Netbook seeehr langsam, Windows-Update funktioniert nicht

carsten87 · 06.02.2012, 12:40

....Teil 2:

Malwarebytes 2:

PHP-Code:

  Malwarebytes Anti-Malware (Test) 1.60.1.1000

www.malwarebytes.org

 
Datenbank Version: v2012.01.31.08

 
Windows 7 x86 NTFS

Internet Explorer 8.0.7600.16385

Mareike :: MAREIKES [Administrator]

 
Schutz: Deaktiviert

 
31.01.2012 19:57:10

mbam-log-2012-01-31 (19-57-10).txt

 
Art des Suchlaufs: Vollständiger Suchlauf

Aktivierte Suchlaufeinstellungen: Speicher | Autostart | Registrierung | Dateisystem | Heuristiks/Extra | HeuristiKs/Shuriken | PUP | PUM

Deaktivierte Suchlaufeinstellungen: P2P

Durchsuchte Objekte: 333145

Laufzeit: 19 Stunde(n), 15 Minute(n), 2 Sekunde(n)

 
Infizierte Speicherprozesse: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Speichermodule: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Registrierungsschlüssel: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Registrierungswerte: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Dateiobjekte der Registrierung: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Verzeichnisse: 0

(Keine bösartigen Objekte gefunden)

 
Infizierte Dateien: 0

(Keine bösartigen Objekte gefunden)

 
(Ende)

SUPERAntiSpyware 1:

PHP-Code:

  SUPERAntiSpyware Scan Log

hxxp://www.superantispyware.com

 
Generated 01/25/2012 at 05:33 AM

 
Application Version : 5.0.1142

 
Core Rules Database Version : 8162

Trace Rules Database Version: 5974

 
Scan type       : Complete Scan

Total Scan Time : 07:30:15

 
Operating System Information

Windows 7 Starter 32-bit (Build 6.01.7600)

UAC On - Administrator

 
Memory items scanned      : 656

Memory threats detected   : 0

Registry items scanned    : 23089

Registry threats detected : 1

File items scanned        : 67799

File threats detected     : 378

 
Malware.Trace

    HKU\S-1-5-21-2905822381-1113161902-4094295846-1000\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\WINLOGON#SHELL

 
Adware.Tracking Cookie

    C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Cookies\mareike@adx.chip[1].txt [ /adx.chip ]

    C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Cookies\mareike@doubleclick[2].txt [ /doubleclick ]

    C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Cookies\PJ157R5Q.txt [ /c.atdmt.com ]

    C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Cookies\TL1TJZFR.txt [ /smartadserver.com ]

    C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Cookies\EPDBAC3W.txt [ /atdmt.com ]

    C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Cookies\AR6O47G3.txt [ /mediaplex.com ]

    C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Cookies\454ALUZU.txt [ /apmebf.com ]

    C:\USERS\MAREIKE\AppData\Roaming\Microsoft\Windows\Cookies\Low\mareike@doubleclick[2].txt [ Cookie:mareike@doubleclick.net/ ]

    C:\USERS\MAREIKE\AppData\Roaming\Microsoft\Windows\Cookies\Low\mareike@studivz.adfarm1.adition[2].txt [ Cookie:mareike@studivz.adfarm1.adition.com/ ]

    C:\USERS\MAREIKE\Cookies\mareike@doubleclick[2].txt [ Cookie:mareike@doubleclick.net/ ]

    C:\USERS\MAREIKE\Cookies\TL1TJZFR.txt [ Cookie:mareike@smartadserver.com/ ]

    C:\USERS\MAREIKE\Cookies\mareike@adx.chip[1].txt [ Cookie:mareike@adx.chip.de/ ]

    C:\USERS\MAREIKE\Cookies\454ALUZU.txt [ Cookie:mareike@apmebf.com/ ]

    .doubleclick.net [ C:\PROGRAMDATA\MOZILLA\FIREFOX\PROFILES\OB752NPI.DEFAULT\COOKIES.SQLITE ]

    .countomat.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adserver2.clipkit.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .overture.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adsrv1.admediate.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    stats.o2more.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adviva.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .im.banner.t-online.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .sexvideoshub.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    eas.apm.emediate.eu [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    eas.apm.emediate.eu [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    eas4.emediate.eu [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    eas.apm.emediate.eu [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .indoormedia.co.uk [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .sexgeschichten.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.etracker.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .kontera.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .traffictrack.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .invitemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .apmebf.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .apmebf.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    zbox.zanox.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adserv-new.20six.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pornhub.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pornhub.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .statcounter.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .statcounter.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    gotacha.rotator.hadj7.adjuggler.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .porntubemate.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adserver.ep-solutions.org [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .questionmarket.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .questionmarket.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mediaplex.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mediaplex.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.gameforge.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.gameforge.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    porndad.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    clicks.maximumspeedfind.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adinterax.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adserver.gs [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .zedo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    de.sitestat.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    de.sitestat.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adserver.mitfahrzentrale.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ad-emea.doubleclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ad.adnet.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    beacons.hottraffic.nl [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .traffichaus.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ads.mikinimedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ads.247activemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mm.chitika.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .imrworldwide.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .imrworldwide.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .xiti.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .insightexpressai.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .insightexpressai.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .atdmt.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adcentriconline.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .revsci.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.zanox-affiliate.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adbrite.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adbrite.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adbrite.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .advertising.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .femalefirst.co.uk [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    advertising.superweb.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .alphaporno.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adtech.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .yieldmanager.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracker.roitesting.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    erotikcounter.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.pornologo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .collective-media.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .hardsextube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .virginmedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .media.photobucket.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adxpose.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    fl01.ct2.comclick.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adserver.fachschriften.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .porntube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .clicksor.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .clicksor.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .clicksor.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .clicksor.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .smartadserver.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .eyewonder.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mofosex.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adultadworld.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adultadworld.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .komtrack.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .komtrack.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .komtrack.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .specificclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .specificclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .specificclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .specificclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .specificclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .specificclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tracking.quisma.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.quisma.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.quisma.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .server.cpmstar.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.quartermedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .hornyandhappy.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.bannerreport.org [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pornymph.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .a.revenuemax.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .revenuemax.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .interclick.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .interclick.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ru4.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ru4.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ru4.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ru4.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ru4.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adserver.adtechus.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .partypoker.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    de.partypoker.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .serving-sys.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .guj.122.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .msnportal.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .sevenoneintermedia.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .vodafonegroup.122.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .audiag.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ice.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .giftscom.122.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.bmbfcluster.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mediabiz.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mediabiz.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pornjunkies.nl [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adinterax.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    in.getclicky.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    fl01.ct2.comclick.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    fl01.ct2.comclick.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .at.atwola.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tacoda.at.atwola.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tacoda.at.atwola.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .at.atwola.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .invitemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .invitemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .invitemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .invitemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .invitemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .insightexpressai.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .insightexpressai.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tns-counter.ru [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .yadro.ru [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .rainbowmedia.122.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.pointroll.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .invitemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    fr.sitestat.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    fr.sitestat.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .libri.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .zieltrack.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .stepstone.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ads1.moonchildmedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    e2.emediate.se [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .doubleclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .getclicky.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .static.getclicky.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .nextag.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .nextag.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .atdmt.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .atdmt.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ads.crakmedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .secmedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .casalemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .casalemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .3pagen.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.quisma.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.adition.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.adition.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ad.adnet.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .freeporn.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .freeporn.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .track.gridlockparadise.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .track.gridlockparadise.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.dirtyxxxtube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .dirtyxxxtube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .dirtyxxxtube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .homemadesextube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .homemadesextube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .overture.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .eyewonder.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .revsci.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .revsci.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .revsci.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .fastclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .hansenet.122.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .advertising.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .de.at.atwola.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .advertising.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .advertising.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .fastclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.klicktel.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.klicktel.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    eas.apm.emediate.eu [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .hardsextube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .hardsextube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adserver.hardsextube.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    s08.flagcounter.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mediabrandsww.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ads1.jurawelt.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adultfriendfinder.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adultfriendfinder.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pornbanana.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .pornbanana.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adxpansion.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .trafficmp.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .estat.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .de.partypoker.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .de.partypoker.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .de.partypoker.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .paypal.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.track306.info [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.track306.info [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.track306.info [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.track306.info [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.track306.info [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.track306.info [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.track306.info [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adx.chip.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.mediamarkt.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mediamarkt.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .bs.serving-sys.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .trafficmp.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .trafficmp.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    auslieferung.commindo-media-ressourcen.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.quartermedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.quartermedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.quartermedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.quartermedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.adserver01.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ads.quartermedia.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.zanox.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .revsci.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .revsci.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .revsci.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .apmebf.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tradedoubler.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adserver.mvg-werbung.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    statse.webtrendslive.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .webmasterplan.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adserver1.mokono.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .insightexpressai.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .insightexpressai.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .insightexpressai.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .insightexpressai.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ad.adnet.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ad.adnet.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .partypoker.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .partypoker.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .azjmp.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mediaplex.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .fastclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tradedoubler.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.yieldmanager.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .statcounter.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adviva.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad1.adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .serving-sys.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .microsoftsto.112.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .serving-sys.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .bs.serving-sys.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    dc.tremormedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .amazon-adsystem.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .amazon-adsystem.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    track.effiliation.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    track.effiliation.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tracking.quisma.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.yieldmanager.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.yieldmanager.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .atdmt.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .media6degrees.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .media6degrees.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .media6degrees.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .media6degrees.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .webmasterplan.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .lucidmedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.yieldmanager.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tradedoubler.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tradedoubler.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .invitemedia.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad4.adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .webmasterplan.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    track.adform.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adbrite.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .zedo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .zedo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .zedo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .zedo.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .zanox-affiliate.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    tracking.mlsat02.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .ru4.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    www.googleadservices.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .mediaplex.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .smartadserver.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .smartadserver.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .smartadserver.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.zanox.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .zanox.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    studivz.adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    studivz.adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .serving-sys.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .serving-sys.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .webmasterplan.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .webmasterplan.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tradedoubler.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .tradedoubler.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .traffictrack.de [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.yieldmanager.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.yieldmanager.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.yieldmanager.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad.yieldmanager.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad3.adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    track.adform.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adform.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ad2.adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .adfarm1.adition.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .smartadserver.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .smartadserver.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .smartadserver.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    ww251.smartadserver.com [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .eset.122.2o7.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

    .doubleclick.net [ C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\COOKIES.SQLITE ]

SUPERAntiSpyware 2:

PHP-Code:

  SUPERAntiSpyware Scann-Protokoll

hxxp://www.superantispyware.com

 
Generiert 01/27/2012 bei 00:09 AM

 
Version der Applikation : 5.0.1142

 
Version der Kern-Datenbank : 8169

Version der Spur-Datenbank : 5981

 
Scan Art       : kompletter Scann

Totale Scann-Zeit : 05:04:36

 
Operating System Information

Windows 7 Starter 32-bit (Build 6.01.7600)

UAC On - Limited User

 
Gescannte Speicherelemente  : 598

Erfasste Speicher-Bedrohungen  : 0

Gescannte Register-Elemente  : 23024

Erfasste Register-Bedrohungen  : 0

Gescannte Datei-Elemente     : 66952

Erfasste Datei-Elemente   : 0

2.
Hab die Programme deinstalliert. Außer "Auslogics Toolbar Updater Ask.com 23.01.2012 1.2.0.20007". Da fehlten immer die Admin-Rechte, obwohl ich als Admin angemeldet bin.

3.
Hier der neue Scan mit OTL:
OTL EXTRAS Logfile:

Code:

ATTFilter

OTL Extras logfile created on: 05.02.2012 23:10:57 - Run 1
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Mareike\Downloads
 Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7601.17514)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
987,48 Mb Total Physical Memory | 182,91 Mb Available Physical Memory | 18,52% Memory free
1,96 Gb Paging File | 0,95 Gb Available in Paging File | 48,61% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 220,97 Gb Total Space | 193,49 Gb Free Space | 87,57% Space Free | Partition Type: NTFS
Drive D: | 11,62 Gb Total Space | 1,94 Gb Free Space | 16,68% Space Free | Partition Type: NTFS
Drive E: | 99,18 Mb Total Space | 95,09 Mb Free Space | 95,88% Space Free | Partition Type: FAT32
 
Computer Name: MAREIKES | User Name: Mareike | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
http [open] -- Reg Error: Key error.
https [open] -- Reg Error: Key error.
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MIF5BA~1\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{07FA4960-B038-49EB-891B-9F95930AA544}" = HP Customer Experience Enhancements
"{1061DF04-CF33-40B0-8360-D07C9BBEB122}" = HP Wireless Assistant
"{17B4760F-334B-475D-829F-1A3E94A6A4E6}" = HP Setup
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{21FFAF37-E51A-41AB-8749-ACD1F9CF8E37}" = HP QuickWeb
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{254C37AA-6B72-4300-84F6-98A82419187E}" = ActiveCheck component for HP Active Support Library
"{26A24AE4-039D-4CA4-87B4-2F83217002FF}" = Java(TM) 7 Update 2
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2BA722D1-48D1-406E-9123-8AE5431D63EF}" = Windows Live Fotogalerie
"{32364CEA-7855-4A3C-B674-53D8E9B97936}" = TuneUp Utilities 2012
"{34985F59-8F6F-46F4-9AD5-53E2714294D2}" = ArcSoft WebCam Companion 3
"{34D2AB40-150D-475D-AE32-BD23FB5EE355}" = HP Quick Launch Buttons
"{3877C901-7B90-4727-A639-B6ED2DD59D43}" = ESU for Microsoft Windows 7
"{39D0E034-1042-4905-BECB-5502909FCB7C}" = Microsoft Works
"{3B4E636E-9D65-4D67-BA61-189800823F52}" = Windows Live Communications Platform
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"{41E654A9-26D0-4EAC-854B-0FA824FFFABB}" = Windows Live Messenger
"{4414C431-245A-4AF7-8FE0-3ED2333FD8D2}" = HP MediaStream
"{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}" = Recovery Manager
"{491ADA37-04EE-2ECE-9F86-DDC0106047AC}" = Times Reader
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4B7057D5-6D5D-4088-8217-48EA20C44373}" = HP User Guides 0169
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{5FC68772-6D56-41C6-9DF1-24E868198AE6}" = Windows Live Call
"{669D4A35-146B-4314-89F1-1AC3D7B88367}" = HPAsset component for HP Active Support Library
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{76618402-179D-4699-A66B-D351C59436BC}" = Windows Live Sync
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{86CE85E6-DBAC-3FFD-B977-E4B79F83C909}" = Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows Vista and Later
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8D1E61D1-1395-4E97-997F-D002DB3A5074}" = OpenOffice.org 3.2
"{90120000-0016-0407-0000-0000000FF1CE}" = Microsoft Office Excel MUI (German) 2007
"{90120000-0016-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-0018-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (German) 2007
"{90120000-0018-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001B-0407-0000-0000000FF1CE}" = Microsoft Office Word MUI (German) 2007
"{90120000-001B-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-001F-0407-0000-0000000FF1CE}" = Microsoft Office Proof (German) 2007
"{90120000-001F-0407-0000-0000000FF1CE}_HOMESTUDENTR_{A0516415-ED61-419A-981D-93596DA74165}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-001F-0410-0000-0000000FF1CE}" = Microsoft Office Proof (Italian) 2007
"{90120000-001F-0410-0000-0000000FF1CE}_HOMESTUDENTR_{322296D4-1EAE-4030-9FBC-D2787EB25FA2}" = Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
"{90120000-0020-0407-0000-0000000FF1CE}" = Compatibility Pack für 2007 Office System
"{90120000-002C-0407-0000-0000000FF1CE}" = Microsoft Office Proofing (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}" = Microsoft Office Shared MUI (German) 2007
"{90120000-006E-0407-0000-0000000FF1CE}_HOMESTUDENTR_{26454C26-D259-4543-AA60-3189E09C5F76}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{90120000-00A1-0407-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (German) 2007
"{90120000-00A1-0407-0000-0000000FF1CE}_HOMESTUDENTR_{9BD40163-B95D-4B07-8991-0AB775B6D88B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{9068B2BE-D93A-4C0A-861C-5E35E2C0E09E}" = Intel(R) Matrix Storage Manager
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = Microsoft Office 2007 Service Pack 2 (SP2)
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{95120000-00AF-0407-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (German)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{AC76BA86-7AD7-1031-7B44-AA1000000001}" = Adobe Reader X (10.1.2) - Deutsch
"{AD72CFB4-C2BF-424E-9DF0-C7BAD1F30A11}" = Adobe Shockwave Player
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C4D738F7-996A-4C81-B8FA-C4E26D767E41}" = Windows Live Mail
"{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}" = Skype Toolbars
"{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}" = SUPERAntiSpyware
"{CE026CFE-73FE-4FED-9D5F-2C8D4DB512B0}" = TuneUp Utilities Language Pack (de-DE)
"{D46D081B-F60E-467E-A7C4-117B70D76731}" = HP Update
"{E0A4805D-280A-4DD7-9E74-3A5F85E302A1}" = Windows Live Writer
"{E2DFE069-083E-4631-9B6C-43C48E991DE5}" = Junk Mail filter update
"{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}" = IDT Audio
"{E50AE784-FABE-46DA-A1F8-7B6B56DCB22E}" = Microsoft Office Suite Activation Assistant
"{E92D47A1-D27D-430A-8368-0BAFD956507D}" = HP Support Assistant
"{EEA95E6C-6847-49BE-83C9-ED92D8E18983}" = HP QuickSync
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F1D7AC58-554A-4A58-B784-B61558B1449A}" = QLBCASL
"{F8FF18EE-264A-43FD-B2F6-5EAD40798C2F}" = Windows Live Essentials
"7-Zip" = 7-Zip 9.20
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Avira AntiVir Desktop" = Avira AntiVir Personal - Free Antivirus
"Broadcom 802.11 Wireless LAN Adapter" = Broadcom 802.11 Wireless LAN Adapter
"CCleaner" = CCleaner
"Diablo II" = Diablo II
"ESET Online Scanner" = ESET Online Scanner v3
"HDMI" = Intel(R) Graphics Media Accelerator Driver
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink DVD Suite
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = Power2Go
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware Version 1.60.1.1000
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Mozilla Firefox 10.0 (x86 de)" = Mozilla Firefox 10.0 (x86 de)
"Oceanis Change Background Windows 7_is1" = Oceanis Change Background Windows 7
"SecureW2 EAP Suite" = SecureW2 EAP Suite 1.1.3 for Windows
"SynTPDeinstKey" = Synaptics Pointing Device Driver
"TuneUp Utilities 2012" = TuneUp Utilities 2012
"WildTangent hp Master Uninstall" = HP Games
"WinLiveSuite_Wave3" = Windows Live Essentials
"ZumoDrive" = HP CloudDrive
 
========== HKEY_CURRENT_USER Uninstall List ==========
 
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{79A765E1-C399-405B-85AF-466F52E918B0}" = Auslogics Toolbar Updater
"Diablo II" = Diablo II
 
========== Last 10 Event Log Errors ==========
 
[ Application Events ]
Error - 11.01.2012 11:03:24 | Computer Name = Mareikes | Source = WinMgmt | ID = 10
Description = 
 
Error - 15.01.2012 01:54:24 | Computer Name = Mareikes | Source = SideBySide | ID = 16842815
Description = Fehler beim Generieren des Aktivierungskontextes für "C:\Program Files\Common
 Files\Adobe AIR\Versions\1.0\Adobe AIR.dll". Fehler in Manifest- oder Richtliniendatei
 "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" in Zeile 3.
Der
 Wert "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" des "version"-Attributs
 im assemblyIdentity-Element ist ungültig.
 
Error - 24.01.2012 14:48:11 | Computer Name = Mareikes | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: tdsskiller.exe, Version: 2.7.6.0,
 Zeitstempel: 0x4f17ddc0  Name des fehlerhaften Moduls: tdsskiller.exe, Version: 2.7.6.0,
 Zeitstempel: 0x4f17ddc0  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00033d28  ID des fehlerhaften
 Prozesses: 0x17c  Startzeit der fehlerhaften Anwendung: 0x01ccdac8779417cc  Pfad der
 fehlerhaften Anwendung: G:\Trojaner-Behebung\tdsskiller.exe  Pfad des fehlerhaften
 Moduls: G:\Trojaner-Behebung\tdsskiller.exe  Berichtskennung: f677c5ac-46bb-11e1-a06e-e620906ea152
 
Error - 25.01.2012 16:45:07 | Computer Name = Mareikes | Source = MsiInstaller | ID = 10005
Description = 
 
Error - 25.01.2012 16:45:27 | Computer Name = Mareikes | Source = MsiInstaller | ID = 10005
Description = 
 
Error - 25.01.2012 17:00:49 | Computer Name = Mareikes | Source = MsiInstaller | ID = 10005
Description = 
 
Error - 25.01.2012 17:11:14 | Computer Name = Mareikes | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 8.0.7600.16912,
 Zeitstempel: 0x4eb4a5ea  Name des fehlerhaften Moduls: mshtml.dll, Version: 8.0.7600.16912,
 Zeitstempel: 0x4eb4bb58  Ausnahmecode: 0xc0000005  Fehleroffset: 0x001bb05f  ID des fehlerhaften
 Prozesses: 0xbac  Startzeit der fehlerhaften Anwendung: 0x01ccdba345f66718  Pfad der
 fehlerhaften Anwendung: C:\Program Files\Internet Explorer\iexplore.exe  Pfad des
 fehlerhaften Moduls: C:\Windows\System32\mshtml.dll  Berichtskennung: 1cdaa147-4799-11e1-a001-ef2e918d304e
 
Error - 31.01.2012 08:48:05 | Computer Name = Mareikes | Source = System Restore | ID = 8193
Description = 
 
Error - 31.01.2012 12:23:43 | Computer Name = Mareikes | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: OneClick.exe, Version: 12.0.2160.11,
 Zeitstempel: 0x4ee886e5  Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7600.16695,
 Zeitstempel: 0x4cc7ab44  Ausnahmecode: 0xc0000005  Fehleroffset: 0x00051f88  ID des fehlerhaften
 Prozesses: 0xfb8  Startzeit der fehlerhaften Anwendung: 0x01ccdf9a57c9d5e1  Pfad der
 fehlerhaften Anwendung: C:\Program Files\TuneUp Utilities 2012\OneClick.exe  Pfad
 des fehlerhaften Moduls: C:\Windows\SYSTEM32\ntdll.dll  Berichtskennung: f0f8947e-4c27-11e1-a65e-aa5ff17cfd66
 
Error - 31.01.2012 12:56:16 | Computer Name = Mareikes | Source = Application Hang | ID = 1002
Description = Programm firefox.exe, Version 6.0.0.4240 kann nicht mehr unter Windows
 ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung,
 um nach weiteren Informationen zum Problem zu suchen.    Prozess-ID: b3c    Startzeit: 
01ccdf6f8bfa4376    Endzeit: 1875    Anwendungspfad: C:\Program Files\Mozilla Firefox\firefox.exe

Berichts-ID:
 fc7d41d4-4c2b-11e1-a65e-aa5ff17cfd66  
 
[ Hewlett-Packard Events ]
Error - 11.02.2011 05:02:02 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files\Hewlett-Packard\HP Support Framework\Logs\SystemInfoAA.xml"
 konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32 
errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)     bei
 System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 11.02.2011 05:22:11 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files\Hewlett-Packard\HP Support Framework\Logs\SystemInfoAA.xml"
 konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32 
errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)     bei
 System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 11.02.2011 05:22:11 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = de-DE Die Datei "C:\Program Files\Hewlett-Packard\HP Support Framework\Logs\SystemInfoAA.xml"
 konnte nicht gefunden werden. mscorlib    bei System.IO.__Error.WinIOError(Int32 
errorCode, String maybeFullPath)     bei System.IO.FileStream.Init(String path, FileMode
 mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32
 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, 
Boolean bFromProxy)     bei System.IO.FileStream..ctor(String path, FileMode mode,
 FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)     bei
 System.IO.StreamReader..ctor(String path, Encoding encoding, Boolean detectEncodingFromByteOrderMarks,
 Int32 bufferSize)     bei System.IO.StreamReader..ctor(String path, Encoding encoding)

   bei System.IO.File.ReadAllText(String path, Encoding encoding)     bei n.a(Object
 A_0, EventArgs A_1) 
 
Error - 02.04.2011 06:55:13 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\041102125508.xml
 File not created by asset agent
 
Error - 13.04.2011 14:05:38 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\041113080534.xml
 File not created by asset agent
 
Error - 13.04.2011 14:05:42 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\041113080539.xml
 File not created by asset agent
 
Error - 20.04.2011 03:40:00 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\041120093936.xml
 File not created by asset agent
 
Error - 04.05.2011 04:31:20 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\051104103115.xml
 File not created by asset agent
 
Error - 18.05.2011 05:15:48 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\051118111545.xml
 File not created by asset agent
 
Error - 01.06.2011 04:46:11 | Computer Name = Mareikes | Source = Hewlett-Packard | ID = 0
Description = AAProcessExited() C:\ProgramData\Hewlett-Packard\HP Support Framework\Telemetry\061101104605.xml
 File not created by asset agent
 
[ System Events ]
Error - 03.02.2012 01:51:12 | Computer Name = Mareikes | Source = DCOM | ID = 10010
Description = 
 
Error - 03.02.2012 02:16:27 | Computer Name = Mareikes | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   cdrom
 
Error - 03.02.2012 02:19:06 | Computer Name = Mareikes | Source = Service Control Manager | ID = 7000
Description = Der Dienst "MBAMProtector" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%193
 
Error - 03.02.2012 02:19:06 | Computer Name = Mareikes | Source = Service Control Manager | ID = 7001
Description = Der Dienst "MBAMService" ist vom Dienst "MBAMProtector" abhängig, 
der aufgrund folgenden Fehlers nicht gestartet wurde:   %%193
 
Error - 03.02.2012 02:20:16 | Computer Name = Mareikes | Source = volsnap | ID = 393230
Description = Die Schattenkopien von Volume "C:" wurden aufgrund eines E/A-Fehlers
 auf Volume "C:" abgebrochen.
 
Error - 03.02.2012 02:23:17 | Computer Name = Mareikes | Source = DCOM | ID = 10010
Description = 
 
Error - 03.02.2012 11:16:50 | Computer Name = Mareikes | Source = DCOM | ID = 10010
Description = 
 
Error - 05.02.2012 17:49:41 | Computer Name = Mareikes | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
   cdrom
 
Error - 05.02.2012 17:52:01 | Computer Name = Mareikes | Source = Service Control Manager | ID = 7000
Description = Der Dienst "MBAMProtector" wurde aufgrund folgenden Fehlers nicht 
gestartet:   %%193
 
Error - 05.02.2012 17:52:01 | Computer Name = Mareikes | Source = Service Control Manager | ID = 7001
Description = Der Dienst "MBAMService" ist vom Dienst "MBAMProtector" abhängig, 
der aufgrund folgenden Fehlers nicht gestartet wurde:   %%193
 
 
< End of report >

--- --- ---

Gruß,
Carsten

kira · 06.02.2012, 17:49

Zitat:

Zitat von carsten87

2.
Hab die Programme deinstalliert. Außer "Auslogics Toolbar Updater Ask.com 23.01.2012 1.2.0.20007". Da fehlten immer die Admin-Rechte, obwohl ich als Admin angemeldet bin.

versuche entweder im abgesicherten Modus:

1.
Gehe in den abgesicherten Modus:
Drücke beim Hochfahren des rechners [F8] solange, bis du eine auswahlmöglichkeit hast:

- Abgesicherter Modus

oder:

2.
Software mit Revo Uninstaller deinstallieren

Downloade von Revo Group die Freeware-Version des Revo Uninstallers

Doppelklick auf die revosetup.exe.
Installiere das Tool in den vorgegebenen Pfad.
Doppelklick auf das Icon Revo Uninstaller.
Doppelklicke nacheinander folgende Software aus der Code-Box:
Code:
ATTFilter
```
         
```
Bestätige die Deinstallation mit Ja.
Belasse die Einstellung der Deinstallationsroutine auf Moderat und klicke auf weiter.
Das Tool wird nun nach übrig gebliebenen Registry-Einträgen auf dem Rechner suchen. Klicke auf weiter.
Klicke auf den Button Markiere alle, klicke auf löschen und weiter und bestätige mit Ja.
Zum Schluss sucht das Tool evtl. noch nach übrig geblieben Dateien und Ordnern.
Prüfe die Ordner und Dateien und klicke ggfs. auf den Button Markiere alle, klicke auf weiter und bestätige mit Ja.

Starte den Rechner neu.

carsten87 · 07.02.2012, 18:46

Hallo,

die Deinstallation mit dem Revo Uninstaller hat geklappt.

Was soll ich als nächstes tun?

Gruß

kira · 07.02.2012, 19:07

kein PHP-Code bitte, sondern nur "normaltext" mit einem BB-Code Tag eingefügt!

erneut einen Scan mit OTL:

Doppelklick auf die OTL.exe
Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
Oben findest Du ein Kästchen mit Ausgabe.
Wähle bitte Standard-Ausgabe
Unter Extra-Registrierung wähle bitte Benutze SafeList.
Mache Häckchen bei LOP- und Purity-Prüfung.
Klicke nun auf Scan links oben.
Wenn der Scan beendet wurde werden zwei Logfiles erstellt.
Du findest die Logfiles auf Deinem Desktop => OTL.txt und Extras.txt
Poste die Logfiles in Code-Tags hier in den Thread.

carsten87 · 08.02.2012, 19:25

Die OTL-Datei habe ich gefunden. Die Extras-Datei nicht.

Hier der Code:
OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 07.02.2012 19:49:45 - Run 2
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Mareike\Downloads
 Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
987,48 Mb Total Physical Memory | 286,70 Mb Available Physical Memory | 29,03% Memory free
1,96 Gb Paging File | 1,10 Gb Available in Paging File | 56,21% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 220,97 Gb Total Space | 193,12 Gb Free Space | 87,40% Space Free | Partition Type: NTFS
Drive D: | 11,62 Gb Total Space | 1,94 Gb Free Space | 16,68% Space Free | Partition Type: NTFS
Drive E: | 99,18 Mb Total Space | 95,09 Mb Free Space | 95,88% Space Free | Partition Type: FAT32
 
Computer Name: MAREIKES | User Name: Mareike | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.02.05 23:09:57 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Mareike\Downloads\24960-OTL.exe
PRC - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.08.12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Programme\SUPERAntiSpyware\SASCore.exe
PRC - [2011.07.25 09:26:13 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.06.24 05:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.06.17 11:35:37 | 000,581,288 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\update.exe
PRC - [2011.04.21 06:53:10 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.04.21 06:52:51 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2011.04.21 06:52:36 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2011.01.25 16:40:22 | 000,092,216 | ---- | M] (Hewlett-Packard Company) -- C:\Programme\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2011.01.25 16:38:44 | 000,311,352 | ---- | M] (Hewlett-Packard Development Company L.P.) -- C:\Programme\Hewlett-Packard\Shared\hpCaslNotification.exe
PRC - [2010.11.20 13:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2010.11.20 13:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.10.12 07:51:52 | 000,495,708 | ---- | M] (IDT, Inc.) -- C:\Programme\IDT\WDM\sttray.exe
PRC - [2009.10.12 07:51:52 | 000,221,266 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\stacsv.exe
PRC - [2009.07.14 03:54:00 | 000,589,104 | ---- | M] (Hewlett-Packard) -- C:\Programme\Hewlett-Packard\HP QuickSync\QuickSync.exe
PRC - [2009.07.14 03:54:00 | 000,135,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Hewlett-Packard\HP QuickSync\jre\bin\javaw.exe
PRC - [2009.07.08 19:55:26 | 000,323,584 | -H-- | M] (DeviceVM, Inc.) -- C:\SPLASH.SYS\config\DVMExportService.exe
PRC - [2009.06.04 19:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009.06.04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2009.03.02 06:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\AEstSrv.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.02.06 03:29:56 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\1049a76b3de293df726d380932215c91\System.Management.ni.dll
MOD - [2012.02.06 03:22:16 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6e592e424a204aafeadbe22b6b31b9db\System.Windows.Forms.ni.dll
MOD - [2012.02.06 03:21:54 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b2cfd85528a27eb71dc41d8067359a1\System.Drawing.ni.dll
MOD - [2012.02.06 03:20:51 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll
MOD - [2012.02.06 03:20:39 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll
MOD - [2012.02.06 03:20:36 | 007,963,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll
MOD - [2012.02.06 03:20:11 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2010.11.13 00:19:04 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.08.12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2011.07.25 09:26:13 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.04.21 06:52:51 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.01.25 16:40:22 | 000,092,216 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
SRV - [2009.10.12 07:51:52 | 000,221,266 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\stacsv.exe -- (STacSV)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.07.08 19:55:26 | 000,323,584 | -H-- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\SPLASH.SYS\config\DVMExportService.exe -- (DvmMDES)
SRV - [2009.06.06 01:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009.06.04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2009.03.02 06:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\AEstSrv.exe -- (AESTFilters)
SRV - [2009.02.06 17:02:14 | 000,109,056 | ---- | M] (ArcSoft Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2011.12.10 15:24:06 | 000,000,000 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.07.25 09:26:16 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.07.25 09:26:16 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.07.22 17:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011.07.12 22:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.11.20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2009.10.12 07:51:52 | 000,420,864 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2009.10.08 16:55:33 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.09.29 18:25:26 | 000,017,624 | -H-- | M] (DeviceVM, Inc.) [Kernel | System | Running] -- C:\SPLASH.SYS\config\dvmio.sys -- (DVMIO)
DRV - [2009.09.02 02:59:42 | 000,174,592 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009.07.13 23:02:53 | 000,311,296 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\yk62x86.sys -- (yukonw7)
DRV - [2009.07.13 23:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32) Intel(R)
DRV - [2009.07.13 23:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009.04.29 08:46:54 | 000,015,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\system32\DRIVERS\HpqKbFiltr.sys -- (HpqKbFiltr)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6483
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.9.1.14019
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..keyword.URL: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ALSV5&o=1665&locale=de_DE&apn_uid=D0A8B27F-A462-47D7-A71F-8766C13F1844&apn_ptnrs=AU&apn_sauid=44F7C7E8-FAB7-4C3F-BF95-3FBF64138B09&apn_dtid=YYYYYYYYDE&q="
FF - prefs.js..network.proxy.type: 0
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.02.02 20:42:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.02.03 06:46:26 | 000,000,000 | ---D | M]
 
[2010.09.30 12:55:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mareike\AppData\Roaming\mozilla\Extensions
[2012.02.02 21:11:02 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mareike\AppData\Roaming\mozilla\Firefox\Profiles\bqgdgght.default\extensions
[2012.01.26 18:59:09 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Users\Mareike\AppData\Roaming\mozilla\Firefox\Profiles\bqgdgght.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2012.02.06 06:30:03 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
() (No name found) -- C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012.02.02 20:42:06 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.02.02 17:54:08 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2011.06.09 21:15:35 | 000,002,191 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012.02.02 17:54:08 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.02.02 17:54:08 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.02 17:54:08 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.02 17:54:08 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
[2012.02.02 17:54:08 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
 
O1 HOSTS File: ([2012.01.24 19:16:55 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Windows 7 Starter Helper) - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} - C:\Programme\Oceanis\SystemSetting\StarterHelper.dll (Oceanis)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [HP] C:\Programme\Hewlett-Packard\HP QuickSync\QuickSync.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray.exe (IDT, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx (WRC Class)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8F11C8BB-71C2-44B7-BC6F-D474F27A1500}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKCU Winlogon: Shell - (EXPLORER.EXE) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Programme\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{51ef28be-61bd-11e0-bd0f-8b77559d3e1f}\Shell - "" = AutoRun
O33 - MountPoints2\{51ef28be-61bd-11e0-bd0f-8b77559d3e1f}\Shell\AutoRun\command - "" = F:\SETUP.EXE
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.02.06 18:19:09 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2012.02.06 18:19:09 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2012.02.06 06:29:21 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2012.02.06 06:29:20 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2012.02.06 06:29:20 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2012.02.06 06:29:20 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2012.02.06 06:29:20 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2012.02.06 06:29:20 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.02.06 06:29:20 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2012.02.06 06:29:20 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.02.06 06:29:20 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2012.02.06 06:29:20 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2012.02.06 06:29:20 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2012.02.06 06:29:20 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2012.02.06 06:29:20 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2012.02.06 06:29:20 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2012.02.06 06:29:20 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2012.02.06 06:29:20 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2012.02.06 06:29:20 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.02.06 06:29:20 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2012.02.06 06:29:20 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2012.02.06 06:29:20 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2012.02.06 06:29:20 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2012.02.06 06:29:19 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.02.06 06:29:19 | 001,798,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.02.06 06:29:19 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.02.06 06:29:19 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012.02.06 06:29:19 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2012.02.06 06:29:19 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2012.02.06 06:29:19 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2012.02.06 06:29:19 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2012.02.06 06:29:19 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2012.02.06 06:29:19 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.02.06 06:29:19 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2012.02.06 06:29:19 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2012.02.06 06:29:19 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2012.02.06 06:29:19 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2012.02.06 06:29:19 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2012.02.06 06:29:19 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2012.02.05 22:58:51 | 000,000,000 | ---D | C] -- C:\Users\Mareike\Desktop\Trojaner-Bekämpfung
[2012.02.03 06:47:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012.02.03 06:46:26 | 000,637,848 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npdeployJava1.dll
[2012.02.03 06:46:26 | 000,223,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012.02.03 06:46:26 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012.02.03 06:46:25 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012.02.03 06:19:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2012.02.03 06:17:46 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2012.02.03 04:13:43 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
[2012.02.03 04:13:43 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2012.02.03 04:13:36 | 001,171,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2012.02.03 04:13:35 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2012.02.03 04:13:35 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2012.02.03 04:13:31 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2012.02.03 04:13:28 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2012.02.03 04:13:27 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2012.02.03 04:13:26 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2012.02.03 04:13:23 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizui.dll
[2012.02.03 04:13:21 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2012.02.03 04:13:19 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2012.02.03 04:13:19 | 000,520,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
[2012.02.03 04:13:16 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2012.02.03 04:13:16 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2012.02.03 04:13:13 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2012.02.03 04:13:11 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWSnapin.dll
[2012.02.03 04:13:07 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2012.02.03 04:13:02 | 001,828,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
[2012.02.03 04:13:00 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2012.02.03 04:12:58 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spinstall.exe
[2012.02.03 04:12:58 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spreview.exe
[2012.02.03 04:12:57 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2012.02.03 04:12:55 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
[2012.02.03 04:12:54 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diagperf.dll
[2012.02.03 04:12:53 | 003,367,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSAT.exe
[2012.02.03 04:12:53 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
[2012.02.03 04:12:52 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
[2012.02.03 04:12:52 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsmf.dll
[2012.02.03 04:12:49 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbgeng.dll
[2012.02.03 04:12:48 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2012.02.03 04:12:46 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2012.02.03 04:12:44 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\System32\DShowRdpFilter.dll
[2012.02.03 04:12:43 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcndmgr.dll
[2012.02.03 04:12:43 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2012.02.03 04:12:42 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2fs.dll
[2012.02.03 04:12:42 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2012.02.03 04:12:41 | 001,792,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2012.02.03 04:12:41 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppobjs.dll
[2012.02.03 04:12:40 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2012.02.03 04:12:40 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
[2012.02.03 04:12:38 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certmgr.dll
[2012.02.03 04:12:38 | 000,508,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2012.02.03 04:12:37 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
[2012.02.03 04:12:36 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppwinob.dll
[2012.02.03 04:12:35 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
[2012.02.03 04:12:33 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
[2012.02.03 04:12:32 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfds.dll
[2012.02.03 04:12:31 | 000,240,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2012.02.03 04:12:30 | 002,414,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2012.02.03 04:12:30 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroles.dll
[2012.02.03 04:12:30 | 000,442,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2012.02.03 04:12:30 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2012.02.03 04:12:29 | 001,063,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
[2012.02.03 04:12:26 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2012.02.03 04:12:26 | 000,508,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2012.02.03 04:12:26 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2012.02.03 04:12:26 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basecsp.dll
[2012.02.03 04:12:25 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
[2012.02.03 04:12:25 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2012.02.03 04:12:24 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
[2012.02.03 04:12:24 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
[2012.02.03 04:12:23 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.dll
[2012.02.03 04:12:22 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
[2012.02.03 04:12:22 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnike.dll
[2012.02.03 04:12:21 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
[2012.02.03 04:12:21 | 000,271,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveapi.dll
[2012.02.03 04:12:19 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgprint.dll
[2012.02.03 04:12:17 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prncache.dll
[2012.02.03 04:12:16 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
[2012.02.03 04:12:16 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2012.02.03 04:12:16 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\net1.exe
[2012.02.03 04:12:16 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
[2012.02.03 04:12:15 | 000,690,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2012.02.03 04:12:15 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2012.02.03 04:12:15 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aitagent.exe
[2012.02.03 04:12:13 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scansetting.dll
[2012.02.03 04:12:12 | 002,504,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2012.02.03 04:12:12 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlangpui.dll
[2012.02.03 04:12:12 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
[2012.02.03 04:12:12 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2012.02.03 04:12:11 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSHVHOST.DLL
[2012.02.03 04:12:11 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2012.02.03 04:12:10 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
[2012.02.03 04:12:10 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2012.02.03 04:12:09 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
[2012.02.03 04:12:09 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fde.dll
[2012.02.03 04:12:08 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
[2012.02.03 04:12:08 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netdiagfx.dll
[2012.02.03 04:12:08 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
[2012.02.03 04:12:07 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
[2012.02.03 04:12:07 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2012.02.03 04:12:07 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2012.02.03 04:12:04 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMPEG2ENC.DLL
[2012.02.03 04:12:04 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2012.02.03 04:12:03 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
[2012.02.03 04:12:03 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcl.exe
[2012.02.03 04:12:02 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXPTaskRingtone.dll
[2012.02.03 04:12:02 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2012.02.03 04:12:01 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2012.02.03 04:12:00 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPEncEn.dll
[2012.02.03 04:12:00 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
[2012.02.03 04:11:58 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autofmt.exe
[2012.02.03 04:11:58 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vaultsvc.dll
[2012.02.03 04:11:58 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hbaapi.dll
[2012.02.03 04:11:57 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootres.dll
[2012.02.03 04:11:57 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Narrator.exe
[2012.02.03 04:11:57 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
[2012.02.03 04:11:57 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
[2012.02.03 04:11:56 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoconv.exe
[2012.02.03 04:11:56 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
[2012.02.03 04:11:56 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
[2012.02.03 04:11:56 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
[2012.02.03 04:11:56 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\proquota.exe
[2012.02.03 04:11:55 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipsmsnap.dll
[2012.02.03 04:11:55 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
[2012.02.03 04:11:55 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
[2012.02.03 04:11:54 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercpl.dll
[2012.02.03 04:11:54 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
[2012.02.03 04:11:54 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapphost.dll
[2012.02.03 04:11:54 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedyn.dll
[2012.02.03 04:11:54 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
[2012.02.03 04:11:54 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2012.02.03 04:11:53 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
[2012.02.03 04:11:52 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2012.02.03 04:11:51 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2012.02.03 04:11:51 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
[2012.02.03 04:11:51 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
[2012.02.03 04:11:51 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netid.dll
[2012.02.03 04:11:49 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdc.dll
[2012.02.03 04:11:48 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\untfs.dll
[2012.02.03 04:11:47 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2012.02.03 04:11:47 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Vault.dll
[2012.02.03 04:11:47 | 000,132,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2012.02.03 04:11:47 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nci.dll
[2012.02.03 04:11:46 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanpref.dll
[2012.02.03 04:11:46 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2012.02.03 04:11:45 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\System32\Robocopy.exe
[2012.02.03 04:11:44 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DxpTaskSync.dll
[2012.02.03 04:11:43 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Display.dll
[2012.02.03 04:11:42 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sharemediacpl.dll
[2012.02.03 04:11:42 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2012.02.03 04:11:42 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\userinit.exe
[2012.02.03 04:11:41 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\termmgr.dll
[2012.02.03 04:11:41 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\puiobj.dll
[2012.02.03 04:11:40 | 001,188,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DiagCpl.dll
[2012.02.03 04:11:40 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eudcedit.exe
[2012.02.03 04:11:40 | 000,140,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\scsiport.sys
[2012.02.03 04:11:39 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtctm.dll
[2012.02.03 04:11:39 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logoncli.dll
[2012.02.03 04:11:38 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FirewallControlPanel.dll
[2012.02.03 04:11:38 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\biocpl.dll
[2012.02.03 04:11:38 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiadefui.dll
[2012.02.03 04:11:38 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msconfig.exe
[2012.02.03 04:11:38 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcomapi.dll
[2012.02.03 04:11:38 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shsetup.dll
[2012.02.03 04:11:36 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themecpl.dll
[2012.02.03 04:11:36 | 000,766,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpccpl.dll
[2012.02.03 04:11:36 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2012.02.03 04:11:35 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscmmc.dll
[2012.02.03 04:11:34 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
[2012.02.03 04:11:34 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
[2012.02.03 04:11:32 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
[2012.02.03 04:11:32 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localsec.dll
[2012.02.03 04:11:32 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprddm.dll
[2012.02.03 04:11:32 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2012.02.03 04:11:31 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usercpl.dll
[2012.02.03 04:11:31 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2012.02.03 04:11:31 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
[2012.02.03 04:11:31 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdsrv.dll
[2012.02.03 04:11:31 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasacct.dll
[2012.02.03 04:11:30 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VAN.dll
[2012.02.03 04:11:30 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PerfCenterCPL.dll
[2012.02.03 04:11:30 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2012.02.03 04:11:30 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanui.dll
[2012.02.03 04:11:30 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prntvpt.dll
[2012.02.03 04:11:29 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcenter.dll
[2012.02.03 04:11:29 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVol.exe
[2012.02.03 04:11:29 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32tm.exe
[2012.02.03 04:11:28 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\accessibilitycpl.dll
[2012.02.03 04:11:28 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizeng.dll
[2012.02.03 04:11:28 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroleui.dll
[2012.02.03 04:11:28 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
[2012.02.03 04:11:27 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2012.02.03 04:11:27 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdeploy.dll
[2012.02.03 04:11:26 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\main.cpl
[2012.02.03 04:11:26 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSAC3ENC.DLL
[2012.02.03 04:11:26 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
[2012.02.03 04:11:26 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netjoin.dll
[2012.02.03 04:11:25 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkmap.dll
[2012.02.03 04:11:25 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
[2012.02.03 04:11:25 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
[2012.02.03 04:11:25 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll
[2012.02.03 04:11:24 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
[2012.02.03 04:11:24 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
[2012.02.03 04:11:24 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OnLineIDCpl.dll
[2012.02.03 04:11:23 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sud.dll
[2012.02.03 04:11:23 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
[2012.02.03 04:11:23 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskbarcpl.dll
[2012.02.03 04:11:22 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysmon.ocx
[2012.02.03 04:11:22 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slui.exe
[2012.02.03 04:11:22 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprtrmgr.dll
[2012.02.03 04:11:22 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defaultlocationcpl.dll
[2012.02.03 04:11:22 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrad.dll
[2012.02.03 04:11:22 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2012.02.03 04:11:22 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
[2012.02.03 04:11:22 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2012.02.03 04:11:21 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
[2012.02.03 04:11:21 | 000,137,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
[2012.02.03 04:11:21 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3cfg.dll
[2012.02.03 04:11:21 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ftp.exe
[2012.02.03 04:11:20 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2012.02.03 04:11:20 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shwebsvc.dll
[2012.02.03 04:11:20 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\intl.cpl
[2012.02.03 04:11:20 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efscore.dll
[2012.02.03 04:11:20 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifsutil.dll
[2012.02.03 04:11:20 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sisbkup.dll
[2012.02.03 04:11:19 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdcpl.dll
[2012.02.03 04:11:19 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenterCPL.dll
[2012.02.03 04:11:19 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recovery.dll
[2012.02.03 04:11:18 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabletPC.cpl
[2012.02.03 04:11:18 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceCenter.dll
[2012.02.03 04:11:18 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdedit.exe
[2012.02.03 04:11:18 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoplay.dll
[2012.02.03 04:11:18 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2012.02.03 04:11:17 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2012.02.03 04:11:17 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppnp.dll
[2012.02.03 04:11:16 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OobeFldr.dll
[2012.02.03 04:11:16 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systemcpl.dll
[2012.02.03 04:11:16 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recdisc.exe
[2012.02.03 04:11:16 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsutil.dll
[2012.02.03 04:11:16 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSTPager.ax
[2012.02.03 04:11:15 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
[2012.02.03 04:11:15 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
[2012.02.03 04:11:15 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sethc.exe
[2012.02.03 04:11:15 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
[2012.02.03 04:11:15 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdboot.exe
[2012.02.03 04:11:14 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blackbox.dll
[2012.02.03 04:11:14 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2012.02.03 04:11:13 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
[2012.02.03 04:11:13 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpsrcwp.dll
[2012.02.03 04:11:13 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPHLPR.DLL
[2012.02.03 04:11:13 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\migisol.dll
[2012.02.03 04:11:13 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
[2012.02.03 04:11:12 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2012.02.03 04:11:11 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
[2012.02.03 04:11:11 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshipsec.dll
[2012.02.03 04:11:11 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
[2012.02.03 04:11:11 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\isoburn.exe
[2012.02.03 04:11:11 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2012.02.03 04:11:10 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfrgui.exe
[2012.02.03 04:11:10 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2012.02.03 04:11:10 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3ui.dll
[2012.02.03 04:11:10 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgent.dll
[2012.02.03 04:11:10 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wavemsp.dll
[2012.02.03 04:11:10 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2012.02.03 04:11:09 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysclass.dll
[2012.02.03 04:11:09 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetup.exe
[2012.02.03 04:11:09 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzutil.exe
[2012.02.03 04:11:08 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wvc.dll
[2012.02.03 04:11:08 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimgapi.dll
[2012.02.03 04:11:06 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
[2012.02.03 04:11:06 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qcap.dll
[2012.02.03 04:11:06 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupugc.exe
[2012.02.03 04:11:06 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2012.02.03 04:11:05 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssText3d.scr
[2012.02.03 04:11:05 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srrstr.dll
[2012.02.03 04:11:05 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxlib.dll
[2012.02.03 04:11:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2012.02.03 04:11:04 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanconn.dll
[2012.02.03 04:11:04 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2012.02.03 04:11:03 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmsdk.dll
[2012.02.03 04:11:03 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingFolder.dll
[2012.02.03 04:11:03 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nslookup.exe
[2012.02.03 04:11:02 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
[2012.02.03 04:11:02 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimserv.exe
[2012.02.03 04:11:02 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskraid.exe
[2012.02.03 04:11:01 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drmmgrtn.dll
[2012.02.03 04:11:01 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\input.dll
[2012.02.03 04:11:01 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2012.02.03 04:11:01 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfmon.exe
[2012.02.03 04:11:01 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acppage.dll
[2012.02.03 04:11:00 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe
[2012.02.03 04:11:00 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetapi.dll
[2012.02.03 04:11:00 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.dll
[2012.02.03 04:11:00 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPCRYPT.DLL
[2012.02.03 04:10:59 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\onexui.dll
[2012.02.03 04:10:59 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nltest.exe
[2012.02.03 04:10:59 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnikeapi.dll
[2012.02.03 04:10:58 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdwcn.dll
[2012.02.03 04:10:58 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsbas.dll
[2012.02.03 04:10:58 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2012.02.03 04:10:58 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\runonce.exe
[2012.02.03 04:10:57 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
[2012.02.03 04:10:57 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2012.02.03 04:10:52 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapp3hst.dll
[2012.02.03 04:10:52 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFPlay.dll
[2012.02.03 04:10:51 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmdev.dll
[2012.02.03 04:10:51 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2012.02.03 04:10:51 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2012.02.03 04:10:51 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PnPUnattend.exe
[2012.02.03 04:10:50 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsadmin.exe
[2012.02.03 04:10:50 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
[2012.02.03 04:10:50 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2012.02.03 04:10:50 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unimdmat.dll
[2012.02.03 04:10:50 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsium.dll
[2012.02.03 04:10:50 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsmproxy.dll
[2012.02.03 04:10:49 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Bubbles.scr
[2012.02.03 04:10:49 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlcese30.dll
[2012.02.03 04:10:49 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tabcal.exe
[2012.02.03 04:10:49 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpd3d.dll
[2012.02.03 04:10:48 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
[2012.02.03 04:10:48 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
[2012.02.03 04:10:48 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceSyncProvider.dll
[2012.02.03 04:10:48 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kstvtune.ax
[2012.02.03 04:10:48 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logman.exe
[2012.02.03 04:10:48 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncryptui.dll
[2012.02.03 04:10:47 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceStatus.dll
[2012.02.03 04:10:47 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Ribbons.scr
[2012.02.03 04:10:47 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2012.02.03 04:10:47 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MdSched.exe
[2012.02.03 04:10:47 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSVRMGMT.DLL
[2012.02.03 04:10:47 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olethk32.dll
[2012.02.03 04:10:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
[2012.02.03 04:10:47 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\djoin.exe
[2012.02.03 04:10:47 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2012.02.03 04:10:46 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mystify.scr
[2012.02.03 04:10:46 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionQueue.dll
[2012.02.03 04:10:46 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercfg.cpl
[2012.02.03 04:10:46 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapistub.dll
[2012.02.03 04:10:46 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
[2012.02.03 04:10:46 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2012.02.03 04:10:45 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMADMOD.DLL
[2012.02.03 04:10:45 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2012.02.03 04:10:45 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3msm.dll
[2012.02.03 04:10:45 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fphc.dll
[2012.02.03 04:10:45 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\utildll.dll
[2012.02.03 04:10:44 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVSDECD.DLL
[2012.02.03 04:10:44 | 000,257,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgrade.exe
[2012.02.03 04:10:44 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqmapi.dll
[2012.02.03 04:10:44 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBICodec.ax
[2012.02.03 04:10:44 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiavideo.dll
[2012.02.03 04:10:44 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
[2012.02.03 04:10:44 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\takeown.exe
[2012.02.03 04:10:44 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
[2012.02.03 04:10:43 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmnet.dll
[2012.02.03 04:10:43 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdv.dll
[2012.02.03 04:10:43 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msnetobj.dll
[2012.02.03 04:10:43 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
[2012.02.03 04:10:42 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unattend.dll
[2012.02.03 04:10:42 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppinst.dll
[2012.02.03 04:10:42 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QCLIPROV.DLL
[2012.02.03 04:10:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cca.dll
[2012.02.03 04:10:41 | 000,567,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2012.02.03 04:10:41 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RelPost.exe
[2012.02.03 04:10:41 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmstp.exe
[2012.02.03 04:10:41 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MuiUnattend.exe
[2012.02.03 04:10:41 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vfwwdm32.dll
[2012.02.03 04:10:41 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pdhui.dll
[2012.02.03 04:10:40 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
[2012.02.03 04:10:40 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcln.dll
[2012.02.03 04:10:40 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsnmp32.dll
[2012.02.03 04:10:40 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umb.dll
[2012.02.03 04:10:40 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
[2012.02.03 04:10:40 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AzSqlExt.dll
[2012.02.03 04:10:39 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
[2012.02.03 04:10:39 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2012.02.03 04:10:38 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicli.exe
[2012.02.03 04:10:38 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\desk.cpl
[2012.02.03 04:10:38 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
[2012.02.03 04:10:38 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WavDest.dll
[2012.02.03 04:10:38 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\relog.exe
[2012.02.03 04:10:38 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationProxy.dll
[2012.02.03 04:10:38 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
[2012.02.03 04:10:37 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskpart.exe
[2012.02.03 04:10:37 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amstream.dll
[2012.02.03 04:10:37 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spbcd.dll
[2012.02.03 04:10:36 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\itircl.dll
[2012.02.03 04:10:36 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2012.02.03 04:10:36 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2012.02.03 04:10:36 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MultiDigiMon.exe
[2012.02.03 04:10:36 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netbtugc.exe
[2012.02.03 04:10:36 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nrpsrv.dll
[2012.02.03 04:10:35 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10.IME
[2012.02.03 04:10:35 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSTIFF.dll
[2012.02.03 04:10:35 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpps.dll
[2012.02.03 04:10:35 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertPolEng.dll
[2012.02.03 04:10:35 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2012.02.03 04:10:35 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksxbar.ax
[2012.02.03 04:10:35 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syssetup.dll
[2012.02.03 04:10:34 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2012.02.03 04:10:34 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2012.02.03 04:10:34 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WerFaultSecure.exe
[2012.02.03 04:10:34 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgentc.exe
[2012.02.03 04:10:33 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2012.02.03 04:10:33 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappgnui.dll
[2012.02.03 04:10:33 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tlscsp.dll
[2012.02.03 04:10:33 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\findstr.exe
[2012.02.03 04:10:33 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiarpc.dll
[2012.02.03 04:10:32 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciqtz32.dll
[2012.02.03 04:10:32 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\muifontsetup.dll
[2012.02.03 04:10:31 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppc.dll
[2012.02.03 04:10:31 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2012.02.03 04:10:30 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\luainstall.dll
[2012.02.03 04:10:30 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdi.sys
[2012.02.03 04:10:30 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spopk.dll
[2012.02.03 04:10:29 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\manage-bde.exe
[2012.02.03 04:10:29 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\repair-bde.exe
[2012.02.03 04:10:29 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
[2012.02.03 04:10:29 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdiasqmmodule.dll
[2012.02.03 04:10:29 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
[2012.02.03 04:10:29 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbrpm.sys
[2012.02.03 04:10:29 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
[2012.02.03 04:10:28 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetmib1.dll
[2012.02.03 04:10:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\g711codc.ax
[2012.02.03 04:10:28 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbisurf.ax
[2012.02.03 04:10:28 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdprefdrvapi.dll
[2012.02.03 04:10:27 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2012.02.03 04:10:26 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
[2012.02.03 04:10:26 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2012.02.03 04:10:26 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.dll
[2012.02.03 04:10:26 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profprov.dll
[2012.02.03 04:10:26 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2012.02.03 04:10:25 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfts.dll
[2012.02.03 04:10:23 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSMON.dll
[2012.02.03 04:10:23 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elsTrans.dll
[2012.02.03 04:10:22 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPENCDD.dll
[2012.02.03 04:10:22 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TRAPI.dll
[2012.02.03 04:10:22 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsperf.dll
[2012.02.03 04:10:21 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\napdsnap.dll
[2012.02.03 04:10:21 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsauth.dll
[2012.02.03 04:10:21 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schedcli.dll
[2012.02.03 04:10:19 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sscore.dll
[2012.02.03 04:10:18 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imkr80.ime
[2012.02.03 04:10:18 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2012.02.03 04:10:18 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsdchngr.dll
[2012.02.03 04:10:18 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
[2012.02.03 04:10:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcfgex.dll
[2012.02.03 04:10:14 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshirda.dll
[2012.02.03 04:10:12 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD2.sys
[2012.02.03 04:10:12 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD.sys
[2012.02.03 04:10:11 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2012.02.03 04:10:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPREFDD.dll
[2012.02.03 04:10:10 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_ISCII.DLL
[2012.02.03 04:10:09 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shunimpl.dll
[2012.02.03 04:10:09 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2012.02.03 04:10:09 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2012.02.03 04:10:06 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUS.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR1.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTURME.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAJIK.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMON.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMAORI.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT1.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTEL.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINORI.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINKAN.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBULG.DLL
[2012.02.03 04:10:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGEO.DLL
[2012.02.03 04:10:02 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSG.DLL
[2012.02.03 04:10:02 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdlk41a.dll
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUQ.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUF.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSF.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPO.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNEPR.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBEN.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGR1.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGKL.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTAM.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAR.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINHIN.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBLR.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
[2012.02.03 04:10:01 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlsbres.dll
[2012.02.03 04:10:01 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BlbEvents.dll
[2012.02.03 04:10:01 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pifmgr.dll
[2012.02.03 04:10:01 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizres.dll
[2012.02.03 04:10:01 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ1.DLL
[2012.02.03 04:10:01 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnaddr.dll
[2012.02.03 04:09:11 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
[2012.02.03 04:09:10 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2012.02.03 04:08:55 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmiEngine.dll
[2012.02.03 04:08:46 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PkgMgr.exe
[2012.02.03 04:08:46 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdscore.dll
[2012.02.03 04:07:54 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drvstore.dll
[2012.02.03 04:07:53 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
[2012.02.02 20:03:59 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.01.30 21:08:31 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\TuneUp Software
[2012.01.30 20:57:23 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.01.30 20:55:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.01.25 23:12:33 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\Malwarebytes
[2012.01.25 23:12:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.01.25 23:11:50 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.01.24 21:56:32 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\SUPERAntiSpyware.com
[2012.01.24 21:55:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2012.01.24 21:54:27 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2012.01.24 21:54:18 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2012.01.24 20:40:06 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012.01.24 19:02:32 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.01.23 18:54:52 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012.01.23 18:29:45 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2012.01.23 18:29:45 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2012.01.23 18:29:14 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2012.01.23 18:16:11 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2012.01.23 18:15:54 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
 
========== Files - Modified Within 30 Days ==========
 
[2012.02.07 19:49:19 | 000,000,177 | -H-- | M] () -- C:\dvmexp.idx
[2012.02.07 19:46:33 | 000,014,128 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.07 19:46:33 | 000,014,128 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.02.07 19:39:01 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.07 19:38:52 | 776,581,120 | -HS- | M] () -- C:\hiberfil.sys
[2012.02.06 18:19:10 | 000,001,226 | ---- | M] () -- C:\Users\Mareike\Desktop\Revo Uninstaller.lnk
[2012.02.06 06:29:21 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2012.02.06 06:29:20 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2012.02.06 06:29:20 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2012.02.06 06:29:20 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2012.02.06 06:29:20 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2012.02.06 06:29:20 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.02.06 06:29:20 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2012.02.06 06:29:20 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.02.06 06:29:20 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2012.02.06 06:29:20 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2012.02.06 06:29:20 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2012.02.06 06:29:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2012.02.06 06:29:20 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2012.02.06 06:29:20 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2012.02.06 06:29:20 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2012.02.06 06:29:20 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2012.02.06 06:29:20 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2012.02.06 06:29:20 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.02.06 06:29:20 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2012.02.06 06:29:20 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2012.02.06 06:29:20 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2012.02.06 06:29:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2012.02.06 06:29:19 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.02.06 06:29:19 | 001,798,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.02.06 06:29:19 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.02.06 06:29:19 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012.02.06 06:29:19 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2012.02.06 06:29:19 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2012.02.06 06:29:19 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2012.02.06 06:29:19 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2012.02.06 06:29:19 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2012.02.06 06:29:19 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.02.06 06:29:19 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2012.02.06 06:29:19 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2012.02.06 06:29:19 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2012.02.06 06:29:19 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2012.02.06 06:29:19 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2012.02.06 06:29:19 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2012.02.05 22:55:59 | 000,659,004 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.02.05 22:55:59 | 000,620,150 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.02.05 22:55:59 | 000,132,542 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.02.05 22:55:59 | 000,108,332 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.02.05 22:49:26 | 000,362,728 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.02.03 06:45:56 | 000,223,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012.02.03 06:45:56 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012.02.03 06:45:56 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012.02.03 06:45:55 | 000,637,848 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npdeployJava1.dll
[2012.02.03 06:45:55 | 000,567,184 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2012.02.03 06:43:57 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msclmd.dll
[2012.02.03 06:16:20 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.01.27 00:21:24 | 000,237,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2012.01.24 21:36:06 | 197,769,965 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.01.24 19:16:55 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\Hosts
[2012.01.14 13:14:24 | 000,007,597 | ---- | M] () -- C:\Users\Mareike\AppData\Local\Resmon.ResmonCfg
 
========== Files Created - No Company Name ==========
 
[2012.02.06 18:19:10 | 000,001,226 | ---- | C] () -- C:\Users\Mareike\Desktop\Revo Uninstaller.lnk
[2012.02.06 06:29:20 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2012.02.03 04:13:08 | 000,146,852 | ---- | C] () -- C:\Windows\System32\systemsf.ebd
[2012.02.03 04:10:24 | 000,010,429 | ---- | C] () -- C:\Windows\System32\ScavengeSpace.xml
[2012.02.03 04:09:59 | 000,105,559 | ---- | C] () -- C:\Windows\System32\RacRules.xml
[2012.01.25 23:11:58 | 000,000,000 | ---- | C] () -- C:\Windows\System32\drivers\mbam.sys
[2012.01.24 20:39:39 | 197,769,965 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012.01.14 13:14:24 | 000,007,597 | ---- | C] () -- C:\Users\Mareike\AppData\Local\Resmon.ResmonCfg
[2011.08.18 15:39:29 | 000,001,025 | ---- | C] () -- C:\Windows\System32\sysprs7.dll
[2011.08.18 15:39:29 | 000,000,205 | ---- | C] () -- C:\Windows\System32\lsprst7.dll
[2011.04.08 12:03:31 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll
[2011.04.08 12:03:31 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll
[2011.04.08 12:03:31 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll
[2011.04.08 12:01:58 | 000,017,047 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2011.04.02 11:55:22 | 000,001,849 | ---- | C] () -- C:\Users\Mareike\AppData\Roaming\GhostObjGAFix.xml
[2010.10.15 11:03:49 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.09.30 12:55:24 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009.12.24 02:05:09 | 000,006,656 | ---- | C] () -- C:\Windows\System32\bcmwlrc.dll
[2009.12.24 01:59:25 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2009.12.24 01:57:33 | 000,000,276 | ---- | C] () -- C:\Windows\System32\RStoneLog2.ini
[2009.12.24 01:57:33 | 000,000,217 | ---- | C] () -- C:\Windows\System32\RStoneLog.ini
[2009.11.21 05:48:09 | 000,659,004 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009.11.21 05:48:09 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009.11.21 05:48:09 | 000,132,542 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009.11.21 05:48:09 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009.09.27 13:49:50 | 000,362,029 | ---- | C] () -- C:\Windows\System32\sqlite3.dll
[2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 05:33:53 | 000,362,728 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 03:05:48 | 000,620,150 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 03:05:48 | 000,108,332 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.07.13 23:09:19 | 001,498,564 | ---- | C] () -- C:\Windows\System32\igkrng400.bin
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
 
========== LOP Check ==========
 
[2010.11.14 17:16:01 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\Auslogics
[2010.11.13 20:22:05 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\OpenOffice.org
[2012.01.30 21:08:31 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\TuneUp Software
[2010.11.18 21:43:53 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\WildTangent
[2011.07.16 10:12:04 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\ZumoDrive
[2011.10.31 14:12:02 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:F8435088

< End of report >

--- --- ---

[/CODE]

kira · 09.02.2012, 09:27

1.
Lösche:

Zitat:

Softonic Downloader

Anleitung für FF:-> Add-ons deinstallieren
-> Firefox mit Add-ons anpassen
-> Löschen: Firefox Add-Ons endgültig löschen | PcBeirat.de

im Internet Explorer Add-ons bzw. Erweiterungen deaktivieren/löschen ::
Verwalten von Add-Ons in Internet Explorer 9
Internet Explorer 9 Addons – installieren, deaktivieren, löschen und optimieren

2.

Zitat:

Achtung wichtig!:
Falls Du selber im Logfile Änderungen vorgenommen hast, musst Du durch die Originalbezeichnung ersetzen und so in Script einfügen! sonst funktioniert nicht!
(Benutzerordner, dein Name oder sonstige Änderungen durch X, Stern oder andere Namen ersetzt)

Fixen mit OTL

Starte die OTL.exe.
Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
Kopiere folgendes Skript:

Code:

ATTFilter

:OTL
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..extensions.enabledItems: toolbar@ask.com:3.9.1.14019
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=ALSV5&o=1665&locale=de_DE&apn_uid=D0A8B27F-A462-47D7-A71F-8766C13F1844&apn_ptnrs=AU&apn_sauid=44F7C7E8-FAB7-4C3F-BF95-3FBF64138B09&apn_dtid=YYYYYYYYDE&q="
[2011.06.09 21:15:35 | 000,002,191 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2012.02.02 17:54:08 | 000,002,252 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2012.02.02 17:54:08 | 000,001,105 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-de.xml
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{51ef28be-61bd-11e0-bd0f-8b77559d3e1f}\Shell - "" = AutoRun
O33 - MountPoints2\{51ef28be-61bd-11e0-bd0f-8b77559d3e1f}\Shell\AutoRun\command - "" = F:\SETUP.EXE
@Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:F8435088

:Commands
[purity]
[emptytemp]

und füge es hier ein:
Schließe alle Programme.
Klicke auf den Fix Button.
Klick auf .
OTL verlangt einen Neustart. Bitte zulassen.
Nach dem Neustart findest Du ein Textdokument.
Kopiere den Inhalt hier in Deinen Thread.

3.
erneut einen Scan mit OTL:

Doppelklick auf die OTL.exe
Vista und Windows 7 User: Rechtsklick auf die OTL.exe und "als Administrator ausführen" wählen.
Oben findest Du ein Kästchen mit Ausgabe.
Wähle bitte Standard-Ausgabe
Unter Extra-Registrierung wähle bitte Benutze SafeList.
Mache Häckchen bei LOP- und Purity-Prüfung.
Klicke nun auf Scan links oben.
Wenn der Scan beendet wurde werden zwei Logfiles erstellt.
Du findest die Logfiles auf Deinem Desktop => OTL.txt und Extras.txt
Poste die Logfiles in Code-Tags hier in den Thread.

► Hat Dein Rechner noch Probleme?

carsten87 · 09.02.2012, 20:31

Hier das OTL-Fix-Log:

Code:

ATTFilter

All processes killed
========== OTL ==========
Prefs.js: "Ask.com" removed from browser.search.defaultengine
Prefs.js: "Ask.com" removed from browser.search.defaultenginename
Prefs.js: "Ask.com" removed from browser.search.order.1
Prefs.js: toolbar@ask.com:3.9.1.14019 removed from extensions.enabledItems
Prefs.js: "hxxp://websearch.ask.com/redirect?client=ff&src=kw&tb=ALSV5&o=1665&locale=de_DE&apn_uid=D0A8B27F-A462-47D7-A71F-8766C13F1844&apn_ptnrs=AU&apn_sauid=44F7C7E8-FAB7-4C3F-BF95-3FBF64138B09&apn_dtid=YYYYYYYYDE&q=" removed from keyword.URL
C:\Programme\Mozilla Firefox\searchplugins\babylon.xml moved successfully.
C:\Programme\Mozilla Firefox\searchplugins\bing.xml moved successfully.
C:\Programme\Mozilla Firefox\searchplugins\yahoo-de.xml moved successfully.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068}\ not found.
Registry value HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440}\ not found.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Cdrom\\AutoRun|DWORD:1 /E : value set successfully!
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{51ef28be-61bd-11e0-bd0f-8b77559d3e1f}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{51ef28be-61bd-11e0-bd0f-8b77559d3e1f}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{51ef28be-61bd-11e0-bd0f-8b77559d3e1f}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{51ef28be-61bd-11e0-bd0f-8b77559d3e1f}\ not found.
File F:\SETUP.EXE not found.
ADS C:\ProgramData\Temp:F8435088 deleted successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: Administrator
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
 
User: Mareike
->Temp folder emptied: 83099525 bytes
->Temporary Internet Files folder emptied: 25873068 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 59100509 bytes
->Flash cache emptied: 562 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3432337 bytes
RecycleBin emptied: 2137 bytes
 
Total Files Cleaned = 164,00 mb
 
 
OTL by OldTimer - Version 3.2.31.0 log created on 02092012_195224

Files\Folders moved on Reboot...

Registry entries deleted on Reboot...

... das OTL-Scan-Log:
OTL Logfile:

Code:

ATTFilter

OTL logfile created on: 09.02.2012 19:58:27 - Run 3
OTL by OldTimer - Version 3.2.31.0     Folder = C:\Users\Mareike\Downloads
 Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
987,48 Mb Total Physical Memory | 322,52 Mb Available Physical Memory | 32,66% Memory free
1,96 Gb Paging File | 1,11 Gb Available in Paging File | 56,58% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 220,97 Gb Total Space | 193,05 Gb Free Space | 87,37% Space Free | Partition Type: NTFS
Drive D: | 11,62 Gb Total Space | 1,94 Gb Free Space | 16,68% Space Free | Partition Type: NTFS
Drive E: | 99,18 Mb Total Space | 95,09 Mb Free Space | 95,87% Space Free | Partition Type: FAT32
 
Computer Name: MAREIKES | User Name: Mareike | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.02.05 23:09:57 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Users\Mareike\Downloads\24960-OTL.exe
PRC - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Programme\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011.12.15 15:00:00 | 000,080,336 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avshadow.exe
PRC - [2011.12.15 14:59:48 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\sched.exe
PRC - [2011.12.15 14:59:38 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avguard.exe
PRC - [2011.12.15 14:59:37 | 000,258,512 | ---- | M] (Avira Operations GmbH & Co. KG) -- C:\Programme\Avira\AntiVir Desktop\avgnt.exe
PRC - [2011.09.09 17:10:28 | 000,086,072 | ---- | M] (Hewlett-Packard Company) -- C:\Programme\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
PRC - [2011.08.12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) -- C:\Programme\SUPERAntiSpyware\SASCore.exe
PRC - [2011.06.24 05:22:20 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2011.03.28 17:07:50 | 000,094,264 | ---- | M] (Hewlett-Packard Company) -- C:\Programme\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2011.03.28 17:06:24 | 000,311,352 | ---- | M] (Hewlett-Packard Development Company L.P.) -- C:\Programme\Hewlett-Packard\Shared\hpCaslNotification.exe
PRC - [2011.02.25 06:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.11.20 13:17:56 | 001,121,792 | ---- | M] (Microsoft Corporation) -- C:\Programme\Windows Media Player\wmpnetwk.exe
PRC - [2010.11.20 13:17:47 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009.10.12 07:51:52 | 000,495,708 | ---- | M] (IDT, Inc.) -- C:\Programme\IDT\WDM\sttray.exe
PRC - [2009.10.12 07:51:52 | 000,221,266 | ---- | M] (IDT, Inc.) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\stacsv.exe
PRC - [2009.07.14 03:54:00 | 000,589,104 | ---- | M] (Hewlett-Packard) -- C:\Programme\Hewlett-Packard\HP QuickSync\QuickSync.exe
PRC - [2009.07.14 03:54:00 | 000,135,168 | ---- | M] (Sun Microsystems, Inc.) -- C:\Programme\Hewlett-Packard\HP QuickSync\jre\bin\javaw.exe
PRC - [2009.07.08 19:55:26 | 000,323,584 | -H-- | M] (DeviceVM, Inc.) -- C:\SPLASH.SYS\config\DVMExportService.exe
PRC - [2009.06.04 19:03:32 | 000,186,904 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe
PRC - [2009.06.04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe
PRC - [2009.03.02 06:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\AEstSrv.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.02.06 03:29:56 | 001,051,136 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\1049a76b3de293df726d380932215c91\System.Management.ni.dll
MOD - [2012.02.06 03:22:16 | 012,433,408 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\6e592e424a204aafeadbe22b6b31b9db\System.Windows.Forms.ni.dll
MOD - [2012.02.06 03:21:54 | 001,587,200 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\3b2cfd85528a27eb71dc41d8067359a1\System.Drawing.ni.dll
MOD - [2012.02.06 03:20:51 | 005,453,312 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\130ad4d9719e566ca933ac7158a04203\System.Xml.ni.dll
MOD - [2012.02.06 03:20:39 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\2d5bcbeb9475ef62189f605bcca1cec6\System.Configuration.ni.dll
MOD - [2012.02.06 03:20:36 | 007,963,648 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\abab08afa60a6f06bdde0fcc9649c379\System.ni.dll
MOD - [2012.02.06 03:20:11 | 011,490,304 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll
MOD - [2010.11.13 00:19:04 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV - [2012.01.13 14:53:18 | 000,652,360 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.01.03 14:10:42 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011.12.15 14:59:48 | 000,086,224 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2011.12.15 14:59:38 | 000,110,032 | ---- | M] (Avira Operations GmbH & Co. KG) [Auto | Running] -- C:\Program Files\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011.09.09 17:10:28 | 000,086,072 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe -- (HP Support Assistant Service)
SRV - [2011.08.12 00:38:07 | 000,116,608 | ---- | M] (SUPERAntiSpyware.com) [Auto | Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE)
SRV - [2011.03.28 17:07:50 | 000,094,264 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
SRV - [2009.10.12 07:51:52 | 000,221,266 | ---- | M] (IDT, Inc.) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\stacsv.exe -- (STacSV)
SRV - [2009.07.14 02:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.07.08 19:55:26 | 000,323,584 | -H-- | M] (DeviceVM, Inc.) [Auto | Running] -- C:\SPLASH.SYS\config\DVMExportService.exe -- (DvmMDES)
SRV - [2009.06.06 01:07:28 | 000,250,616 | ---- | M] (WildTangent, Inc.) [On_Demand | Stopped] -- C:\Program Files\HP Games\HP Game Console\GameConsoleService.exe -- (GameConsoleService)
SRV - [2009.06.04 19:03:06 | 000,354,840 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Programme\Intel\Intel Matrix Storage Manager\IAANTmon.exe -- (IAANTMON) Intel(R)
SRV - [2009.03.02 06:43:08 | 000,081,920 | ---- | M] (Andrea Electronics Corporation) [Auto | Running] -- C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_5576240ee6baaa25\AEstSrv.exe -- (AESTFilters)
SRV - [2009.02.06 17:02:14 | 000,109,056 | ---- | M] (ArcSoft Inc.) [On_Demand | Stopped] -- C:\Programme\Common Files\ArcSoft\Connection Service\Bin\ACService.exe -- (ACDaemon)
 
 
========== Driver Services (SafeList) ==========
 
DRV - [2011.12.15 15:00:00 | 000,134,856 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.12.15 15:00:00 | 000,074,640 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\Windows\System32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011.12.15 15:00:00 | 000,036,000 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\avkmgr.sys -- (avkmgr)
DRV - [2011.12.10 15:24:06 | 000,000,000 | ---- | M] () [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.07.22 17:27:02 | 000,012,880 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV)
DRV - [2011.07.12 22:55:22 | 000,067,664 | ---- | M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel | System | Running] -- C:\Programme\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL)
DRV - [2010.11.20 11:24:41 | 000,052,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2010.06.17 14:14:27 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Windows\System32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2009.10.12 07:51:52 | 000,420,864 | ---- | M] (IDT, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\stwrt.sys -- (STHDA)
DRV - [2009.09.29 18:25:26 | 000,017,624 | -H-- | M] (DeviceVM, Inc.) [Kernel | System | Running] -- C:\SPLASH.SYS\config\dvmio.sys -- (DVMIO)
DRV - [2009.09.02 02:59:42 | 000,174,592 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009.07.14 00:45:33 | 000,083,456 | ---- | M] (Brother Industries Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\system32\DRIVERS\serial.sys -- (Serial)
DRV - [2009.07.13 23:02:53 | 000,311,296 | ---- | M] (Marvell) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\yk62x86.sys -- (yukonw7)
DRV - [2009.07.13 23:02:51 | 004,231,168 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netw5v32.sys -- (netw5v32) Intel(R)
DRV - [2009.07.13 23:02:46 | 001,096,704 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\athr.sys -- (athr)
DRV - [2009.04.29 08:46:54 | 000,015,872 | ---- | M] (Hewlett-Packard Development Company, L.P.) [Kernel | On_Demand | Running] -- C:\Windows\system32\DRIVERS\HpqKbFiltr.sys -- (HpqKbFiltr)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = 
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://google.de/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://hp-notebook.de.msn.com/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 25 D2 C1 E7 58 E7 CC 01  [binary data]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = 
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
========== FireFox ==========
 
FF - prefs.js..browser.search.defaultengine: ""
FF - prefs.js..browser.search.defaultenginename: ""
FF - prefs.js..browser.search.order.1: ""
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "www.google.de"
FF - prefs.js..extensions.enabledItems: {AB2CE124-6272-4b12-94A9-7303C7397BD1}:5.0.0.6483
FF - prefs.js..extensions.enabledItems: 
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24
FF - prefs.js..network.proxy.type: 0
 
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre7\bin\new_plugin\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.0.61118.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8081.0709: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.02.02 20:42:12 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 10.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.02.03 06:46:26 | 000,000,000 | ---D | M]
 
[2010.09.30 12:55:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mareike\AppData\Roaming\mozilla\Extensions
[2012.02.09 19:28:42 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mareike\AppData\Roaming\mozilla\Firefox\Profiles\bqgdgght.default\extensions
[2012.02.06 06:30:03 | 000,000,000 | ---D | M] (No name found) -- C:\Programme\Mozilla Firefox\extensions
() (No name found) -- C:\USERS\MAREIKE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\BQGDGGHT.DEFAULT\EXTENSIONS\{D10D0BF8-F5B5-C8B4-A8B2-2B9879E08C5D}.XPI
[2012.02.02 20:42:06 | 000,134,104 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2012.02.02 17:54:08 | 000,001,392 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\amazondotcom-de.xml
[2012.02.02 17:54:08 | 000,001,153 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-de.xml
[2012.02.02 17:54:08 | 000,006,805 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\leo_ende_de.xml
[2012.02.02 17:54:08 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-de.xml
 
O1 HOSTS File: ([2012.01.24 19:16:55 | 000,000,098 | ---- | M]) - C:\Windows\System32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1       localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Windows Live Anmelde-Hilfsprogramm) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Windows 7 Starter Helper) - {D381FF29-7CFB-4D4E-B92A-C4EDDC696614} - C:\Programme\Oceanis\SystemSetting\StarterHelper.dll (Oceanis)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [avgnt] C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
O4 - HKLM..\Run: [HP] C:\Programme\Hewlett-Packard\HP QuickSync\QuickSync.exe (Hewlett-Packard)
O4 - HKLM..\Run: [IAAnotif] C:\Programme\Intel\Intel Matrix Storage Manager\IAAnotif.exe (Intel Corporation)
O4 - HKLM..\Run: [SysTrayApp] C:\Programme\IDT\WDM\sttray.exe (IDT, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8 - Extra context menu item: Nach Microsoft E&xel exportieren - C:\Programme\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: In Blog veröffentlichen - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : In Windows Live Writer in Blog veröffentliche&n - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Programme\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Programme\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} hxxp://trial.trymicrosoftoffice.com/trialoaa/buymsoffice_assets/framework/microsoft/wrc32.ocx (WRC Class)
O16 - DPF: {CAFEEFAC-0017-0000-0002-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_02-windows-i586.cab (Java Plug-in 1.7.0_02)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.2.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8F11C8BB-71C2-44B7-BC6F-D474F27A1500}: DhcpNameServer = 192.168.2.1
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Programme\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Programme\Common Files\microsoft shared\Information Retrieval\msitss.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Programme\Windows Live\Messenger\msgrapp.14.0.8089.0726.dll (Microsoft Corporation)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Programme\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKCU Winlogon: Shell - (EXPLORER.EXE) -C:\Windows\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\!SASWinLogon: DllName - (C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL) - C:\Programme\SUPERAntiSpyware\SASWINLO.DLL (SUPERAntiSpyware.com)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Programme\SUPERAntiSpyware\SASSEH.DLL (SuperAdBlocker.com)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.02.09 19:23:00 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\Avira
[2012.02.09 18:59:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
[2012.02.09 18:59:32 | 000,028,520 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\ssmdrv.sys
[2012.02.09 18:59:31 | 000,134,856 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avipbb.sys
[2012.02.09 18:59:31 | 000,074,640 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avgntflt.sys
[2012.02.09 18:59:31 | 000,036,000 | ---- | C] (Avira GmbH) -- C:\Windows\System32\drivers\avkmgr.sys
[2012.02.09 18:59:26 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
[2012.02.09 18:59:26 | 000,000,000 | ---D | C] -- C:\Program Files\Avira
[2012.02.08 19:19:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support
[2012.02.08 19:16:11 | 000,000,000 | ---D | C] -- C:\ProgramData\{A8DA1505-E615-42BB-BB77-74D5CC91FE7E}
[2012.02.06 18:19:09 | 000,000,000 | ---D | C] -- C:\Program Files\VS Revo Group
[2012.02.06 18:19:09 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
[2012.02.06 06:29:21 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2012.02.06 06:29:20 | 003,695,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2012.02.06 06:29:20 | 000,434,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2012.02.06 06:29:20 | 000,367,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2012.02.06 06:29:20 | 000,353,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2012.02.06 06:29:20 | 000,231,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.02.06 06:29:20 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2012.02.06 06:29:20 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.02.06 06:29:20 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2012.02.06 06:29:20 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2012.02.06 06:29:20 | 000,130,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2012.02.06 06:29:20 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2012.02.06 06:29:20 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2012.02.06 06:29:20 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2012.02.06 06:29:20 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2012.02.06 06:29:20 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2012.02.06 06:29:20 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.02.06 06:29:20 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2012.02.06 06:29:20 | 000,041,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2012.02.06 06:29:20 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2012.02.06 06:29:20 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2012.02.06 06:29:19 | 002,382,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.02.06 06:29:19 | 001,798,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.02.06 06:29:19 | 001,427,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.02.06 06:29:19 | 000,580,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012.02.06 06:29:19 | 000,353,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2012.02.06 06:29:19 | 000,227,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2012.02.06 06:29:19 | 000,163,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2012.02.06 06:29:19 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2012.02.06 06:29:19 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2012.02.06 06:29:19 | 000,142,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.02.06 06:29:19 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2012.02.06 06:29:19 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2012.02.06 06:29:19 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2012.02.06 06:29:19 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2012.02.06 06:29:19 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2012.02.06 06:29:19 | 000,023,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2012.02.05 22:58:51 | 000,000,000 | ---D | C] -- C:\Users\Mareike\Desktop\Trojaner-Bekämpfung
[2012.02.03 06:47:28 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2012.02.03 06:46:26 | 000,637,848 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\npdeployJava1.dll
[2012.02.03 06:46:26 | 000,223,112 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012.02.03 06:46:26 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012.02.03 06:46:25 | 000,173,960 | ---- | C] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012.02.03 06:19:59 | 000,000,000 | ---D | C] -- C:\Windows\System32\SPReview
[2012.02.03 06:17:46 | 000,000,000 | ---D | C] -- C:\Windows\System32\EventProviders
[2012.02.03 04:13:43 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\TsUsbFlt.sys
[2012.02.03 04:13:43 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyExtension.dll
[2012.02.03 04:13:36 | 001,171,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10warp.dll
[2012.02.03 04:13:35 | 000,954,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40.dll
[2012.02.03 04:13:35 | 000,954,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfc40u.dll
[2012.02.03 04:13:31 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2012.02.03 04:13:28 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2012.02.03 04:13:27 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2012.02.03 04:13:26 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2012.02.03 04:13:23 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizui.dll
[2012.02.03 04:13:21 | 003,207,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mf.dll
[2012.02.03 04:13:19 | 001,334,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertEnroll.dll
[2012.02.03 04:13:19 | 000,520,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcupdate_GenuineIntel.dll
[2012.02.03 04:13:16 | 000,295,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHost.exe
[2012.02.03 04:13:16 | 000,099,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PresentationHostProxy.dll
[2012.02.03 04:13:13 | 001,115,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RacEngn.dll
[2012.02.03 04:13:11 | 005,066,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AuthFWSnapin.dll
[2012.02.03 04:13:07 | 001,493,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ExplorerFrame.dll
[2012.02.03 04:13:02 | 001,828,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d9.dll
[2012.02.03 04:13:00 | 000,505,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskschd.dll
[2012.02.03 04:12:58 | 000,456,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spinstall.exe
[2012.02.03 04:12:58 | 000,280,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spreview.exe
[2012.02.03 04:12:57 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2012.02.03 04:12:55 | 001,371,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmcore.dll
[2012.02.03 04:12:54 | 000,863,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diagperf.dll
[2012.02.03 04:12:53 | 003,367,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSAT.exe
[2012.02.03 04:12:53 | 000,136,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scavengeui.dll
[2012.02.03 04:12:52 | 000,597,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TSWorkspace.dll
[2012.02.03 04:12:52 | 000,270,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsmf.dll
[2012.02.03 04:12:49 | 002,522,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dbgeng.dll
[2012.02.03 04:12:48 | 000,522,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2012.02.03 04:12:46 | 001,619,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVDECOD.DLL
[2012.02.03 04:12:44 | 000,252,928 | ---- | C] (Microsoft) -- C:\Windows\System32\DShowRdpFilter.dll
[2012.02.03 04:12:43 | 002,151,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mmcndmgr.dll
[2012.02.03 04:12:43 | 000,049,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netfxperf.dll
[2012.02.03 04:12:42 | 000,732,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2fs.dll
[2012.02.03 04:12:42 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2012.02.03 04:12:41 | 001,792,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\authui.dll
[2012.02.03 04:12:41 | 000,974,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppobjs.dll
[2012.02.03 04:12:40 | 000,547,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceApi.dll
[2012.02.03 04:12:40 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mcbuilder.exe
[2012.02.03 04:12:38 | 001,555,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certmgr.dll
[2012.02.03 04:12:38 | 000,508,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winload.exe
[2012.02.03 04:12:37 | 001,712,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\xpsservices.dll
[2012.02.03 04:12:36 | 000,412,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppwinob.dll
[2012.02.03 04:12:35 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmd.exe
[2012.02.03 04:12:33 | 000,206,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedynos.dll
[2012.02.03 04:12:32 | 000,296,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfds.dll
[2012.02.03 04:12:31 | 000,240,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\netio.sys
[2012.02.03 04:12:30 | 002,414,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2012.02.03 04:12:30 | 000,762,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroles.dll
[2012.02.03 04:12:30 | 000,442,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winresume.exe
[2012.02.03 04:12:30 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2012.02.03 04:12:29 | 001,063,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\werconcpl.dll
[2012.02.03 04:12:26 | 000,801,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NaturalLanguage6.dll
[2012.02.03 04:12:26 | 000,508,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2012.02.03 04:12:26 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfreadwrite.dll
[2012.02.03 04:12:26 | 000,144,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basecsp.dll
[2012.02.03 04:12:25 | 000,488,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\evr.dll
[2012.02.03 04:12:25 | 000,305,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskcomp.dll
[2012.02.03 04:12:24 | 000,776,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\calc.exe
[2012.02.03 04:12:24 | 000,335,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSATAPI.dll
[2012.02.03 04:12:23 | 000,778,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlsrv32.dll
[2012.02.03 04:12:22 | 002,983,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbon.dll
[2012.02.03 04:12:22 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnike.dll
[2012.02.03 04:12:21 | 000,477,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpksetup.exe
[2012.02.03 04:12:21 | 000,271,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fveapi.dll
[2012.02.03 04:12:19 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgprint.dll
[2012.02.03 04:12:17 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prncache.dll
[2012.02.03 04:12:16 | 000,458,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSDApi.dll
[2012.02.03 04:12:16 | 000,352,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpeffects.dll
[2012.02.03 04:12:16 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\net1.exe
[2012.02.03 04:12:16 | 000,139,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
[2012.02.03 04:12:15 | 000,690,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ci.dll
[2012.02.03 04:12:15 | 000,321,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aepdu.dll
[2012.02.03 04:12:15 | 000,119,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aitagent.exe
[2012.02.03 04:12:13 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\scansetting.dll
[2012.02.03 04:12:12 | 002,504,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVCORE.DLL
[2012.02.03 04:12:12 | 000,411,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlangpui.dll
[2012.02.03 04:12:12 | 000,213,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MMDevAPI.dll
[2012.02.03 04:12:12 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aaclient.dll
[2012.02.03 04:12:11 | 000,167,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSHVHOST.DLL
[2012.02.03 04:12:11 | 000,101,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\consent.exe
[2012.02.03 04:12:10 | 001,750,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pnidui.dll
[2012.02.03 04:12:10 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\t2embed.dll
[2012.02.03 04:12:09 | 000,782,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webservices.dll
[2012.02.03 04:12:09 | 000,124,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fde.dll
[2012.02.03 04:12:08 | 002,146,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SyncCenter.dll
[2012.02.03 04:12:08 | 000,225,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netdiagfx.dll
[2012.02.03 04:12:08 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbGDCoInstaller.dll
[2012.02.03 04:12:07 | 000,907,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdengin2.dll
[2012.02.03 04:12:07 | 000,560,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2012.02.03 04:12:07 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wscapi.dll
[2012.02.03 04:12:04 | 000,830,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSMPEG2ENC.DLL
[2012.02.03 04:12:04 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcore.dll
[2012.02.03 04:12:03 | 000,392,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imapi2.dll
[2012.02.03 04:12:03 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcl.exe
[2012.02.03 04:12:02 | 000,630,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXPTaskRingtone.dll
[2012.02.03 04:12:02 | 000,302,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\aeinv.dll
[2012.02.03 04:12:01 | 002,576,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\gameux.dll
[2012.02.03 04:12:00 | 001,624,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPEncEn.dll
[2012.02.03 04:12:00 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dwmredir.dll
[2012.02.03 04:11:58 | 000,658,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autofmt.exe
[2012.02.03 04:11:58 | 000,196,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vaultsvc.dll
[2012.02.03 04:11:58 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hbaapi.dll
[2012.02.03 04:11:57 | 002,217,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bootres.dll
[2012.02.03 04:11:57 | 001,077,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Narrator.exe
[2012.02.03 04:11:57 | 000,166,400 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiohlp.dll
[2012.02.03 04:11:57 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe
[2012.02.03 04:11:56 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoconv.exe
[2012.02.03 04:11:56 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AudioSes.dll
[2012.02.03 04:11:56 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halmacpi.dll
[2012.02.03 04:11:56 | 000,194,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hal.dll
[2012.02.03 04:11:56 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\proquota.exe
[2012.02.03 04:11:55 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ipsmsnap.dll
[2012.02.03 04:11:55 | 000,303,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msinfo32.exe
[2012.02.03 04:11:55 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mimefilt.dll
[2012.02.03 04:11:54 | 000,441,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercpl.dll
[2012.02.03 04:11:54 | 000,301,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srchadmin.dll
[2012.02.03 04:11:54 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapphost.dll
[2012.02.03 04:11:54 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\framedyn.dll
[2012.02.03 04:11:54 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tcpipcfg.dll
[2012.02.03 04:11:54 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schtasks.exe
[2012.02.03 04:11:53 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msihnd.dll
[2012.02.03 04:11:52 | 000,155,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscorier.dll
[2012.02.03 04:11:51 | 000,478,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\timedate.cpl
[2012.02.03 04:11:51 | 000,399,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DXP.dll
[2012.02.03 04:11:51 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QAGENT.DLL
[2012.02.03 04:11:51 | 000,117,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netid.dll
[2012.02.03 04:11:49 | 001,227,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdc.dll
[2012.02.03 04:11:48 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\untfs.dll
[2012.02.03 04:11:47 | 001,131,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdclt.exe
[2012.02.03 04:11:47 | 000,933,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Vault.dll
[2012.02.03 04:11:47 | 000,132,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2012.02.03 04:11:47 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nci.dll
[2012.02.03 04:11:46 | 001,326,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanpref.dll
[2012.02.03 04:11:46 | 001,003,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMNetMgr.dll
[2012.02.03 04:11:45 | 000,098,816 | ---- | C] (Microsoft) -- C:\Windows\System32\Robocopy.exe
[2012.02.03 04:11:44 | 001,400,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DxpTaskSync.dll
[2012.02.03 04:11:43 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Display.dll
[2012.02.03 04:11:42 | 000,316,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sharemediacpl.dll
[2012.02.03 04:11:42 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsRasterService.dll
[2012.02.03 04:11:42 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\userinit.exe
[2012.02.03 04:11:41 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\termmgr.dll
[2012.02.03 04:11:41 | 000,324,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\puiobj.dll
[2012.02.03 04:11:40 | 001,188,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DiagCpl.dll
[2012.02.03 04:11:40 | 000,288,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eudcedit.exe
[2012.02.03 04:11:40 | 000,140,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\scsiport.sys
[2012.02.03 04:11:39 | 001,066,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdtctm.dll
[2012.02.03 04:11:39 | 000,127,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logoncli.dll
[2012.02.03 04:11:38 | 000,856,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FirewallControlPanel.dll
[2012.02.03 04:11:38 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\biocpl.dll
[2012.02.03 04:11:38 | 000,416,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiadefui.dll
[2012.02.03 04:11:38 | 000,233,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msconfig.exe
[2012.02.03 04:11:38 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppcomapi.dll
[2012.02.03 04:11:38 | 000,111,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shsetup.dll
[2012.02.03 04:11:36 | 002,157,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\themecpl.dll
[2012.02.03 04:11:36 | 000,766,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpccpl.dll
[2012.02.03 04:11:36 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2012.02.03 04:11:35 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dnscmmc.dll
[2012.02.03 04:11:34 | 000,413,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PhotoScreensaver.scr
[2012.02.03 04:11:34 | 000,312,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\hgcpl.dll
[2012.02.03 04:11:32 | 000,481,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscms.dll
[2012.02.03 04:11:32 | 000,429,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\localsec.dll
[2012.02.03 04:11:32 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mprddm.dll
[2012.02.03 04:11:32 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mscories.dll
[2012.02.03 04:11:31 | 000,600,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\usercpl.dll
[2012.02.03 04:11:31 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2012.02.03 04:11:31 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVolSSO.dll
[2012.02.03 04:11:31 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdsrv.dll
[2012.02.03 04:11:31 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasacct.dll
[2012.02.03 04:11:30 | 000,638,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VAN.dll
[2012.02.03 04:11:30 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PerfCenterCPL.dll
[2012.02.03 04:11:30 | 000,509,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qedit.dll
[2012.02.03 04:11:30 | 000,410,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanui.dll
[2012.02.03 04:11:30 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prntvpt.dll
[2012.02.03 04:11:29 | 001,644,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcenter.dll
[2012.02.03 04:11:29 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SndVol.exe
[2012.02.03 04:11:29 | 000,066,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\w32tm.exe
[2012.02.03 04:11:28 | 003,727,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\accessibilitycpl.dll
[2012.02.03 04:11:28 | 000,352,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizeng.dll
[2012.02.03 04:11:28 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\azroleui.dll
[2012.02.03 04:11:28 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wksprt.exe
[2012.02.03 04:11:27 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ks.sys
[2012.02.03 04:11:27 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fdeploy.dll
[2012.02.03 04:11:26 | 000,516,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\main.cpl
[2012.02.03 04:11:26 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MSAC3ENC.DLL
[2012.02.03 04:11:26 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adsldp.dll
[2012.02.03 04:11:26 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netjoin.dll
[2012.02.03 04:11:25 | 002,130,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\networkmap.dll
[2012.02.03 04:11:25 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Faultrep.dll
[2012.02.03 04:11:25 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wusa.exe
[2012.02.03 04:11:25 | 000,312,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MCEWMDRMNDBootstrap.dll
[2012.02.03 04:11:24 | 000,744,448 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenter.dll
[2012.02.03 04:11:24 | 000,395,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\prnfldr.dll
[2012.02.03 04:11:24 | 000,218,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OnLineIDCpl.dll
[2012.02.03 04:11:23 | 000,755,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sud.dll
[2012.02.03 04:11:23 | 000,266,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MediaMetadataHandler.dll
[2012.02.03 04:11:23 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskbarcpl.dll
[2012.02.03 04:11:22 | 000,389,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysmon.ocx
[2012.02.03 04:11:22 | 000,325,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slui.exe
[2012.02.03 04:11:22 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iprtrmgr.dll
[2012.02.03 04:11:22 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\defaultlocationcpl.dll
[2012.02.03 04:11:22 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrad.dll
[2012.02.03 04:11:22 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorekmts.dll
[2012.02.03 04:11:22 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
[2012.02.03 04:11:22 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2012.02.03 04:11:21 | 000,692,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bthprops.cpl
[2012.02.03 04:11:21 | 000,137,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\halacpi.dll
[2012.02.03 04:11:21 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3cfg.dll
[2012.02.03 04:11:21 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ftp.exe
[2012.02.03 04:11:20 | 000,577,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpd_ci.dll
[2012.02.03 04:11:20 | 000,428,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shwebsvc.dll
[2012.02.03 04:11:20 | 000,345,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\intl.cpl
[2012.02.03 04:11:20 | 000,205,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\efscore.dll
[2012.02.03 04:11:20 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ifsutil.dll
[2012.02.03 04:11:20 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sisbkup.dll
[2012.02.03 04:11:19 | 000,750,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sdcpl.dll
[2012.02.03 04:11:19 | 000,537,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionCenterCPL.dll
[2012.02.03 04:11:19 | 000,135,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recovery.dll
[2012.02.03 04:11:18 | 000,600,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TabletPC.cpl
[2012.02.03 04:11:18 | 000,484,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DeviceCenter.dll
[2012.02.03 04:11:18 | 000,295,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdedit.exe
[2012.02.03 04:11:18 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\autoplay.dll
[2012.02.03 04:11:18 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpwsx.dll
[2012.02.03 04:11:17 | 000,738,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpmde.dll
[2012.02.03 04:11:17 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppnp.dll
[2012.02.03 04:11:16 | 000,859,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OobeFldr.dll
[2012.02.03 04:11:16 | 000,410,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\systemcpl.dll
[2012.02.03 04:11:16 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\recdisc.exe
[2012.02.03 04:11:16 | 000,151,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsutil.dll
[2012.02.03 04:11:16 | 000,068,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WSTPager.ax
[2012.02.03 04:11:15 | 000,656,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
[2012.02.03 04:11:15 | 000,297,472 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntprint.dll
[2012.02.03 04:11:15 | 000,270,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sethc.exe
[2012.02.03 04:11:15 | 000,152,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
[2012.02.03 04:11:15 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcdboot.exe
[2012.02.03 04:11:14 | 000,743,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\blackbox.dll
[2012.02.03 04:11:14 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2012.02.03 04:11:13 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksproxy.ax
[2012.02.03 04:11:13 | 000,182,272 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpsrcwp.dll
[2012.02.03 04:11:13 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPHLPR.DLL
[2012.02.03 04:11:13 | 000,101,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\migisol.dll
[2012.02.03 04:11:13 | 000,093,696 | ---- | C] (Windows (R) Codename Longhorn DDK provider) -- C:\Windows\System32\fms.dll
[2012.02.03 04:11:12 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2012.02.03 04:11:11 | 000,592,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msftedit.dll
[2012.02.03 04:11:11 | 000,346,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshipsec.dll
[2012.02.03 04:11:11 | 000,254,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsqmcons.exe
[2012.02.03 04:11:11 | 000,086,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\isoburn.exe
[2012.02.03 04:11:11 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2012.02.03 04:11:10 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dfrgui.exe
[2012.02.03 04:11:10 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wlanmsm.dll
[2012.02.03 04:11:10 | 000,333,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3ui.dll
[2012.02.03 04:11:10 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgent.dll
[2012.02.03 04:11:10 | 000,222,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wavemsp.dll
[2012.02.03 04:11:10 | 000,164,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2012.02.03 04:11:09 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sysclass.dll
[2012.02.03 04:11:09 | 000,197,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetup.exe
[2012.02.03 04:11:09 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tzutil.exe
[2012.02.03 04:11:08 | 000,444,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wvc.dll
[2012.02.03 04:11:08 | 000,406,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimgapi.dll
[2012.02.03 04:11:06 | 000,206,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qasf.dll
[2012.02.03 04:11:06 | 000,190,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qcap.dll
[2012.02.03 04:11:06 | 000,113,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupugc.exe
[2012.02.03 04:11:06 | 000,051,200 | ---- | C] (Twain Working Group) -- C:\Windows\twain_32.dll
[2012.02.03 04:11:05 | 000,293,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ssText3d.scr
[2012.02.03 04:11:05 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srrstr.dll
[2012.02.03 04:11:05 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\uxlib.dll
[2012.02.03 04:11:05 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\slwga.dll
[2012.02.03 04:11:04 | 000,196,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanconn.dll
[2012.02.03 04:11:04 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciavi32.dll
[2012.02.03 04:11:03 | 000,616,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmsdk.dll
[2012.02.03 04:11:03 | 000,211,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\DevicePairingFolder.dll
[2012.02.03 04:11:03 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nslookup.exe
[2012.02.03 04:11:02 | 000,504,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msscp.dll
[2012.02.03 04:11:02 | 000,327,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wimserv.exe
[2012.02.03 04:11:02 | 000,276,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskraid.exe
[2012.02.03 04:11:01 | 000,402,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drmmgrtn.dll
[2012.02.03 04:11:01 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\input.dll
[2012.02.03 04:11:01 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpencom.dll
[2012.02.03 04:11:01 | 000,157,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfmon.exe
[2012.02.03 04:11:01 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\acppage.dll
[2012.02.03 04:11:00 | 000,292,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgradeResults.exe
[2012.02.03 04:11:00 | 000,174,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ocsetapi.dll
[2012.02.03 04:11:00 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UserAccountControlSettings.dll
[2012.02.03 04:11:00 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\NAPCRYPT.DLL
[2012.02.03 04:10:59 | 001,111,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\onexui.dll
[2012.02.03 04:10:59 | 000,327,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nltest.exe
[2012.02.03 04:10:59 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vpnikeapi.dll
[2012.02.03 04:10:58 | 000,198,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wpdwcn.dll
[2012.02.03 04:10:58 | 000,160,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vdsbas.dll
[2012.02.03 04:10:58 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\bfsvc.exe
[2012.02.03 04:10:58 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\runonce.exe
[2012.02.03 04:10:57 | 000,210,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxdiagn.dll
[2012.02.03 04:10:57 | 000,095,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logagent.exe
[2012.02.03 04:10:52 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eapp3hst.dll
[2012.02.03 04:10:52 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MFPlay.dll
[2012.02.03 04:10:51 | 000,507,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmdev.dll
[2012.02.03 04:10:51 | 000,489,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10level9.dll
[2012.02.03 04:10:51 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\rmcast.sys
[2012.02.03 04:10:51 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PnPUnattend.exe
[2012.02.03 04:10:50 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsadmin.exe
[2012.02.03 04:10:50 | 000,108,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shacct.dll
[2012.02.03 04:10:50 | 000,087,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2012.02.03 04:10:50 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unimdmat.dll
[2012.02.03 04:10:50 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsium.dll
[2012.02.03 04:10:50 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lsmproxy.dll
[2012.02.03 04:10:49 | 000,878,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Bubbles.scr
[2012.02.03 04:10:49 | 000,309,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqlcese30.dll
[2012.02.03 04:10:49 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tabcal.exe
[2012.02.03 04:10:49 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpd3d.dll
[2012.02.03 04:10:48 | 001,160,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OpcServices.dll
[2012.02.03 04:10:48 | 000,350,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WPDSp.dll
[2012.02.03 04:10:48 | 000,183,296 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceSyncProvider.dll
[2012.02.03 04:10:48 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kstvtune.ax
[2012.02.03 04:10:48 | 000,082,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\logman.exe
[2012.02.03 04:10:48 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncryptui.dll
[2012.02.03 04:10:47 | 000,427,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PortableDeviceStatus.dll
[2012.02.03 04:10:47 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Ribbons.scr
[2012.02.03 04:10:47 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFPlatform.dll
[2012.02.03 04:10:47 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MdSched.exe
[2012.02.03 04:10:47 | 000,099,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QSVRMGMT.DLL
[2012.02.03 04:10:47 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\olethk32.dll
[2012.02.03 04:10:47 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\lpremove.exe
[2012.02.03 04:10:47 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\djoin.exe
[2012.02.03 04:10:47 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2012.02.03 04:10:46 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Mystify.scr
[2012.02.03 04:10:46 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ActionQueue.dll
[2012.02.03 04:10:46 | 000,142,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\powercfg.cpl
[2012.02.03 04:10:46 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapistub.dll
[2012.02.03 04:10:46 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mapi32.dll
[2012.02.03 04:10:46 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tsgqec.dll
[2012.02.03 04:10:45 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMADMOD.DLL
[2012.02.03 04:10:45 | 000,318,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMPhoto.dll
[2012.02.03 04:10:45 | 000,115,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dot3msm.dll
[2012.02.03 04:10:45 | 000,098,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fphc.dll
[2012.02.03 04:10:45 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\utildll.dll
[2012.02.03 04:10:44 | 000,541,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMVSDECD.DLL
[2012.02.03 04:10:44 | 000,257,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsAnytimeUpgrade.exe
[2012.02.03 04:10:44 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sqmapi.dll
[2012.02.03 04:10:44 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\VBICodec.ax
[2012.02.03 04:10:44 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiavideo.dll
[2012.02.03 04:10:44 | 000,107,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\Kswdmcap.ax
[2012.02.03 04:10:44 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\takeown.exe
[2012.02.03 04:10:44 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TsUsbRedirectionGroupPolicyControl.exe
[2012.02.03 04:10:43 | 000,436,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmdrmnet.dll
[2012.02.03 04:10:43 | 000,283,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdv.dll
[2012.02.03 04:10:43 | 000,265,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msnetobj.dll
[2012.02.03 04:10:43 | 000,128,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\EhStorAPI.dll
[2012.02.03 04:10:42 | 000,202,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unattend.dll
[2012.02.03 04:10:42 | 000,100,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppinst.dll
[2012.02.03 04:10:42 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\QCLIPROV.DLL
[2012.02.03 04:10:42 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cca.dll
[2012.02.03 04:10:41 | 000,567,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFx.dll
[2012.02.03 04:10:41 | 000,182,784 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RelPost.exe
[2012.02.03 04:10:41 | 000,084,992 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cmstp.exe
[2012.02.03 04:10:41 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MuiUnattend.exe
[2012.02.03 04:10:41 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vfwwdm32.dll
[2012.02.03 04:10:41 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pdhui.dll
[2012.02.03 04:10:40 | 000,739,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WMSPDMOD.DLL
[2012.02.03 04:10:40 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setupcln.dll
[2012.02.03 04:10:40 | 000,051,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsnmp32.dll
[2012.02.03 04:10:40 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\umb.dll
[2012.02.03 04:10:40 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\basesrv.dll
[2012.02.03 04:10:40 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\AzSqlExt.dll
[2012.02.03 04:10:39 | 000,176,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msorcl32.dll
[2012.02.03 04:10:39 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iasrecst.dll
[2012.02.03 04:10:38 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iscsicli.exe
[2012.02.03 04:10:38 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\desk.cpl
[2012.02.03 04:10:38 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wkscli.dll
[2012.02.03 04:10:38 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WavDest.dll
[2012.02.03 04:10:38 | 000,037,888 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\relog.exe
[2012.02.03 04:10:38 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PrintIsolationProxy.dll
[2012.02.03 04:10:38 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netiougc.exe
[2012.02.03 04:10:37 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\diskpart.exe
[2012.02.03 04:10:37 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\amstream.dll
[2012.02.03 04:10:37 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spbcd.dll
[2012.02.03 04:10:36 | 000,158,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\itircl.dll
[2012.02.03 04:10:36 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2012.02.03 04:10:36 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2012.02.03 04:10:36 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MultiDigiMon.exe
[2012.02.03 04:10:36 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netbtugc.exe
[2012.02.03 04:10:36 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nrpsrv.dll
[2012.02.03 04:10:35 | 001,027,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\IMJP10.IME
[2012.02.03 04:10:35 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSTIFF.dll
[2012.02.03 04:10:35 | 000,144,384 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmpps.dll
[2012.02.03 04:10:35 | 000,065,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\CertPolEng.dll
[2012.02.03 04:10:35 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2012.02.03 04:10:35 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ksxbar.ax
[2012.02.03 04:10:35 | 000,014,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\syssetup.dll
[2012.02.03 04:10:34 | 000,278,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2012.02.03 04:10:34 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2012.02.03 04:10:34 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WerFaultSecure.exe
[2012.02.03 04:10:34 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ReAgentc.exe
[2012.02.03 04:10:33 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2012.02.03 04:10:33 | 000,094,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\eappgnui.dll
[2012.02.03 04:10:33 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\tlscsp.dll
[2012.02.03 04:10:33 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\findstr.exe
[2012.02.03 04:10:33 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wiarpc.dll
[2012.02.03 04:10:32 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mciqtz32.dll
[2012.02.03 04:10:32 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\muifontsetup.dll
[2012.02.03 04:10:31 | 000,121,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sppc.dll
[2012.02.03 04:10:31 | 000,082,944 | ---- | C] (Radius Inc.) -- C:\Windows\System32\iccvid.dll
[2012.02.03 04:10:30 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\luainstall.dll
[2012.02.03 04:10:30 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\tdi.sys
[2012.02.03 04:10:30 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spopk.dll
[2012.02.03 04:10:29 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\manage-bde.exe
[2012.02.03 04:10:29 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\repair-bde.exe
[2012.02.03 04:10:29 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\unlodctr.exe
[2012.02.03 04:10:29 | 000,031,744 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdiasqmmodule.dll
[2012.02.03 04:10:29 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdmo.dll
[2012.02.03 04:10:29 | 000,026,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\usbrpm.sys
[2012.02.03 04:10:29 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcfg.exe
[2012.02.03 04:10:28 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetmib1.dll
[2012.02.03 04:10:28 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\g711codc.ax
[2012.02.03 04:10:28 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\vbisurf.ax
[2012.02.03 04:10:28 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdprefdrvapi.dll
[2012.02.03 04:10:27 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WUDFCoinstaller.dll
[2012.02.03 04:10:26 | 001,164,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\UIRibbonRes.dll
[2012.02.03 04:10:26 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\browcli.dll
[2012.02.03 04:10:26 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\odbcconf.dll
[2012.02.03 04:10:26 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\profprov.dll
[2012.02.03 04:10:26 | 000,027,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2012.02.03 04:10:25 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\perfts.dll
[2012.02.03 04:10:23 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FXSMON.dll
[2012.02.03 04:10:23 | 000,022,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\elsTrans.dll
[2012.02.03 04:10:22 | 000,121,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPENCDD.dll
[2012.02.03 04:10:22 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\TRAPI.dll
[2012.02.03 04:10:22 | 000,019,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bitsperf.dll
[2012.02.03 04:10:21 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\napdsnap.dll
[2012.02.03 04:10:21 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dsauth.dll
[2012.02.03 04:10:21 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\schedcli.dll
[2012.02.03 04:10:19 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sscore.dll
[2012.02.03 04:10:18 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\imkr80.ime
[2012.02.03 04:10:18 | 000,036,352 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2012.02.03 04:10:18 | 000,021,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wsdchngr.dll
[2012.02.03 04:10:18 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\riched32.dll
[2012.02.03 04:10:16 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcfgex.dll
[2012.02.03 04:10:14 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wshirda.dll
[2012.02.03 04:10:12 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD2.sys
[2012.02.03 04:10:12 | 000,025,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\USBCAMD.sys
[2012.02.03 04:10:11 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwmp.dll
[2012.02.03 04:10:10 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RDPREFDD.dll
[2012.02.03 04:10:10 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\C_ISCII.DLL
[2012.02.03 04:10:09 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\shunimpl.dll
[2012.02.03 04:10:09 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdxm.ocx
[2012.02.03 04:10:09 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxmasf.dll
[2012.02.03 04:10:06 | 012,625,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmploc.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUS.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDUGHR1.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTURME.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTAJIK.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMON.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDMAORI.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDLT1.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTEL.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINORI.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINKAN.DLL
[2012.02.03 04:10:03 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBULG.DLL
[2012.02.03 04:10:03 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGEO.DLL
[2012.02.03 04:10:02 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSG.DLL
[2012.02.03 04:10:02 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\kbdlk41a.dll
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUQ.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDTUF.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDSF.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDPO.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDNEPR.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINBEN.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGR1.DLL
[2012.02.03 04:10:02 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDGKL.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINTAM.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINMAR.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDINHIN.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBLR.DLL
[2012.02.03 04:10:02 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDBASH.DLL
[2012.02.03 04:10:01 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nlsbres.dll
[2012.02.03 04:10:01 | 000,052,736 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\BlbEvents.dll
[2012.02.03 04:10:01 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\pifmgr.dll
[2012.02.03 04:10:01 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\spwizres.dll
[2012.02.03 04:10:01 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\KBDCZ1.DLL
[2012.02.03 04:10:01 | 000,002,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpnaddr.dll
[2012.02.03 04:09:11 | 000,363,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wbemcomn.dll
[2012.02.03 04:09:10 | 000,351,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wmicmiplugin.dll
[2012.02.03 04:08:55 | 000,697,344 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmiEngine.dll
[2012.02.03 04:08:46 | 000,209,920 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\PkgMgr.exe
[2012.02.03 04:08:46 | 000,189,952 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wdscore.dll
[2012.02.03 04:07:54 | 000,323,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drvstore.dll
[2012.02.03 04:07:53 | 000,257,024 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpx.dll
[2012.02.02 20:03:59 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2012.01.30 21:08:31 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\TuneUp Software
[2012.01.30 20:57:23 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.01.30 20:55:52 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.01.25 23:12:33 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\Malwarebytes
[2012.01.25 23:12:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.01.25 23:11:50 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012.01.24 21:56:32 | 000,000,000 | ---D | C] -- C:\Users\Mareike\AppData\Roaming\SUPERAntiSpyware.com
[2012.01.24 21:55:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
[2012.01.24 21:54:27 | 000,000,000 | ---D | C] -- C:\Program Files\SUPERAntiSpyware
[2012.01.24 21:54:18 | 000,000,000 | ---D | C] -- C:\ProgramData\SUPERAntiSpyware.com
[2012.01.24 20:40:06 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012.01.24 19:02:32 | 000,000,000 | ---D | C] -- C:\_OTL
[2012.01.23 18:54:52 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012.01.23 18:29:45 | 001,328,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2012.01.23 18:29:45 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\qdvd.dll
[2012.01.23 18:29:14 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\packager.dll
[2012.01.23 18:16:11 | 000,314,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll
[2012.01.23 18:15:54 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
 
========== Files - Modified Within 30 Days ==========
 
[2012.02.09 20:04:48 | 000,000,177 | -H-- | M] () -- C:\dvmexp.idx
[2012.02.09 20:02:10 | 000,014,128 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.02.09 20:02:10 | 000,014,128 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.02.09 19:54:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.02.09 19:54:19 | 776,581,120 | -HS- | M] () -- C:\hiberfil.sys
[2012.02.09 18:59:46 | 000,001,940 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.02.08 20:38:16 | 000,000,328 | ---- | M] () -- C:\Windows\tasks\HPCeeScheduleForMareike.job
[2012.02.06 18:19:10 | 000,001,226 | ---- | M] () -- C:\Users\Mareike\Desktop\Revo Uninstaller.lnk
[2012.02.06 06:29:21 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
[2012.02.06 06:29:20 | 003,695,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dat
[2012.02.06 06:29:20 | 000,434,176 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2012.02.06 06:29:20 | 000,367,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2012.02.06 06:29:20 | 000,353,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2012.02.06 06:29:20 | 000,231,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\url.dll
[2012.02.06 06:29:20 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2012.02.06 06:29:20 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2012.02.06 06:29:20 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2012.02.06 06:29:20 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msls31.dll
[2012.02.06 06:29:20 | 000,130,560 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakeng.dll
[2012.02.06 06:29:20 | 000,110,592 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\IEAdvpack.dll
[2012.02.06 06:29:20 | 000,086,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
[2012.02.06 06:29:20 | 000,076,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\SetIEInstalledDate.exe
[2012.02.06 06:29:20 | 000,074,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2012.02.06 06:29:20 | 000,074,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2012.02.06 06:29:20 | 000,072,822 | ---- | M] () -- C:\Windows\System32\ieuinit.inf
[2012.02.06 06:29:20 | 000,065,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2012.02.06 06:29:20 | 000,048,640 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtmler.dll
[2012.02.06 06:29:20 | 000,041,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedsbs.dll
[2012.02.06 06:29:20 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2012.02.06 06:29:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeedssync.exe
[2012.02.06 06:29:19 | 002,382,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2012.02.06 06:29:19 | 001,798,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2012.02.06 06:29:19 | 001,427,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2012.02.06 06:29:19 | 000,580,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2012.02.06 06:29:19 | 000,353,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2012.02.06 06:29:19 | 000,227,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieaksie.dll
[2012.02.06 06:29:19 | 000,163,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieakui.dll
[2012.02.06 06:29:19 | 000,152,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\wextract.exe
[2012.02.06 06:29:19 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iexpress.exe
[2012.02.06 06:29:19 | 000,142,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2012.02.06 06:29:19 | 000,118,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\iepeers.dll
[2012.02.06 06:29:19 | 000,101,888 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\admparse.dll
[2012.02.06 06:29:19 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2012.02.06 06:29:19 | 000,054,272 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\pngfilt.dll
[2012.02.06 06:29:19 | 000,035,840 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\imgutil.dll
[2012.02.06 06:29:19 | 000,023,552 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\licmgr10.dll
[2012.02.05 22:55:59 | 000,659,004 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.02.05 22:55:59 | 000,620,150 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.02.05 22:55:59 | 000,132,542 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.02.05 22:55:59 | 000,108,332 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.02.05 22:49:26 | 000,362,728 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.02.03 06:45:56 | 000,223,112 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaws.exe
[2012.02.03 06:45:56 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe
[2012.02.03 06:45:56 | 000,173,960 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\java.exe
[2012.02.03 06:45:55 | 000,637,848 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\npdeployJava1.dll
[2012.02.03 06:45:55 | 000,567,184 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\deployJava1.dll
[2012.02.03 06:43:57 | 000,152,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\msclmd.dll
[2012.02.03 06:16:20 | 000,414,368 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
[2012.01.27 00:21:24 | 000,237,072 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe
[2012.01.24 21:36:06 | 197,769,965 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.01.24 19:16:55 | 000,000,098 | ---- | M] () -- C:\Windows\System32\drivers\etc\Hosts
[2012.01.14 13:14:24 | 000,007,597 | ---- | M] () -- C:\Users\Mareike\AppData\Local\Resmon.ResmonCfg
 
========== Files Created - No Company Name ==========
 
[2012.02.09 18:59:46 | 000,001,940 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
[2012.02.08 19:34:25 | 000,000,328 | ---- | C] () -- C:\Windows\tasks\HPCeeScheduleForMareike.job
[2012.02.06 18:19:10 | 000,001,226 | ---- | C] () -- C:\Users\Mareike\Desktop\Revo Uninstaller.lnk
[2012.02.06 06:29:20 | 000,072,822 | ---- | C] () -- C:\Windows\System32\ieuinit.inf
[2012.02.03 04:13:08 | 000,146,852 | ---- | C] () -- C:\Windows\System32\systemsf.ebd
[2012.02.03 04:10:24 | 000,010,429 | ---- | C] () -- C:\Windows\System32\ScavengeSpace.xml
[2012.02.03 04:09:59 | 000,105,559 | ---- | C] () -- C:\Windows\System32\RacRules.xml
[2012.01.25 23:11:58 | 000,000,000 | ---- | C] () -- C:\Windows\System32\drivers\mbam.sys
[2012.01.24 20:39:39 | 197,769,965 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012.01.14 13:14:24 | 000,007,597 | ---- | C] () -- C:\Users\Mareike\AppData\Local\Resmon.ResmonCfg
[2011.08.18 15:39:29 | 000,001,025 | ---- | C] () -- C:\Windows\System32\sysprs7.dll
[2011.08.18 15:39:29 | 000,000,205 | ---- | C] () -- C:\Windows\System32\lsprst7.dll
[2011.04.08 12:03:31 | 000,021,840 | ---- | C] () -- C:\Windows\System32\SIntfNT.dll
[2011.04.08 12:03:31 | 000,017,212 | ---- | C] () -- C:\Windows\System32\SIntf32.dll
[2011.04.08 12:03:31 | 000,012,067 | ---- | C] () -- C:\Windows\System32\SIntf16.dll
[2011.04.08 12:01:58 | 000,017,047 | ---- | C] () -- C:\Windows\DIIUnin.dat
[2011.04.02 11:55:22 | 000,001,849 | ---- | C] () -- C:\Users\Mareike\AppData\Roaming\GhostObjGAFix.xml
[2010.10.15 11:03:49 | 000,000,056 | -H-- | C] () -- C:\ProgramData\ezsidmv.dat
[2010.09.30 12:55:24 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2009.12.24 02:05:09 | 000,006,656 | ---- | C] () -- C:\Windows\System32\bcmwlrc.dll
[2009.12.24 01:59:25 | 000,073,728 | ---- | C] () -- C:\Windows\System32\RtNicProp32.dll
[2009.12.24 01:57:33 | 000,000,276 | ---- | C] () -- C:\Windows\System32\RStoneLog2.ini
[2009.12.24 01:57:33 | 000,000,217 | ---- | C] () -- C:\Windows\System32\RStoneLog.ini
[2009.11.21 05:48:09 | 000,659,004 | ---- | C] () -- C:\Windows\System32\perfh007.dat
[2009.11.21 05:48:09 | 000,295,922 | ---- | C] () -- C:\Windows\System32\perfi007.dat
[2009.11.21 05:48:09 | 000,132,542 | ---- | C] () -- C:\Windows\System32\perfc007.dat
[2009.11.21 05:48:09 | 000,038,104 | ---- | C] () -- C:\Windows\System32\perfd007.dat
[2009.09.27 13:49:50 | 000,362,029 | ---- | C] () -- C:\Windows\System32\sqlite3.dll
[2009.07.14 05:57:37 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
[2009.07.14 05:33:53 | 000,362,728 | ---- | C] () -- C:\Windows\System32\FNTCACHE.DAT
[2009.07.14 03:05:48 | 000,620,150 | ---- | C] () -- C:\Windows\System32\perfh009.dat
[2009.07.14 03:05:48 | 000,291,294 | ---- | C] () -- C:\Windows\System32\perfi009.dat
[2009.07.14 03:05:48 | 000,108,332 | ---- | C] () -- C:\Windows\System32\perfc009.dat
[2009.07.14 03:05:48 | 000,031,548 | ---- | C] () -- C:\Windows\System32\perfd009.dat
[2009.07.14 03:05:05 | 000,000,741 | ---- | C] () -- C:\Windows\System32\NOISE.DAT
[2009.07.14 03:04:11 | 000,215,943 | ---- | C] () -- C:\Windows\System32\dssec.dat
[2009.07.14 00:55:01 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
[2009.07.14 00:51:43 | 000,073,728 | ---- | C] () -- C:\Windows\System32\BthpanContextHandler.dll
[2009.07.14 00:42:10 | 000,064,000 | ---- | C] () -- C:\Windows\System32\BWContextHandler.dll
[2009.07.13 23:09:19 | 001,498,564 | ---- | C] () -- C:\Windows\System32\igkrng400.bin
[2009.06.10 22:26:10 | 000,673,088 | ---- | C] () -- C:\Windows\System32\mlang.dat
 
========== LOP Check ==========
 
[2010.11.14 17:16:01 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\Auslogics
[2010.11.13 20:22:05 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\OpenOffice.org
[2012.01.30 21:08:31 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\TuneUp Software
[2010.11.18 21:43:53 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\WildTangent
[2011.07.16 10:12:04 | 000,000,000 | ---D | M] -- C:\Users\Mareike\AppData\Roaming\ZumoDrive
[2011.10.31 14:12:02 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >

--- --- ---

Netbook seeehr langsam, Windows-Update funktioniert nicht

Log-Analyse und Auswertung: Netbook seeehr langsam, Windows-Update funktioniert nicht