Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Auch "Windowssystem aus Sicherheitsgründen blockiert"

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 19.01.2012, 12:45   #1
tissi
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



Hallo,

wie schon etliche vor mir habe ich mir wohl auch den Schädling eingefangen, der das "Windowssystem aus Sicherheitsgründen blockiert". Ein Komplettscan mit McAfee hat nichts gefunden.

Kann es da reichen, wenn ich das System von einem sauberen Backup wiederherstelle? Oder befällt der Trojaner (?) auch die Windowssicherung und -wiederherstellung und übersteht das?

Ansonsten wär ich sehr dankbar für jede Hilfe. Hab mir schon einige andere Threads zum Thema angeguckt, aber da ist wohl individuelle Hilfe nötig.

Gruß
tissi

Alt 19.01.2012, 12:48   #2
markusg
/// Malware-holic
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



schaun wir mal.
pc neustarten, f8 drücken abgesicherter modus mit netzwerk wählen.
Falls noch nicht vorhanden, lade Dir bitte OTL von Oldtimer herunter und speichere es auf Deinem Desktop
  • Starte bitte die
    OTL.exe
    .
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Kopiere nun den Inhalt in die
    Textbox.
Code:
ATTFilter
activex
netsvcs
msconfig
%SYSTEMDRIVE%\*.
%PROGRAMFILES%\*.exe
%LOCALAPPDATA%\*.exe
%systemroot%\*. /mp /s
/md5start
userinit.exe
eventlog.dll
scecli.dll
netlogon.dll
cngaudit.dll
ws2ifsl.sys
sceclt.dll
ntelogon.dll
winlogon.exe
logevent.dll
user32.DLL
explorer.exe
iaStor.sys
nvstor.sys
atapi.sys
IdeChnDr.sys
viasraid.sys
AGP440.sys
vaxscsi.sys
nvatabus.sys
viamraid.sys
nvata.sys
nvgts.sys
iastorv.sys
ViPrt.sys
eNetHook.dll
ahcix86.sys
KR10N.sys
nvstor32.sys
ahcix86s.sys
/md5stop
%systemroot%\system32\drivers\*.sys /lockedfiles
%systemroot%\System32\config\*.sav
%systemroot%\system32\*.dll /lockedfiles
%USERPROFILE%\*.*
%USERPROFILE%\Local Settings\Temp\*.exe
%USERPROFILE%\Local Settings\Temp\*.dll
%USERPROFILE%\Application Data\*.exe
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs
CREATERESTOREPOINT
         
  • Schliesse bitte nun alle Programme. (Wichtig)
  • Klicke nun bitte auf den Quick Scan Button.
  • Kopiere
    nun den Inhalt aus OTL.txt und Extra.txt hier in Deinen Thread
__________________

__________________

Alt 19.01.2012, 13:27   #3
tissi
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



Erstmal vielen Dank für die schnelle Hilfe, bin echt begeistert.

Und hier die Logs:

OTL.Txt:
Code:
ATTFilter
OTL logfile created on: 19.01.2012 14:11:20 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\***\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
5,92 Gb Total Physical Memory | 4,93 Gb Available Physical Memory | 83,27% Memory free
11,83 Gb Paging File | 10,97 Gb Available in Paging File | 92,73% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 581,42 Gb Total Space | 440,25 Gb Free Space | 75,72% Space Free | Partition Type: NTFS
Drive E: | 488,95 Mb Total Space | 441,96 Mb Free Space | 90,39% Space Free | Partition Type: FAT
 
Computer Name: NOTEBOOKC | User Name: *** | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.01.19 13:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
 
 
========== Modules (No Company Name) ==========
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - [2011.10.18 14:32:28 | 000,161,168 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Windows\SysNative\mfevtps.exe -- (mfevtp)
SRV:64bit: - [2011.10.18 14:23:24 | 000,208,536 | ---- | M] () [Unknown | Running] -- C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe -- (mfefire)
SRV:64bit: - [2011.10.18 14:23:06 | 000,199,272 | ---- | M] () [Unknown | Stopped] -- C:\Program Files\Common Files\McAfee\SystemCore\\mcshield.exe -- (McShield)
SRV:64bit: - [2011.06.23 14:23:52 | 000,501,768 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- C:\Program Files\mcafee\VirusScan\mcods.exe -- (McODS)
SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (MSK80Service)
SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McProxy)
SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McOobeSv)
SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNASvc)
SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (McNaiAnn)
SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Auto | Running] -- C:\Program Files\Common Files\mcafee\McSvcHost\McSvHost.exe -- (mcmscsvc)
SRV:64bit: - [2011.01.27 17:28:20 | 000,249,936 | ---- | M] (McAfee, Inc.) [Unknown | Running] -- C:\Program Files\Common Files\McAfee\McSvcHost\McSvHost.exe -- (McMPFSvc)
SRV:64bit: - [2010.11.29 21:00:56 | 000,149,504 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\TurboBoost\TurboBoost.exe -- (TurboBoost)
SRV:64bit: - [2010.09.23 00:10:10 | 000,057,184 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc)
SRV - [2012.01.03 05:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.11.19 17:54:00 | 002,253,120 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService)
SRV - [2011.07.08 21:32:14 | 000,666,696 | ---- | M] (Juniper Networks) [Auto | Stopped] -- C:\Program Files (x86)\Juniper Networks\Common Files\dsNcService.exe -- (dsNcService)
SRV - [2011.03.25 22:26:46 | 000,334,448 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP)
SRV - [2011.03.25 22:26:28 | 000,404,080 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service)
SRV - [2011.03.25 22:26:16 | 000,113,264 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService)
SRV - [2011.03.25 21:27:40 | 000,539,248 | ---- | M] (VMware, Inc.) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService)
SRV - [2010.12.21 00:24:38 | 002,656,280 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R)
SRV - [2010.12.21 00:24:36 | 000,325,656 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R)
SRV - [2010.12.17 20:41:32 | 001,515,792 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV - [2010.12.17 20:28:46 | 000,340,240 | ---- | M] () [On_Demand | Stopped] -- C:\Programme\Intel\WiFi\bin\PanDhcpDns.exe -- (MyWiFiDHCPDNS)
SRV - [2010.12.17 20:26:50 | 000,836,880 | ---- | M] (Intel(R) Corporation) [Auto | Stopped] -- C:\Programme\Common Files\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV - [2010.11.03 18:01:20 | 001,298,496 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service)
SRV - [2010.11.03 17:53:28 | 000,897,088 | ---- | M] (Intel Corporation) [Auto | Stopped] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor)
SRV - [2010.10.29 19:20:58 | 000,236,016 | ---- | M] (CyberLink) [Auto | Stopped] -- c:\Program Files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe -- (CLKMSVC10_9EC60124)
SRV - [2010.09.04 07:15:22 | 000,219,632 | ---- | M] (Sonic Solutions) [Auto | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe -- (RoxWatch12)
SRV - [2010.09.04 07:14:26 | 001,116,656 | ---- | M] (Sonic Solutions) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe -- (RoxMediaDB12OEM)
SRV - [2010.08.30 20:42:00 | 000,220,528 | ---- | M] (McAfee, Inc.) [On_Demand | Stopped] -- c:\Programme\mcafee\msc\McAWFwk.exe -- (McAWFwk)
SRV - [2010.08.26 02:28:54 | 002,823,000 | ---- | M] (Dell, Inc.) [Disabled | Stopped] -- C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe -- (NOBU)
SRV - [2010.08.19 12:57:14 | 000,191,024 | ---- | M] (VMware, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60)
SRV - [2010.03.18 13:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.11.18 03:14:26 | 000,098,208 | ---- | M] (Andrea Electronics Corporation) [Auto | Stopped] -- C:\Programme\Realtek\Audio\HDA\AERTSr64.exe -- (AERTFilters)
SRV - [2009.06.10 22:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2011.12.09 19:45:00 | 000,060,416 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\iBtFltCoex.sys -- (iBtFltCoex)
DRV:64bit: - [2011.11.19 17:54:00 | 000,249,152 | ---- | M] (NVIDIA Corporation) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\nvkflt.sys -- (nvkflt)
DRV:64bit: - [2011.11.19 17:54:00 | 000,028,992 | ---- | M] (NVIDIA Corporation) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\nvpciflt.sys -- (nvpciflt)
DRV:64bit: - [2011.11.15 01:13:00 | 000,327,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmhsf.sys -- (btmhsf)
DRV:64bit: - [2011.10.15 13:16:16 | 000,647,080 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfehidk.sys -- (mfehidk)
DRV:64bit: - [2011.10.15 13:16:16 | 000,481,768 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfefirek.sys -- (mfefirek)
DRV:64bit: - [2011.10.15 13:16:16 | 000,284,648 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Running] -- C:\Windows\SysNative\drivers\mfewfpk.sys -- (mfewfpk)
DRV:64bit: - [2011.10.15 13:16:16 | 000,229,528 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mfeavfk.sys -- (mfeavfk)
DRV:64bit: - [2011.10.15 13:16:16 | 000,160,280 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mfeapfk.sys -- (mfeapfk)
DRV:64bit: - [2011.10.15 13:16:16 | 000,100,912 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\mferkdet.sys -- (mferkdet)
DRV:64bit: - [2011.10.15 13:16:16 | 000,075,808 | ---- | M] (McAfee, Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\mfenlfk.sys -- (mfenlfk)
DRV:64bit: - [2011.10.15 13:16:16 | 000,065,264 | ---- | M] (McAfee, Inc.) [Kernel | Unknown | Stopped] -- C:\Windows\SysNative\drivers\cfwids.sys -- (cfwids)
DRV:64bit: - [2011.06.10 05:34:52 | 000,539,240 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.03.25 22:27:36 | 000,068,720 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86)
DRV:64bit: - [2011.03.25 22:27:34 | 000,081,008 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci)
DRV:64bit: - [2011.03.25 22:25:46 | 000,031,856 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd)
DRV:64bit: - [2011.03.25 22:25:34 | 000,030,320 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif)
DRV:64bit: - [2011.03.25 21:27:36 | 000,038,512 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon)
DRV:64bit: - [2011.03.25 19:05:00 | 000,037,680 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmusb.sys -- (vmusb)
DRV:64bit: - [2011.03.25 19:04:58 | 000,045,104 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge)
DRV:64bit: - [2011.03.25 19:04:58 | 000,020,016 | ---- | M] (VMware, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter)
DRV:64bit: - [2011.03.11 07:41:12 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.03.11 07:41:12 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.01.31 16:24:46 | 000,121,960 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvstusb.sys -- (NvStUSB)
DRV:64bit: - [2011.01.07 16:02:28 | 000,045,408 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\point64.sys -- (Point64)
DRV:64bit: - [2010.12.23 18:44:20 | 012,260,000 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx)
DRV:64bit: - [2010.12.22 18:08:48 | 008,505,856 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\NETwNs64.sys -- (NETwNs64) ___ Intel(R)
DRV:64bit: - [2010.12.13 18:34:14 | 000,027,760 | ---- | M] (ST Microelectronics) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Accelern.sys -- (Acceler)
DRV:64bit: - [2010.11.29 21:00:04 | 000,016,120 | ---- | M] (Intel(R) Corporation) [Kernel | Auto | Stopped] -- C:\Windows\SysNative\drivers\TurboB.sys -- (TurboB)
DRV:64bit: - [2010.11.20 14:33:35 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 12:07:05 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 10:37:42 | 000,109,056 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\sdbus.sys -- (sdbus)
DRV:64bit: - [2010.11.19 19:34:26 | 000,181,248 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3xhc.sys -- (nusb3xhc)
DRV:64bit: - [2010.11.19 19:34:26 | 000,080,384 | ---- | M] (Renesas Electronics Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\nusb3hub.sys -- (nusb3hub)
DRV:64bit: - [2010.11.12 13:40:50 | 000,155,752 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\nvhda64v.sys -- (NVHDA)
DRV:64bit: - [2010.11.11 02:32:20 | 000,172,632 | ---- | M] (JMicron Technology Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\jmcr.sys -- (JMCR)
DRV:64bit: - [2010.11.04 11:07:06 | 000,058,128 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux)
DRV:64bit: - [2010.10.20 01:34:26 | 000,056,344 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) Intel(R)
DRV:64bit: - [2010.10.15 09:28:16 | 000,317,440 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) Intel(R)
DRV:64bit: - [2010.09.24 02:44:48 | 001,394,224 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP)
DRV:64bit: - [2010.09.03 17:42:40 | 000,167,920 | ---- | M] (Sonic Solutions) [Kernel | System | Stopped] -- C:\Windows\SysNative\drivers\C2SCSI64.SYS -- (c2scsi64)
DRV:64bit: - [2010.08.20 11:05:12 | 000,021,616 | ---- | M] (ST Microelectronics) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\stdcfltn.sys -- (stdcfltn)
DRV:64bit: - [2010.08.12 16:51:30 | 000,175,168 | ---- | M] (Creative Technology Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\CtClsFlt.sys -- (CtClsFlt)
DRV:64bit: - [2010.07.13 03:38:06 | 000,029,288 | ---- | M] (Quanta Computer) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\qicflt.sys -- (qicflt)
DRV:64bit: - [2010.03.19 09:00:00 | 000,055,856 | ---- | M] (Sonic Solutions) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\PxHlpa64.sys -- (PxHlpa64)
DRV:64bit: - [2010.02.27 00:32:12 | 000,158,976 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\Impcd.sys -- (Impcd)
DRV:64bit: - [2009.12.09 14:10:40 | 000,032,768 | ---- | M] (Juniper Networks) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\dsNcAdpt.sys -- (dsNcAdpt)
DRV:64bit: - [2009.07.14 02:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 02:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 02:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.06.10 21:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 21:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 21:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 21:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008.04.08 14:41:08 | 000,170,016 | R--- | M] () [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\USB_0064.sys -- (DVBUSB_0064_Sevice)
DRV:64bit: - [2006.11.01 18:51:00 | 000,151,656 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2010.08.19 12:56:38 | 000,032,816 | ---- | M] (VMware, Inc.) [Kernel | Auto | Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60)
DRV - [2009.07.14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_1_102.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF:64bit: - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL ()
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@mcafee.com/MSC,version=10: c:\progra~2\mcafee\msc\npmcsn~1.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{D19CA586-DD6C-4a0a-96F8-14644F340D60}: C:\Program Files (x86)\Common Files\McAfee\SystemCore [2011.12.24 11:56:48 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2011.12.21 14:42:55 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 7.0.1\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2011.05.03 19:59:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\***\AppData\Roaming\mozilla\Extensions
[2011.07.13 22:27:24 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
[2011.07.13 22:27:24 | 000,000,000 | ---D | M] (Java Console) -- C:\Program Files (x86)\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011.12.24 11:56:48 | 000,000,000 | ---D | M] (McAfee ScriptScan for Firefox) -- C:\PROGRAM FILES (X86)\COMMON FILES\MCAFEE\SYSTEMCORE
[2011.12.21 14:42:54 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2011.04.14 13:01:38 | 000,024,376 | ---- | M] (McAfee, Inc.) -- C:\Program Files (x86)\mozilla firefox\components\Scriptff.dll
[2011.12.21 14:42:52 | 000,001,392 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.12.21 14:42:52 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2011.12.21 14:42:52 | 000,001,153 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-de.xml
[2011.12.21 14:42:52 | 000,006,805 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\leo_ende_de.xml
[2011.12.21 14:42:52 | 000,001,178 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-de.xml
[2011.12.21 14:42:52 | 000,001,105 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2012.01.14 18:15:01 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\PROGRA~1\mcafee\msk\MSKAPB~1.DLL File not found
O2:64bit: - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Programme\Common Files\mcafee\systemcore\ScriptSn.20111224115439.dll (McAfee, Inc.)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Programme\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (McAfee Phishing Filter) - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\Programme\mcafee\msk\mskapbho.dll ()
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files (x86)\Common Files\McAfee\SystemCore\ScriptSn.20111224115439.dll (McAfee, Inc.)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation)
O4:64bit: - HKLM..\Run: [FreeFallProtection] C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe ()
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelliPoint] c:\Program Files\Microsoft IntelliPoint\ipoint.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [IntelWireless] C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [QuickSet] c:\Programme\Dell\QuickSet\quickset.exe (Dell Inc.)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [BDRegion] c:\Program Files (x86)\Cyberlink\Shared Files\brs.exe (cyberlink)
O4 - HKLM..\Run: [Dell Registration] C:\Program Files (x86)\System Registration\prodreg.exe (Dell, Inc.)
O4 - HKLM..\Run: [Desktop Disc Tool] C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe ()
O4 - HKLM..\Run: [mcui_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [PDVD9LanguageShortcut] c:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RemoteControl9] c:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe (CyberLink Corp.)
O4 - HKLM..\Run: [RoxWatchTray] C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe (Sonic Solutions)
O4 - HKLM..\Run: [VMware hqtray] C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.)
O4 - HKCU..\Run: [{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}] C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe (TrueCrypt Foundation)
O4 - HKCU..\Run: [NetLimiter] C:\Program Files\NetLimiter 3\NLClientApp.exe /tray File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O8:64bit: - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: An OneNote s&enden - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Nach Microsoft E&xcel exportieren - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000 File not found
O9:64bit: - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Verknüpfte &OneNote-Notizen - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra Button: ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7.4 - {73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - C:\Program Files (x86)\ICQ7.4\ICQ.exe (ICQ, LLC.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Programme\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000012 - C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll (VMware, Inc.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000013 - C:\Program Files (x86)\VMware\VMware Player\x64\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-0016-0000-0027-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_27-windows-i586.cab (Java Plug-in 1.6.0_27)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26)
O16 - DPF: {F27237D7-93C8-44C2-AC6E-D6057B9A918F} https://juniper.net/dana-cached/sc/JuniperSetupClient.cab (JuniperSetupClientControl Class)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{37A2E693-68C7-4C41-AD0A-C700B7C90D43}: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D91BEF26-4787-4BAE-BB9C-F2AFD4FB2C70}: NameServer = 192.168.0.1
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18:64bit: - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\Programme\mcafee\msc\McSnIePl64.dll (McAfee, Inc.)
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O18 - Protocol\Filter\application/x-mfe-ipt {3EF5086B-5478-4598-A054-786C45D75692} - c:\progra~2\mcafee\msc\mcsniepl.dll (McAfee, Inc.)
O20:64bit: - AppInit_DLLs: (C:\Windows\system32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) -C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) -C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
ActiveX:64bit: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX:64bit: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX:64bit: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX:64bit: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX:64bit: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX:64bit: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX:64bit: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX:64bit: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX:64bit: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX:64bit: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX:64bit: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX:64bit: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX:64bit: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX:64bit: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -BaseSettings
ActiveX:64bit: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX:64bit: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX:64bit: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX:64bit: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX:64bit: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX:64bit: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX:64bit: {FEBEF00C-046D-438D-8A88-BF94A6C9E703} - .NET Framework
ActiveX:64bit: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX:64bit: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\System32\ie4uinit.exe -UserIconConfig
ActiveX:64bit: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
ActiveX: {08B0E5C0-4FCB-11CF-AAA5-00401C608500} - Java (Sun)
ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {25FFAAD0-F4A3-4164-95FF-4461E9F35D51} - .NET Framework
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\SysWOW64\ie4uinit.exe -BaseSettings
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP
ActiveX: >{26923b43-4d38-484f-9b9e-de460746276c} - C:\Windows\SysWOW64\ie4uinit.exe -UserIconConfig
ActiveX: >{60B49E34-C7CC-11D0-8953-00A0C90347FF} - "C:\Windows\SysWOW64\rundll32.exe" "C:\Windows\SysWOW64\iedkcs32.dll",BrandIEActiveSetup SIGNUP
 
 
MsConfig:64bit - StartUpReg: Dell DataSafe Online - hkey= - key= - C:\Program Files (x86)\Dell\Dell Datasafe Online\NOBuClient.exe (Dell, Inc.)
MsConfig:64bit - StartUpReg: Dell Webcam Central - hkey= - key= - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe (Creative Technology Ltd)
MsConfig:64bit - State: "startup" - Reg Error: Key error.
MsConfig:64bit - State: "services" - Reg Error: Key error.
 
CREATERESTOREPOINT
Error creating restore point.
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.01.19 13:51:26 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.01.19 13:29:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
[2012.01.16 14:21:40 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{F5E49959-780D-4AF1-AEA8-316FE8D3EC8F}
[2012.01.16 14:21:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5395C7DE-ED9D-4E36-8202-A4060F1FCA3A}
[2012.01.16 09:13:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BB13469D-6288-4D21-9CCD-5504158D04AD}
[2012.01.15 16:07:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{11AA8A5B-D667-465F-AA1E-95DB0C28E7BE}
[2012.01.15 16:07:16 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0FDD9D70-3042-4C2C-B148-A415B4335A40}
[2012.01.15 13:15:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{62979A56-2C94-4058-A862-C4150F520C33}
[2012.01.14 12:41:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3A202188-F656-47CF-B7EE-C0F794531340}
[2012.01.14 12:41:42 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{63A7C9EA-4DE1-4FA8-8527-FD7744358A0C}
[2012.01.13 22:10:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{079C89EE-5CD9-4AD3-86BB-2F8CDE14D64F}
[2012.01.13 22:09:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{69CFE995-2C67-4B3F-80CA-70B319D76936}
[2012.01.13 09:55:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2012.01.13 09:54:43 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA GPU Computing Toolkit
[2012.01.13 09:42:43 | 000,068,928 | ---- | C] (Khronos Group) -- C:\Windows\SysNative\OpenCL.dll
[2012.01.13 09:42:43 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
[2012.01.13 09:39:49 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2012.01.13 09:01:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{908A21C4-F77A-4B96-A775-C516608982AF}
[2012.01.13 09:01:14 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8368E417-56A5-45C5-9CAC-80830BD07042}
[2012.01.12 22:12:03 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C009C50F-D146-4764-9F0A-A7A5FE609791}
[2012.01.12 17:19:12 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{82E1F997-35C4-406D-BA11-A421D14AFAF1}
[2012.01.12 14:28:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{13BA3195-80EE-4834-907F-2950C47269A8}
[2012.01.12 14:23:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{999E6D61-FE5C-4585-BAED-012649D60AA5}
[2012.01.12 09:01:12 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DFE6DED4-622E-4179-AD7D-4E18F99DD933}
[2012.01.11 09:39:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{96AB6259-26BB-457A-B9DD-FC26B1C13B41}
[2012.01.11 09:38:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{83751B27-F6EB-4458-87FF-F846E96BDEE2}
[2012.01.10 17:56:52 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7C0AFBF6-748D-4BFD-BE7D-F865DAAE4732}
[2012.01.10 17:56:41 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A49618AD-CF91-4E99-9D2C-F02B055E4F77}
[2012.01.09 17:18:14 | 000,000,000 | ---D | C] -- C:\Users\***\.ssh
[2012.01.09 14:08:34 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{DB0CEA02-82E3-40B9-802C-2957210092D7}
[2012.01.09 14:08:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7288F2A2-C9BB-48EC-9890-FF5FB8B607E6}
[2012.01.09 09:18:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7D87BF4E-437F-4502-B069-56E409ADCB7D}
[2012.01.08 17:02:09 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C10A7703-70DC-4E05-BB39-A437FC5A2F59}
[2012.01.08 17:01:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FF4D416C-D7AA-4A97-B26D-3FA8E8238D7C}
[2012.01.08 13:43:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{B32B0963-0793-4838-8AE5-43F2480E11B8}
[2012.01.07 21:37:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C5E99881-E284-4334-9069-E610D4D004C6}
[2012.01.07 21:37:21 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{237A82B1-DDA0-48AE-8268-7C98E295440E}
[2012.01.07 15:35:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ANNO 1602
[2012.01.07 10:45:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BCBFCF43-C1ED-47FF-8555-6F22227027DA}
[2012.01.07 10:45:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3B407DCC-C0A1-4E56-A258-609896913565}
[2012.01.06 11:56:35 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{ED72B535-0050-476D-8C22-F0085857D2E7}
[2012.01.06 11:06:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2ECF5C5B-2569-4A43-94D9-3B557CCDBE6F}
[2012.01.06 11:06:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8EB08F8E-A919-4021-8DC0-0EDE401D2E01}
[2012.01.05 08:17:14 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3CBC80B6-1D3C-4202-9358-C4799113E543}
[2012.01.05 08:17:03 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{ACB167BA-8C23-400C-833E-6DEEA4D97457}
[2012.01.04 11:05:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4F3A287C-A4C4-4FF4-879D-BF886C606A7A}
[2012.01.04 11:05:00 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{9C871109-6636-43A2-9189-19C4A09541AE}
[2012.01.04 10:09:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{65DAF0A5-33F0-4F20-99DF-FEFA9A043AFA}
[2012.01.04 09:55:37 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{547E83CE-50BB-49B3-A7CD-44CDE6EFC7C6}
[2012.01.03 14:53:04 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{83EB7081-F6C2-4A63-BE39-0686976CA5B6}
[2012.01.03 14:52:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0441681F-1E60-48E6-B5A9-6EEB2148466D}
[2012.01.03 13:11:37 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{55503357-364C-49C2-858B-205C76C5C123}
[2012.01.03 11:18:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8938EC12-F280-4DD3-9D70-FAE4D33A1410}
[2012.01.02 17:42:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7DB47592-8CD7-40FB-BD88-6B2A83642F80}
[2012.01.02 17:42:11 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2902E46A-D8DE-4FE5-90FC-186A51BD7B25}
[2012.01.02 10:22:59 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{432FC88B-296B-45A4-A173-404882BAB606}
[2012.01.02 10:22:49 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{784248E9-E5C2-439A-9143-8CFC664FB6F1}
[2012.01.02 00:30:17 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1926FC3F-4034-484B-8962-0397C09F92B0}
[2012.01.01 21:51:47 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{631134C0-E052-49D4-8AE1-6661964D3F9C}
[2012.01.01 21:51:27 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{8008940C-EA93-43E7-8AA9-C0F1AA5A21E7}
[2012.01.01 19:52:43 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{728C4FA8-CF44-4B2C-B6A8-2D2CA8498EC8}
[2012.01.01 12:54:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BAEDB6AA-7DE9-4AE7-B186-D7D179085F5F}
[2012.01.01 12:54:26 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{38D6569F-1DF6-4113-9EF3-7916ABB7DEF8}
[2011.12.31 15:27:19 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{81BD2A98-96FF-46B1-9E9B-E9BF7A12352C}
[2011.12.31 15:27:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5569259B-0F04-40B2-B1AD-DDF0A721E5DC}
[2011.12.30 15:13:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1F968AF9-F931-4B36-884D-E9027FD4925E}
[2011.12.30 15:12:56 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2D7055AE-1EFE-4277-A488-E996DF39A950}
[2011.12.30 10:59:46 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{BDB98F43-CCE7-4328-95EA-F1D6A08BF427}
[2011.12.29 15:42:58 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3C17CAEE-8C3F-48A9-BA6E-CFBF48073654}
[2011.12.29 15:42:47 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{43E54ED1-7ECD-4703-B6A7-2D38CEF21ECD}
[2011.12.29 13:23:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C33DCB05-5A26-4DB3-AFC1-AF9F45A51E57}
[2011.12.28 23:13:53 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{7385C042-44A0-42D8-B690-FC3E96393994}
[2011.12.28 10:46:20 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{351497D7-A61E-408D-A9C7-A2F6613FE12C}
[2011.12.28 10:46:10 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C5C8D459-0028-4461-95A5-56E1BDCA24E6}
[2011.12.28 01:11:19 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1394A59D-8236-489B-8BAF-4228E27D36D5}
[2011.12.28 01:11:07 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1A3EC290-7225-4D40-BA81-5FC0C7445CFA}
[2011.12.28 00:21:57 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{774DB3B6-4F92-419C-A159-2D4BE0A19A88}
[2011.12.27 10:53:15 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1179B0F7-ADA9-47AA-A1A6-06CD75D3A2CA}
[2011.12.27 10:52:35 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{AA3BB59A-737F-4B68-9BC7-FD11168DE800}
[2011.12.26 23:18:18 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{2790D2D6-C157-4004-ACA6-D0B7FB9EB723}
[2011.12.26 18:02:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1313F1C9-7CA4-45E6-AAB3-A1608848A0B4}
[2011.12.26 10:26:43 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5BB666DD-B05B-4772-9D7E-FCD57311C770}
[2011.12.25 17:56:45 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{FF0088EB-1390-4459-B391-4D2FE951F165}
[2011.12.25 17:56:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{15CDA084-806B-4AAD-B536-434CC07E7567}
[2011.12.25 12:09:56 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{65860843-269C-4238-8391-571C827B91A0}
[2011.12.25 12:09:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{0BF61365-0F43-4AFB-8321-241E008AA00E}
[2011.12.24 10:42:17 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{5B71B9E3-F366-4A90-BF96-5CD15C774611}
[2011.12.23 10:45:29 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{3A9BEFB7-C8C0-4421-9EE0-433D03654B6B}
[2011.12.23 10:45:18 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{A75C0FC1-BF43-46B9-A7B4-431DDBF2EA0E}
[2011.12.22 20:01:31 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{70150D8C-5B26-408D-BE5B-A07AF22C1F9C}
[2011.12.22 19:58:44 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{4782F48D-0BC5-48A8-8D89-5194D8F700C5}
[2011.12.22 09:11:34 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{03B31392-FBD2-4ED9-B9FE-838AB2DE9849}
[2011.12.22 09:11:22 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{1869E4E1-1E28-4DBE-BCAE-55DC302998F2}
[2011.12.21 13:49:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
[2011.12.21 13:48:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Git
[2011.12.21 10:11:48 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{AA62CBC9-B103-461E-AF26-3628B2AEA0C0}
[2011.12.21 10:11:36 | 000,000,000 | ---D | C] -- C:\Users\***\AppData\Local\{C1A4717A-3E2C-4BAB-A975-963B603CE55B}
 
========== Files - Modified Within 30 Days ==========
 
[2012.01.19 13:55:03 | 001,506,624 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.01.19 13:55:03 | 000,656,660 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.01.19 13:55:03 | 000,618,542 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.01.19 13:55:03 | 000,131,058 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.01.19 13:55:03 | 000,107,448 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.01.19 13:46:48 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\***\Desktop\OTL.exe
[2012.01.19 13:29:26 | 000,001,830 | ---- | M] () -- C:\Users\Public\Desktop\McAfee Security Center.lnk
[2012.01.19 13:22:29 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.01.19 13:22:26 | 469,372,927 | -HS- | M] () -- C:\hiberfil.sys
[2012.01.19 11:42:19 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.01.19 11:42:19 | 000,014,016 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.01.12 14:42:05 | 000,000,378 | ---- | M] () -- C:\Users\***\.bash_history
[2012.01.11 15:03:44 | 000,000,937 | -H-- | M] () -- C:\Users\***\.gitk
[2012.01.09 17:20:02 | 000,000,081 | ---- | M] () -- C:\Users\***\.gitconfig
 
========== Files Created - No Company Name ==========
 
[2012.01.11 15:01:00 | 000,000,937 | -H-- | C] () -- C:\Users\***\.gitk
[2012.01.09 17:27:10 | 000,000,378 | ---- | C] () -- C:\Users\***\.bash_history
[2012.01.09 17:20:02 | 000,000,081 | ---- | C] () -- C:\Users\***\.gitconfig
[2011.12.26 10:50:05 | 000,001,830 | ---- | C] () -- C:\Users\Public\Desktop\McAfee Security Center.lnk
[2011.05.25 19:03:06 | 000,005,120 | ---- | C] () -- C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011.05.24 10:45:34 | 001,526,948 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.05.21 14:27:33 | 000,000,032 | ---- | C] () -- C:\Windows\Menu.INI
[2011.03.26 16:59:07 | 000,007,600 | ---- | C] () -- C:\Users\***\AppData\Local\Resmon.ResmonCfg
[2011.03.14 22:50:52 | 000,960,940 | ---- | C] () -- C:\Windows\SysWow64\igkrng600.bin
[2011.03.14 22:50:50 | 000,207,376 | ---- | C] () -- C:\Windows\SysWow64\igfcg600m.bin
[2011.03.14 22:50:48 | 000,145,804 | ---- | C] () -- C:\Windows\SysWow64\igcompkrng600.bin
[2009.07.14 06:38:36 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 03:35:51 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
[2009.07.14 03:34:42 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
[2009.07.14 01:10:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
[2009.07.13 22:03:59 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat
[1997.06.14 09:56:08 | 000,056,832 | ---- | C] () -- C:\Windows\SysWow64\iyvu9_32.dll
 
========== LOP Check ==========
 
[2011.07.29 11:41:24 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\FOG Downloader
[2011.10.18 20:34:49 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\GetRightToGo
[2011.05.18 15:52:25 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\gtk-2.0
[2012.01.18 22:30:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\ICQ
[2011.10.23 14:23:21 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Juniper Networks
[2011.03.22 17:16:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Leadertech
[2011.03.23 22:47:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\mp3DirectCut
[2011.03.22 18:04:13 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Opera
[2011.04.21 17:30:36 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Subversion
[2011.03.23 10:45:37 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TerraTec
[2011.09.12 18:14:57 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\TS3Client
[2011.03.23 11:20:54 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Windows Live Writer
[2011.10.18 20:49:06 | 000,000,000 | ---D | M] -- C:\Users\***\AppData\Roaming\Zylom
[2012.01.19 13:13:03 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Custom Scans ==========
 
 
< %SYSTEMDRIVE%\*. >
[2011.03.22 17:15:44 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN
[2011.03.22 20:56:43 | 000,000,000 | ---D | M] -- C:\3fc56901d71852fea37f6c313746d1af
[2011.04.20 16:46:31 | 000,000,000 | -H-D | M] -- C:\CanoScan
[2011.03.22 17:35:17 | 000,000,000 | ---D | M] -- C:\dell
[2009.07.14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings
[2011.03.22 17:12:39 | 000,000,000 | -HSD | M] -- C:\Dokumente und Einstellungen
[2011.03.24 14:00:11 | 000,000,000 | ---D | M] -- C:\Drivers
[2011.03.22 18:24:16 | 000,000,000 | ---D | M] -- C:\Intel
[2011.03.23 10:11:28 | 000,000,000 | RH-D | M] -- C:\MSOCache
[2012.01.13 09:39:49 | 000,000,000 | ---D | M] -- C:\NVIDIA
[2011.10.19 13:27:09 | 000,000,000 | ---D | M] -- C:\opt
[2012.01.13 09:54:43 | 000,000,000 | R--D | M] -- C:\Program Files
[2011.12.21 13:48:52 | 000,000,000 | R--D | M] -- C:\Program Files (x86)
[2011.10.18 20:48:56 | 000,000,000 | -H-D | M] -- C:\ProgramData
[2011.03.22 17:12:39 | 000,000,000 | -HSD | M] -- C:\Programme
[2011.03.23 11:37:48 | 000,000,000 | ---D | M] -- C:\Programmierung
[2012.01.07 15:35:53 | 000,000,000 | ---D | M] -- C:\Spiele
[2011.03.22 17:17:59 | 000,000,000 | -HSD | M] -- C:\System Recovery
[2012.01.13 09:54:23 | 000,000,000 | -HSD | M] -- C:\System Volume Information
[2011.03.24 14:00:11 | 000,000,000 | ---D | M] -- C:\Temp
[2011.03.22 17:12:54 | 000,000,000 | R--D | M] -- C:\Users
[2012.01.19 13:22:26 | 000,000,000 | ---D | M] -- C:\Windows
 
< %PROGRAMFILES%\*.exe >
 
< %LOCALAPPDATA%\*.exe >
 
< %systemroot%\*. /mp /s >
 
 
< MD5 for: AGP440.SYS  >
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\drivers\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\SysNative\DriverStore\FileRepository\machine.inf_amd64_neutral_a2f120466549d68b\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7600.16385_none_1607dee2d861e021\AGP440.sys
[2009.07.14 02:52:21 | 000,061,008 | ---- | M] (Microsoft Corporation) MD5=608C14DBA7299D8CB6ED035A68A15799 -- C:\Windows\winsxs\amd64_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_1838f2aad55063bb\AGP440.sys
 
< MD5 for: ATAPI.SYS  >
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\drivers\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.20575_none_39c1885e54505643\atapi.sys
[2009.07.14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys
 
< MD5 for: CNGAUDIT.DLL  >
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\SysWOW64\cngaudit.dll
[2009.07.14 02:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\SysNative\cngaudit.dll
[2009.07.14 02:40:20 | 000,018,944 | ---- | M] (Microsoft Corporation) MD5=86FE1B1F8FD42CD0DB641AB1CDB13093 -- C:\Windows\winsxs\amd64_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_4458dccc49458461\cngaudit.dll
 
< MD5 for: EXPLORER.EXE  >
[2011.03.14 23:03:51 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=00B0358734CAA32C39D181FE6916B178 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_b8b0208ee0ce1889\explorer.exe
[2011.02.26 07:23:14 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=0862495E0C825893DB75EF44FAEA8E93 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_adc24107935a7e25\explorer.exe
[2011.02.26 06:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_ba87e574ddfe652d\explorer.exe
[2009.07.14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe
[2011.02.26 06:51:13 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=255CF508D7CFB10E0794D6AC93280BD8 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_b8ce9756e0b786a4\explorer.exe
[2011.03.14 23:03:58 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=2626FC9755BE22F805D3CFA0CE3EE727 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_b819b343c7ba6202\explorer.exe
[2011.02.26 06:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) MD5=2AF58D15EDC06EC6FDACCE1F19482BBF -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16768_none_b816eb59c7bb4020\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\explorer.exe
[2011.02.25 07:19:30 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=332FEAB1435662FC6C672E25BEB37BE3 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_afa79dc39081d0ba\explorer.exe
[2011.02.26 07:14:34 | 002,871,808 | ---- | M] (Microsoft Corporation) MD5=3B69712041F3D63605529BD66DC00C48 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_b0333b22a99da332\explorer.exe
[2010.11.20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe
[2011.03.14 23:03:51 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=6D4F9E4B640B413C6F73414327484C80 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_addea9f19345cd81\explorer.exe
[2011.03.14 23:03:54 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=700073016DAC1C3D2E7E2CE4223334B6 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_ae84b558ac4eb41c\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\SysWOW64\explorer.exe
[2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_b9fc4815c4e292b5\explorer.exe
[2011.03.14 23:03:58 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=9AAAEC8DAC27AA17B053E6352AD233AE -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_adc508f19359a007\explorer.exe
[2011.03.14 23:03:54 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=9FF6C4C91A3711C0A3B18F87B08B518D -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_b8d95faae0af7617\explorer.exe
[2010.11.20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe
[2011.03.14 23:03:58 | 002,870,272 | ---- | M] (Microsoft Corporation) MD5=B8EC4BD49CE8F6FC457721BFC210B67F -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_ae46d6aeac7ca7c7\explorer.exe
[2011.03.14 23:03:54 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=B95EEB0F4E5EFBF1038A35B3351CF047 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_b853c407c78e3ba9\explorer.exe
[2009.07.14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe
[2011.03.14 23:03:58 | 002,614,272 | ---- | M] (Microsoft Corporation) MD5=C76153C7ECA00FA852BB0C193378F917 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_b89b8100e0dd69c2\explorer.exe
[2011.03.14 23:03:51 | 002,868,736 | ---- | M] (Microsoft Corporation) MD5=CA17F8620815267DC838E30B68CB5052 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20542_none_ae5b763cac6d568e\explorer.exe
[2011.02.26 07:26:45 | 002,870,784 | ---- | M] (Microsoft Corporation) MD5=E38899074D4951D31B4040E994DD7C8D -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20910_none_ae79ed04ac56c4a9\explorer.exe
[2011.03.14 23:03:54 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=F170B4A061C9E026437B193B4D571799 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_adff19b5932d79ae\explorer.exe
[2011.03.14 23:03:51 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=FC89FACA0473641CB625EDA9277D0885 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16434_none_b8335443c7a68f7c\explorer.exe
 
< MD5 for: IASTORV.SYS  >
[2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_668286aa35d55928\iaStorV.sys
[2010.11.20 14:33:38 | 000,410,496 | ---- | M] (Intel Corporation) MD5=3DF4395A7CF8B7A72A5F4606366B8C2D -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_0d3757e79e6784d0\iaStorV.sys
[2011.03.14 23:04:21 | 000,410,504 | ---- | M] (Intel Corporation) MD5=513DC087CFED7D2BB82F005385D3531F -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16592_none_0af87721a183cb70\iaStorV.sys
[2011.03.11 07:19:16 | 000,410,496 | ---- | M] (Intel Corporation) MD5=5B3DE7208E5000D5B451B9D290D2579C -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_0d714416b7c182d5\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\drivers\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\SysNative\DriverStore\FileRepository\iastorv.inf_amd64_neutral_0bcee2057afcc090\iaStorV.sys
[2011.03.11 07:41:26 | 000,410,496 | ---- | M] (Intel Corporation) MD5=AAAF44DB3BD0B9D1FB6969B23ECC8366 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_0cf9793d9e95787b\iaStorV.sys
[2011.03.11 07:23:00 | 000,410,496 | ---- | M] (Intel Corporation) MD5=B75E45C564E944A2657167D197AB29DA -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16778_none_0b141c81a16e25e6\iaStorV.sys
[2011.03.11 07:25:49 | 000,410,496 | ---- | M] (Intel Corporation) MD5=BFDC9D75698800CFE4D1698BF2750EA2 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20921_none_0bccc8c8ba6985c1\iaStorV.sys
[2009.07.14 02:48:04 | 000,410,688 | ---- | M] (Intel Corporation) MD5=D83EFB6FD45DF9D55E9A1AFC63640D50 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.16385_none_0b06441fa1790136\iaStorV.sys
[2011.03.14 23:04:21 | 000,410,496 | ---- | M] (Intel Corporation) MD5=E353CF970C5D4D6A092911E15FB78C07 -- C:\Windows\winsxs\amd64_iastorv.inf_31bf3856ad364e35_6.1.7600.20712_none_0bd89532ba6088d9\iaStorV.sys
 
< MD5 for: NETLOGON.DLL  >
[2009.07.14 02:41:52 | 000,692,736 | ---- | M] (Microsoft Corporation) MD5=956D030D375F207B22FB111E06EF9C35 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_59aca8ea51aaeefe\netlogon.dll
[2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\SysNative\netlogon.dll
[2010.11.20 14:27:22 | 000,695,808 | ---- | M] (Microsoft Corporation) MD5=AA339DD8BB128EF66660DFBBB59043D3 -- C:\Windows\winsxs\amd64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_5bddbcb24e997298\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\SysWOW64\netlogon.dll
[2010.11.20 13:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_6632670482fa3493\netlogon.dll
[2009.07.14 02:16:02 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=EAA75D9000B71F10EEC04D2AE6C60E81 -- C:\Windows\winsxs\wow64_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7600.16385_none_6401533c860bb0f9\netlogon.dll
 
< MD5 for: NVSTOR.SYS  >
[2011.03.14 23:04:21 | 000,166,280 | ---- | M] (NVIDIA Corporation) MD5=0AF7B8136794E23E87BE138992880E64 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16592_none_95c1e7d0d8ba7548\nvstor.sys
[2009.07.14 02:45:45 | 000,167,488 | ---- | M] (NVIDIA Corporation) MD5=477DC4D6DEB99BE37084C9AC6D013DA1 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16385_none_95cfb4ced8afab0e\nvstor.sys
[2011.03.11 07:23:06 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=6C1D5F70E7A6A3FD1C90D840EDC048B9 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.16778_none_95dd8d30d8a4cfbe\nvstor.sys
[2011.03.11 07:25:53 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=AE274836BA56518E279087363A781214 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20921_none_96963977f1a02f99\nvstor.sys
[2011.03.14 23:04:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=CE76755AF933E728CEBA6C7A970838A4 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7600.20712_none_96a205e1f19732b1\nvstor.sys
[2011.03.11 07:19:21 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=D23C7E8566DA2B8A7C0DBBB761D54888 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_983ab4c5eef82cad\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\drivers\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_0276fc3b3ea60d41\nvstor.sys
[2011.03.11 07:41:34 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=DAB0E87525C10052BF65F06152F37E4A -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_97c2e9ecd5cc2253\nvstor.sys
[2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\SysNative\DriverStore\FileRepository\nvraid.inf_amd64_neutral_dd659ed032d28a14\nvstor.sys
[2010.11.20 14:33:48 | 000,166,272 | ---- | M] (NVIDIA Corporation) MD5=F7CD50FE7139F07E77DA8AC8033D1832 -- C:\Windows\winsxs\amd64_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_9800c896d59e2ea8\nvstor.sys
 
< MD5 for: SCECLI.DLL  >
[2009.07.14 02:16:13 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=26073302DAEA83CC5B944C546D6B47D2 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9e577e55272d37b4\scecli.dll
[2009.07.14 02:41:53 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=398712DDDAEFB85EDF61DF6A07B65C79 -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7600.16385_none_9402d402f2cc75b9\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\SysWOW64\scecli.dll
[2010.11.20 13:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\wow64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_a088921d241bbb4e\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\SysNative\scecli.dll
[2010.11.20 14:27:25 | 000,232,960 | ---- | M] (Microsoft Corporation) MD5=ED78427259134C63ED69804D2132B86C -- C:\Windows\winsxs\amd64_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_9633e7caefbaf953\scecli.dll
 
< MD5 for: USER32.DLL  >
[2010.11.20 13:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\SysWOW64\user32.dll
[2010.11.20 13:08:57 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=5E0DB2D8B2750543CD2EBB9EA8E6CDD3 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_35b31c02b85ccb6e\user32.dll
[2009.07.14 02:41:56 | 001,008,640 | ---- | M] (Microsoft Corporation) MD5=72D7B3EA16946E8F0CF7458150031CC6 -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_292d5de8870d85d9\user32.dll
[2009.07.14 02:11:24 | 000,833,024 | ---- | M] (Microsoft Corporation) MD5=E8B0FFC209E504CB7E79FC24E6C085F0 -- C:\Windows\winsxs\wow64_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_3382083abb6e47d4\user32.dll
[2010.11.20 14:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\SysNative\user32.dll
[2010.11.20 14:27:27 | 001,008,128 | ---- | M] (Microsoft Corporation) MD5=FE70103391A64039A921DBFFF9C7AB1B -- C:\Windows\winsxs\amd64_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_2b5e71b083fc0973\user32.dll
 
< MD5 for: USERINIT.EXE  >
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\SysWOW64\userinit.exe
[2010.11.20 13:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe
[2009.07.14 02:14:43 | 000,026,112 | ---- | M] (Microsoft Corporation) MD5=6DE80F60D7DE9CE6B8C2DDFDF79EF175 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c\userinit.exe
[2009.07.14 02:39:48 | 000,030,208 | ---- | M] (Microsoft Corporation) MD5=6F8F1376A13114CC10C0E69274F5A4DE -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_381dabbceb60feb2\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\SysNative\userinit.exe
[2010.11.20 14:25:24 | 000,030,720 | ---- | M] (Microsoft Corporation) MD5=BAFE84E637BF7388C96EF48D4D3FDD53 -- C:\Windows\winsxs\amd64_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_3a4ebf84e84f824c\userinit.exe
 
< MD5 for: WINLOGON.EXE  >
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\SysNative\winlogon.exe
[2010.11.20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe
[2009.07.14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe
[2011.03.14 23:03:58 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=A93D41A4D4B0D91C072D11DD8AF266DE -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_cc522fd507b468f8\winlogon.exe
[2011.03.14 23:03:58 | 000,389,632 | ---- | M] (Microsoft Corporation) MD5=DA3E2A6FA9660CC75B471530CE88453A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_cbe534e7ee8042ad\winlogon.exe
 
< MD5 for: WS2IFSL.SYS  >
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\SysNative\drivers\ws2ifsl.sys
[2009.07.14 01:10:33 | 000,021,504 | ---- | M] (Microsoft Corporation) MD5=6BCC1D7D2FD2453957C5479A32364E52 -- C:\Windows\winsxs\amd64_microsoft-windows-w..rastructure-ws2ifsl_31bf3856ad364e35_6.1.7600.16385_none_ab7b927be17eace8\ws2ifsl.sys
 
< %systemroot%\system32\drivers\*.sys /lockedfiles >
 
< %systemroot%\System32\config\*.sav >
 
< %systemroot%\system32\*.dll /lockedfiles >
 
< %USERPROFILE%\*.* >
[2012.01.12 14:42:05 | 000,000,378 | ---- | M] () -- C:\Users\***\.bash_history
[2012.01.09 17:20:02 | 000,000,081 | ---- | M] () -- C:\Users\***\.gitconfig
[2012.01.11 15:03:44 | 000,000,937 | -H-- | M] () -- C:\Users\***\.gitk
[2011.05.18 15:52:25 | 000,001,457 | ---- | M] () -- C:\Users\***\.recently-used.xbel
[2012.01.19 14:13:09 | 002,359,296 | -HS- | M] () -- C:\Users\***\NTUSER.DAT
[2012.01.19 14:13:09 | 000,262,144 | -HS- | M] () -- C:\Users\***\ntuser.dat.LOG1
[2011.03.22 17:12:54 | 000,000,000 | -HS- | M] () -- C:\Users\***\ntuser.dat.LOG2
[2011.03.22 17:33:52 | 000,065,536 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
[2011.03.22 17:33:52 | 000,524,288 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
[2011.03.22 17:33:52 | 000,524,288 | -HS- | M] () -- C:\Users\***\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
[2011.03.22 17:12:54 | 000,000,020 | -HS- | M] () -- C:\Users\***\ntuser.ini
[2012.01.18 09:11:01 | 000,053,853 | ---- | M] () -- C:\Users\***\UnionInvestment.xlsx
 
< %USERPROFILE%\Local Settings\Temp\*.exe >
 
< %USERPROFILE%\Local Settings\Temp\*.dll >
 
< %USERPROFILE%\Application Data\*.exe >
 
< HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems|Windows /rs >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Required: DebugWindows [binary data]
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems\\Windows: %SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16

< End of report >
         
__________________

Alt 19.01.2012, 13:28   #4
tissi
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



Extras.Txt:
Code:
ATTFilter
OTL Extras logfile created on: 19.01.2012 13:55:08 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\***\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

5,92 Gb Total Physical Memory | 5,16 Gb Available Physical Memory | 87,25% Memory free
11,83 Gb Paging File | 11,09 Gb Available in Paging File | 93,72% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 581,42 Gb Total Space | 440,27 Gb Free Space | 75,72% Space Free | Partition Type: NTFS
Drive E: | 488,95 Mb Total Space | 441,96 Mb Free Space | 90,39% Space Free | Partition Type: FAT

Computer Name: NOTEBOOKC | User Name: *** | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0090A87C-3E0E-43D4-AA71-A71B06563A4A}" = Dell Support Center
"{0ABFCCD6-DB8E-4DAB-869E-68C908AABD0D}" = NVIDIA CUDA Toolkit v4.1 (64 bit)
"{0E3DAF3D-FF69-345A-A99E-1FED304CA083}" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{26A24AE4-039D-4CA4-87B4-2F86416027FF}" = Java(TM) 6 Update 27 (64-bit)
"{290D4DB2-F1B4-4B8E-918D-D71EF29A001B}" = Intel(R) PROSet/Wireless WiFi-Software
"{2BF35D84-6377-4F70-9F39-97CF67E67FFF}" = Microsoft IntelliPoint 8.0
"{45EF12B0-F531-4A2C-A1C0-6B1495698E30}" = TortoiseSVN 1.6.15.21042 (64 bit)
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{60B2315F-680F-4EB3-B8DD-CCDC86A7CCAB}" = Roxio File Backup
"{64A3A4F4-B792-11D6-A78A-00B0D0160260}" = Java(TM) SE Development Kit 6 Update 26 (64-bit)
"{64A3A4F4-B792-11D6-A78A-00B0D0160270}" = Java(TM) SE Development Kit 6 Update 27 (64-bit)
"{7CE8BE79-ABC3-4B2C-9543-28ED2B0A9EA8}" = Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{8338783A-0968-3B85-AFC7-BAAE0A63DC50}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570
"{87CF757E-C1F1-4D22-865C-00C6950B5258}" = Quickset64
"{8EBA8727-ADC2-477B-9D9A-1A1836BE4E05}" = Dell Edoc Viewer
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0407-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (German) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9D6DFAD6-09E5-445E-A4B5-A388FEEBD90D}" = RBVirtualFolder64Inst
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 285.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 285.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.5.20
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.1.13.1
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Überwachungstool für die Intel® Turbo-Boost-Technik 2.0
"{D5876F0A-B2E9-4376-B9F5-CD47B7B8D820}" = Windows Live Remote Client Resources
"{D930AF5C-5193-4616-887D-B974CEFC4970}" = Windows Live Remote Service Resources
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"Dell Support Center" = Dell Support Center
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile DEU Language Pack" = Microsoft .NET Framework 4 Client Profile DEU Language Pack
"ProInst" = Intel PROSet Wireless
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"WinRAR archiver" = WinRAR 4.00 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0ED7EE95-6A97-47AA-AD73-152C08A15B04}" = Dell DataSafe Local Backup
"{184A26D9-6561-49A9-A571-4D9BD93394C8}" = QtSpim
"{1DDB95A4-FD7B-4517-B3F1-2BCAA96879E6}" = Windows Live Writer Resources
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{26A24AE4-039D-4CA4-87B4-2F83216026FF}" = Java(TM) 6 Update 26
"{2A0F2CC5-3065-492C-8380-B03AA7106B1A}" = Dell Product Registration
"{3250260C-7A95-4632-893B-89657EB5545B}" = PhotoShowExpress
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{37B33B16-2535-49E7-8990-32668708A0A3}" = Windows Live UX Platform Language Pack
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5A06423A-210C-49FB-950E-CB0EB8C5CEC7}" = Roxio BackOnTrack
"{63B9BAB5-F36A-4A3B-9E5C-68A7F212BFB9}" = TerraTec Home Cinema
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel(R) Management Engine Components
"{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}" = Roxio Express Labeler 3
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6F0BBEFE-BE1C-419B-BA1F-D36C9E7915BC}" = Roxio Creator Starter
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37}" = ICQ7.4
"{73E0D3A0-9C30-4F59-ABBF-6233686FB396}_is1" = ConTEXT v0.98.6
"{746F49C9-3789-4F8E-AF3A-3A4B42ACFAF8}" = Spellforce 2 Gold
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{7E8242F8-BD2A-44D7-BCED-9B231A02B367}" = SpellForce 2 Patch
"{7EC66A95-AC2D-4127-940B-0445A526AB2F}" = Dell DataSafe Online
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{84F7CAD9-2316-4701-B5CA-E90FD60029E9}" = ANNO 1602
"{859D4022-B76D-40DE-96EF-C90CDA263F44}" = Windows Live Writer
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{87434D51-51DB-4109-B68F-A829ECDCF380}" = AccelerometerP11
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{90140000-0015-0407-0000-0000000FF1CE}" = Microsoft Office Access MUI (German) 2010
"{90140000-0015-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2010
"{90140000-0016-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2010
"{90140000-0018-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0407-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (German) 2010
"{90140000-0019-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0407-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (German) 2010
"{90140000-001A-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2010
"{90140000-001B-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2010
"{90140000-001F-0407-0000-0000000FF1CE}_Office14.SingleImage_{65A2328E-FDFB-4CA3-8582-357EA6825FEA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2010
"{90140000-001F-0410-0000-0000000FF1CE}_Office14.SingleImage_{C0743197-FFEE-4C19-BAEB-8F7437DC4C8A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0407-1000-0000000FF1CE}_Office14.SingleImage_{594128C9-2CDF-43CE-8103-DC100CF013B6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2010
"{90140000-002C-0407-0000-0000000FF1CE}_Office14.SingleImage_{4275FB46-ABDF-4456-876C-17CF64294D9A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2010
"{90140000-006E-0407-0000-0000000FF1CE}_Office14.SingleImage_{98EDFD9F-EA76-40CC-BCE9-92C69413F65B}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2010
"{90140000-00A1-0407-0000-0000000FF1CE}_Office14.SingleImage_{69E54534-4569-4639-89E9-305B60A11601}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{9569E6BC-326A-432F-97AB-35263A327BF1}" = Roxio Burn
"{9A00EC4E-27E1-42C4-98DD-662F32AC8870}" = Sonic CinePlayer Decoder Pack
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{A121EEDE-C68F-461D-91AA-D48BA226AF1C}" = Roxio Activation Module
"{A2F166A0-F031-4E27-A057-C69733219434}_is1" = Runes of Magic
"{A53A11EA-0095-493F-86FA-A15E8A86A405}" = VMware Player
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-AA0000000001}" = Adobe Reader X (10.1.2) MUI
"{ACFBE99B-6981-4513-B17E-A2683CEB9EE5}" = Windows Live Mesh
"{AF9E97C1-7431-426D-A8D5-ABE40995C0B1}" = DirectX 9 Runtime
"{B113D18C-67B0-4FB7-B329-E89B66194AE6}" = Windows Live Fotogalerie
"{B1239994-A850-44E2-BED8-E70A21124E16}" = Windows Live Mail
"{C2AB7DC4-489E-4BE9-887A-52262FBADBE0}" = Windows Live Photo Common
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D102611A-6466-4101-A51D-51069303AC65}" = tools-linux
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E4E88B54-4777-4659-967A-2EED1E6AFD83}" = Windows Live Movie Maker
"{EF56258E-0326-48C5-A86C-3BAC26FC15DF}" = Roxio Creator Starter
"{F06B5C4C-8D2E-4B24-9D43-7A45EEC6C878}" = Roxio Creator Starter
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel(R) Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel(R) Control Center
"{F95E4EE0-0C6E-4273-B6B9-91FD6F071D76}" = Windows Live Essentials
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Advanced Audio FX Engine" = Advanced Audio FX Engine
"Age of Empires 2.0" = Microsoft Age of Empires II
"Age of Empires II: The Conquerors Expansion 1.0" = Microsoft Age of Empires II: The Conquerors Expansion
"Blobby Volley 2.0 Version 0.9b_is1" = Blobby Volley 2.0 Version 0.9b
"Cinergy S USB" = Cinergy S USB V1.04.02.04
"Dell Webcam Central" = Dell Webcam Central
"Git_is1" = Git version 1.7.8-preview20111206
"InstallShield_{A8516AC9-AAF1-47F9-9766-03E2D4CDBCF8}" = CyberLink PowerDVD 9.6
"Juniper Network Connect 6.5.0" = Juniper Networks Network Connect 6.5.0
"Juniper Network Connect 7.0.0" = Juniper Networks Network Connect 7.0.0
"Juniper_Setup_Client Activex Control" = Juniper Networks Setup Client Activex Control
"LANconfig" = ELSA LANconfig
"LANmonitor" = ELSA LANmonitor
"MiKTeX 2.9" = MiKTeX 2.9
"Mozilla Firefox 7.0.1 (x86 de)" = Mozilla Firefox 7.0.1 (x86 de)
"MSC" = McAfee SecurityCenter
"Office14.SingleImage" = Microsoft Office Home and Student 2010
"Opera 11.60.1185" = Opera 11.60
"Revo Uninstaller" = Revo Uninstaller 1.91
"S2TNG" = Die Siedler II - Die nächste Generation
"StarCraft II" = StarCraft II
"TeXnicCenter_is1" = TeXnicCenter Version 1.0 Stable RC1
"VMware_Player" = VMware Player
"WinGimp-2.0_is1" = GIMP 2.6.11
"WinLiveSuite" = Windows Live Essentials
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Juniper_Setup_Client" = Juniper Networks Setup Client
"ScrollDemo" = ScrollDemo
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 18.10.2011 17:43:48 | Computer Name = NotebookC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\***\Downloads\SoftonicDownloader_fuer_monopoly-3.exe".
 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche
 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.
In
 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
Error - 18.10.2011 18:57:26 | Computer Name = NotebookC | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "c:\Users\***\downloads\softonicdownloader_fuer_monopoly-3.exe".
 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche
 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.
In
 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
Error - 19.10.2011 16:44:47 | Computer Name = NotebookC | Source = Application Hang | ID = 1002
Description = Programm Client.exe, Version 4.0.3.2451 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 508    Startzeit: 
01cc8e9789b7e134    Endzeit: 260    Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe    Berichts-ID:
 2c5d0c03-fa93-11e0-a30f-14feb59a632f  
 
Error - 20.10.2011 02:59:44 | Computer Name = NotebookC | Source = ESENT | ID = 484
Description = wlmail (4724) WindowsLiveMail0: Versuch, Ordner "C:\Users\***\AppData\Local\Microsoft\Windows
 Live Mail\Backup\old" zu entfernen, ist mit Systemfehler 145 (0x00000091): "Das
 Verzeichnis ist nicht leer. " fehlgeschlagen. Fehler -1022 (0xfffffc02) beim Entfernen
 von Ordnern.
 
Error - 20.10.2011 02:59:44 | Computer Name = NotebookC | Source = ESENT | ID = 215
Description = wlmail (4724) WindowsLiveMail0: Die Sicherung wurde abgebrochen, weil
 sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen
 wurde.
 
Error - 25.10.2011 02:45:53 | Computer Name = NotebookC | Source = ESENT | ID = 484
Description = wlmail (5500) WindowsLiveMail0: Versuch, Ordner "C:\Users\***\AppData\Local\Microsoft\Windows
 Live Mail\Backup\old" zu entfernen, ist mit Systemfehler 145 (0x00000091): "Das
 Verzeichnis ist nicht leer. " fehlgeschlagen. Fehler -1022 (0xfffffc02) beim Entfernen
 von Ordnern.
 
Error - 25.10.2011 02:45:53 | Computer Name = NotebookC | Source = ESENT | ID = 215
Description = wlmail (5500) WindowsLiveMail0: Die Sicherung wurde abgebrochen, weil
 sie vom Client angehalten wurde, oder weil die Verbindung mit dem Client unterbrochen
 wurde.
 
Error - 28.10.2011 15:53:08 | Computer Name = NotebookC | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: svchost.exe_FontCache, Version: 6.1.7600.16385,
 Zeitstempel: 0x4a5bc3c1  Name des fehlerhaften Moduls: fntcache.dll, Version: 6.1.7601.17563,
 Zeitstempel: 0x4d5faf0d  Ausnahmecode: 0x40000015  Fehleroffset: 0x000000000003d6fa
ID
 des fehlerhaften Prozesses: 0x1158  Startzeit der fehlerhaften Anwendung: 0x01cc95a3f796dda4
Pfad
 der fehlerhaften Anwendung: C:\Windows\system32\svchost.exe  Pfad des fehlerhaften
 Moduls: c:\windows\system32\fntcache.dll  Berichtskennung: 74c8d0f2-019e-11e1-974c-14feb59a632f
 
Error - 06.11.2011 16:55:56 | Computer Name = NotebookC | Source = Application Hang | ID = 1002
Description = Programm Client.exe, Version 4.0.4.2456 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 1b64    Startzeit:
 01cc9cbe54a92698    Endzeit: 127    Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe

Berichts-ID:
 b76c8294-08b9-11e1-b42b-8d174f822f32  
 
Error - 17.11.2011 14:33:15 | Computer Name = NotebookC | Source = Application Hang | ID = 1002
Description = Programm Client.exe, Version 4.0.4.2462 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: 13e0    Startzeit:
 01cca544d06adcd1    Endzeit: 212    Anwendungspfad: C:\Spiele\Runes of Magic\Client.exe

Berichts-ID:
 9b2a3d01-114a-11e1-beda-f5c620c5ee2d  
 
[ Dell Events ]
Error - 22.03.2011 13:47:09 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 14:06:28 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 14:06:28 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 17:15:55 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 17:15:55 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 17:17:50 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 17:17:50 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 17:18:39 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 17:18:39 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
Error - 22.03.2011 17:19:31 | Computer Name = NotebookC | Source = DataSafe | ID = 17
Description = Der Vorgang wurde unterbrochen, bevor er abgeschlossen werden konnte.
 
[ Media Center Events ]
Error - 11.04.2011 02:47:23 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 08:47:21 - Fehler beim Herstellen der Internetverbindung.  08:47:21 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 16.04.2011 03:12:30 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 09:12:29 - Fehler beim Herstellen der Internetverbindung.  09:12:29 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 21.04.2011 03:46:13 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 09:46:12 - Fehler beim Herstellen der Internetverbindung.  09:46:12 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 25.04.2011 22:18:25 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:18:24 - Fehler beim Herstellen der Internetverbindung.  04:18:24 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 30.04.2011 22:14:20 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:14:20 - Fehler beim Herstellen der Internetverbindung.  04:14:20 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 05.05.2011 22:52:00 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:51:59 - Fehler beim Herstellen der Internetverbindung.  04:51:59 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 10.05.2011 22:04:16 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:04:15 - Fehler beim Herstellen der Internetverbindung.  04:04:15 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 16.05.2011 02:50:15 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 08:50:14 - Fehler beim Herstellen der Internetverbindung.  08:50:14 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 20.05.2011 22:46:08 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:46:07 - Fehler beim Herstellen der Internetverbindung.  04:46:07 
-     Serververbindung konnte nicht hergestellt werden..  
 
Error - 25.05.2011 22:47:24 | Computer Name = NotebookC | Source = MCUpdate | ID = 0
Description = 04:47:23 - Fehler beim Herstellen der Internetverbindung.  04:47:23 
-     Serververbindung konnte nicht hergestellt werden..  
 
[ System Events ]
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:43 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
Error - 19.01.2012 08:52:44 | Computer Name = NotebookC | Source = Service Control Manager | ID = 7001
Description = Der Dienst "Computerbrowser" ist vom Dienst "Server" abhängig, der
 aufgrund folgenden Fehlers nicht gestartet wurde:   %%1068
 
 
< End of report >
         

Alt 19.01.2012, 14:37   #5
markusg
/// Malware-holic
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



hi

dieses script sowie evtl. folgende scripts sind nur für den jeweiligen user.
wenn ihr probleme habt, eröffnet eigene topics und wartet auf, für euch angepasste scripts.


• Starte bitte die OTL.exe
• Kopiere nun das Folgende in die Textbox.



Code:
ATTFilter
:OTL
O4 - HKCU..\Run: [{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}] C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe (TrueCrypt Foundation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
 :Files
C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe
:Commands
[purity]
[EMPTYFLASH] 
[emptytemp]
[Reboot]
         


• Schliesse bitte nun alle Programme.
• Klicke nun bitte auf den Fix Button.
• OTL kann gegebenfalls einen Neustart verlangen. Bitte dies zulassen.
• Nach dem Neustart findest Du ein Textdokument, dessen inhalt in deiner nächsten antwort hier reinkopieren.
starte in den normalen modus.

falls du keine symbole hast, dann rechtsklick, ansicht, desktop symbole einblenden

Drücke bitte die + E Taste.
  • Öffne dein Systemlaufwerk ( meistens C: )
  • Suche nun
    folgenden Ordner: _OTL und öffne diesen.
  • Mache einen Rechtsklick auf den Ordner Movedfiles --> Senden an --> Zip-Komprimierter Ordner

  • Dies wird eine Movedfiles.zip Datei in _OTL erstellen
  • Lade diese bitte in unseren Uploadchannel
    hoch. ( Durchsuchen --> C:\_OTL\Movedfiles.zip )
Teile mir mit ob der Upload problemlos geklappt hat. Danke im voraus

__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 19.01.2012, 14:53   #6
tissi
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



Hallo,

hier der Inhalt der Text-Datei:

Code:
ATTFilter
All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}\ not found.
File C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop deleted successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges deleted successfully.
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: All Users
 
User: ***
->Flash cache emptied: 200880 bytes
 
User: Default
 
User: Default User
 
User: Public
 
User: UpdatusUser
 
Total Flash Files Cleaned = 0,00 mb
 
 
[EMPTYTEMP]
 
User: All Users
 
User: ***
->Temp folder emptied: 65822663 bytes
->Temporary Internet Files folder emptied: 135997783 bytes
->Java cache emptied: 7202799 bytes
->FireFox cache emptied: 133190890 bytes
->Opera cache emptied: 14051537 bytes
->Flash cache emptied: 0 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 132750723 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 53569 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 734 bytes
RecycleBin emptied: 174 bytes
 
Total Files Cleaned = 466,00 mb
 
 
OTL by OldTimer - Version 3.2.31.0 log created on 01192012_154130

Files\Folders moved on Reboot...
C:\Users\***\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...
         
Der Upload des zip-Archivs hat auch geklappt.

Gruß
tissi

Alt 19.01.2012, 15:07   #7
markusg
/// Malware-holic
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



du musst das script und den upload noch mal machen, und diesmal natürlich *** durch nutzernamen ersetzen sonst funktionierts nicht richtig :-)
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 19.01.2012, 15:40   #8
tissi
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



oh, ja, natürlich. hatte gar nicht gesehen, dass da so ein Pfad drinsteht.

Code:
ATTFilter
All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{4D1029AF-4E3C-11E0-8C3E-806E6F6E6963}\ not found.
C:\Users\***\AppData\Roaming\Microsoft\dllhsts.exe moved successfully.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktop not found.
Registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\\NoActiveDesktopChanges not found.
========== COMMANDS ==========
 
[EMPTYFLASH]
 
User: All Users
 
User: ***
->Flash cache emptied: 0 bytes
 
User: Default
 
User: Default User
 
User: Public
 
User: UpdatusUser
 
Total Flash Files Cleaned = 0,00 mb
 
 
[EMPTYTEMP]
 
User: All Users
 
User: ***
->Temp folder emptied: 1534 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Opera cache emptied: 665169 bytes
->Flash cache emptied: 0 bytes
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Public
 
User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 7775 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
%systemroot%\sysnative\config\systemprofile\AppData\LocalLow\Sun\Java\Deployment folder emptied: 0 bytes
RecycleBin emptied: 4700 bytes
 
Total Files Cleaned = 1,00 mb
 
 
OTL by OldTimer - Version 3.2.31.0 log created on 01192012_163721

Files\Folders moved on Reboot...
C:\Users\***\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.

Registry entries deleted on Reboot...
         
der Upload hat auch wieder geklappt.

Alt 19.01.2012, 15:47   #9
markusg
/// Malware-holic
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



und ich hatte die *** nicht beachtet :-)
aber so was passiert, danke für den upload erst mal.
Combofix darf ausschließlich ausgeführt werden, wenn dies von einem Team Mitglied angewiesen wurde!
Es sollte nie auf eigene Initiative hin ausgeführt werden! Eine falsche Benutzung kann ernsthafte Computerprobleme nach sich
ziehen und eine Bereinigung der Infektion noch erschweren.

Bitte downloade dir Combofix.exe und speichere es unbedingt auf deinem Desktop.
  • Besuche folgende Seite für Downloadlinks und Anweisungen für dieses
    Tool

    Ein Leitfaden und Tutorium zur Nutzung von ComboFix
  • Hinweis:
    Gehe sicher das all deine Anti Virus und Anti Malware Programme abgeschalten sind, damit diese Combofix nicht bei der Arbeit stören.
  • Poste bitte die C:\Combofix.txt in deiner nächsten Antwort.
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 19.01.2012, 16:37   #10
tissi
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



So, ComboFix ist fertig, aber es traten ein paar Komplikationen auf:

1. Zu Beginn mehrfach, dann bei jeder Stufe des Scans und auch noch mehrfach beim Erstellen des Berichts erschien die Fehlermeldung: 'Die Datei "NIRKMD" konnte nicht gefunden werden. Überprüfen Sie die Schreibweise und wiederholen Sie den Vorgang.'

2. Nach dem Scan der Stufen wurde noch ein tieferer Scan durchgeführt, der nicht im Tutorial erwähnt war. Danach startete sich der Computer neu.

Anbei noch das Log:

Code:
ATTFilter
ComboFix 12-01-19.01 - *** 19.01.2012  17:14:32.1.8 - x64
Microsoft Windows 7 Home Premium   6.1.7601.1.1252.49.1031.18.6058.4582 [GMT 1:00]
ausgeführt von:: c:\users\***\Desktop\ComboFix.exe
AV: McAfee  Anti-Virus und Anti-Spyware *Disabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
FW: McAfee  Firewall *Disabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
SP: McAfee  Anti-Virus und Anti-Spyware *Disabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 * Neuer Wiederherstellungspunkt wurde erstellt
.
.
((((((((((((((((((((((((((((((((((((   Weitere Löschungen   ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\program files\Realtek\Audio\HDA\AERTSr64.exe
c:\program files\Realtek\Audio\HDA\RAVBg64.exe
c:\programdata\Roaming
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RtlUpd64.exe
c:\windows\system32\fxsst.dll . . . . Nicht in der Lage zu löschen
c:\windows\system32\java.exe
c:\windows\SysWow64\odbcad32.exe
.
----- Datei Replikatoren -----
.
c:\drivers\Audio\Vista64\AERTSr64.exe
c:\drivers\Audio\Vista64\FMAPP.exe
c:\drivers\Audio\Vista64\RAVBg64.exe
c:\drivers\Audio\Vista64\RAVCpl64.exe
c:\drivers\Audio\Vista64\RtlUpd64.exe
c:\program files (x86)\Git\libexec\git-core\git-add.exe
c:\program files (x86)\Git\libexec\git-core\git-annotate.exe
c:\program files (x86)\Git\libexec\git-core\git-apply.exe
c:\program files (x86)\Git\libexec\git-core\git-archive.exe
c:\program files (x86)\Git\libexec\git-core\git-bisect--helper.exe
c:\program files (x86)\Git\libexec\git-core\git-blame.exe
c:\program files (x86)\Git\libexec\git-core\git-branch.exe
c:\program files (x86)\Git\libexec\git-core\git-bundle.exe
c:\program files (x86)\Git\libexec\git-core\git-cat-file.exe
c:\program files (x86)\Git\libexec\git-core\git-check-attr.exe
c:\program files (x86)\Git\libexec\git-core\git-check-ref-format.exe
c:\program files (x86)\Git\libexec\git-core\git-checkout-index.exe
c:\program files (x86)\Git\libexec\git-core\git-checkout.exe
c:\program files (x86)\Git\libexec\git-core\git-cherry-pick.exe
c:\program files (x86)\Git\libexec\git-core\git-cherry.exe
c:\program files (x86)\Git\libexec\git-core\git-clean.exe
c:\program files (x86)\Git\libexec\git-core\git-clone.exe
c:\program files (x86)\Git\libexec\git-core\git-commit-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-commit.exe
c:\program files (x86)\Git\libexec\git-core\git-config.exe
c:\program files (x86)\Git\libexec\git-core\git-count-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-describe.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-files.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-index.exe
c:\program files (x86)\Git\libexec\git-core\git-diff-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-diff.exe
c:\program files (x86)\Git\libexec\git-core\git-fast-export.exe
c:\program files (x86)\Git\libexec\git-core\git-fetch-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-fetch.exe
c:\program files (x86)\Git\libexec\git-core\git-fmt-merge-msg.exe
c:\program files (x86)\Git\libexec\git-core\git-for-each-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-format-patch.exe
c:\program files (x86)\Git\libexec\git-core\git-fsck-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-fsck.exe
c:\program files (x86)\Git\libexec\git-core\git-gc.exe
c:\program files (x86)\Git\libexec\git-core\git-get-tar-commit-id.exe
c:\program files (x86)\Git\libexec\git-core\git-grep.exe
c:\program files (x86)\Git\libexec\git-core\git-hash-object.exe
c:\program files (x86)\Git\libexec\git-core\git-help.exe
c:\program files (x86)\Git\libexec\git-core\git-index-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-init-db.exe
c:\program files (x86)\Git\libexec\git-core\git-init.exe
c:\program files (x86)\Git\libexec\git-core\git-log.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-files.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-ls-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-mailinfo.exe
c:\program files (x86)\Git\libexec\git-core\git-mailsplit.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-base.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-file.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-index.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-ours.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-recursive.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-subtree.exe
c:\program files (x86)\Git\libexec\git-core\git-merge-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-merge.exe
c:\program files (x86)\Git\libexec\git-core\git-mktag.exe
c:\program files (x86)\Git\libexec\git-core\git-mktree.exe
c:\program files (x86)\Git\libexec\git-core\git-mv.exe
c:\program files (x86)\Git\libexec\git-core\git-name-rev.exe
c:\program files (x86)\Git\libexec\git-core\git-notes.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-redundant.exe
c:\program files (x86)\Git\libexec\git-core\git-pack-refs.exe
c:\program files (x86)\Git\libexec\git-core\git-patch-id.exe
c:\program files (x86)\Git\libexec\git-core\git-peek-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-prune-packed.exe
c:\program files (x86)\Git\libexec\git-core\git-prune.exe
c:\program files (x86)\Git\libexec\git-core\git-push.exe
c:\program files (x86)\Git\libexec\git-core\git-read-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-receive-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-reflog.exe
c:\program files (x86)\Git\libexec\git-core\git-remote-ext.exe
c:\program files (x86)\Git\libexec\git-core\git-remote-fd.exe
c:\program files (x86)\Git\libexec\git-core\git-remote.exe
c:\program files (x86)\Git\libexec\git-core\git-replace.exe
c:\program files (x86)\Git\libexec\git-core\git-repo-config.exe
c:\program files (x86)\Git\libexec\git-core\git-rerere.exe
c:\program files (x86)\Git\libexec\git-core\git-reset.exe
c:\program files (x86)\Git\libexec\git-core\git-rev-list.exe
c:\program files (x86)\Git\libexec\git-core\git-rev-parse.exe
c:\program files (x86)\Git\libexec\git-core\git-revert.exe
c:\program files (x86)\Git\libexec\git-core\git-rm.exe
c:\program files (x86)\Git\libexec\git-core\git-send-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-shortlog.exe
c:\program files (x86)\Git\libexec\git-core\git-show-branch.exe
c:\program files (x86)\Git\libexec\git-core\git-show-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-show.exe
c:\program files (x86)\Git\libexec\git-core\git-stage.exe
c:\program files (x86)\Git\libexec\git-core\git-status.exe
c:\program files (x86)\Git\libexec\git-core\git-stripspace.exe
c:\program files (x86)\Git\libexec\git-core\git-symbolic-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-tag.exe
c:\program files (x86)\Git\libexec\git-core\git-tar-tree.exe
c:\program files (x86)\Git\libexec\git-core\git-unpack-file.exe
c:\program files (x86)\Git\libexec\git-core\git-unpack-objects.exe
c:\program files (x86)\Git\libexec\git-core\git-update-index.exe
c:\program files (x86)\Git\libexec\git-core\git-update-ref.exe
c:\program files (x86)\Git\libexec\git-core\git-update-server-info.exe
c:\program files (x86)\Git\libexec\git-core\git-upload-archive.exe
c:\program files (x86)\Git\libexec\git-core\git-var.exe
c:\program files (x86)\Git\libexec\git-core\git-verify-pack.exe
c:\program files (x86)\Git\libexec\git-core\git-verify-tag.exe
c:\program files (x86)\Git\libexec\git-core\git-whatchanged.exe
c:\program files (x86)\Git\libexec\git-core\git-write-tree.exe
c:\program files (x86)\Git\libexec\git-core\git.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\afm2afm.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\arlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\authorindex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\autoinst.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\bdftops.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\bib2xhtml.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\bibhtml.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html1.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html2.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\biokey2html3.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\birm.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\bundledoc.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\cmap2enc.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\csvtools.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dblatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbmxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dbxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\dumphint.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\eps2eps.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\escontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\eslatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\esmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\estex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\estexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\esxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\esxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\etexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\exceltex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\feynmf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\fig4latex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\findhyph.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\font2afm.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\font2c.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\fullref.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsbj.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsdj.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsdj500.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gslj.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gslp.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsnd.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gsndt.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gssetgs.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gst.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\gstt.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ht.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\httex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\httexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\htxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ibyhyph.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\internal\runbat.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\internal\runperl.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1context.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1latex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1mex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1tex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1texi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1xelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jh1xetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jhxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jmxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jscontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jslatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jstex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jstexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\jsxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-fast.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-so.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff-vc.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexdiff.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexmk.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\latexrevise.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lp386.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lp386r2.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lpgs.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lpr2.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\lualatexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\luatexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\makeglossaries.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\makejmlrbook.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mk4ht.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mkt1font.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mptopdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mztex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mztexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\mzxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\oocontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\oolatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\oomex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ootex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ootexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ooxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ooxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\orderrefs.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ot2kpx.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdf2dsc.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdf2ps.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfatfi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfcrop.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdflatexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdfopt.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pdftexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pedigree.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\perltex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pf2afm.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pfbtopfa.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pfm2kpx.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pftogsf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pkfix.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pn2pdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ascii.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2epsi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf12.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf13.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdf14.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2pdfxx.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ps.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps2ps2.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\ps4pdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\pst2pdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\rcsinfo.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\showglyphs.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\splitindex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\sty2dtx.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\svn-multi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teicontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teilatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teimxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teitex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teitexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teixelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\teixetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\texcount.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdiff.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\texdirflatten.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\thumbpdf.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\urlbst.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\uxhxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\vpl2ovp.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\vpl2vpl.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wmakebat.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\wxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xdv2pdf_mergemarks.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xelatexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xetexdef.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmcontext.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmlatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmmex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhmxetex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhtex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhtexi.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhxelatex.exe
c:\program files (x86)\MiKTeX 2.9\miktex\bin\xhxetex.exe
c:\program files\Realtek\Audio\HDA\AERTSr64.exe
c:\program files\Realtek\Audio\HDA\FMAPP.exe
c:\program files\Realtek\Audio\HDA\RAVBg64.exe
c:\program files\Realtek\Audio\HDA\RAVCpl64.exe
c:\program files\Realtek\Audio\HDA\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdx861a.inf_amd64_neutral_cb5aef5dd8e18000\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcai.inf_amd64_neutral_87c7657f1f865465\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxbpcas.inf_amd64_neutral_5e829bd073fdd4fb\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcpc.inf_amd64_neutral_9fafa426bbe07671\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxcr.inf_amd64_neutral_ec540b183a41e85d\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxdell.inf_amd64_neutral_c7177b115ba16d20\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxgw.inf_amd64_neutral_d97c84b7bb76bd5c\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai1.inf_amd64_neutral_ebc55a075fd69b38\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai2.inf_amd64_neutral_ad27412a2a4d0154\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpai3.inf_amd64_neutral_a3b9bbd707352f36\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpbpc.inf_amd64_neutral_311bb4807ea26b61\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxhpnb.inf_amd64_neutral_810b9455f8c535c8\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc.inf_amd64_neutral_703b8b8cea49e853\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc2.inf_amd64_neutral_48648bbefb83a5e9\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlc3.inf_amd64_neutral_96ca242a4830869b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxlcnb.inf_amd64_neutral_cd33a7f46cca5abf\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmaxxd.inf_amd64_neutral_d810f45136ac02de\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2h.inf_amd64_neutral_08f25c51af64eb44\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxmb2o.inf_amd64_neutral_16188c6e22c506d7\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpanasonic.inf_amd64_neutral_7aa654748a597f82\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee3.inf_amd64_neutral_42ace327607e1913\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxpcee4.inf_amd64_neutral_d8b001879be8741b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxprmau.inf_amd64_neutral_cff0e89c9c9eabbe\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrdc.inf_amd64_neutral_81b7e7ca913b3649\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxrt.inf_amd64_neutral_567b181ec5888a95\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxseds.inf_amd64_neutral_66d45ad4da6d8187\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf.inf_amd64_neutral_9f39d12ff3c3a981\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsf3.inf_amd64_neutral_02dceceb17197d5f\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsg.inf_amd64_neutral_a5c08f8e49f51915\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsa.inf_amd64_neutral_fcd4ca8d45f1b99b\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd.inf_amd64_neutral_3eeb60150fdb55c6\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsd2.inf_amd64_neutral_422346209899fadf\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrsl.inf_amd64_neutral_0a6739b68aceef1f\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrss.inf_amd64_neutral_1ad72b594f9ae46a\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxsrssv.inf_amd64_neutral_770084cddc48f939\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx.inf_amd64_neutral_e8323f3584a76eff\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthx2.inf_amd64_neutral_a4aa68a208016339\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxthxd.inf_amd64_neutral_895f7d5c6d76d2be\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxtoshiba.inf_amd64_neutral_bedddf2df3aaac3d\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\FMAPP.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxvienna.inf_amd64_neutral_ac4a08346370c650\RtlUpd64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\AERTSr64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVBg64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RAVCpl64.exe
c:\windows\System32\DriverStore\FileRepository\hdxxfm.inf_amd64_neutral_192edaaa843e7c55\RtlUpd64.exe
.
.
(((((((((((((((((((((((((((((((((((((((   Treiber/Dienste   )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_AERTFilters
.
.
(((((((((((((((((((((((   Dateien erstellt von 2011-12-19 bis 2012-01-19  ))))))))))))))))))))))))))))))
.
.
2012-01-19 16:22 . 2012-01-19 16:22	--------	d-----w-	c:\users\UpdatusUser\AppData\Local\temp
2012-01-19 16:22 . 2012-01-19 16:22	--------	d-----w-	c:\users\Default\AppData\Local\temp
2012-01-19 14:41 . 2012-01-19 15:30	--------	d-----w-	C:\_OTL
2012-01-13 08:54 . 2012-01-13 08:54	--------	d-----w-	c:\program files\NVIDIA GPU Computing Toolkit
2012-01-13 08:39 . 2012-01-13 08:39	--------	d-----w-	C:\NVIDIA
2012-01-11 19:17 . 2011-10-26 05:25	1572864	----a-w-	c:\windows\system32\quartz.dll
2012-01-11 19:17 . 2011-10-26 04:32	514560	----a-w-	c:\windows\SysWow64\qdvd.dll
2012-01-11 19:17 . 2011-10-26 04:32	1328128	----a-w-	c:\windows\SysWow64\quartz.dll
2012-01-11 19:17 . 2011-10-26 05:25	366592	----a-w-	c:\windows\system32\qdvd.dll
2012-01-11 19:17 . 2011-11-17 06:41	1731920	----a-w-	c:\windows\system32\ntdll.dll
2012-01-11 19:17 . 2011-11-17 05:38	1292080	----a-w-	c:\windows\SysWow64\ntdll.dll
2012-01-11 19:16 . 2011-11-19 14:58	77312	----a-w-	c:\windows\system32\packager.dll
2012-01-11 19:16 . 2011-11-19 14:01	67072	----a-w-	c:\windows\SysWow64\packager.dll
2012-01-09 16:18 . 2012-01-09 16:18	--------	d-----w-	c:\users\***\.ssh
2012-01-07 14:35 . 2012-01-07 14:35	163972	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iGdi.dll
2012-01-07 14:35 . 2002-12-05 13:12	692224	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iKernel.dll
2012-01-07 14:35 . 2002-12-05 13:10	155648	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iuser.dll
2012-01-07 14:35 . 2002-12-02 14:22	5632	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\DotNetInstaller.exe
2012-01-07 14:35 . 2002-12-02 12:33	57344	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\ctor.dll
2012-01-07 14:35 . 2002-12-02 12:33	237568	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\iscript.dll
2012-01-07 14:35 . 2012-01-07 14:35	282756	----a-w-	c:\program files (x86)\Common Files\InstallShield\Professional\RunTime\0701\Intel32\setup.dll
2011-12-21 12:48 . 2011-12-21 12:49	--------	d-----w-	c:\program files (x86)\Git
.
.
.
((((((((((((((((((((((((((((((((((((   Find3M Bericht   ))))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-12-09 18:45 . 2011-12-09 18:45	60416	----a-w-	c:\windows\system32\drivers\iBtFltCoex.sys
2011-12-09 18:34 . 2011-12-09 18:34	47616	----a-w-	c:\windows\system32\opphelper.dll
2011-11-24 04:52 . 2011-12-14 14:04	3145216	----a-w-	c:\windows\system32\win32k.sys
2011-11-19 16:54 . 2011-03-14 21:51	860992	----a-w-	c:\windows\system32\nvumdshimx.dll
2011-11-19 16:54 . 2011-03-14 21:51	241984	----a-w-	c:\windows\system32\nvinitx.dll
2011-11-19 16:54 . 2011-03-14 21:51	203072	----a-w-	c:\windows\SysWow64\nvinit.dll
2011-11-19 16:54 . 2011-03-14 21:51	1543488	----a-w-	c:\windows\system32\nvdispco64.dll
2011-11-19 16:54 . 2011-03-14 21:51	1454912	----a-w-	c:\windows\system32\nvgenco64.dll
2011-11-19 16:54 . 2011-03-14 21:51	2808640	----a-w-	c:\windows\system32\nvapi64.dll
2011-11-19 16:54 . 2010-11-29 10:35	539456	----a-w-	c:\windows\system32\nvhotkey.dll
2011-11-19 16:54 . 2010-11-29 10:35	222528	----a-w-	c:\windows\system32\nvmctray.dll
2011-11-19 16:54 . 2010-11-29 10:35	1640768	----a-w-	c:\windows\system32\nvvsvc.exe
2011-11-19 16:54 . 2010-11-29 10:35	55616	----a-w-	c:\windows\system32\nv3dappshextr.dll
2011-11-19 16:54 . 2010-11-29 10:35	3074368	----a-w-	c:\windows\system32\nvsvcr.dll
2011-11-19 16:54 . 2010-11-29 10:35	1349440	----a-w-	c:\windows\system32\nv3dappshext.dll
2011-11-19 16:54 . 2010-11-29 10:35	837952	----a-w-	c:\windows\system32\easyUpdatusAPIU64.dll
2011-11-19 16:54 . 2010-11-29 10:35	10406208	----a-w-	c:\windows\system32\nvcpl.dll
2011-11-19 16:54 . 2010-11-29 10:34	5067584	----a-w-	c:\windows\system32\nvsvc64.dll
2011-11-19 16:54 . 2010-11-29 04:35	2402867	----a-w-	c:\windows\system32\nvcoproc.bin
2011-11-19 16:54 . 2010-11-29 04:35	137536	----a-w-	c:\windows\system32\nvshext.dll
2011-11-15 00:13 . 2011-11-15 00:13	327168	----a-w-	c:\windows\system32\drivers\btmhsf.sys
2011-11-14 08:40 . 2011-06-03 07:55	414368	----a-w-	c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2011-11-05 05:32 . 2011-12-14 14:03	2048	----a-w-	c:\windows\system32\tzres.dll
2011-11-05 04:26 . 2011-12-14 14:03	2048	----a-w-	c:\windows\SysWow64\tzres.dll
2011-11-04 01:53 . 2011-12-14 14:07	2309120	----a-w-	c:\windows\system32\jscript9.dll
2011-11-04 01:44 . 2011-12-14 14:07	1390080	----a-w-	c:\windows\system32\wininet.dll
2011-11-04 01:44 . 2011-12-14 14:07	1493504	----a-w-	c:\windows\system32\inetcpl.cpl
2011-11-04 01:34 . 2011-12-14 14:07	2382848	----a-w-	c:\windows\system32\mshtml.tlb
2011-11-03 22:47 . 2011-12-14 14:07	1798144	----a-w-	c:\windows\SysWow64\jscript9.dll
2011-11-03 22:40 . 2011-12-14 14:07	1427456	----a-w-	c:\windows\SysWow64\inetcpl.cpl
2011-11-03 22:39 . 2011-12-14 14:07	1127424	----a-w-	c:\windows\SysWow64\wininet.dll
2011-11-03 22:31 . 2011-12-14 14:07	2382848	----a-w-	c:\windows\SysWow64\mshtml.tlb
2011-10-26 05:21 . 2011-12-14 14:04	43520	----a-w-	c:\windows\system32\csrsrv.dll
.
.
((((((((((((((((((((((((((((   Autostartpunkte der Registrierung   ))))))))))))))))))))))))))))))))))))))))
.
.
*Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. 
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2012-01-03 35736]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]
"mcui_exe"="c:\program files\McAfee.com\Agent\mcagent.exe" [2011-11-22 1675160]
"Dell Registration"="c:\program files (x86)\System Registration\prodreg.exe" [2010-11-10 4144448]
"RemoteControl9"="c:\program files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe" [2010-10-01 87336]
"PDVD9LanguageShortcut"="c:\program files (x86)\CyberLink\PowerDVD9\Language\Language.exe" [2010-09-17 50472]
"BDRegion"="c:\program files (x86)\Cyberlink\Shared Files\brs.exe" [2010-10-29 75048]
"RoxWatchTray"="c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe" [2010-09-04 240112]
"Desktop Disc Tool"="c:\program files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe" [2010-09-03 518640]
"VMware hqtray"="c:\program files (x86)\VMware\VMware Player\hqtray.exe" [2011-03-25 64112]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Security Packages	REG_MULTI_SZ   	kerberos msv1_0 schannel wdigest tspkg pku2u livessp
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""
.
R2 CLKMSVC10_9EC60124;CyberLink Product - 2011/03/14 15:00;c:\program files (x86)\CyberLink\PowerDVD9\NavFilter\kmsvc.exe [2010-10-29 236016]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
R2 RoxWatch12;Roxio Hard Drive Watcher 12;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatch12OEM.exe [2010-09-04 219632]
R3 Bluetooth Media Service;Bluetooth Media Service;c:\program files (x86)\Intel\Bluetooth\mediasrv.exe [2010-11-03 1298496]
R3 DVBUSB_0064_Sevice;Cinergy S USB service;c:\windows\system32\DRIVERS\usb_0064.sys [x]
R3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys [x]
R3 JMCR;JMCR;c:\windows\system32\DRIVERS\jmcr.sys [x]
R3 McAWFwk;McAfee Activation Service;c:\progra~1\mcafee\msc\mcawfwk.exe [2010-08-30 220528]
R3 mferkdet;McAfee Inc. mferkdet;c:\windows\system32\drivers\mferkdet.sys [x]
R3 MyWiFiDHCPDNS;Wireless PAN DHCP Server;c:\program files\Intel\WiFi\bin\PanDhcpDns.exe [2010-12-17 340240]
R3 NLNdisMP;NLNdisMP;c:\windows\system32\DRIVERS\nlndis.sys [x]
R3 NLNdisPT;NetLimiter Ndis Protocol Service;c:\windows\system32\DRIVERS\nlndis.sys [x]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda64v.sys [x]
R3 NvStUSB;NVIDIA Stereoscopic 3D USB driver;c:\windows\system32\DRIVERS\nvstusb.sys [x]
R3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
R3 RoxMediaDB12OEM;RoxMediaDB12OEM;c:\program files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxMediaDB12OEM.exe [2010-09-04 1116656]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
R3 TurboBoost;Intel(R) Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-11-29 149504]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service;c:\windows\system32\DRIVERS\vwifimp.sys [x]
R4 McOobeSv;McAfee OOBE Service;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2011-01-27 249936]
R4 NOBU;Dell DataSafe Online;c:\program files (x86)\Dell\Dell Datasafe Online\NOBuAgent.exe SERVICE [x]
R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184]
S0 mfewfpk;McAfee Inc. mfewfpk;c:\windows\system32\drivers\mfewfpk.sys [x]
S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x]
S0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\DRIVERS\stdcfltn.sys [x]
S1 c2scsi64;c2scsi64;c:\windows\system32\DRIVERS\c2scsi64.sys [x]
S1 mfenlfk;McAfee NDIS Light Filter;c:\windows\system32\DRIVERS\mfenlfk.sys [x]
S1 nvkflt;nvkflt;c:\windows\system32\DRIVERS\nvkflt.sys [x]
S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
S2 Bluetooth Device Monitor;Bluetooth Device Monitor;c:\program files (x86)\Intel\Bluetooth\devmonsrv.exe [2010-11-03 897088]
S2 McMPFSvc;McAfee Personal Firewall Service;c:\program files\Common Files\McAfee\McSvcHost\McSvHost.exe [2011-01-27 249936]
S2 McNaiAnn;McAfee VirusScan Announcer;c:\program files\Common Files\mcafee\McSvcHost\McSvHost.exe [2011-01-27 249936]
S2 mfefire;McAfee Firewall Core Service;c:\program files\Common Files\McAfee\SystemCore\\mfefire.exe [2011-10-18 208536]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\system32\mfevtps.exe [x]
S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-11-19 2253120]
S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-12-20 2656280]
S2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [x]
S2 VMUSBArbService;VMware USB Arbitration Service;c:\program files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe [2011-03-25 539248]
S3 Acceler;Accelerometer Service;c:\windows\system32\DRIVERS\Accelern.sys [x]
S3 btmaux;Intel Bluetooth Auxiliary Service;c:\windows\system32\DRIVERS\btmaux.sys [x]
S3 btmhsf;btmhsf;c:\windows\system32\DRIVERS\btmhsf.sys [x]
S3 cfwids;McAfee Inc. cfwids;c:\windows\system32\drivers\cfwids.sys [x]
S3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\DRIVERS\CtClsFlt.sys [x]
S3 iBtFltCoex;iBtFltCoex;c:\windows\system32\DRIVERS\iBtFltCoex.sys [x]
S3 IntcDAud;Intel(R) Display-Audio;c:\windows\system32\DRIVERS\IntcDAud.sys [x]
S3 MEIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
S3 mfefirek;McAfee Inc. mfefirek;c:\windows\system32\drivers\mfefirek.sys [x]
S3 NETwNs64;___ Intel(R) Wireless WiFi Link der Serie 5000 Adaptertreiber für Windows 7 64-Bit;c:\windows\system32\DRIVERS\NETwNs64.sys [x]
S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x]
S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x]
S3 Point64;Microsoft IntelliPoint Filter Driver;c:\windows\system32\DRIVERS\point64.sys [x]
S3 qicflt;upper Device Filter Driver;c:\windows\system32\DRIVERS\qicflt.sys [x]
.
.
--- Andere Dienste/Treiber im Speicher ---
.
*Deregistered* - CLKMDRV10_9EC60124
*Deregistered* - mfeavfk01
.
.
--------- x86-64 -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\1TortoiseNormal]
@="{C5994560-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994560-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\2TortoiseModified]
@="{C5994561-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994561-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\3TortoiseConflict]
@="{C5994562-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994562-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\4TortoiseLocked]
@="{C5994563-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994563-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\5TortoiseReadOnly]
@="{C5994564-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994564-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\6TortoiseDeleted]
@="{C5994565-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994565-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\7TortoiseAdded]
@="{C5994566-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994566-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\8TortoiseIgnored]
@="{C5994567-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994567-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\9TortoiseUnversioned]
@="{C5994568-53D9-4125-87C9-F193FC689CB2}"
[HKEY_CLASSES_ROOT\CLSID\{C5994568-53D9-4125-87C9-F193FC689CB2}]
2010-03-21 06:55	99080	----a-w-	c:\program files\Common Files\TortoiseOverlays\TortoiseOverlays.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RtkNGUI64.exe" [2010-12-08 6560360]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2011-01-04 167960]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2011-01-04 391704]
"Persistence"="c:\windows\system32\igfxpers.exe" [2011-01-04 418328]
"FreeFallProtection"="c:\program files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe" [2010-12-17 686704]
"BTMTrayAgent"="c:\program files (x86)\Intel\Bluetooth\btmshell.dll" [2010-11-03 10228224]
"IntelWireless"="c:\program files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" [2010-12-17 1933584]
"QuickSet"="c:\program files\Dell\QuickSet\QuickSet.exe" [2011-01-25 4479648]
"IntelTBRunOnce"="wscript.exe" [2009-07-14 168960]
"IntelliPoint"="c:\program files\Microsoft IntelliPoint\ipoint.exe" [2011-01-07 2328944]
"combofix"="c:\combofix\CF17644.3XE" [2010-11-20 345088]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"LoadAppInit_DLLs"=0x1
"AppInit_DLLs"=c:\windows\System32\nvinitx.dll
.
------- Zusätzlicher Suchlauf -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www1.euro.dell.com/content/default.aspx?c=de&l=de&s=gen
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: An OneNote s&enden - c:\progra~2\MICROS~1\Office14\ONBttnIE.dll/105
IE: Nach Microsoft E&xcel exportieren - c:\progra~2\MICROS~1\Office14\EXCEL.EXE/3000
IE: {{73C6DCFB-B606-47F3-BDFA-9A4FBF931E37} - c:\program files (x86)\ICQ7.4\ICQ.exe
LSP: c:\program files (x86)\VMware\VMware Player\vsocklib.dll
TCP: DhcpNameServer = 192.168.1.1
TCP: Interfaces\{D91BEF26-4787-4BAE-BB9C-F2AFD4FB2C70}: NameServer = 192.168.0.1
FF - ProfilePath - c:\users\***\AppData\Roaming\Mozilla\Firefox\Profiles\y96uohb3.default\
.
- - - - Entfernte verwaiste Registrierungseinträge - - - -
.
Toolbar-Locked - (no file)
Wow6432Node-HKCU-Run-NetLimiter - c:\program files\NetLimiter 3\NLClientApp.exe
Toolbar-Locked - (no file)
HKLM-Run-SynTPEnh - c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe
HKLM-Run-RtHDVBg - c:\program files\Realtek\Audio\HDA\RAVBg64.exe
AddRemove-{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} - c:\program files\Realtek\Audio\HDA\RtlUpd64.exe
.
.
.
--------------------- Gesperrte Registrierungsschluessel ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.10"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash10l.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\McAfee]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
   00,5c,00,6d,00,61,00,63,00,68,00,69,00,6e,00,65,00,5c,00,53,00,6f,00,66,00,\
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}]
@Denied: (A) (Everyone)
"Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3]
@Denied: (A) (Everyone)
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0]
"Key"="ActionsPane3"
"Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd"
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Weitere laufende Prozesse ------------------------
.
c:\program files (x86)\Juniper Networks\Common Files\dsNcService.exe
c:\windows\SysWOW64\vmnat.exe
c:\program files (x86)\VMware\VMware Player\vmware-authd.exe
c:\windows\SysWOW64\vmnetdhcp.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
.
**************************************************************************
.
Zeit der Fertigstellung: 2012-01-19  17:28:56 - PC wurde neu gestartet
ComboFix-quarantined-files.txt  2012-01-19 16:28
.
Vor Suchlauf: 15 Verzeichnis(se), 474.160.631.808 Bytes frei
Nach Suchlauf: 20 Verzeichnis(se), 473.422.991.360 Bytes frei
.
- - End Of File - - 56957F6B3752DE86161D555BBB515A0D
         
Gruß
tissi

Alt 19.01.2012, 16:42   #11
markusg
/// Malware-holic
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



hi

malwarebytes:
Downloade Dir bitte Malwarebytes
  • Installiere
    das Programm in den vorgegebenen Pfad.
    Vista und Win7 User mit Rechtsklick "als Administrator starten"
  • Starte Malwarebytes, klicke auf Aktualisierung --> Suche
    nach Aktualisierung
  • Wenn das Update beendet wurde, aktiviere vollständiger Scan durchführen und drücke auf Scannen.
  • Wenn der Scan beendet
    ist, klicke auf Ergebnisse anzeigen.
  • Versichere Dich, dass alle Funde markiert sind und drücke Entferne Auswahl.
  • Poste
    das Logfile, welches sich in Notepad öffnet, hier in den Thread.
  • Nachträglich kannst du den Bericht unter "Log Dateien" finden.
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 19.01.2012, 17:33   #12
tissi
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



Und hier das Log von Malwarebytes:

Code:
ATTFilter
Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org

Datenbank Version: v2012.01.19.03

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
*** :: NOTEBOOKC [Administrator]

19.01.2012 17:49:00
mbam-log-2012-01-19 (17-49-00).txt

Art des Suchlaufs: Vollständiger Suchlauf
Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM
Deaktivierte Suchlaufeinstellungen: P2P
Durchsuchte Objekte: 389548
Laufzeit: 42 Minute(n), 15 Sekunde(n)

Infizierte Speicherprozesse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Speichermodule: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungsschlüssel: 0
(Keine bösartigen Objekte gefunden)

Infizierte Registrierungswerte: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateiobjekte der Registrierung: 0
(Keine bösartigen Objekte gefunden)

Infizierte Verzeichnisse: 0
(Keine bösartigen Objekte gefunden)

Infizierte Dateien: 1
C:\Spiele\AgeOfEmpires2\Downloads\w7ddpatcher.exe (HackTool.Patch) -> Erfolgreich gelöscht und in Quarantäne gestellt.

(Ende)
         

Alt 19.01.2012, 17:59   #13
markusg
/// Malware-holic
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



lade den CCleaner standard:
CCleaner Download - CCleaner 3.14.1616
falls der CCleaner
bereits instaliert, überspringen.
instalieren, öffnen, extras, liste der instalierten programme, als txt speichern. öffnen.
hinter, jedes von dir benötigte programm, schreibe notwendig.
hinter, jedes, von dir nicht benötigte, unnötig.
hinter, dir unbekannte, unbekannt.
liste posten.
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Alt 19.01.2012, 18:11   #14
tissi
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



Bittesehr:

Code:
ATTFilter
AccelerometerP11	STMicroelectronics	13.03.2011		2.00.11.22	unbekannt
Adobe Flash Player 10 ActiveX	Adobe Systems Incorporated	13.03.2011	6,00MB	10.1.102.64	notwendig
Adobe Flash Player 11 Plugin 64-bit	Adobe Systems Incorporated	13.11.2011	6,00MB	11.1.102.55	notwendig
Adobe Reader X (10.1.2) MUI	Adobe Systems Incorporated	11.01.2012	477MB	10.1.2	notwendig
Advanced Audio FX Engine	Creative Technology Ltd	13.03.2011		1.12.05	notwendig
ANNO 1602		06.01.2012		1.05	notwendig
Blobby Volley 2.0 Version 0.9b		01.10.2011	3,58MB	unnötig
CCleaner	Piriform	18.01.2012		3.14	notwendig
Cinergy S USB V1.04.02.04		21.03.2011		1.04.02.04	unötig
ConTEXT v0.98.6	ConTEXT Project Ltd	20.04.2011	notwendig
CyberLink PowerDVD 9.6	CyberLink Corp.	13.03.2011		9.6.1.3522	unnötig
Dell DataSafe Local Backup	Dell	13.03.2011		9.4.47	unnötig
Dell DataSafe Online	Dell	13.03.2011	6,46MB	2.1.19634	unnötig
Dell Product Registration	Dell Inc.	13.03.2011		1.0.6	unnötig
Dell Support Center	Dell Inc.	13.03.2011		3.0.5621.01	notwendig
Dell Webcam Central	Creative Technology Ltd	13.03.2011		2.00.35	notwendig
Die Siedler II - Die nächste Generation		15.12.2011	unötig
ELSA LANconfig		06.08.2011	unnötig
ELSA LANmonitor		06.08.2011	unnötig
GIMP 2.6.11	The GIMP Team	06.04.2011	107,7MB	2.6.11	notwendig
Git version 1.7.8-preview20111206		20.12.2011	69,5MB	1.7.8-preview20111206	notwendig
ICQ7.4	ICQ	21.03.2011		7.4	notwendig
Intel(R) Control Center	Intel Corporation	14.03.2011		1.2.1.1007	unbekannt
Intel(R) Management Engine Components	Intel Corporation	14.03.2011		7.0.0.1144	unbekannt
Intel(R) Processor Graphics	Intel Corporation	14.03.2011		8.15.10.2272	unbekannt
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology	Intel Corporation	13.03.2011	88,0MB	1.0.0.0454	notwendig
Intel(R) PROSet/Wireless WiFi-Software	Intel Corporation	13.03.2011	142,9MB	14.00.1000	unbekannt
Java(TM) 6 Update 26	Oracle	12.07.2011	97,1MB	6.0.260	notwendig
Java(TM) 6 Update 27 (64-bit)	Oracle	15.10.2011	91,6MB	6.0.270	notwendig
Java(TM) SE Development Kit 6 Update 26 (64-bit)	Oracle	12.07.2011	147,2MB	1.6.0.260	notwendig
Java(TM) SE Development Kit 6 Update 27 (64-bit)	Oracle	15.10.2011	147,4MB	1.6.0.270	notwendig
Juniper Networks Network Connect 6.5.0	Juniper Networks	28.03.2011		6.5.0.14951	unnötig
Juniper Networks Network Connect 7.0.0	Juniper Networks	22.10.2011		7.0.0.18809	notwendig
Juniper Networks Setup Client	Juniper Networks	22.10.2011	0,78MB	2.2.5.10685	unbekannt
Juniper Networks Setup Client Activex Control	Juniper Networks	28.03.2011		2.1.1.1	unbekannt
Malwarebytes Anti-Malware Version 1.60.0.1800	Malwarebytes Corporation	18.01.2012	18,6MB	1.60.0.1800	notwendig
McAfee SecurityCenter	McAfee, Inc.	23.12.2011		11.0.649	notwendig
Microsoft .NET Framework 4 Client Profile	Microsoft Corporation	21.03.2011	38,8MB	4.0.30319	notwendig
Microsoft .NET Framework 4 Client Profile DEU Language Pack	Microsoft Corporation	21.03.2011	2,94MB	4.0.30319	notwendig
Microsoft Age of Empires II		22.06.2011	unnötig
Microsoft Age of Empires II: The Conquerors Expansion		22.06.2011	unnötig
Microsoft IntelliPoint 8.0	Microsoft	21.03.2011	38,0MB	8.01.249.0	notwendig
Microsoft Office Home and Student 2010	Microsoft Corporation	01.07.2011		14.0.6029.1000	notwendig
Microsoft Silverlight	Microsoft Corporation	11.10.2011	140,1MB	4.0.60831.0	notwendig
Microsoft SQL Server 2005 Compact Edition [ENU]	Microsoft Corporation	13.03.2011	1,70MB	3.1.0000	notwendig
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053	Microsoft Corporation	21.03.2011	0,25MB	8.0.50727.4053	notwendig
Microsoft Visual C++ 2005 Redistributable	Microsoft Corporation	14.06.2011	0,29MB	8.0.61001	notwendig
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570	Microsoft Corporation	12.04.2011	0,77MB	9.0.30729.5570	notwendig
Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570	Microsoft Corporation	12.04.2011	0,58MB	9.0.30729.5570	notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17	Microsoft Corporation	01.09.2011	0,25MB	9.0.30729	notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148	Microsoft Corporation	22.03.2011	0,76MB	9.0.30729.4148	notwendig
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161	Microsoft Corporation	14.06.2011	0,77MB	9.0.30729.6161	notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148	Microsoft Corporation	22.03.2011	0,57MB	9.0.30729.4148	notwendig
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161	Microsoft Corporation	14.06.2011	0,59MB	9.0.30729.6161	notwendig
MiKTeX 2.9	MiKTeX.org	03.08.2011		2.9	notwendig
Mozilla Firefox 7.0.1 (x86 de)	Mozilla	20.12.2011	32,7MB	7.0.1	notwendig
MSXML 4.0 SP2 (KB954430)	Microsoft Corporation	21.03.2011	1,28MB	4.20.9870.0	notwendig
MSXML 4.0 SP2 (KB973688)	Microsoft Corporation	21.03.2011	1,33MB	4.20.9876.0	notwendig
NVIDIA CUDA Toolkit v4.1 (64 bit)	NVIDIA Corporation	12.01.2012	956MB	4.1.21.0	unnötig
NVIDIA Grafiktreiber 285.86	NVIDIA Corporation	12.01.2012		285.86	notwendig
NVIDIA HD-Audiotreiber 1.1.13.1	NVIDIA Corporation	17.12.2011		1.1.13.1	notwendig
Opera 11.60	Opera Software ASA	08.12.2011		11.60.1185	notwendig
QtSpim	Larus-Stone	22.05.2011	47,0MB	9.0.1	notwendig
Quickset64	Dell Inc.	13.03.2011		11.0.10	notwendig
Realtek High Definition Audio Driver	Realtek Semiconductor Corp.	13.03.2011		6.0.1.6263	notwendig
Revo Uninstaller 1.91	VS Revo Group	21.03.2011		1.91	notwendig
Roxio Creator Starter	Roxio	13.03.2011	1.485MB	12.1.40.0	notwendig
Runes of Magic	Frogster Online Gaming GmbH	28.07.2011		4.0.0.2360	notwendig
ScrollDemo	The Java(tm) Tutorial	16.07.2011	unbekannt
Spellforce 2 Gold	JoWooD Productions Software AG	24.03.2011		1.00.0000	notwendig
StarCraft II	Blizzard Entertainment	06.01.2012		1.4.2.20141	notwendig
Synaptics Pointing Device Driver	Synaptics Incorporated	13.03.2011	46,4MB	15.1.15.0	notwendig
TeamSpeak 3 Client	TeamSpeak Systems GmbH	11.09.2011	unnötig
TerraTec Home Cinema		22.03.2011		6.15.11	unnötig
TeXnicCenter Version 1.0 Stable RC1	TeXnicCenter.org	03.08.2011		Version 1.0 Stable RC1	notwendig
TortoiseSVN 1.6.15.21042 (64 bit)	TortoiseSVN	20.04.2011	22,1MB	1.6.21042	notwendig
VMware Player	VMware, Inc	23.05.2011	391MB	3.1.4.16648	notwendig
Windows Live Essentials	Microsoft Corporation	14.09.2011		15.4.3538.0513	notwendig
Windows Live Mesh ActiveX control for remote connections	Microsoft Corporation	13.03.2011	5,58MB	15.4.5722.2	notwendig
WinRAR 4.00 (64-Bit)	win.rar GmbH	22.03.2011		4.00.0	notwendig
Überwachungstool für die Intel® Turbo-Boost-Technik 2.0	Intel	13.03.2011		2.1.23.0	notwendig
         
Gruß
tissi

Alt 19.01.2012, 18:34   #15
markusg
/// Malware-holic
 
Auch "Windowssystem aus Sicherheitsgründen blockiert" - Standard

Auch "Windowssystem aus Sicherheitsgründen blockiert"



deinstaliere:
Adobe Flash Player alle
Adobe - Adobe Flash Player installieren
neueste version laden
adobe reader:
Adobe - Adobe Reader herunterladen - Alle Versionen
haken bei mcafee security scan raus nehmen

bitte auch mal den adobe reader wie folgt konfigurieren:
adobe reader öffnen, bearbeiten, voreinstellungen.
allgemein:
nur zertifizierte zusatz module verwenden, anhaken.
internet:
hier sollte alles deaktiviert werden, es ist sehr unsicher pdfs automatisch zu öffnen, zu downloaden etc.
es ist immer besser diese direkt abzuspeichern da man nur so die kontrolle hat was auf dem pc vor geht.
bei javascript den haken bei java script verwenden raus nehmen
bei updater, automatisch instalieren wählen.
übernehmen /ok



deinstaliere:
Blobby
Cinergy
CyberLink
Dell DataSafe Local
Dell DataSafe Online
Die Siedler
ELSA beide
Java alle
Download der kostenlosen Java-Software
downloade java jre instaliere es
firefox update:
Webbrowser Firefox auf Deutsch | Schneller, sicherer und anpassbar
aber ich würde auf ff verzichten und auf opera umsteigen. sag mir mal welchen browser du nutzt das müsste ich für folgende anleitungen wissen

deinstaliere:
ScrollDemo
TeamSpeak
TerraTec

öffne otl, klicke bereinigen, remover werden nach neustart gelöscht.
öffne ccleaner, analysieren bereinigen.
neustarten testen ob alles läuft wie gewünscht
__________________
-Verdächtige mails bitte an uns zur Analyse weiterleiten:
markusg.trojaner-board@web.de
Weiterleiten
Anleitung:
http://markusg.trojaner-board.de
Mails bitte vorerst nach obiger Anleitung an
markusg.trojaner-board@web.de
Weiterleiten
Wenn Ihr uns unterstützen möchtet

Antwort

Themen zu Auch "Windowssystem aus Sicherheitsgründen blockiert"
andere, aus sicherheitsgründen, backup, befällt, blockiert, dankbar, eingefangen, ellung, etliche, gefangen, gefunde, gen, individuelle, mcafee, nichts, reichen, scan, schädling, sicherheitsgründe, sicherheitsgründen, thema, threads, troja, trojaner, übers



Ähnliche Themen: Auch "Windowssystem aus Sicherheitsgründen blockiert"


  1. Virus: "Achtung! Aus Sicherheitsgründen wurde Ihr Windowssystem blockiert", OTL ausgeführt, was nun?
    Log-Analyse und Auswertung - 08.04.2012 (5)
  2. Schwarzer Bildschirm, Deutschlandflagge, "Aus Sicherheitsgründen wurde ihr Windowssystem blockiert"
    Log-Analyse und Auswertung - 04.04.2012 (9)
  3. Hier auch: "Aus Sicherheitsgründen wurde Ihr Windowssystem blockiert"
    Plagegeister aller Art und deren Bekämpfung - 03.04.2012 (11)
  4. Auch bei mir: "Achtung. Aus Sicherheitsgründen wurde ihr Windowssystem blockiert."
    Plagegeister aller Art und deren Bekämpfung - 18.03.2012 (2)
  5. Meldung: "Achtung aus Sicherheitsgründen wurde ihr Windowssystem blockiert", wie bei anderen.
    Plagegeister aller Art und deren Bekämpfung - 04.03.2012 (2)
  6. BKA-Trojaner: "Achtung! Aus Sicherheitsgründen wurde Ihr Windowssystem blockiert"
    Log-Analyse und Auswertung - 04.03.2012 (6)
  7. Meldung: "Achtung aus Sicherheitsgründen wurde ihr Windowssystem blockiert"
    Plagegeister aller Art und deren Bekämpfung - 03.03.2012 (54)
  8. "Aus Sicherheitsgründen wurde Ihr Windowssystem blockiert" - Virus, nun auch bei mir!
    Log-Analyse und Auswertung - 13.02.2012 (22)
  9. "Achtung aus Sicherheitsgründen wurde ihr Windowssystem blockiert!" OTLogfile im Anhang
    Log-Analyse und Auswertung - 26.01.2012 (1)
  10. Achtung! Aus Sicherheitsgründen wurde Ihr Windowssystem Blockiert, "Bezahlen nd Downloaden"
    Log-Analyse und Auswertung - 23.01.2012 (3)
  11. Windows 7 blockiert! Achtung! "Aus Sicherheitsgründen wurde ihr windowssystem blockiert"
    Log-Analyse und Auswertung - 17.01.2012 (8)
  12. TROJANER - "Achtung! Aus Sicherheitsgründen wurde ihr Windowssystem blockiert"
    Log-Analyse und Auswertung - 06.01.2012 (11)
  13. Achtung! Aus Sicherheitsgründen wurde Ihr Windowssystem blockiert ... "bezahlen und runterladen"
    Log-Analyse und Auswertung - 05.01.2012 (9)
  14. "Aus Sicherheitsgründen wurde ihr Windowssystem blockiert" logfile mbam-log-2011-12-08 (08-08-36).tx
    Log-Analyse und Auswertung - 08.12.2011 (1)
  15. "Aus Sicherheitsgründen wurde ihr Windowssystem blockiert"-Trojaner --> OTL-Dateien
    Plagegeister aller Art und deren Bekämpfung - 07.12.2011 (11)
  16. roter Bildschirm "Aus Sicherheitsgründen wurde ihr Windowssystem blockiert" Hilfe
    Plagegeister aller Art und deren Bekämpfung - 01.12.2011 (18)
  17. habe auch "Roter Bildschirm: "Ihr System wurde aus Sicherheitsgründen blockiert" "
    Plagegeister aller Art und deren Bekämpfung - 26.08.2011 (3)

Zum Thema Auch "Windowssystem aus Sicherheitsgründen blockiert" - Hallo, wie schon etliche vor mir habe ich mir wohl auch den Schädling eingefangen, der das "Windowssystem aus Sicherheitsgründen blockiert". Ein Komplettscan mit McAfee hat nichts gefunden. Kann es da - Auch "Windowssystem aus Sicherheitsgründen blockiert"...
Archiv
Du betrachtest: Auch "Windowssystem aus Sicherheitsgründen blockiert" auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.