- C:\Windows\SysNative\drivers\SophosBootDriver.sys
[2011.07.23 17:49:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Sophos
[2011.07.23 17:49:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sophos
[2011.07.23 17:48:00 | 000,000,000 | ---D | C] -- C:\savw_9_sa
[2011.07.23 17:46:43 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2011.07.23 17:45:21 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.07.23 17:45:16 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2011.07.23 17:44:52 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2011.07.23 17:43:23 | 000,000,000 | R--D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.07.23 17:43:23 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Searches
[2011.07.23 17:43:23 | 000,000,000 | R--D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.07.23 17:43:10 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Identities
[2011.07.23 17:43:05 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Contacts
[2011.07.23 17:43:04 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\VirtualStore
[2011.07.23 17:42:50 | 000,000,000 | --SD | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Videos
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Saved Games
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Pictures
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Music
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Links
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Favorites
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Downloads
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Documents
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Desktop
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Vorlagen
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\AppData\Local\Verlauf
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\AppData\Local\Temporary Internet Files
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Startmenü
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\SendTo
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Recent
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Netzwerkumgebung
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Lokale Einstellungen
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Documents\Eigene Videos
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Documents\Eigene Musik
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Eigene Dateien
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Documents\Eigene Bilder
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Druckumgebung
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Cookies
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\AppData\Local\Anwendungsdaten
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Anwendungsdaten
[2011.07.23 17:42:50 | 000,000,000 | -H-D | C] -- C:\Users\Milosh\AppData
[2011.07.23 17:42:50 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Temp
[2011.07.23 17:42:50 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Microsoft
[2011.07.23 17:42:50 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Media Center Programs
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Recovery
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Programme
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2011.07.23 17:37:40 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.07.23 17:35:10 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011.07.23 17:34:42 | 000,000,000 | -HSD | C] -- C:\System Volume Information


========== Files - Modified Within 30 Days ==========
 
[2011.07.26 18:05:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.07.26 17:15:42 | 001,472,002 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.07.26 17:15:42 | 000,643,866 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.07.26 17:15:42 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.07.26 17:15:42 | 000,126,394 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.07.26 17:15:42 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.07.26 17:13:48 | 003,216,552 | ---- | M] (Piriform Ltd) -- C:\Users\Milosh\Desktop\ccsetup308.exe
[2011.07.26 17:13:05 | 000,002,097 | ---- | M] () -- C:\Users\Milosh\Desktop\hjtscanlist.zip
[2011.07.26 17:11:54 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\Milosh\Desktop\OTL.exe
[2011.07.26 17:11:14 | 000,012,560 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.07.26 17:11:14 | 000,012,560 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.07.26 17:08:31 | 000,274,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.07.26 17:08:20 | 3113,254,912 | -HS- | M] () -- C:\hiberfil.sys
[2011.07.25 22:12:40 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\Mobile Partner.lnk
[2011.07.25 19:22:26 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.07.25 19:19:36 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011.07.23 19:27:27 | 000,144,160 | ---- | M] (Sophos Limited) -- C:\Windows\SysNative\drivers\savonaccess.sys
[2011.07.23 19:27:25 | 000,026,104 | ---- | M] (Sophos Plc) -- C:\Windows\SysNative\drivers\sdcfilter.sys
[2011.07.23 19:27:15 | 000,037,400 | ---- | M] (Sophos Limited) -- C:\Windows\SysNative\SophosBootTasks.exe
[2011.07.23 19:27:13 | 000,183,024 | ---- | M] (Sophos Plc) -- C:\Windows\SysNative\sdccoinstaller.dll
[2011.07.23 19:13:17 | 000,001,246 | ---- | M] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2011.07.23 19:12:37 | 000,001,000 | ---- | M] () -- C:\Users\Public\Desktop\SRWare Iron.lnk
[2011.07.23 19:10:17 | 000,002,759 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk
[2011.07.23 19:04:37 | 000,001,935 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.07.23 19:03:06 | 000,001,105 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.07.23 18:42:37 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
[2011.07.23 18:42:37 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
[2011.07.23 18:26:07 | 000,707,378 | ---- | M] () -- C:\Windows\SysNative\oem10.inf
[2011.07.23 18:25:39 | 000,006,656 | ---- | M] () -- C:\Windows\SysNative\bcmwlrc.dll
[2011.07.23 18:25:38 | 004,171,328 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\BCMWL664.SYS
[2011.07.23 18:25:38 | 003,561,272 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\bcmihvui64.dll
[2011.07.23 18:25:38 | 000,095,544 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\bcmwlcoi.dll
[2011.07.23 18:25:37 | 003,896,632 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\bcmihvsrv64.dll
[2011.07.23 17:59:55 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011.07.23 17:54:24 | 000,000,000 | ---- | M] () -- C:\Windows\Setup.INI
[2011.07.23 17:54:17 | 000,000,184 | ---- | M] () -- C:\Windows\LMv4.UNI
[2011.07.23 17:38:24 | 000,057,035 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2011.07.23 17:38:24 | 000,057,035 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2011.07.23 17:36:44 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.07.06 19:52:42 | 000,041,272 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.07.06 19:52:42 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
 
========== Files Created - No Company Name ==========
 
[2011.07.26 17:13:12 | 000,002,097 | ---- | C] () -- C:\Users\Milosh\Desktop\hjtscanlist.zip
[2011.07.26 01:35:40 | 001,240,109 | ---- | C] () -- C:\Users\Milosh\Desktop\IMG_0009.JPG
[2011.07.26 01:35:17 | 000,048,525 | ---- | C] () -- C:\Users\Milosh\Desktop\1295811208010.jpg
[2011.07.26 00:06:28 | 000,565,325 | ---- | C] () -- C:\Users\Milosh\Desktop\13062010096.jpg
[2011.07.26 00:06:19 | 000,343,717 | ---- | C] () -- C:\Users\Milosh\Desktop\13062010102.jpg
[2011.07.26 00:04:33 | 733,954,048 | ---- | C] () -- C:\Users\Milosh\Desktop\qom-american.high.school.avi
[2011.07.25 23:38:18 | 000,698,478 | ---- | C] () -- C:\Users\Milosh\Desktop\united.psd
[2011.07.25 22:12:40 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\Mobile Partner.lnk
[2011.07.25 20:00:19 | 000,066,414 | ---- | C] () -- C:\Users\Milosh\Desktop\getImage.jpg
[2011.07.25 19:22:26 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.07.25 19:22:25 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011.07.23 19:13:17 | 000,001,246 | ---- | C] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2011.07.23 19:12:37 | 000,001,000 | ---- | C] () -- C:\Users\Public\Desktop\SRWare Iron.lnk
[2011.07.23 19:10:17 | 000,002,759 | ---- | C] () -- C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk
[2011.07.23 19:04:37 | 000,001,935 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.07.23 19:03:06 | 000,001,105 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.07.23 18:26:22 | 000,707,378 | ---- | C] () -- C:\Windows\SysNative\oem10.inf
[2011.07.23 18:25:46 | 000,006,656 | ---- | C] () -- C:\Windows\SysNative\bcmwlrc.dll
[2011.07.23 18:14:03 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2011.07.23 18:13:47 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml
[2011.07.23 18:13:27 | 000,146,389 | ---- | C] () -- C:\Windows\SysWow64\printmanagement.msc
[2011.07.23 18:13:27 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml
[2011.07.23 18:13:26 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2011.07.23 18:13:26 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2011.07.23 17:59:55 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011.07.23 17:57:47 | 000,037,468 | ---- | C] () -- C:\Windows\SysNative\drivers\RtPCEE3.DAT
[2011.07.23 17:57:47 | 000,001,448 | ---- | C] () -- C:\Windows\SysNative\drivers\RtHdatEx.dat
[2011.07.23 17:57:47 | 000,000,024 | ---- | C] () -- C:\Windows\SysNative\drivers\rtkhdaud.dat
[2011.07.23 17:57:46 | 000,247,560 | ---- | C] () -- C:\Windows\SysNative\drivers\RTConvEQ.dat
[2011.07.23 17:57:46 | 000,000,520 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX3.dat
[2011.07.23 17:57:46 | 000,000,520 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX2.dat
[2011.07.23 17:57:46 | 000,000,520 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX1.dat
[2011.07.23 17:57:46 | 000,000,520 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX0.dat
[2011.07.23 17:57:46 | 000,000,176 | ---- | C] () -- C:\Windows\SysNative\drivers\RTHDAEQ1.dat
[2011.07.23 17:54:24 | 000,000,000 | ---- | C] () -- C:\Windows\Setup.INI
[2011.07.23 17:54:17 | 000,000,184 | ---- | C] () -- C:\Windows\LMv4.UNI
[2011.07.23 17:38:19 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011.07.23 17:38:08 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011.07.23 17:36:44 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.07.23 17:34:42 | 3113,254,912 | -HS- | C] () -- C:\hiberfil.sys
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
 
========== Files - Unicode (All) ==========
[2011.07.26 00:07:02 | 008,581,120 | ---- | C] ()(C:\Users\Milosh\Desktop\19.19. ?????? - ????? ?????.mp3) -- C:\Users\Milosh\Desktop\19.19. Легион - Нужно время.mp3
[2008.03.24 16:20:48 | 008,581,120 | ---- | M] ()(C:\Users\Milosh\Desktop\19.19. ?????? - ????? ?????.mp3) -- C:\Users\Milosh\Desktop\19.19. Легион - Нужно время.mp3

< End of report >

Alt 26.07.2011, 17:33   #9
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


teil3 -.-
Code:
ATTFilter
C:\Windows\SysNative\wksprt.exe
[2011.07.23 18:13:28 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wintrust.dll
[2011.07.23 18:13:28 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\winsta.dll
[2011.07.23 18:13:28 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wmpshell.dll
[2011.07.23 18:13:28 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wmpshell.dll
[2011.07.23 18:13:28 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2011.07.23 18:13:28 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2011.07.23 18:13:28 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wkscli.dll
[2011.07.23 18:13:28 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\tsgqec.dll
[2011.07.23 18:13:28 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sscore.dll
[2011.07.23 18:13:27 | 002,851,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\themeui.dll
[2011.07.23 18:13:27 | 002,146,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkmap.dll
[2011.07.23 18:13:27 | 001,672,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\networkexplorer.dll
[2011.07.23 18:13:27 | 001,264,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdclt.exe
[2011.07.23 18:13:27 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\OpcServices.dll
[2011.07.23 18:13:27 | 001,120,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sdengin2.dll
[2011.07.23 18:13:27 | 001,080,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onexui.dll
[2011.07.23 18:13:27 | 000,933,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sqlsrv32.dll
[2011.07.23 18:13:27 | 000,629,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\pmcsnap.dll
[2011.07.23 18:13:27 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\PhotoScreensaver.scr
[2011.07.23 18:13:27 | 000,464,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scrptadm.dll
[2011.07.23 18:13:27 | 000,455,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nshipsec.dll
[2011.07.23 18:13:27 | 000,445,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizeng.dll
[2011.07.23 18:13:27 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\termmgr.dll
[2011.07.23 18:13:27 | 000,419,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\systemcpl.dll
[2011.07.23 18:13:27 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PhotoScreensaver.scr
[2011.07.23 18:13:27 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\termmgr.dll
[2011.07.23 18:13:27 | 000,307,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\scesrv.dll
[2011.07.23 18:13:27 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskcomp.dll
[2011.07.23 18:13:27 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\photowiz.dll
[2011.07.23 18:13:27 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\recdisc.exe
[2011.07.23 18:13:27 | 000,238,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ppcsnap.dll
[2011.07.23 18:13:27 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\onex.dll
[2011.07.23 18:13:27 | 000,227,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\taskmgr.exe
[2011.07.23 18:13:27 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\sqmapi.dll
[2011.07.23 18:13:27 | 000,173,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\powercfg.cpl
[2011.07.23 18:13:27 | 000,156,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\prntvpt.dll
[2011.07.23 18:13:27 | 000,145,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sppc.dll
[2011.07.23 18:13:27 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spbcd.dll
[2011.07.23 18:13:27 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\repair-bde.exe
[2011.07.23 18:13:27 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\tdi.sys
[2011.07.23 18:13:27 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\spwmp.dll
[2011.07.23 18:13:27 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\spwizres.dll
[2011.07.23 18:13:26 | 003,715,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mstscax.dll
[2011.07.23 18:13:26 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netcenter.dll
[2011.07.23 18:13:26 | 001,465,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\XpsPrint.dll
[2011.07.23 18:13:26 | 001,363,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\Query.dll
[2011.07.23 18:13:26 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\Narrator.exe
[2011.07.23 18:13:26 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MSMPEG2ENC.DLL
[2011.07.23 18:13:26 | 000,812,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wpccpl.dll
[2011.07.23 18:13:26 | 000,624,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qedit.dll
[2011.07.23 18:13:26 | 000,584,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ipsmsnap.dll
[2011.07.23 18:13:26 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wuapi.dll
[2011.07.23 18:13:26 | 000,551,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\localsec.dll
[2011.07.23 18:13:26 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secproc_isv.dll
[2011.07.23 18:13:26 | 000,378,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msinfo32.exe
[2011.07.23 18:13:26 | 000,376,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\netio.sys
[2011.07.23 18:13:26 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2011.07.23 18:13:26 | 000,362,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\RMActivate_isv.exe
[2011.07.23 18:13:26 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsm.exe
[2011.07.23 18:13:26 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\puiobj.dll
[2011.07.23 18:13:26 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\netdiagfx.dll
[2011.07.23 18:13:26 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\RMActivate_ssp.exe
[2011.07.23 18:13:26 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\netdiagfx.dll
[2011.07.23 18:13:26 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpencom.dll
[2011.07.23 18:13:26 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ksproxy.ax
[2011.07.23 18:13:26 | 000,181,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qcap.dll
[2011.07.23 18:13:26 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msutb.dll
[2011.07.23 18:13:26 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\aaclient.dll
[2011.07.23 18:13:26 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\net1.exe
[2011.07.23 18:13:26 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\nci.dll
[2011.07.23 18:13:26 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wudriver.dll
[2011.07.23 18:13:26 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\secproc_ssp.dll
[2011.07.23 18:13:26 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\WSTPager.ax
[2011.07.23 18:13:26 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wscapi.dll
[2011.07.23 18:13:26 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetmib1.dll
[2011.07.23 18:13:26 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wuauclt.exe
[2011.07.23 18:13:26 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\PushPrinterConnections.exe
[2011.07.23 18:13:26 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wups2.dll
[2011.07.23 18:13:26 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\profprov.dll
[2011.07.23 18:13:26 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wups.dll
[2011.07.23 18:13:26 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wsdchngr.dll
[2011.07.23 18:13:26 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wshirda.dll
[2011.07.23 18:13:26 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wshirda.dll
[2011.07.23 18:13:26 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcfgex.dll
[2011.07.23 18:13:25 | 001,466,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl
[2011.07.23 18:13:25 | 001,202,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DiagCpl.dll
[2011.07.23 18:13:25 | 001,009,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcmde.dll
[2011.07.23 18:13:25 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\TSWorkspace.dll
[2011.07.23 18:13:25 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VAN.dll
[2011.07.23 18:13:25 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\usercpl.dll
[2011.07.23 18:13:25 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\main.cpl
[2011.07.23 18:13:25 | 000,325,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys
[2011.07.23 18:13:25 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MCEWMDRMNDBootstrap.dll
[2011.07.23 18:13:25 | 000,299,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mcupdate_GenuineIntel.dll
[2011.07.23 18:13:25 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mfreadwrite.dll
[2011.07.23 18:13:25 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mfreadwrite.dll
[2011.07.23 18:13:25 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MFPlay.dll
[2011.07.23 18:13:25 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vdsbas.dll
[2011.07.23 18:13:25 | 000,154,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\uxlib.dll
[2011.07.23 18:13:25 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\VBICodec.ax
[2011.07.23 18:13:25 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wiavideo.dll
[2011.07.23 18:13:25 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\userenv.dll
[2011.07.23 18:13:25 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapistub.dll
[2011.07.23 18:13:25 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mapi32.dll
[2011.07.23 18:13:25 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\UserAccountControlSettings.dll
[2011.07.23 18:13:25 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\vfwwdm32.dll
[2011.07.23 18:13:25 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\luainstall.dll
[2011.07.23 18:13:25 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDTUQ.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDLT1.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINTEL.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINTAM.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDINORI.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINMAR.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDINHIN.DLL
[2011.07.23 18:13:25 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\KBDBASH.DLL
[2011.07.23 18:13:25 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDUS.DLL
[2011.07.23 18:13:25 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDTAJIK.DLL
[2011.07.23 18:13:25 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\KBDMON.DLL
[2011.07.23 18:13:23 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\gameux.dll
[2011.07.23 18:13:23 | 001,632,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dwmcore.dll
[2011.07.23 18:13:23 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dwmcore.dll
[2011.07.23 18:13:23 | 000,784,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\gpprefcl.dll
[2011.07.23 18:13:23 | 000,780,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ci.dll
[2011.07.23 18:13:23 | 000,701,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dsuiext.dll
[2011.07.23 18:13:23 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bthprops.cpl
[2011.07.23 18:13:23 | 000,633,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\comctl32.dll
[2011.07.23 18:13:23 | 000,623,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSAPI.dll
[2011.07.23 18:13:23 | 000,606,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dfrgui.exe
[2011.07.23 18:13:23 | 000,498,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscui.dll
[2011.07.23 18:13:23 | 000,434,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\FXSTIFF.dll
[2011.07.23 18:13:23 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\imkr80.ime
[2011.07.23 18:13:23 | 000,366,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\zipfldr.dll
[2011.07.23 18:13:23 | 000,239,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dskquoui.dll
[2011.07.23 18:13:23 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\bitsadmin.exe
[2011.07.23 18:13:23 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\defaultlocationcpl.dll
[2011.07.23 18:13:23 | 000,180,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ifsutil.dll
[2011.07.23 18:13:23 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ifsutil.dll
[2011.07.23 18:13:23 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EhStorAPI.dll
[2011.07.23 18:13:23 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EhStorAPI.dll
[2011.07.23 18:13:23 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\desk.cpl
[2011.07.23 18:13:23 | 000,118,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dnscmmc.dll
[2011.07.23 18:13:23 | 000,114,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesysprep.dll
[2011.07.23 18:13:23 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\SysWow64\fms.dll
[2011.07.23 18:13:23 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\SysWow64\iccvid.dll
[2011.07.23 18:13:23 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cabinet.dll
[2011.07.23 18:13:23 | 000,072,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fdeploy.dll
[2011.07.23 18:13:23 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\findstr.exe
[2011.07.23 18:13:23 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\hbaapi.dll
[2011.07.23 18:13:23 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\cca.dll
[2011.07.23 18:13:23 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll
[2011.07.23 18:13:23 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscapi.dll
[2011.07.23 18:13:23 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\cscdll.dll
[2011.07.23 18:13:23 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\bitsperf.dll
[2011.07.23 18:13:23 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\fixmapi.exe
[2011.07.23 18:13:23 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\C_ISCII.DLL
[2011.07.23 18:13:23 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\dxmasf.dll
[2011.07.23 18:13:23 | 000,003,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\dpnaddr.dll
[2011.07.23 18:11:17 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\EventProviders
[2011.07.23 18:09:19 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Intel Corporation
[2011.07.23 18:05:03 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Games
[2011.07.23 18:01:10 | 000,000,000 | ---D | C] -- C:\ProgramData\OEM
[2011.07.23 18:01:02 | 000,000,000 | ---D | C] -- C:\Program Files\Acer
[2011.07.23 17:59:42 | 000,000,000 | ---D | C] -- C:\Program Files\Synaptics
[2011.07.23 17:58:15 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\RTCOM
[2011.07.23 17:57:47 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2011.07.23 17:57:42 | 002,601,816 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\WavesGUILib.dll
[2011.07.23 17:57:42 | 000,518,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSX64.dll
[2011.07.23 17:57:42 | 000,220,496 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFNHK64.dll
[2011.07.23 17:57:42 | 000,211,184 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSTSH64.dll
[2011.07.23 17:57:42 | 000,198,896 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSHP64.dll
[2011.07.23 17:57:42 | 000,155,888 | ---- | C] (SRS Labs, Inc.) -- C:\Windows\SysNative\SRSWOW64.dll
[2011.07.23 17:57:41 | 002,004,072 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtPgEx64.dll
[2011.07.23 17:57:41 | 001,146,984 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTSnMg64.cpl
[2011.07.23 17:57:41 | 000,078,672 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFCOM64.dll
[2011.07.23 17:57:41 | 000,078,672 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysNative\SFAPO64.dll
[2011.07.23 17:57:41 | 000,071,504 | ---- | C] (Virage Logic Corporation / Sonic Focus) -- C:\Windows\SysWow64\SFCOM.dll
[2011.07.23 17:57:40 | 000,332,392 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtlCPAPI64.dll
[2011.07.23 17:57:39 | 002,622,056 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkAPO64.dll
[2011.07.23 17:57:39 | 001,216,104 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RTCOM64.dll
[2011.07.23 17:57:39 | 000,476,264 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkApi64.dll
[2011.07.23 17:57:39 | 000,372,936 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEP64A.dll
[2011.07.23 17:57:39 | 000,201,928 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEED64A.dll
[2011.07.23 17:57:39 | 000,149,608 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RtkCfg64.dll
[2011.07.23 17:57:39 | 000,099,016 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEL64A.dll
[2011.07.23 17:57:39 | 000,076,488 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RTEEG64A.dll
[2011.07.23 17:57:38 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DHT64.dll
[2011.07.23 17:57:38 | 000,307,920 | ---- | C] (Dolby Laboratories, Inc.) -- C:\Windows\SysNative\RP3DAA64.dll
[2011.07.23 17:57:38 | 000,155,752 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoRes64.dat
[2011.07.23 17:57:38 | 000,073,832 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\SysNative\RCoInst64.dll
[2011.07.23 17:57:37 | 002,197,264 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioEQ.dll
[2011.07.23 17:57:37 | 001,736,536 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioRealtek.dll
[2011.07.23 17:57:37 | 000,335,192 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO30.dll
[2011.07.23 17:57:37 | 000,334,680 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxVolumeSDAPO.dll
[2011.07.23 17:57:37 | 000,318,808 | ---- | C] (Waves Audio Ltd.) -- C:\Windows\SysNative\MaxxAudioAPO20.dll
[2011.07.23 17:57:36 | 001,325,328 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2SpeakerDLL64.dll
[2011.07.23 17:57:36 | 000,489,744 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSSymmetryDLL64.dll
[2011.07.23 17:57:36 | 000,474,896 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSVoiceClarityDLL64.dll
[2011.07.23 17:57:36 | 000,330,656 | ---- | C] (Fortemedia Corporation) -- C:\Windows\SysNative\FMAPO64.dll
[2011.07.23 17:57:35 | 001,178,384 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSS2HeadphoneDLL64.dll
[2011.07.23 17:57:35 | 001,110,800 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBoostDLL64.dll
[2011.07.23 17:57:35 | 000,504,592 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSBassEnhancementDLL64.dll
[2011.07.23 17:57:35 | 000,315,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSNeoPCDLL64.dll
[2011.07.23 17:57:35 | 000,268,560 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLimiterDLL64.dll
[2011.07.23 17:57:35 | 000,265,488 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGainCompensatorDLL64.dll
[2011.07.23 17:57:35 | 000,168,288 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAC64.dll
[2011.07.23 17:57:35 | 000,124,176 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSLFXAPO64.dll
[2011.07.23 17:57:35 | 000,123,664 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPO64.dll
[2011.07.23 17:57:35 | 000,123,152 | ---- | C] (DTS) -- C:\Windows\SysNative\DTSGFXAPONS64.dll
[2011.07.23 17:57:35 | 000,108,960 | ---- | C] (Andrea Electronics Corporation) -- C:\Windows\SysNative\AERTAR64.dll
[2011.07.23 17:57:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Realtek
[2011.07.23 17:57:33 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\Temp
[2011.07.23 17:57:32 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\Windows\RtlExUpd.dll
[2011.07.23 17:57:28 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\InstallShield
[2011.07.23 17:57:13 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Liteon
[2011.07.23 17:57:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acer Crystal Eye webcam
[2011.07.23 17:57:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Acer Crystal Eye webcam
[2011.07.23 17:55:38 | 000,053,248 | ---- | C] (Windows XP Bundled build C-Centric Single User) -- C:\Windows\SysWow64\CSVer.dll
[2011.07.23 17:55:12 | 000,000,000 | R--D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel
[2011.07.23 17:54:40 | 000,540,696 | ---- | C] (Intel Corporation) -- C:\Windows\SysNative\drivers\iaStor.sys
[2011.07.23 17:54:40 | 000,000,000 | ---D | C] -- C:\Intel
[2011.07.23 17:54:37 | 000,000,000 | -H-D | C] -- C:\Program Files (x86)\InstallShield Installation Information
[2011.07.23 17:54:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Intel
[2011.07.23 17:54:36 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\InstallShield
[2011.07.23 17:54:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Launch Manager
[2011.07.23 17:49:47 | 000,025,608 | ---- | C] (Sophos Plc) -- C:\Windows\SysNative\drivers\SophosBootDriver.sys
[2011.07.23 17:49:03 | 000,000,000 | ---D | C] -- C:\ProgramData\Sophos
[2011.07.23 17:49:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Sophos
[2011.07.23 17:48:00 | 000,000,000 | ---D | C] -- C:\savw_9_sa
[2011.07.23 17:46:43 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2011.07.23 17:45:21 | 000,000,000 | -HSD | C] -- C:\Windows\Installer
[2011.07.23 17:45:16 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2011.07.23 17:44:52 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2011.07.23 17:43:23 | 000,000,000 | R--D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2011.07.23 17:43:23 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Searches
[2011.07.23 17:43:23 | 000,000,000 | R--D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2011.07.23 17:43:10 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Identities
[2011.07.23 17:43:05 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Contacts
[2011.07.23 17:43:04 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\VirtualStore
[2011.07.23 17:42:50 | 000,000,000 | --SD | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Videos
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Saved Games
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Pictures
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Music
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Links
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Favorites
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Downloads
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Documents
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\Desktop
[2011.07.23 17:42:50 | 000,000,000 | R--D | C] -- C:\Users\Milosh\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Vorlagen
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\AppData\Local\Verlauf
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\AppData\Local\Temporary Internet Files
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Startmenü
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\SendTo
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Recent
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Netzwerkumgebung
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Lokale Einstellungen
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Documents\Eigene Videos
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Documents\Eigene Musik
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Eigene Dateien
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Documents\Eigene Bilder
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Druckumgebung
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Cookies
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\AppData\Local\Anwendungsdaten
[2011.07.23 17:42:50 | 000,000,000 | -HSD | C] -- C:\Users\Milosh\Anwendungsdaten
[2011.07.23 17:42:50 | 000,000,000 | -H-D | C] -- C:\Users\Milosh\AppData
[2011.07.23 17:42:50 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Temp
[2011.07.23 17:42:50 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Local\Microsoft
[2011.07.23 17:42:50 | 000,000,000 | ---D | C] -- C:\Users\Milosh\AppData\Roaming\Media Center Programs
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Vorlagen
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Startmenü
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Recovery
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Programme
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Program Files\Gemeinsame Dateien
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Favoriten
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Videos
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Musik
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Eigene Bilder
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\Dokumente und Einstellungen
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Dokumente
[2011.07.23 17:42:39 | 000,000,000 | -HSD | C] -- C:\ProgramData\Anwendungsdaten
[2011.07.23 17:37:40 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
[2011.07.23 17:35:10 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
[2011.07.23 17:34:42 | 000,000,000 | -HSD | C] -- C:\System Volume Information


========== Files - Modified Within 30 Days ==========
 
[2011.07.26 18:05:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2011.07.26 17:15:42 | 001,472,002 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2011.07.26 17:15:42 | 000,643,866 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2011.07.26 17:15:42 | 000,607,190 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2011.07.26 17:15:42 | 000,126,394 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2011.07.26 17:15:42 | 000,103,568 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2011.07.26 17:13:48 | 003,216,552 | ---- | M] (Piriform Ltd) -- C:\Users\Milosh\Desktop\ccsetup308.exe
[2011.07.26 17:13:05 | 000,002,097 | ---- | M] () -- C:\Users\Milosh\Desktop\hjtscanlist.zip
[2011.07.26 17:11:54 | 000,579,584 | ---- | M] (OldTimer Tools) -- C:\Users\Milosh\Desktop\OTL.exe
[2011.07.26 17:11:14 | 000,012,560 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2011.07.26 17:11:14 | 000,012,560 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2011.07.26 17:08:31 | 000,274,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2011.07.26 17:08:20 | 3113,254,912 | -HS- | M] () -- C:\hiberfil.sys
[2011.07.25 22:12:40 | 000,001,075 | ---- | M] () -- C:\Users\Public\Desktop\Mobile Partner.lnk
[2011.07.25 19:22:26 | 000,002,019 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.07.25 19:19:36 | 000,404,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2011.07.23 19:27:27 | 000,144,160 | ---- | M] (Sophos Limited) -- C:\Windows\SysNative\drivers\savonaccess.sys
[2011.07.23 19:27:25 | 000,026,104 | ---- | M] (Sophos Plc) -- C:\Windows\SysNative\drivers\sdcfilter.sys
[2011.07.23 19:27:15 | 000,037,400 | ---- | M] (Sophos Limited) -- C:\Windows\SysNative\SophosBootTasks.exe
[2011.07.23 19:27:13 | 000,183,024 | ---- | M] (Sophos Plc) -- C:\Windows\SysNative\sdccoinstaller.dll
[2011.07.23 19:13:17 | 000,001,246 | ---- | M] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2011.07.23 19:12:37 | 000,001,000 | ---- | M] () -- C:\Users\Public\Desktop\SRWare Iron.lnk
[2011.07.23 19:10:17 | 000,002,759 | ---- | M] () -- C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk
[2011.07.23 19:04:37 | 000,001,935 | ---- | M] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.07.23 19:03:06 | 000,001,105 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.07.23 18:42:37 | 000,175,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysNative\msclmd.dll
[2011.07.23 18:42:37 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWow64\msclmd.dll
[2011.07.23 18:26:07 | 000,707,378 | ---- | M] () -- C:\Windows\SysNative\oem10.inf
[2011.07.23 18:25:39 | 000,006,656 | ---- | M] () -- C:\Windows\SysNative\bcmwlrc.dll
[2011.07.23 18:25:38 | 004,171,328 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\drivers\BCMWL664.SYS
[2011.07.23 18:25:38 | 003,561,272 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\bcmihvui64.dll
[2011.07.23 18:25:38 | 000,095,544 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\bcmwlcoi.dll
[2011.07.23 18:25:37 | 003,896,632 | ---- | M] (Broadcom Corporation) -- C:\Windows\SysNative\bcmihvsrv64.dll
[2011.07.23 17:59:55 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011.07.23 17:54:24 | 000,000,000 | ---- | M] () -- C:\Windows\Setup.INI
[2011.07.23 17:54:17 | 000,000,184 | ---- | M] () -- C:\Windows\LMv4.UNI
[2011.07.23 17:38:24 | 000,057,035 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2011.07.23 17:38:24 | 000,057,035 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2011.07.23 17:36:44 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.07.06 19:52:42 | 000,041,272 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysWow64\drivers\mbamswissarmy.sys
[2011.07.06 19:52:42 | 000,025,912 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
 
========== Files Created - No Company Name ==========
 
[2011.07.26 17:13:12 | 000,002,097 | ---- | C] () -- C:\Users\Milosh\Desktop\hjtscanlist.zip
[2011.07.26 01:35:40 | 001,240,109 | ---- | C] () -- C:\Users\Milosh\Desktop\IMG_0009.JPG
[2011.07.26 01:35:17 | 000,048,525 | ---- | C] () -- C:\Users\Milosh\Desktop\1295811208010.jpg
[2011.07.26 00:06:28 | 000,565,325 | ---- | C] () -- C:\Users\Milosh\Desktop\13062010096.jpg
[2011.07.26 00:06:19 | 000,343,717 | ---- | C] () -- C:\Users\Milosh\Desktop\13062010102.jpg
[2011.07.26 00:04:33 | 733,954,048 | ---- | C] () -- C:\Users\Milosh\Desktop\qom-american.high.school.avi
[2011.07.25 23:38:18 | 000,698,478 | ---- | C] () -- C:\Users\Milosh\Desktop\united.psd
[2011.07.25 22:12:40 | 000,001,075 | ---- | C] () -- C:\Users\Public\Desktop\Mobile Partner.lnk
[2011.07.25 20:00:19 | 000,066,414 | ---- | C] () -- C:\Users\Milosh\Desktop\getImage.jpg
[2011.07.25 19:22:26 | 000,002,019 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Reader X.lnk
[2011.07.25 19:22:25 | 000,002,441 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
[2011.07.23 19:13:17 | 000,001,246 | ---- | C] () -- C:\Users\Public\Desktop\Virtual CloneDrive.lnk
[2011.07.23 19:12:37 | 000,001,000 | ---- | C] () -- C:\Users\Public\Desktop\SRWare Iron.lnk
[2011.07.23 19:10:17 | 000,002,759 | ---- | C] () -- C:\Users\Public\Desktop\Nero StartSmart Essentials.lnk
[2011.07.23 19:04:37 | 000,001,935 | ---- | C] () -- C:\Users\Public\Desktop\Mozilla Firefox.lnk
[2011.07.23 19:03:06 | 000,001,105 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.07.23 18:26:22 | 000,707,378 | ---- | C] () -- C:\Windows\SysNative\oem10.inf
[2011.07.23 18:25:46 | 000,006,656 | ---- | C] () -- C:\Windows\SysNative\bcmwlrc.dll
[2011.07.23 18:14:03 | 000,347,904 | ---- | C] () -- C:\Windows\SysNative\systemsf.ebd
[2011.07.23 18:13:47 | 000,001,041 | ---- | C] () -- C:\Windows\SysWow64\tcpbidi.xml
[2011.07.23 18:13:27 | 000,146,389 | ---- | C] () -- C:\Windows\SysWow64\printmanagement.msc
[2011.07.23 18:13:27 | 000,010,429 | ---- | C] () -- C:\Windows\SysNative\ScavengeSpace.xml
[2011.07.23 18:13:26 | 000,105,559 | ---- | C] () -- C:\Windows\SysWow64\RacRules.xml
[2011.07.23 18:13:26 | 000,105,559 | ---- | C] () -- C:\Windows\SysNative\RacRules.xml
[2011.07.23 17:59:55 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_SynTP_01009.Wdf
[2011.07.23 17:57:47 | 000,037,468 | ---- | C] () -- C:\Windows\SysNative\drivers\RtPCEE3.DAT
[2011.07.23 17:57:47 | 000,001,448 | ---- | C] () -- C:\Windows\SysNative\drivers\RtHdatEx.dat
[2011.07.23 17:57:47 | 000,000,024 | ---- | C] () -- C:\Windows\SysNative\drivers\rtkhdaud.dat
[2011.07.23 17:57:46 | 000,247,560 | ---- | C] () -- C:\Windows\SysNative\drivers\RTConvEQ.dat
[2011.07.23 17:57:46 | 000,000,520 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX3.dat
[2011.07.23 17:57:46 | 000,000,520 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX2.dat
[2011.07.23 17:57:46 | 000,000,520 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX1.dat
[2011.07.23 17:57:46 | 000,000,520 | ---- | C] () -- C:\Windows\SysNative\drivers\RTEQEX0.dat
[2011.07.23 17:57:46 | 000,000,176 | ---- | C] () -- C:\Windows\SysNative\drivers\RTHDAEQ1.dat
[2011.07.23 17:54:24 | 000,000,000 | ---- | C] () -- C:\Windows\Setup.INI
[2011.07.23 17:54:17 | 000,000,184 | ---- | C] () -- C:\Windows\LMv4.UNI
[2011.07.23 17:38:19 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2011.07.23 17:38:08 | 000,001,326 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
[2011.07.23 17:36:44 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2011.07.23 17:34:42 | 3113,254,912 | -HS- | C] () -- C:\hiberfil.sys
[2009.07.14 07:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 04:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 04:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 02:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 01:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 23:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 23:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
 
========== Files - Unicode (All) ==========
[2011.07.26 00:07:02 | 008,581,120 | ---- | C] ()(C:\Users\Milosh\Desktop\19.19. ?????? - ????? ?????.mp3) -- C:\Users\Milosh\Desktop\19.19. Легион - Нужно время.mp3
[2008.03.24 16:20:48 | 008,581,120 | ---- | M] ()(C:\Users\Milosh\Desktop\19.19. ?????? - ????? ?????.mp3) -- C:\Users\Milosh\Desktop\19.19. Легион - Нужно время.mp3

< End of report >

Alt 26.07.2011, 17:35   #10
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


extras.txt:
OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 26.07.2011 18:08:04 - Run 1
OTL by OldTimer - Version 3.2.26.1     Folder = C:\Users\Milosh\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,87 Gb Total Physical Memory | 1,92 Gb Available Physical Memory | 49,74% Memory free
7,73 Gb Paging File | 5,76 Gb Available in Paging File | 74,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 224,61 Gb Total Space | 191,91 Gb Free Space | 85,44% Space Free | Partition Type: NTFS
Drive D: | 13,00 Gb Total Space | 4,30 Gb Free Space | 33,04% Space Free | Partition Type: NTFS
Drive E: | 228,05 Gb Total Space | 7,78 Gb Free Space | 3,41% Space Free | Partition Type: NTFS
 
Computer Name: MILOSH-PC | User Name: Milosh | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- Reg Error: Key error. File not found
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome File not found
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
"" = 
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Broadcom 802.11 Network Adapter" = Broadcom 802.11 Network Adapter
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{15C418EB-7675-42be-B2B3-281952DA014D}" = Sophos AutoUpdate
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer ePower Management
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{51F026FA-5146-4232-A8BA-1364740BD053}" = Acer Crystal Eye webcam
"{53DF73B1-37F5-4B7F-86ED-FA7CC4041031}" = Nero 8 Essentials
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{9ACB414D-9347-40B6-A453-5EFB2DB59DFA}" = Sophos Anti-Virus
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Deutsch
"{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1" = SRWare Iron 8.0.555.0
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2010-10-10
"LManager" = Launch Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.1.1800
"Mobile Partner" = Mobile Partner
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"VirtualCloneDrive" = VirtualCloneDrive
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 23.07.2011 15:07:02 | Computer Name = Milosh-PC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files
 (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe". Fehler in  Manifest- oder Richtliniendatei
 "" in Zeile .  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt
 mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.
Komponente
 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
Error - 25.07.2011 12:04:24 | Computer Name = Milosh-PC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files
 (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe". Fehler in  Manifest- oder Richtliniendatei
 "" in Zeile .  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt
 mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.
Komponente
 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
Error - 26.07.2011 11:02:45 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: SavService.exe, Version: 9.7.0.9556,
 Zeitstempel: 0x4d7df37b  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x490  Startzeit der fehlerhaften Anwendung: 0x01cc4abb0ab49579  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 512fbf31-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:48 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: dsiwmis.exe, Version: 2.8.0.708, 
Zeitstempel: 0x4c205915  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, 
Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x674  Startzeit der fehlerhaften Anwendung: 0x01cc4abb1a9643cd  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Launch Manager\dsiwmis.exe  Pfad des
 fehlerhaften Moduls: unknown  Berichtskennung: 52d9d582-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:49 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: SAVAdminService.exe, Version: 9.7.0.9556,
 Zeitstempel: 0x4d7df0c9  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x7b4  Startzeit der fehlerhaften Anwendung: 0x01cc4abb1af0b817  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 534c1790-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:52 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: ALsvc.exe, Version: 3.15.33.263, 
Zeitstempel: 0x4d753f8d  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, 
Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x844  Startzeit der fehlerhaften Anwendung: 0x01cc4abb1c5ceaa1  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe  Pfad 
des fehlerhaften Moduls: unknown  Berichtskennung: 5576b82f-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:54 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: swi_service.exe, Version: 2.1.0.0,
 Zeitstempel: 0x4d5030bc  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x89c  Startzeit der fehlerhaften Anwendung: 0x01cc4abb1e2ab596  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 5688766f-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:54 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: NMIndexingService.exe, Version: 3.1.2.0,
 Zeitstempel: 0x470f754b  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0xca4  Startzeit der fehlerhaften Anwendung: 0x01cc4abb2a585451  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 56ba7355-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:03:00 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 9.6.2.1001,
 Zeitstempel: 0x4bc4a166  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0xcb8  Startzeit der fehlerhaften Anwendung: 0x01cc4abb67038f07  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 5a1ce838-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:03:05 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: mbamservice.exe, Version: 1.51.1.0,
 Zeitstempel: 0x4e0f0e18  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x9dc  Startzeit der fehlerhaften Anwendung: 0x01cc4abb67febb94  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 5cdfe0ea-b798-11e0-8772-9abdf88782d6
 
[ System Events ]
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...ram Files (x86)\Common Files\Nero\Lib\NMDvdContentHandler.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a00b4d0]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...ram Files (x86)\Common Files\Nero\Lib\NMDvdContentHandler.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a057791]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...3\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess svchost.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a057791]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...am Files (x86)\Common Files\Nero\Lib\NMFileContentHandler.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a07d8f1]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...e3\Program Files (x86)\Common Files\Nero\Lib\NMFirstStart.exe]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a0efd12]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...am Files (x86)\Common Files\Nero\Lib\NMFullTextExtraction.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a188293]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...\Program Files (x86)\Common Files\Nero\Lib\NMHDirServices.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a1d4554]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...ogram Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a246974]).  
 
Error - 26.07.2011 11:03:01 | Computer Name = Milosh-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "NMIndexingService" wurde unerwartet beendet. Dies ist bereits
 1 Mal passiert.
 
Error - 26.07.2011 11:09:21 | Computer Name = Milosh-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler 
beendet:   %%16405
 
 
< End of report >
--- --- ---


HJT:
Code:
ATTFilter
 

	
Code: 

 
ATTFilter


  

	
 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                        º                                    º 
                                    hjtscanlist v2.0              
                        º                                    º 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Microsoft Windows [Version 6.1.7601]
 
 
C:

       C:\pagefile.sys ---------    
       C:\hiberfil.sys ---------    
  26.07.2011 03:03     C:\Windows --------- 16384   
  26.07.2011 03:02     C:\Program Files (x86) --------- 8192   
  26.07.2011 03:00     C:\System Volume Information --------- 4096   
  25.07.2011 19:21     C:\ProgramData --------- 4096   
  23.07.2011 19:11     C:\Program Files --------- 8192   
  23.07.2011 17:54     C:\Intel --------- 0   
  23.07.2011 17:48     C:\savw_9_sa --------- 4096   
  23.07.2011 17:43     C:\$Recycle.Bin --------- 0   
  23.07.2011 17:42     C:\Users --------- 4096   
  23.07.2011 17:42     C:\Recovery --------- 0   
  23.07.2011 17:42     C:\Programme --------- 0   
  23.07.2011 17:42     C:\Dokumente und Einstellungen --------- 0   
  14.07.2009 07:08     C:\Documents and Settings --------- 0   
  14.07.2009 05:20     C:\PerfLogs --------- 0   
----------------------------------------

 
C:\Windows

  26.07.2011 18:05     C:\Windows\WindowsUpdate.log --------- 540438   
  26.07.2011 18:05     C:\Windows\bootstat.dat --------- 67584   
  26.07.2011 17:08     C:\Windows\setupact.log --------- 21587   
  26.07.2011 03:03     C:\Windows\msxml4-KB973688-enu.LOG --------- 297066   
  26.07.2011 03:02     C:\Windows\msxml4-KB954430-enu.LOG --------- 296764   
  23.07.2011 19:31     C:\Windows\PFRO.log --------- 6466   
  23.07.2011 19:07     C:\Windows\DirectX.log --------- 27580   
  23.07.2011 18:00     C:\Windows\DPINST.LOG --------- 4362   
  23.07.2011 17:54     C:\Windows\Setup.INI --------- 0   
  23.07.2011 17:54     C:\Windows\LMv4.UNI --------- 184   
  23.07.2011 17:37     C:\Windows\DtcInstall.log --------- 1774   
  23.07.2011 17:37     C:\Windows\TSSysprep.log --------- 1313   
  20.11.2010 05:25     C:\Windows\splwow64.exe --------- 67072   
  20.11.2010 05:24     C:\Windows\explorer.exe --------- 2872320   
  20.11.2010 05:24     C:\Windows\bfsvc.exe --------- 71168   
  20.11.2010 04:21     C:\Windows\twain_32.dll --------- 51200   
  07.06.2010 09:27     C:\Windows\RtlExUpd.dll --------- 1251944   
  25.01.2010 09:09     C:\Windows\UNINSTLMv4.EXE --------- 349776   
  14.07.2009 07:09     C:\Windows\win.ini --------- 403   
  14.07.2009 06:54     C:\Windows\WindowsShell.Manifest --------- 749   
  14.07.2009 06:51     C:\Windows\setuperr.log --------- 0   
  14.07.2009 03:39     C:\Windows\write.exe --------- 10240   
  14.07.2009 03:39     C:\Windows\regedit.exe --------- 427008   
  14.07.2009 03:39     C:\Windows\notepad.exe --------- 193536   
  14.07.2009 03:39     C:\Windows\hh.exe --------- 16896   
  14.07.2009 03:39     C:\Windows\HelpPane.exe --------- 733696   
  14.07.2009 03:39     C:\Windows\fveupdate.exe --------- 15360   
  14.07.2009 03:14     C:\Windows\winhlp32.exe --------- 9728   
  14.07.2009 03:14     C:\Windows\twunk_32.exe --------- 31232   
  14.07.2009 01:06     C:\Windows\mib.bin --------- 43131   
  10.06.2009 23:41     C:\Windows\twunk_16.exe --------- 49680   
  10.06.2009 23:41     C:\Windows\twain.dll --------- 94784   
  10.06.2009 23:08     C:\Windows\system.ini --------- 219   
  10.06.2009 22:52     C:\Windows\WMSysPr9.prx --------- 316640   
  10.06.2009 22:36     C:\Windows\msdfmap.ini --------- 1405   
  10.06.2009 22:31     C:\Windows\Starter.xml --------- 48201   
  10.06.2009 22:30     C:\Windows\Professional.xml --------- 53551   
----------------------------------------

 
C:\Windows\System

----------------------------------------

 
C:\Windows\System32

 26.07.2011 17:28     C:\Windows\system32\config --------- 24576  
 26.07.2011 17:15     C:\Windows\system32\perfc009.dat --------- 103568  
 26.07.2011 17:15     C:\Windows\system32\perfh009.dat --------- 607190  
 26.07.2011 17:15     C:\Windows\system32\perfc007.dat --------- 126394  
 26.07.2011 17:15     C:\Windows\system32\perfh007.dat --------- 643866  
 26.07.2011 17:15     C:\Windows\system32\PerfStringBackup.INI --------- 1472002  
 26.07.2011 17:15     C:\Windows\system32\catroot --------- 4096  
 26.07.2011 17:15     C:\Windows\system32\catroot2 --------- 32768  
 26.07.2011 17:11     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 12560  
 26.07.2011 17:11     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 12560  
 26.07.2011 17:08     C:\Windows\system32\FNTCACHE.DAT --------- 274464  
 26.07.2011 17:03     C:\Windows\system32\wdi --------- 4096  
 26.07.2011 17:02     C:\Windows\system32\drivers --------- 65536  
 26.07.2011 17:02     C:\Windows\system32\migration --------- 4096  
 26.07.2011 17:02     C:\Windows\system32\Boot --------- 0  
 25.07.2011 22:12     C:\Windows\system32\DriverStore --------- 4096  
 23.07.2011 19:27     C:\Windows\system32\SophosBootTasks.exe --------- 37400  
 23.07.2011 19:27     C:\Windows\system32\sdccoinstaller.dll --------- 183024  
 23.07.2011 19:13     C:\Windows\system32\Tasks --------- 0  
 23.07.2011 18:54     C:\Windows\system32\da-DK --------- 0  
 23.07.2011 18:54     C:\Windows\system32\de-DE --------- 327680  
 23.07.2011 18:53     C:\Windows\system32\oobe --------- 4096  
 23.07.2011 18:53     C:\Windows\system32\AdvancedInstallers --------- 0  
 23.07.2011 18:53     C:\Windows\system32\Setup --------- 0  
 23.07.2011 18:53     C:\Windows\system32\cs-CZ --------- 0  
 23.07.2011 18:53     C:\Windows\system32\manifeststore --------- 0  
 23.07.2011 18:53     C:\Windows\system32\es-ES --------- 0  
 23.07.2011 18:53     C:\Windows\system32\sppui --------- 0  
 23.07.2011 18:53     C:\Windows\system32\wbem --------- 65536  
 23.07.2011 18:53     C:\Windows\system32\migwiz --------- 4096  
 23.07.2011 18:53     C:\Windows\system32\Dism --------- 4096  
 23.07.2011 18:51     C:\Windows\system32\SPReview --------- 0  
 23.07.2011 18:42     C:\Windows\system32\msclmd.dll --------- 175616  
 23.07.2011 18:26     C:\Windows\system32\oem10.inf --------- 707378  
 23.07.2011 18:25     C:\Windows\system32\zh-HK --------- 0  
 23.07.2011 18:25     C:\Windows\system32\zh-TW --------- 0  
 23.07.2011 18:25     C:\Windows\system32\zh-CN --------- 0  
 23.07.2011 18:25     C:\Windows\system32\tr-TR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\th-TH --------- 0  
 23.07.2011 18:25     C:\Windows\system32\sv-SE --------- 0  
 23.07.2011 18:25     C:\Windows\system32\sl-SI --------- 0  
 23.07.2011 18:25     C:\Windows\system32\sk-SK --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ru-RU --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ro-RO --------- 0  
 23.07.2011 18:25     C:\Windows\system32\pt-PT --------- 0  
 23.07.2011 18:25     C:\Windows\system32\pt-BR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\pl-PL --------- 0  
 23.07.2011 18:25     C:\Windows\system32\nl-NL --------- 0  
 23.07.2011 18:25     C:\Windows\system32\nb-NO --------- 0  
 23.07.2011 18:25     C:\Windows\system32\lv-LV --------- 0  
 23.07.2011 18:25     C:\Windows\system32\lt-LT --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ko-KR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ja-JP --------- 0  
 23.07.2011 18:25     C:\Windows\system32\it-IT --------- 0  
 23.07.2011 18:25     C:\Windows\system32\hu-HU --------- 0  
 23.07.2011 18:25     C:\Windows\system32\hr-HR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\he-IL --------- 0  
 23.07.2011 18:25     C:\Windows\system32\fr-FR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\fi-FI --------- 0  
 23.07.2011 18:25     C:\Windows\system32\et-EE --------- 0  
 23.07.2011 18:25     C:\Windows\system32\en-US --------- 4096  
 23.07.2011 18:25     C:\Windows\system32\el-GR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\bg-BG --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ar-SA --------- 0  
 23.07.2011 18:25     C:\Windows\system32\bcmwlrc.dll --------- 6656  
 23.07.2011 18:25     C:\Windows\system32\bcmwlcoi.dll --------- 95544  
 23.07.2011 18:25     C:\Windows\system32\bcmihvui64.dll --------- 3561272  
 23.07.2011 18:25     C:\Windows\system32\bcmihvsrv64.dll --------- 3896632  
 23.07.2011 18:11     C:\Windows\system32\EventProviders --------- 0  
 23.07.2011 17:56     C:\Windows\system32\CodeIntegrity --------- 0  
 23.07.2011 17:48     C:\Windows\system32\restore --------- 0  
 23.07.2011 17:38     C:\Windows\system32\license.rtf --------- 57035  
 23.07.2011 17:37     C:\Windows\system32\sysprep --------- 0  
 11.06.2011 05:07     C:\Windows\system32\win32k.sys --------- 3137536  
 03.06.2011 08:56     C:\Windows\system32\KernelBase.dll --------- 421888  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll --------- 6144  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll --------- 4608  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll --------- 4096  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll --------- 4096  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll --------- 4608  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll --------- 4096  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll --------- 4096  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll --------- 5120  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll --------- 3072  
----------------------------------------

 
C:\Windows\Prefetch

----------------------------------------

 
C:\Windows\Tasks

 26.07.2011 17:08     C:\Windows\Tasks\SA.DAT --------- 6  
 14.07.2009 07:08     C:\Windows\Tasks\SCHEDLGU.TXT --------- 2898  
----------------------------------------

 
C:\Windows\Temp

----------------------------------------

 
C:\Users\Milosh\AppData\Local\Temp

 26.07.2011 17:14     C:\Users\Milosh\AppData\Local\Temp\etilqs_nOZzlUfnoIkjMhgqyJeg --------- 0  
 26.07.2011 17:13     C:\Users\Milosh\AppData\Local\Temp\etilqs_OnTK8N2s1kBIbflgL7fd --------- 0  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\LMworker.log --------- 0  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\aipflib.log --------- 0  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\LManager.log --------- 0  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\AdobeARM.log --------- 2700  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\WPDNSE --------- 0  
 25.07.2011 22:32     C:\Users\Milosh\AppData\Local\Temp\History --------- 0  
 25.07.2011 22:32     C:\Users\Milosh\AppData\Local\Temp\Cookies --------- 0  
 25.07.2011 22:32     C:\Users\Milosh\AppData\Local\Temp\Temporary Internet Files --------- 0  
 25.07.2011 22:31     C:\Users\Milosh\AppData\Local\Temp\Adobe --------- 0  
 25.07.2011 22:12     C:\Users\Milosh\AppData\Local\Temp\~DFCD2274D2871DC947.TMP --------- 32768  
 25.07.2011 22:12     C:\Users\Milosh\AppData\Local\Temp\E220AutoRunLog.tmp --------- 9157  
 25.07.2011 22:11     C:\Users\Milosh\AppData\Local\Temp\UTPSDLL --------- 0  
 25.07.2011 19:23     C:\Users\Milosh\AppData\Local\Temp\AdobeSFX.log --------- 1651  
 25.07.2011 19:19     C:\Users\Milosh\AppData\Local\Temp\EF63.tmp --------- 328864  
 25.07.2011 16:28     C:\Users\Milosh\AppData\Local\Temp\DMI13D1.tmp --------- 0  
 23.07.2011 21:11     C:\Users\Milosh\AppData\Local\Temp\wmsetup.log --------- 4562  
 23.07.2011 19:16     C:\Users\Milosh\AppData\Local\Temp\SetupExe(20110723191627FD8).log --------- 5496  
 23.07.2011 19:16     C:\Users\Milosh\AppData\Local\Temp\SetupExe(20110723191556A6C).log --------- 8675  
 23.07.2011 19:10     C:\Users\Milosh\AppData\Local\Temp\nps.tmp --------- 0  
 23.07.2011 19:08     C:\Users\Milosh\AppData\Local\Temp\nero.tmp --------- 0  
 23.07.2011 19:06     C:\Users\Milosh\AppData\Local\Temp\nro.log --------- 0  
 23.07.2011 19:01     C:\Users\Milosh\AppData\Local\Temp\cbed9b6d7ad4e5a3254baec2 --------- 0  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\{F4DC16BE-4FF3-4823-96A9-625B6B6C4CC3} --------- 0  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\bcmwl.log --------- 39786  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\Install_EAP_Modules.log --------- 792  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\CFG3784.tmp --------- 123  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\CFG2EBD.tmp --------- 123  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\CFG19C7.tmp --------- 123  
 23.07.2011 18:25     C:\Users\Milosh\AppData\Local\Temp\{0E310C9E-8DDF-45FB-BABE-E36BC98C7DC7} --------- 0  
 23.07.2011 18:01     C:\Users\Milosh\AppData\Local\Temp\{7B6D3D16-5F2F-4C42-8138-A35B69DA86F1} --------- 0  
 23.07.2011 17:57     C:\Users\Milosh\AppData\Local\Temp\{51F026FA-5146-4232-A8BA-1364740BD053} --------- 0  
 23.07.2011 17:55     C:\Users\Milosh\AppData\Local\Temp\{98267988-46D6-416F-8BB7-8B7516DBC3A6} --------- 0  
 23.07.2011 17:54     C:\Users\Milosh\AppData\Local\Temp\aiPlatformSetupAddOn.log --------- 0  
 23.07.2011 17:50     C:\Users\Milosh\AppData\Local\Temp\Sophos Standalone Installer.txt --------- 1545  
 23.07.2011 17:50     C:\Users\Milosh\AppData\Local\Temp\Sophos AutoUpdate Install Log.txt --------- 641704  
 23.07.2011 17:49     C:\Users\Milosh\AppData\Local\Temp\Sophos Anti-Virus Install Log_110723_034837.txt --------- 4288700  
 23.07.2011 17:49     C:\Users\Milosh\AppData\Local\Temp\Sophos Anti-Virus CustomActions Log_110723_034837.txt --------- 7210  
 23.07.2011 17:48     C:\Users\Milosh\AppData\Local\Temp\avremove.log --------- 107677  
 23.07.2011 17:48     C:\Users\Milosh\AppData\Local\Temp\crt --------- 0  
 23.07.2011 17:44     C:\Users\Milosh\AppData\Local\Temp\{878B34F6-6026-465E-A601-A99C07E32E4D} --------- 0  
 23.07.2011 17:43     C:\Users\Milosh\AppData\Local\Temp\FXSAPIDebugLogFile.txt --------- 0  
 23.07.2011 17:43     C:\Users\Milosh\AppData\Local\Temp\Milosh.bmp --------- 49208  
 23.07.2011 17:42     C:\Users\Milosh\AppData\Local\Temp\Low --------- 0  
 10.04.2010 02:00     C:\Users\Milosh\AppData\Local\Temp\DataCard_Setup64.exe --------- 206336  
 10.04.2010 02:00     C:\Users\Milosh\AppData\Local\Temp\ResetDevice.exe --------- 7168  
 10.04.2010 02:00     C:\Users\Milosh\AppData\Local\Temp\SysConfig.dat --------- 2476  
----------------------------------------

 
C:\Program Files

 26.07.2011 17:02     C:\Program Files\Internet Explorer --------- 4096  
 23.07.2011 19:11     C:\Program Files\WinRAR --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Sidebar --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Mail --------- 4096  
 23.07.2011 18:54     C:\Program Files\DVD Maker --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Portable Devices --------- 0  
 23.07.2011 18:54     C:\Program Files\Windows Media Player --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Journal --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Photo Viewer --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Defender --------- 4096  
 23.07.2011 18:25     C:\Program Files\Broadcom --------- 0  
 23.07.2011 18:05     C:\Program Files\Microsoft Games --------- 4096  
 23.07.2011 18:01     C:\Program Files\Acer --------- 0  
 23.07.2011 17:59     C:\Program Files\Synaptics --------- 0  
 23.07.2011 17:57     C:\Program Files\Realtek --------- 0  
 23.07.2011 17:45     C:\Program Files\NVIDIA Corporation --------- 4096  
 23.07.2011 17:42     C:\Program Files\Windows NT --------- 4096  
 23.07.2011 17:42     C:\Program Files\Gemeinsame Dateien --------- 0  
 14.07.2009 07:32     C:\Program Files\MSBuild --------- 0  
 14.07.2009 07:32     C:\Program Files\Reference Assemblies --------- 0  
 14.07.2009 07:09     C:\Program Files\Uninstall Information --------- 0  
 14.07.2009 06:54     C:\Program Files\desktop.ini --------- 174  
 14.07.2009 05:20     C:\Program Files\Common Files --------- 4096  
----------------------------------------

 
C:\ProgramData\.. 

Milosh    
Default    
Public    
Default User    
All Users    
desktop.ini    
----------------------------------------

 
C:\Windows\system32\drivers\etc\hosts


----------------------------------------

 

Abbildname                     PID Sitzungsname       Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                   0            24 K
System                           4 Services                   0         4.184 K
smss.exe                       324 Services                   0         1.172 K
csrss.exe                      544 Services                   0         4.740 K
wininit.exe                    596 Services                   0         5.156 K
csrss.exe                      616 Console                    1        14.152 K
services.exe                   660 Services                   0         9.740 K
lsass.exe                      676 Services                   0        11.064 K
lsm.exe                        684 Services                   0         4.528 K
winlogon.exe                   768 Console                    1         7.684 K
svchost.exe                    832 Services                   0         9.920 K
nvvsvc.exe                     892 Services                   0         5.332 K
svchost.exe                    932 Services                   0        11.284 K
svchost.exe                   1016 Services                   0        19.312 K
svchost.exe                    336 Services                   0       166.968 K
svchost.exe                    532 Services                   0        46.044 K
svchost.exe                   1108 Services                   0        13.860 K
SavService.exe                1196 Services                   0       139.128 K
svchost.exe                   1528 Services                   0        16.612 K
svchost.exe                   1632 Services                   0        27.204 K
wlanext.exe                   1692 Services                   0         5.680 K
conhost.exe                   1704 Services                   0         3.252 K
spoolsv.exe                   1752 Services                   0        12.596 K
armsvc.exe                    1872 Services                   0         4.080 K
dsiwmis.exe                   1912 Services                   0         6.160 K
ePowerSvc.exe                 1956 Services                   0         7.580 K
SAVAdminService.exe           2012 Services                   0         3.216 K
ALsvc.exe                     1052 Services                   0         2.088 K
swi_service.exe               1232 Services                   0         5.808 K
nvvsvc.exe                    2724 Console                    1        10.252 K
LogonUI.exe                   2732 Services                   0        16.716 K
taskhost.exe                  2848 Console                    1        10.400 K
dwm.exe                       2968 Console                    1        28.628 K
explorer.exe                  3012 Console                    1        54.400 K
RAVCpl64.exe                  2808 Console                    1        11.800 K
SynTPEnh.exe                  2628 Console                    1        14.044 K
ePowerTray.exe                3000 Console                    1        12.184 K
NMBgMonitor.exe               2992 Console                    1        12.136 K
NMIndexingService.exe         3096 Services                   0        11.536 K
SearchIndexer.exe             3200 Services                   0        31.192 K
SynTPHelper.exe               3332 Console                    1         5.012 K
LManager.exe                  3376 Console                    1        13.788 K
IAStorIcon.exe                3388 Console                    1        27.684 K
mbamgui.exe                   3400 Console                    1         7.244 K
VCDDaemon.exe                 3412 Console                    1         5.532 K
ALMon.exe                     3464 Console                    1         1.660 K
unsecapp.exe                  3552 Console                    1         7.204 K
WmiPrvSE.exe                  3616 Services                   0         7.348 K
ePowerEvent.exe               3912 Console                    1         5.588 K
NMIndexStoreSvr.exe           4008 Console                    1        15.664 K
MMDx64Fx.exe                  3036 Console                    1         6.172 K
LMworker.exe                  3268 Console                    1         4.420 K
iron.exe                      3324 Console                    1        67.320 K
iron.exe                      1216 Console                    1        57.664 K
svchost.exe                    124 Services                   0         7.064 K
IAStorDataMgrSvc.exe          2760 Services                   0        20.404 K
mbamservice.exe                720 Services                   0        40.572 K
sppsvc.exe                    2388 Services                   0         9.436 K
svchost.exe                   3768 Services                   0        35.992 K
wuauclt.exe                   5040 Console                    1         7.648 K
notepad.exe                   5044 Console                    1         6.560 K
notepad.exe                   3500 Console                    1         7.652 K
notepad.exe                   2604 Console                    1         8.288 K
audiodg.exe                   4656 Services                   0        17.172 K
SearchProtocolHost.exe        3576 Services                   0         9.072 K
SearchFilterHost.exe          3568 Services                   0         7.304 K
cmd.exe                       4268 Console                    1         4.356 K
conhost.exe                   2940 Console                    1         6.684 K
dllhost.exe                   4276 Console                    1         7.180 K
tasklist.exe                  3144 Console                    1         6.272 K
WmiPrvSE.exe                  3536 Services                   0         6.800 K

 
***** Ende des Scans 26.07.2011 um 18:17:36,26 ***
ccleaner:
Code:
ATTFilter
Acer Crystal Eye webcam	Liteon	22.07.2011	3,22MB	1.0.4.0
Acer ePower Management	Acer Incorporated	22.07.2011		5.00.3005
Adobe Flash Player 10 Plugin	Adobe Systems Incorporated	24.07.2011	6,00MB	10.3.181.34
Adobe Reader X (10.1.0) - Deutsch	Adobe Systems Incorporated	24.07.2011	118,5MB	10.1.0
Broadcom 802.11 Network Adapter	Broadcom Corporation	23.07.2011		5.100.249.2
CCleaner	Piriform	25.07.2011		3.08
Cisco EAP-FAST Module	Cisco Systems, Inc.	22.07.2011	1,55MB	2.2.14
Cisco LEAP Module	Cisco Systems, Inc.	22.07.2011	0,63MB	1.0.19
Cisco PEAP Module	Cisco Systems, Inc.	22.07.2011	1,24MB	1.1.6
Combined Community Codec Pack 2010-10-10	CCCP Project	22.07.2011	26,1MB	2010.10.10.0
Intel(R) Rapid Storage Technology	Intel Corporation	23.07.2011		9.6.2.1001
Launch Manager	Acer Inc.	22.07.2011		4.0.12
Malwarebytes' Anti-Malware Version 1.51.1.1800	Malwarebytes Corporation	22.07.2011	13,4MB	1.51.1.1800
Mobile Partner	Huawei Technologies Co.,Ltd	24.07.2011		16.001.06.01.500
Mozilla Firefox (3.6.13)	Mozilla	22.07.2011		3.6.13 (de)
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	25.07.2011	1,28MB	4.20.9870.0
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	25.07.2011	1,33MB	4.20.9876.0
Nero 8 Essentials	Nero AG	22.07.2011	897MB	8.10.124
NVIDIA Display Control Panel	NVIDIA Corporation	22.07.2011	135,0MB	6.14.12.5903
NVIDIA Drivers	NVIDIA Corporation	22.07.2011	65,1MB	1.10.62.40
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	22.07.2011		6.0.1.6141
Sophos Anti-Virus	Sophos Limited	22.07.2011	24,0MB	9.7.3
Sophos AutoUpdate	Sophos Limited	22.07.2011	11,2MB	2.5.9
SRWare Iron 8.0.555.0	SRWare	22.07.2011	58,9MB	
Synaptics Pointing Device Driver	Synaptics Incorporated	22.07.2011		14.0.19.0
VirtualCloneDrive	Elaborate Bytes	22.07.2011		
WinRAR		22.07.2011
So das war jetzt alles hoff ich mal =) Hoffentlich kannst mir helfen =) Und danke dir

Alt 26.07.2011, 17:36   #11
MrMeeToo
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


extras.txt:
OTL EXTRAS Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 26.07.2011 18:08:04 - Run 1
OTL by OldTimer - Version 3.2.26.1     Folder = C:\Users\Milosh\Desktop
64bit- An unknown product Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
3,87 Gb Total Physical Memory | 1,92 Gb Available Physical Memory | 49,74% Memory free
7,73 Gb Paging File | 5,76 Gb Available in Paging File | 74,50% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 224,61 Gb Total Space | 191,91 Gb Free Space | 85,44% Space Free | Partition Type: NTFS
Drive D: | 13,00 Gb Total Space | 4,30 Gb Free Space | 33,04% Space Free | Partition Type: NTFS
Drive E: | 228,05 Gb Total Space | 7,78 Gb Free Space | 3,41% Space Free | Partition Type: NTFS
 
Computer Name: MILOSH-PC | User Name: Milosh | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- Reg Error: Key error. File not found
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- Reg Error: Key error. File not found
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %* File not found
cmdfile [open] -- "%1" %* File not found
comfile [open] -- "%1" %* File not found
exefile [open] -- "%1" %* File not found
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1" File not found
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome File not found
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome File not found
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %* File not found
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1" File not found
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l File not found
scrfile [open] -- "%1" /S File not found
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1 File not found
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- Reg Error: Key error.
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
https [open] -- "C:\Program Files (x86)\Internet Explorer\iexplore.exe" -nohome
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- Reg Error: Key error.
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Key error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]
"" = 
"DisableMonitoring" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Broadcom 802.11 Network Adapter" = Broadcom 802.11 Network Adapter
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"WinRAR archiver" = WinRAR
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{15C418EB-7675-42be-B2B3-281952DA014D}" = Sophos AutoUpdate
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Acer ePower Management
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel(R) Rapid Storage Technology
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{51F026FA-5146-4232-A8BA-1364740BD053}" = Acer Crystal Eye webcam
"{53DF73B1-37F5-4B7F-86ED-FA7CC4041031}" = Nero 8 Essentials
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{9ACB414D-9347-40B6-A453-5EFB2DB59DFA}" = Sophos Anti-Virus
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.0) - Deutsch
"{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1" = SRWare Iron 8.0.555.0
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Combined Community Codec Pack_is1" = Combined Community Codec Pack 2010-10-10
"LManager" = Launch Manager
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware Version 1.51.1.1800
"Mobile Partner" = Mobile Partner
"Mozilla Firefox (3.6.13)" = Mozilla Firefox (3.6.13)
"VirtualCloneDrive" = VirtualCloneDrive
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 23.07.2011 15:07:02 | Computer Name = Milosh-PC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files
 (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe". Fehler in  Manifest- oder Richtliniendatei
 "" in Zeile .  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt
 mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.
Komponente
 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
Error - 25.07.2011 12:04:24 | Computer Name = Milosh-PC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files
 (x86)\Nero\Nero8\Nero Toolkit\DiscSpeed.exe". Fehler in  Manifest- oder Richtliniendatei
 "" in Zeile .  Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt
 mit  einer anderen, bereits aktiven Komponentenversion.  In Konflikt stehende Komponenten:.
Komponente
 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
 
Error - 26.07.2011 11:02:45 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: SavService.exe, Version: 9.7.0.9556,
 Zeitstempel: 0x4d7df37b  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x490  Startzeit der fehlerhaften Anwendung: 0x01cc4abb0ab49579  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 512fbf31-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:48 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: dsiwmis.exe, Version: 2.8.0.708, 
Zeitstempel: 0x4c205915  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, 
Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x674  Startzeit der fehlerhaften Anwendung: 0x01cc4abb1a9643cd  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Launch Manager\dsiwmis.exe  Pfad des
 fehlerhaften Moduls: unknown  Berichtskennung: 52d9d582-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:49 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: SAVAdminService.exe, Version: 9.7.0.9556,
 Zeitstempel: 0x4d7df0c9  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x7b4  Startzeit der fehlerhaften Anwendung: 0x01cc4abb1af0b817  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\SAVAdminService.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 534c1790-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:52 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: ALsvc.exe, Version: 3.15.33.263, 
Zeitstempel: 0x4d753f8d  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, 
Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x844  Startzeit der fehlerhaften Anwendung: 0x01cc4abb1c5ceaa1  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Sophos\AutoUpdate\ALsvc.exe  Pfad 
des fehlerhaften Moduls: unknown  Berichtskennung: 5576b82f-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:54 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: swi_service.exe, Version: 2.1.0.0,
 Zeitstempel: 0x4d5030bc  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x89c  Startzeit der fehlerhaften Anwendung: 0x01cc4abb1e2ab596  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Sophos\Sophos Anti-Virus\Web Intelligence\swi_service.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 5688766f-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:02:54 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: NMIndexingService.exe, Version: 3.1.2.0,
 Zeitstempel: 0x470f754b  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0xca4  Startzeit der fehlerhaften Anwendung: 0x01cc4abb2a585451  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 56ba7355-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:03:00 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: IAStorDataMgrSvc.exe, Version: 9.6.2.1001,
 Zeitstempel: 0x4bc4a166  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0xcb8  Startzeit der fehlerhaften Anwendung: 0x01cc4abb67038f07  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 5a1ce838-b798-11e0-8772-9abdf88782d6
 
Error - 26.07.2011 11:03:05 | Computer Name = Milosh-PC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: mbamservice.exe, Version: 1.51.1.0,
 Zeitstempel: 0x4e0f0e18  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x73706c9c  ID des fehlerhaften
 Prozesses: 0x9dc  Startzeit der fehlerhaften Anwendung: 0x01cc4abb67febb94  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 5cdfe0ea-b798-11e0-8772-9abdf88782d6
 
[ System Events ]
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...ram Files (x86)\Common Files\Nero\Lib\NMDvdContentHandler.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a00b4d0]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...ram Files (x86)\Common Files\Nero\Lib\NMDvdContentHandler.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a057791]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...3\Program Files (x86)\Sophos\Sophos Anti-Virus\SavService.exe]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess svchost.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a057791]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...am Files (x86)\Common Files\Nero\Lib\NMFileContentHandler.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a07d8f1]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...e3\Program Files (x86)\Common Files\Nero\Lib\NMFirstStart.exe]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a0efd12]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...am Files (x86)\Common Files\Nero\Lib\NMFullTextExtraction.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a188293]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...\Program Files (x86)\Common Files\Nero\Lib\NMHDirServices.dll]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a1d4554]).  
 
Error - 26.07.2011 11:02:56 | Computer Name = Milosh-PC | Source = SAVOnAccess | ID = 3997781
Description =   Der Scan von Datei [...ogram Files (x86)\Common Files\Nero\Lib\NMIndexingService.exe]
 wurde nach einer Zeitüberschreitung/Auslastung durchgeführt. Sie wird protokolliert.
 Prozess WerFault.exe, (Überprüfung des Zeitstempels [ 1cc4ba51a246974]).  
 
Error - 26.07.2011 11:03:01 | Computer Name = Milosh-PC | Source = Service Control Manager | ID = 7034
Description = Dienst "NMIndexingService" wurde unerwartet beendet. Dies ist bereits
 1 Mal passiert.
 
Error - 26.07.2011 11:09:21 | Computer Name = Milosh-PC | Source = Service Control Manager | ID = 7023
Description = Der Dienst "Windows Modules Installer" wurde mit folgendem Fehler 
beendet:   %%16405
 
 
< End of report >
--- --- ---


HJT:
Code:
ATTFilter
 

	
Code: 

 
ATTFilter


  

	
 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 
                        º                                    º 
                                    hjtscanlist v2.0              
                        º                                    º 
                        $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ 

Microsoft Windows [Version 6.1.7601]
 
 
C:

       C:\pagefile.sys ---------    
       C:\hiberfil.sys ---------    
  26.07.2011 03:03     C:\Windows --------- 16384   
  26.07.2011 03:02     C:\Program Files (x86) --------- 8192   
  26.07.2011 03:00     C:\System Volume Information --------- 4096   
  25.07.2011 19:21     C:\ProgramData --------- 4096   
  23.07.2011 19:11     C:\Program Files --------- 8192   
  23.07.2011 17:54     C:\Intel --------- 0   
  23.07.2011 17:48     C:\savw_9_sa --------- 4096   
  23.07.2011 17:43     C:\$Recycle.Bin --------- 0   
  23.07.2011 17:42     C:\Users --------- 4096   
  23.07.2011 17:42     C:\Recovery --------- 0   
  23.07.2011 17:42     C:\Programme --------- 0   
  23.07.2011 17:42     C:\Dokumente und Einstellungen --------- 0   
  14.07.2009 07:08     C:\Documents and Settings --------- 0   
  14.07.2009 05:20     C:\PerfLogs --------- 0   
----------------------------------------

 
C:\Windows

  26.07.2011 18:05     C:\Windows\WindowsUpdate.log --------- 540438   
  26.07.2011 18:05     C:\Windows\bootstat.dat --------- 67584   
  26.07.2011 17:08     C:\Windows\setupact.log --------- 21587   
  26.07.2011 03:03     C:\Windows\msxml4-KB973688-enu.LOG --------- 297066   
  26.07.2011 03:02     C:\Windows\msxml4-KB954430-enu.LOG --------- 296764   
  23.07.2011 19:31     C:\Windows\PFRO.log --------- 6466   
  23.07.2011 19:07     C:\Windows\DirectX.log --------- 27580   
  23.07.2011 18:00     C:\Windows\DPINST.LOG --------- 4362   
  23.07.2011 17:54     C:\Windows\Setup.INI --------- 0   
  23.07.2011 17:54     C:\Windows\LMv4.UNI --------- 184   
  23.07.2011 17:37     C:\Windows\DtcInstall.log --------- 1774   
  23.07.2011 17:37     C:\Windows\TSSysprep.log --------- 1313   
  20.11.2010 05:25     C:\Windows\splwow64.exe --------- 67072   
  20.11.2010 05:24     C:\Windows\explorer.exe --------- 2872320   
  20.11.2010 05:24     C:\Windows\bfsvc.exe --------- 71168   
  20.11.2010 04:21     C:\Windows\twain_32.dll --------- 51200   
  07.06.2010 09:27     C:\Windows\RtlExUpd.dll --------- 1251944   
  25.01.2010 09:09     C:\Windows\UNINSTLMv4.EXE --------- 349776   
  14.07.2009 07:09     C:\Windows\win.ini --------- 403   
  14.07.2009 06:54     C:\Windows\WindowsShell.Manifest --------- 749   
  14.07.2009 06:51     C:\Windows\setuperr.log --------- 0   
  14.07.2009 03:39     C:\Windows\write.exe --------- 10240   
  14.07.2009 03:39     C:\Windows\regedit.exe --------- 427008   
  14.07.2009 03:39     C:\Windows\notepad.exe --------- 193536   
  14.07.2009 03:39     C:\Windows\hh.exe --------- 16896   
  14.07.2009 03:39     C:\Windows\HelpPane.exe --------- 733696   
  14.07.2009 03:39     C:\Windows\fveupdate.exe --------- 15360   
  14.07.2009 03:14     C:\Windows\winhlp32.exe --------- 9728   
  14.07.2009 03:14     C:\Windows\twunk_32.exe --------- 31232   
  14.07.2009 01:06     C:\Windows\mib.bin --------- 43131   
  10.06.2009 23:41     C:\Windows\twunk_16.exe --------- 49680   
  10.06.2009 23:41     C:\Windows\twain.dll --------- 94784   
  10.06.2009 23:08     C:\Windows\system.ini --------- 219   
  10.06.2009 22:52     C:\Windows\WMSysPr9.prx --------- 316640   
  10.06.2009 22:36     C:\Windows\msdfmap.ini --------- 1405   
  10.06.2009 22:31     C:\Windows\Starter.xml --------- 48201   
  10.06.2009 22:30     C:\Windows\Professional.xml --------- 53551   
----------------------------------------

 
C:\Windows\System

----------------------------------------

 
C:\Windows\System32

 26.07.2011 17:28     C:\Windows\system32\config --------- 24576  
 26.07.2011 17:15     C:\Windows\system32\perfc009.dat --------- 103568  
 26.07.2011 17:15     C:\Windows\system32\perfh009.dat --------- 607190  
 26.07.2011 17:15     C:\Windows\system32\perfc007.dat --------- 126394  
 26.07.2011 17:15     C:\Windows\system32\perfh007.dat --------- 643866  
 26.07.2011 17:15     C:\Windows\system32\PerfStringBackup.INI --------- 1472002  
 26.07.2011 17:15     C:\Windows\system32\catroot --------- 4096  
 26.07.2011 17:15     C:\Windows\system32\catroot2 --------- 32768  
 26.07.2011 17:11     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 --------- 12560  
 26.07.2011 17:11     C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 --------- 12560  
 26.07.2011 17:08     C:\Windows\system32\FNTCACHE.DAT --------- 274464  
 26.07.2011 17:03     C:\Windows\system32\wdi --------- 4096  
 26.07.2011 17:02     C:\Windows\system32\drivers --------- 65536  
 26.07.2011 17:02     C:\Windows\system32\migration --------- 4096  
 26.07.2011 17:02     C:\Windows\system32\Boot --------- 0  
 25.07.2011 22:12     C:\Windows\system32\DriverStore --------- 4096  
 23.07.2011 19:27     C:\Windows\system32\SophosBootTasks.exe --------- 37400  
 23.07.2011 19:27     C:\Windows\system32\sdccoinstaller.dll --------- 183024  
 23.07.2011 19:13     C:\Windows\system32\Tasks --------- 0  
 23.07.2011 18:54     C:\Windows\system32\da-DK --------- 0  
 23.07.2011 18:54     C:\Windows\system32\de-DE --------- 327680  
 23.07.2011 18:53     C:\Windows\system32\oobe --------- 4096  
 23.07.2011 18:53     C:\Windows\system32\AdvancedInstallers --------- 0  
 23.07.2011 18:53     C:\Windows\system32\Setup --------- 0  
 23.07.2011 18:53     C:\Windows\system32\cs-CZ --------- 0  
 23.07.2011 18:53     C:\Windows\system32\manifeststore --------- 0  
 23.07.2011 18:53     C:\Windows\system32\es-ES --------- 0  
 23.07.2011 18:53     C:\Windows\system32\sppui --------- 0  
 23.07.2011 18:53     C:\Windows\system32\wbem --------- 65536  
 23.07.2011 18:53     C:\Windows\system32\migwiz --------- 4096  
 23.07.2011 18:53     C:\Windows\system32\Dism --------- 4096  
 23.07.2011 18:51     C:\Windows\system32\SPReview --------- 0  
 23.07.2011 18:42     C:\Windows\system32\msclmd.dll --------- 175616  
 23.07.2011 18:26     C:\Windows\system32\oem10.inf --------- 707378  
 23.07.2011 18:25     C:\Windows\system32\zh-HK --------- 0  
 23.07.2011 18:25     C:\Windows\system32\zh-TW --------- 0  
 23.07.2011 18:25     C:\Windows\system32\zh-CN --------- 0  
 23.07.2011 18:25     C:\Windows\system32\tr-TR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\th-TH --------- 0  
 23.07.2011 18:25     C:\Windows\system32\sv-SE --------- 0  
 23.07.2011 18:25     C:\Windows\system32\sl-SI --------- 0  
 23.07.2011 18:25     C:\Windows\system32\sk-SK --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ru-RU --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ro-RO --------- 0  
 23.07.2011 18:25     C:\Windows\system32\pt-PT --------- 0  
 23.07.2011 18:25     C:\Windows\system32\pt-BR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\pl-PL --------- 0  
 23.07.2011 18:25     C:\Windows\system32\nl-NL --------- 0  
 23.07.2011 18:25     C:\Windows\system32\nb-NO --------- 0  
 23.07.2011 18:25     C:\Windows\system32\lv-LV --------- 0  
 23.07.2011 18:25     C:\Windows\system32\lt-LT --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ko-KR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ja-JP --------- 0  
 23.07.2011 18:25     C:\Windows\system32\it-IT --------- 0  
 23.07.2011 18:25     C:\Windows\system32\hu-HU --------- 0  
 23.07.2011 18:25     C:\Windows\system32\hr-HR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\he-IL --------- 0  
 23.07.2011 18:25     C:\Windows\system32\fr-FR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\fi-FI --------- 0  
 23.07.2011 18:25     C:\Windows\system32\et-EE --------- 0  
 23.07.2011 18:25     C:\Windows\system32\en-US --------- 4096  
 23.07.2011 18:25     C:\Windows\system32\el-GR --------- 0  
 23.07.2011 18:25     C:\Windows\system32\bg-BG --------- 0  
 23.07.2011 18:25     C:\Windows\system32\ar-SA --------- 0  
 23.07.2011 18:25     C:\Windows\system32\bcmwlrc.dll --------- 6656  
 23.07.2011 18:25     C:\Windows\system32\bcmwlcoi.dll --------- 95544  
 23.07.2011 18:25     C:\Windows\system32\bcmihvui64.dll --------- 3561272  
 23.07.2011 18:25     C:\Windows\system32\bcmihvsrv64.dll --------- 3896632  
 23.07.2011 18:11     C:\Windows\system32\EventProviders --------- 0  
 23.07.2011 17:56     C:\Windows\system32\CodeIntegrity --------- 0  
 23.07.2011 17:48     C:\Windows\system32\restore --------- 0  
 23.07.2011 17:38     C:\Windows\system32\license.rtf --------- 57035  
 23.07.2011 17:37     C:\Windows\system32\sysprep --------- 0  
 11.06.2011 05:07     C:\Windows\system32\win32k.sys --------- 3137536  
 03.06.2011 08:56     C:\Windows\system32\KernelBase.dll --------- 421888  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll --------- 6144  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll --------- 4608  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll --------- 4096  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll --------- 4096  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll --------- 4608  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll --------- 4096  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll --------- 4096  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll --------- 3584  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll --------- 5120  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll --------- 3072  
 03.06.2011 08:44     C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll --------- 3072  
----------------------------------------

 
C:\Windows\Prefetch

----------------------------------------

 
C:\Windows\Tasks

 26.07.2011 17:08     C:\Windows\Tasks\SA.DAT --------- 6  
 14.07.2009 07:08     C:\Windows\Tasks\SCHEDLGU.TXT --------- 2898  
----------------------------------------

 
C:\Windows\Temp

----------------------------------------

 
C:\Users\Milosh\AppData\Local\Temp

 26.07.2011 17:14     C:\Users\Milosh\AppData\Local\Temp\etilqs_nOZzlUfnoIkjMhgqyJeg --------- 0  
 26.07.2011 17:13     C:\Users\Milosh\AppData\Local\Temp\etilqs_OnTK8N2s1kBIbflgL7fd --------- 0  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\LMworker.log --------- 0  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\aipflib.log --------- 0  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\LManager.log --------- 0  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\AdobeARM.log --------- 2700  
 26.07.2011 17:09     C:\Users\Milosh\AppData\Local\Temp\WPDNSE --------- 0  
 25.07.2011 22:32     C:\Users\Milosh\AppData\Local\Temp\History --------- 0  
 25.07.2011 22:32     C:\Users\Milosh\AppData\Local\Temp\Cookies --------- 0  
 25.07.2011 22:32     C:\Users\Milosh\AppData\Local\Temp\Temporary Internet Files --------- 0  
 25.07.2011 22:31     C:\Users\Milosh\AppData\Local\Temp\Adobe --------- 0  
 25.07.2011 22:12     C:\Users\Milosh\AppData\Local\Temp\~DFCD2274D2871DC947.TMP --------- 32768  
 25.07.2011 22:12     C:\Users\Milosh\AppData\Local\Temp\E220AutoRunLog.tmp --------- 9157  
 25.07.2011 22:11     C:\Users\Milosh\AppData\Local\Temp\UTPSDLL --------- 0  
 25.07.2011 19:23     C:\Users\Milosh\AppData\Local\Temp\AdobeSFX.log --------- 1651  
 25.07.2011 19:19     C:\Users\Milosh\AppData\Local\Temp\EF63.tmp --------- 328864  
 25.07.2011 16:28     C:\Users\Milosh\AppData\Local\Temp\DMI13D1.tmp --------- 0  
 23.07.2011 21:11     C:\Users\Milosh\AppData\Local\Temp\wmsetup.log --------- 4562  
 23.07.2011 19:16     C:\Users\Milosh\AppData\Local\Temp\SetupExe(20110723191627FD8).log --------- 5496  
 23.07.2011 19:16     C:\Users\Milosh\AppData\Local\Temp\SetupExe(20110723191556A6C).log --------- 8675  
 23.07.2011 19:10     C:\Users\Milosh\AppData\Local\Temp\nps.tmp --------- 0  
 23.07.2011 19:08     C:\Users\Milosh\AppData\Local\Temp\nero.tmp --------- 0  
 23.07.2011 19:06     C:\Users\Milosh\AppData\Local\Temp\nro.log --------- 0  
 23.07.2011 19:01     C:\Users\Milosh\AppData\Local\Temp\cbed9b6d7ad4e5a3254baec2 --------- 0  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\{F4DC16BE-4FF3-4823-96A9-625B6B6C4CC3} --------- 0  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\bcmwl.log --------- 39786  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\Install_EAP_Modules.log --------- 792  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\CFG3784.tmp --------- 123  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\CFG2EBD.tmp --------- 123  
 23.07.2011 18:26     C:\Users\Milosh\AppData\Local\Temp\CFG19C7.tmp --------- 123  
 23.07.2011 18:25     C:\Users\Milosh\AppData\Local\Temp\{0E310C9E-8DDF-45FB-BABE-E36BC98C7DC7} --------- 0  
 23.07.2011 18:01     C:\Users\Milosh\AppData\Local\Temp\{7B6D3D16-5F2F-4C42-8138-A35B69DA86F1} --------- 0  
 23.07.2011 17:57     C:\Users\Milosh\AppData\Local\Temp\{51F026FA-5146-4232-A8BA-1364740BD053} --------- 0  
 23.07.2011 17:55     C:\Users\Milosh\AppData\Local\Temp\{98267988-46D6-416F-8BB7-8B7516DBC3A6} --------- 0  
 23.07.2011 17:54     C:\Users\Milosh\AppData\Local\Temp\aiPlatformSetupAddOn.log --------- 0  
 23.07.2011 17:50     C:\Users\Milosh\AppData\Local\Temp\Sophos Standalone Installer.txt --------- 1545  
 23.07.2011 17:50     C:\Users\Milosh\AppData\Local\Temp\Sophos AutoUpdate Install Log.txt --------- 641704  
 23.07.2011 17:49     C:\Users\Milosh\AppData\Local\Temp\Sophos Anti-Virus Install Log_110723_034837.txt --------- 4288700  
 23.07.2011 17:49     C:\Users\Milosh\AppData\Local\Temp\Sophos Anti-Virus CustomActions Log_110723_034837.txt --------- 7210  
 23.07.2011 17:48     C:\Users\Milosh\AppData\Local\Temp\avremove.log --------- 107677  
 23.07.2011 17:48     C:\Users\Milosh\AppData\Local\Temp\crt --------- 0  
 23.07.2011 17:44     C:\Users\Milosh\AppData\Local\Temp\{878B34F6-6026-465E-A601-A99C07E32E4D} --------- 0  
 23.07.2011 17:43     C:\Users\Milosh\AppData\Local\Temp\FXSAPIDebugLogFile.txt --------- 0  
 23.07.2011 17:43     C:\Users\Milosh\AppData\Local\Temp\Milosh.bmp --------- 49208  
 23.07.2011 17:42     C:\Users\Milosh\AppData\Local\Temp\Low --------- 0  
 10.04.2010 02:00     C:\Users\Milosh\AppData\Local\Temp\DataCard_Setup64.exe --------- 206336  
 10.04.2010 02:00     C:\Users\Milosh\AppData\Local\Temp\ResetDevice.exe --------- 7168  
 10.04.2010 02:00     C:\Users\Milosh\AppData\Local\Temp\SysConfig.dat --------- 2476  
----------------------------------------

 
C:\Program Files

 26.07.2011 17:02     C:\Program Files\Internet Explorer --------- 4096  
 23.07.2011 19:11     C:\Program Files\WinRAR --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Sidebar --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Mail --------- 4096  
 23.07.2011 18:54     C:\Program Files\DVD Maker --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Portable Devices --------- 0  
 23.07.2011 18:54     C:\Program Files\Windows Media Player --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Journal --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Photo Viewer --------- 4096  
 23.07.2011 18:54     C:\Program Files\Windows Defender --------- 4096  
 23.07.2011 18:25     C:\Program Files\Broadcom --------- 0  
 23.07.2011 18:05     C:\Program Files\Microsoft Games --------- 4096  
 23.07.2011 18:01     C:\Program Files\Acer --------- 0  
 23.07.2011 17:59     C:\Program Files\Synaptics --------- 0  
 23.07.2011 17:57     C:\Program Files\Realtek --------- 0  
 23.07.2011 17:45     C:\Program Files\NVIDIA Corporation --------- 4096  
 23.07.2011 17:42     C:\Program Files\Windows NT --------- 4096  
 23.07.2011 17:42     C:\Program Files\Gemeinsame Dateien --------- 0  
 14.07.2009 07:32     C:\Program Files\MSBuild --------- 0  
 14.07.2009 07:32     C:\Program Files\Reference Assemblies --------- 0  
 14.07.2009 07:09     C:\Program Files\Uninstall Information --------- 0  
 14.07.2009 06:54     C:\Program Files\desktop.ini --------- 174  
 14.07.2009 05:20     C:\Program Files\Common Files --------- 4096  
----------------------------------------

 
C:\ProgramData\.. 

Milosh    
Default    
Public    
Default User    
All Users    
desktop.ini    
----------------------------------------

 
C:\Windows\system32\drivers\etc\hosts


----------------------------------------

 

Abbildname                     PID Sitzungsname       Sitz.-Nr. Speichernutzung
========================= ======== ================ =========== ===============
System Idle Process              0 Services                   0            24 K
System                           4 Services                   0         4.184 K
smss.exe                       324 Services                   0         1.172 K
csrss.exe                      544 Services                   0         4.740 K
wininit.exe                    596 Services                   0         5.156 K
csrss.exe                      616 Console                    1        14.152 K
services.exe                   660 Services                   0         9.740 K
lsass.exe                      676 Services                   0        11.064 K
lsm.exe                        684 Services                   0         4.528 K
winlogon.exe                   768 Console                    1         7.684 K
svchost.exe                    832 Services                   0         9.920 K
nvvsvc.exe                     892 Services                   0         5.332 K
svchost.exe                    932 Services                   0        11.284 K
svchost.exe                   1016 Services                   0        19.312 K
svchost.exe                    336 Services                   0       166.968 K
svchost.exe                    532 Services                   0        46.044 K
svchost.exe                   1108 Services                   0        13.860 K
SavService.exe                1196 Services                   0       139.128 K
svchost.exe                   1528 Services                   0        16.612 K
svchost.exe                   1632 Services                   0        27.204 K
wlanext.exe                   1692 Services                   0         5.680 K
conhost.exe                   1704 Services                   0         3.252 K
spoolsv.exe                   1752 Services                   0        12.596 K
armsvc.exe                    1872 Services                   0         4.080 K
dsiwmis.exe                   1912 Services                   0         6.160 K
ePowerSvc.exe                 1956 Services                   0         7.580 K
SAVAdminService.exe           2012 Services                   0         3.216 K
ALsvc.exe                     1052 Services                   0         2.088 K
swi_service.exe               1232 Services                   0         5.808 K
nvvsvc.exe                    2724 Console                    1        10.252 K
LogonUI.exe                   2732 Services                   0        16.716 K
taskhost.exe                  2848 Console                    1        10.400 K
dwm.exe                       2968 Console                    1        28.628 K
explorer.exe                  3012 Console                    1        54.400 K
RAVCpl64.exe                  2808 Console                    1        11.800 K
SynTPEnh.exe                  2628 Console                    1        14.044 K
ePowerTray.exe                3000 Console                    1        12.184 K
NMBgMonitor.exe               2992 Console                    1        12.136 K
NMIndexingService.exe         3096 Services                   0        11.536 K
SearchIndexer.exe             3200 Services                   0        31.192 K
SynTPHelper.exe               3332 Console                    1         5.012 K
LManager.exe                  3376 Console                    1        13.788 K
IAStorIcon.exe                3388 Console                    1        27.684 K
mbamgui.exe                   3400 Console                    1         7.244 K
VCDDaemon.exe                 3412 Console                    1         5.532 K
ALMon.exe                     3464 Console                    1         1.660 K
unsecapp.exe                  3552 Console                    1         7.204 K
WmiPrvSE.exe                  3616 Services                   0         7.348 K
ePowerEvent.exe               3912 Console                    1         5.588 K
NMIndexStoreSvr.exe           4008 Console                    1        15.664 K
MMDx64Fx.exe                  3036 Console                    1         6.172 K
LMworker.exe                  3268 Console                    1         4.420 K
iron.exe                      3324 Console                    1        67.320 K
iron.exe                      1216 Console                    1        57.664 K
svchost.exe                    124 Services                   0         7.064 K
IAStorDataMgrSvc.exe          2760 Services                   0        20.404 K
mbamservice.exe                720 Services                   0        40.572 K
sppsvc.exe                    2388 Services                   0         9.436 K
svchost.exe                   3768 Services                   0        35.992 K
wuauclt.exe                   5040 Console                    1         7.648 K
notepad.exe                   5044 Console                    1         6.560 K
notepad.exe                   3500 Console                    1         7.652 K
notepad.exe                   2604 Console                    1         8.288 K
audiodg.exe                   4656 Services                   0        17.172 K
SearchProtocolHost.exe        3576 Services                   0         9.072 K
SearchFilterHost.exe          3568 Services                   0         7.304 K
cmd.exe                       4268 Console                    1         4.356 K
conhost.exe                   2940 Console                    1         6.684 K
dllhost.exe                   4276 Console                    1         7.180 K
tasklist.exe                  3144 Console                    1         6.272 K
WmiPrvSE.exe                  3536 Services                   0         6.800 K

 
***** Ende des Scans 26.07.2011 um 18:17:36,26 ***
ccleaner:
Code:
ATTFilter
Acer Crystal Eye webcam	Liteon	22.07.2011	3,22MB	1.0.4.0
Acer ePower Management	Acer Incorporated	22.07.2011		5.00.3005
Adobe Flash Player 10 Plugin	Adobe Systems Incorporated	24.07.2011	6,00MB	10.3.181.34
Adobe Reader X (10.1.0) - Deutsch	Adobe Systems Incorporated	24.07.2011	118,5MB	10.1.0
Broadcom 802.11 Network Adapter	Broadcom Corporation	23.07.2011		5.100.249.2
CCleaner	Piriform	25.07.2011		3.08
Cisco EAP-FAST Module	Cisco Systems, Inc.	22.07.2011	1,55MB	2.2.14
Cisco LEAP Module	Cisco Systems, Inc.	22.07.2011	0,63MB	1.0.19
Cisco PEAP Module	Cisco Systems, Inc.	22.07.2011	1,24MB	1.1.6
Combined Community Codec Pack 2010-10-10	CCCP Project	22.07.2011	26,1MB	2010.10.10.0
Intel(R) Rapid Storage Technology	Intel Corporation	23.07.2011		9.6.2.1001
Launch Manager	Acer Inc.	22.07.2011		4.0.12
Malwarebytes' Anti-Malware Version 1.51.1.1800	Malwarebytes Corporation	22.07.2011	13,4MB	1.51.1.1800
Mobile Partner	Huawei Technologies Co.,Ltd	24.07.2011		16.001.06.01.500
Mozilla Firefox (3.6.13)	Mozilla	22.07.2011		3.6.13 (de)
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	25.07.2011	1,28MB	4.20.9870.0
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	25.07.2011	1,33MB	4.20.9876.0
Nero 8 Essentials	Nero AG	22.07.2011	897MB	8.10.124
NVIDIA Display Control Panel	NVIDIA Corporation	22.07.2011	135,0MB	6.14.12.5903
NVIDIA Drivers	NVIDIA Corporation	22.07.2011	65,1MB	1.10.62.40
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	22.07.2011		6.0.1.6141
Sophos Anti-Virus	Sophos Limited	22.07.2011	24,0MB	9.7.3
Sophos AutoUpdate	Sophos Limited	22.07.2011	11,2MB	2.5.9
SRWare Iron 8.0.555.0	SRWare	22.07.2011	58,9MB	
Synaptics Pointing Device Driver	Synaptics Incorporated	22.07.2011		14.0.19.0
VirtualCloneDrive	Elaborate Bytes	22.07.2011		
WinRAR		22.07.2011
So das war jetzt alles hoff ich mal =) Hoffentlich kannst mir helfen =) Und danke dir

Alt 26.07.2011, 21:57   #12
kira
/// Helfer-Team
 
Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - Standard

Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


für PC1:
also ich finde keinen Hinweis auf solche Probleme..Malware oder sonstiges

Systemreinigung und prüfung:

1.
Fixen mit OTL
  • Starte die OTL.exe.
  • Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
  • Kopiere folgendes Skript:
Code:
ATTFilter
:OTL
[2010.12.03 20:14:08 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{3ae0d4ef-b6ae-11e0-8772-9abdf88782d6}\Shell - "" = AutoRun
O33 - MountPoints2\{3ae0d4ef-b6ae-11e0-8772-9abdf88782d6}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{3ae0d4f2-b6ae-11e0-8772-9abdf88782d6}\Shell - "" = AutoRun
O33 - MountPoints2\{3ae0d4f2-b6ae-11e0-8772-9abdf88782d6}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{ed1ab98e-b54c-11e0-ae87-ac901c8700d4}\Shell - "" = AutoRun
O33 - MountPoints2\{ed1ab98e-b54c-11e0-ae87-ac901c8700d4}\Shell\AutoRun\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{ed1ab98e-b54c-11e0-ae87-ac901c8700d4}\Shell\configure\command - "" = H:\SETUP.EXE
O33 - MountPoints2\{ed1ab98e-b54c-11e0-ae87-ac901c8700d4}\Shell\install\command - "" = H:\SETUP.EXE

:Commands
[purity]
[emptytemp]
  • und füge es hier ein:
  • Schließe alle Programme.
  • Klicke auf den Fix Button.
  • Klick auf .
  • OTL verlangt einen Neustart. Bitte zulassen.
  • Nach dem Neustart findest Du ein Textdokument.
    Kopiere den Inhalt hier in Deinen Thread.

2.
reinige dein System mit Ccleaner:
  • "Cleaner"→ "Analysieren"→ Klick auf den Button "Start CCleaner"
  • "Registry""Fehler suchen"→ "Fehler beheben"→ "Alle beheben"
  • Starte dein System neu auf

3.
  • lade Dir SUPERAntiSpyware FREE Edition herunter.
  • installiere das Programm und update online.
  • starte SUPERAntiSpyware und klicke auf "Ihren Computer durchsuchen"
  • setze ein Häkchen bei "Kompletter Scan" und klicke auf "Weiter"
  • anschließend alle gefundenen Schadprogramme werden aufgelistet, bei alle Funde Häkchen setzen und mit "OK" bestätigen
  • auf "Weiter" klicken dann "OK" und auf "Fertig stellen"
  • um die Ergebnisse anzuzeigen: auf "Präferenzen" dann auf den "Statistiken und Protokolle" klicken
  • drücke auf "Protokoll anzeigen" - anschließend diesen Bericht bitte speichern und hier posten

4.
- "Link:-> ESET Online Scanner
>>Du sollst nicht die Antivirus-Sicherheitssoftware installieren, sondern dein System nur online scannen<<
Auch auf USB-Sticks, selbstgebrannten Datenträgern, externen Festplatten und anderen Datenträgern können Viren transportiert werden. Man muss daher durch regelmäßige Prüfungen auf Schäden, die durch Malware ("Worm.Win32.Autorun") verursacht worden sein können, überwacht werden. Hierfür sind ser gut geegnet und empfohlen, die auf dem Speichermedium gesicherten Daten, mit Hilfe des kostenlosen Online Scanners zu prüfen.
Schließe jetzt alle externe Datenträgeran (USB Sticks etc) Deinen Rechner an, dabei die Hochstell-Taste [Shift-Taste] gedrückt halten, damit die Autorun-Funktion nicht ausgeführt wird. (So verhindest Du die Ausführung der AUTORUN-Funktion) - Man kann die AUTORUN-Funktion aber auch generell abschalten.►Anleitung

-> Führe dann einen Komplett-Systemcheck mit Eset/Nod32 durch

- folgendes bitte anhaken > "Remove found threads" und "Scan archives"
- die Scanergebnis als *.txt Dateien speichern)
- meistens "C:\Programme\Eset\EsetOnlineScanner\log.txt"

Vor dem Scan Einstellungen im Internet Explorer:
- "Extras→ Internetoptionen→ Sicherheit":
- alles auf Standardstufe stellen
- Active X erlauben
- um den Scan zu starten: wenn du danach gefragt wirst (den Text in der Informationsleiste ) - ActiveX-Steuerelement installieren lassen
__________________

Warnung!:
Vorsicht beim Rechnungen per Email mit ZIP-Datei als Anhang! Kann mit einen Verschlüsselungs-Trojaner infiziert sein!
Anhang nicht öffnen, in unserem Forum erst nachfragen!
Sichere regelmäßig deine Daten, auf CD/DVD, USB-Sticks oder externe Festplatten, am besten 2x an verschiedenen Orten!
Bitte diese Warnung weitergeben, wo Du nur kannst!
Antwort

Themen zu Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht
andere, arbeit, befindet, blockiert, frage, gen, gesuch, gesucht, google, laptop, link, link geklickt, malwarebytes, neu, neu aufgesetzt, online, pornoseiten, problem, rechner, seite, seiten, sperrt, stick, stunden, verbindungen, virus, wlan


« trojaner an bord! online-banking gesperrt | Internet extrem langsam »


Ähnliche Themen: Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht


  1. Win7 - WLAN Verbindungsabbrüche, Router flutet PC mit Anfragen über ARP Protokoll, Unbekannte Geräte im WLAN Repeater
    Plagegeister aller Art und deren Bekämpfung - 23.08.2015 (5)
  2. Malware über Wlan Netzwerk
    Diskussionsforum - 20.08.2015 (18)
  3. UMTS-Stick mit SMS-Falle
    Nachrichten - 02.06.2014 (0)
  4. Virtuelles Wifi über WLAN Stick
    Alles rund um Windows - 19.09.2013 (0)
  5. WLan über Kabelmodem Thomson und Zyxel DSL WLAN Modem 200
    Netzwerk und Hardware - 04.04.2013 (11)
  6. Internet über Wlan geht bei aktiver LAN-Verbindung nicht
    Netzwerk und Hardware - 22.11.2012 (19)
  7. Lexmark sperrt Zugriff auf Webseiten über Firefox
    Plagegeister aller Art und deren Bekämpfung - 12.03.2012 (1)
  8. MALWAREBYTES findet was, aber KIS2012 nicht - Link über MSN
    Log-Analyse und Auswertung - 07.01.2012 (2)
  9. Etliche Trojaner beseitigt - Malwarebytes blockiert ständig Verbindungen zu anderen Webseiten
    Plagegeister aller Art und deren Bekämpfung - 21.08.2011 (1)
  10. Virus über USB-Stick übertragen?
    Log-Analyse und Auswertung - 01.10.2010 (2)
  11. Internetverbindung über Wlan bricht ständig ab
    Log-Analyse und Auswertung - 02.02.2010 (19)
  12. Internet über wlan funktionirt bei aktiver lan verbindung nicht
    Alles rund um Windows - 19.08.2009 (4)
  13. XP Pc kommt nicht über USB Stick ins Internet
    Netzwerk und Hardware - 31.07.2009 (2)
  14. TR/VB.aqt.58 über USB Stick
    Log-Analyse und Auswertung - 03.02.2008 (4)
  15. Ständig Virenmeldungen über Trojaner, die nicht gelöscht/repariert werden können
    Plagegeister aller Art und deren Bekämpfung - 18.07.2007 (59)
  16. Alle verbindungen laufen über 127.0.0.1
    Antiviren-, Firewall- und andere Schutzprogramme - 13.02.2006 (2)
  17. Über Wlan Heimnetzwek aufbauen???
    Netzwerk und Hardware - 23.11.2005 (7)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht - So also zu meiner Frage, ich hatte das Problem dass ich ständig wenn ich in google was gesucht hab und dann auf ein link geklickt hab immer auf andere seiten(meist - Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht...
Archiv
Du betrachtest: Malwarebytes sperrt daheim über Wlan ständig verbindungen, über umts stick jedoch nicht auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129