S.M.A.R.T HDD Virus ODT log

OTL logfile created on: 14.04.2012 19:31:28 - Run 2
OTL by OldTimer - Version 3.2.39.2     Folder = C:\Users\Christopher\Downloads
 Home Premium Edition  (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C07 | Country: Österreich | Language: DEA | Date Format: dd.MM.yyyy
 
3,25 Gb Total Physical Memory | 2,03 Gb Available Physical Memory | 62,62% Memory free
6,50 Gb Paging File | 5,09 Gb Available in Paging File | 78,34% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 69,32 Gb Total Space | 9,77 Gb Free Space | 14,09% Space Free | Partition Type: NTFS
Drive D: | 518,05 Gb Total Space | 379,59 Gb Free Space | 73,27% Space Free | Partition Type: NTFS
 
Computer Name: FAMILIEN-PC | User Name: Christopher | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.04.14 18:55:46 | 000,593,920 | ---- | M] (OldTimer Tools) -- C:\Users\Christopher\Downloads\OTL.exe
PRC - [2012.02.29 22:58:46 | 000,857,408 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
PRC - [2012.02.29 22:58:36 | 001,820,480 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2012.02.29 14:26:46 | 000,382,272 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
PRC - [2011.10.07 13:15:42 | 000,453,400 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPointG\SetPointII.exe
PRC - [2011.10.07 11:40:42 | 001,387,288 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Logitech\SetPointP\SetPoint.exe
PRC - [2011.09.27 21:05:24 | 000,149,784 | ---- | M] (Logitech, Inc.) -- C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
PRC - [2011.02.26 07:33:07 | 002,614,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2010.07.28 11:33:18 | 001,167,360 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Program Files\SITECOM\150N USB Wireless LAN Utility\RtWLan.exe
PRC - [2010.06.15 01:10:30 | 000,153,672 | ---- | M] (Logitech Inc.) -- C:\Program Files\Logitech\Gaming Software\LWEMon.exe
PRC - [2010.05.28 08:25:04 | 000,233,472 | ---- | M] (Teruten) -- C:\Windows\System32\FsUsbExService.Exe
PRC - [2010.05.25 08:44:30 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) -- C:\Windows\System32\dgdersvc.exe
PRC - [2010.04.17 09:10:58 | 000,036,864 | ---- | M] (Realtek) -- C:\Program Files\SITECOM\150N USB Wireless LAN Utility\RtlService.exe
PRC - [2009.02.10 18:01:49 | 000,116,104 | ---- | M] () -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe
PRC - [2009.01.19 13:14:00 | 000,186,664 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\WTablet\Pen_TabletUser.exe
PRC - [2009.01.19 13:13:00 | 002,789,160 | ---- | M] (Wacom Technology, Corp.) -- C:\Windows\System32\Pen_Tablet.exe
PRC - [2008.05.28 16:06:02 | 006,144,000 | ---- | M] (Realtek Semiconductor) -- C:\Windows\RtHDVCpl.exe
PRC - [2008.04.25 14:23:36 | 000,303,104 | ---- | M] (Fujitsu Siemens Computers) -- C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe
PRC - [2007.03.20 17:43:50 | 000,315,392 | ---- | M] () -- C:\Windows\System32\ATWTUSB.EXE
PRC - [2006.11.02 20:40:12 | 000,174,656 | ---- | M] () -- C:\Windows\System32\PSIService.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.02.20 21:29:04 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012.02.20 21:28:42 | 001,242,472 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2011.10.07 11:41:16 | 000,879,896 | ---- | M] () -- C:\Program Files\Logitech\SetPointP\Macros\MacroCore.dll
MOD - [2011.03.27 22:11:04 | 000,094,208 | ---- | M] () -- D:\Programme\FileZilla FTP Client\fzshellext.dll
MOD - [2007.08.18 01:36:28 | 000,013,312 | ---- | M] () -- C:\Program Files\Roxio\Virtual Drive 10\1031\DC_ShellExt.loc
MOD - [2007.03.20 17:43:50 | 000,315,392 | ---- | M] () -- C:\Windows\System32\ATWTUSB.EXE
 
 
========== Win32 Services (SafeList) ==========
 
SRV - File not found [Disabled | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe -- (TuneUp.Defrag)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatch10.exe -- (RoxWatch10)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe -- (RoxMediaDB10)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxLiveShare10.exe -- (RoxLiveShare10)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Roxio\Digital Home 10\RoxioUpnpService10.exe -- (Roxio Upnp Server 10)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Roxio\Digital Home 10\RoxioUPnPRenderer10.exe -- (Roxio UPnP Renderer 10)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Norman\npm\bin\nvoy.exe -- (NVOY)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Norman\Npm\bin\NVCSCHED.EXE -- (NVCScheduler)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Norman\Npm\Bin\Zanda.exe -- (Norman ZANDA)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Norman\Npm\bin\NJEEVES.EXE -- (Norman NJeeves)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\Norman\Npm\Bin\Elogsvc.exe -- (eLoggerSvc6)
SRV - [2012.04.14 17:36:11 | 000,253,088 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.04.04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Stopped] -- D:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012.03.01 01:59:00 | 002,348,352 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe -- (nvUpdatusService)
SRV - [2012.02.29 14:26:46 | 000,382,272 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service)
SRV - [2012.02.15 14:30:18 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2011.09.27 21:03:28 | 000,295,192 | ---- | M] (Logitech, Inc.) [On_Demand | Stopped] -- C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe -- (LBTServ)
SRV - [2011.03.16 11:42:06 | 000,407,336 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2010.06.25 09:07:39 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2010.05.28 08:25:04 | 000,233,472 | ---- | M] (Teruten) [Auto | Running] -- C:\Windows\System32\FsUsbExService.Exe -- (FsUsbExService)
SRV - [2010.05.25 08:44:30 | 000,095,568 | ---- | M] (Devguru Co., Ltd.) [Auto | Running] -- C:\Windows\System32\dgdersvc.exe -- (dgdersvc)
SRV - [2010.04.17 09:10:58 | 000,036,864 | ---- | M] (Realtek) [Auto | Running] -- C:\Program Files\SITECOM\150N USB Wireless LAN Utility\RtlService.exe -- (Realtek11nSU)
SRV - [2009.11.13 10:24:42 | 000,030,024 | ---- | M] (TuneUp Software) [Disabled | Stopped] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp)
SRV - [2009.07.14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009.07.14 03:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009.07.05 10:30:16 | 000,655,624 | ---- | M] (Acresso Software Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe -- (FLEXnet Licensing Service)
SRV - [2009.02.10 18:01:49 | 000,116,104 | ---- | M] () [Auto | Running] -- C:\Program Files\Canon\IJPLM\ijplmsvc.exe -- (IJPLMSVC)
SRV - [2009.01.19 13:13:00 | 002,789,160 | ---- | M] (Wacom Technology, Corp.) [Auto | Running] -- C:\Windows\System32\Pen_Tablet.exe -- (TabletServicePen)
SRV - [2008.04.25 14:23:36 | 000,303,104 | ---- | M] (Fujitsu Siemens Computers) [Auto | Running] -- C:\Program Files\Fujitsu Siemens Computers\SystemDiagnostics\OnlineDiagnostic\TestManager\TestHandler.exe -- (TestHandler)
SRV - [2006.11.02 20:40:12 | 000,174,656 | ---- | M] () [Auto | Running] -- C:\Windows\System32\PSIService.exe -- (ProtexisLicensing)
SRV - [2004.02.26 09:52:00 | 000,049,152 | ---- | M] (Ulead Systems, Inc.) [Disabled | Stopped] -- C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- (UleadBurningHelper)
 
 
========== Driver Services (SafeList) ==========
 
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - File not found [File_System | On_Demand | Stopped] -- C:\Windows\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\Windows\system32\drivers\EagleNT.sys -- (EagleNT)
DRV - [2012.03.01 01:59:00 | 010,819,392 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2012.01.17 14:45:56 | 000,148,800 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2011.09.02 08:31:28 | 000,039,192 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LMouFilt.Sys -- (LMouFilt)
DRV - [2011.09.02 08:31:20 | 000,041,240 | ---- | M] (Logitech, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\LHidFilt.Sys -- (LHidFilt)
DRV - [2011.03.18 18:08:54 | 000,025,240 | ---- | M] (Almico Software) [Kernel | Boot | Running] -- C:\Windows\System32\speedfan.sys -- (speedfan)
DRV - [2010.11.24 23:59:16 | 000,603,240 | ---- | M] (Realtek Semiconductor Corporation                           ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\rtl8192su.sys -- (RTL8192su)
DRV - [2010.05.28 08:25:04 | 000,036,608 | ---- | M] () [Kernel | On_Demand | Running] -- C:\Windows\System32\FsUsbExDisk.Sys -- (FsUsbExDisk)
DRV - [2010.05.25 09:59:24 | 000,121,576 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2010.05.25 09:59:24 | 000,098,152 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadserd.sys -- (ssadserd) SAMSUNG Android USB Diagnostic Serial Port (WDM)
DRV - [2010.05.25 09:59:24 | 000,096,488 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus) SAMSUNG Android USB Composite Device driver (WDM)
DRV - [2010.05.25 09:59:24 | 000,030,312 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadadb.sys -- (androidusb)
DRV - [2010.05.25 09:59:24 | 000,012,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl) SAMSUNG Android USB Modem (Filter)
DRV - [2010.05.25 08:44:30 | 000,018,136 | ---- | M] (Devguru Co., Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - [2010.04.28 01:57:28 | 000,066,632 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmXlCore.sys -- (WmXlCore)
DRV - [2010.04.28 01:57:28 | 000,015,048 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmVirHid.sys -- (WmVirHid)
DRV - [2010.04.28 01:57:22 | 000,022,856 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WmBEnum.sys -- (WmBEnum)
DRV - [2010.04.27 23:01:26 | 000,037,704 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WmFilter.sys -- (WmFilter)
DRV - [2010.02.22 10:06:42 | 000,009,216 | ---- | M] (MBB Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\massfilter.sys -- (massfilter)
DRV - [2009.12.07 20:53:18 | 000,103,168 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbmdm.sys -- (hwdatacard)
DRV - [2009.12.07 20:36:48 | 000,201,168 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbnet.sys -- (ewusbnet)
DRV - [2009.10.21 02:20:34 | 000,089,648 | ---- | M] (Philips Applied Technologies) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\phaudlwr.sys -- (phaudlwr)
DRV - [2009.10.12 16:22:56 | 000,101,120 | ---- | M] (Huawei Technologies Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ewusbdev.sys -- (hwusbdev)
DRV - [2009.07.14 01:53:40 | 000,117,248 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST)
DRV - [2009.07.14 01:52:10 | 000,014,336 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vwifimp.sys -- (vwifimp)
DRV - [2009.07.14 01:51:11 | 000,034,944 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009.07.14 00:02:53 | 000,545,792 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netr73.sys -- (netr73)
DRV - [2009.03.18 18:35:40 | 000,026,176 | ---- | M] (LogMeIn, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\hamachi.sys -- (hamachi)
DRV - [2009.01.19 20:31:56 | 000,277,544 | ---- | M] (Protect Software GmbH) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\acedrv11.sys -- (acedrv11)
DRV - [2008.10.06 13:53:00 | 000,015,656 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wacmoumonitor.sys -- (wacmoumonitor)
DRV - [2008.08.18 17:45:00 | 000,013,352 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacomvhid.sys -- (wacomvhid)
DRV - [2008.05.29 15:44:52 | 000,014,352 | ---- | M] (ATI Technologies Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie) ATI PCI Express (3GIO)
DRV - [2008.05.27 13:55:54 | 000,173,576 | ---- | M] (AMD Technologies Inc.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\ahcix86s.sys -- (ahcix86s)
DRV - [2008.05.21 15:30:28 | 000,486,912 | ---- | M] (                                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SPC530.sys -- (SPC530)
DRV - [2008.05.21 15:30:28 | 000,007,680 | ---- | M] (                                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\SPC530m.sys -- (SPC530m)
DRV - [2008.05.02 13:59:40 | 000,122,368 | ---- | M] (Realtek Corporation                                            ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtlh86.sys -- (RTL8169)
DRV - [2008.04.03 14:58:46 | 000,076,688 | ---- | M] (JMicron Technology Corp.) [Kernel | Disabled | Stopped] -- C:\Windows\System32\drivers\jraid.sys -- (JRAID)
DRV - [2007.10.11 21:40:14 | 000,010,632 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\amdide.sys -- (amdide)
DRV - [2007.08.18 03:09:04 | 000,057,328 | ---- | M] (Sonic Solutions) [File_System | Disabled | Stopped] -- C:\Windows\System32\drivers\RxFilter.sys -- (RxFilter)
DRV - [2007.08.18 01:34:34 | 000,252,152 | ---- | M] (Sonic Solutions) [Kernel | System | Running] -- C:\Windows\System32\drivers\C2SCSI.SYS -- (c2scsi)
DRV - [2007.02.16 12:12:00 | 000,011,312 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\wacommousefilter.sys -- (wacommousefilter)
DRV - [2007.02.15 17:11:00 | 000,011,440 | ---- | M] (Wacom Technology) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\WacomVKHid.sys -- (WacomVKHid)
DRV - [2006.07.24 16:05:00 | 000,005,632 | ---- | M] () [File_System | System | Running] -- C:\Windows\System32\drivers\StarOpen.sys -- (StarOpen)
DRV - [2005.11.09 16:44:48 | 000,024,288 | ---- | M] (Alpha Networks Inc.) [Kernel | Auto | Running] -- C:\Windows\System32\ANIO.sys -- (ANIO)
DRV - [2005.11.03 21:39:02 | 000,245,504 | ---- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Dr71WU.sys -- (RT73)
DRV - [1996.04.03 21:33:26 | 000,005,248 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\giveio.sys -- (giveio)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - SOFTWARE\Classes\CLSID\{872b5b88-9db5-4310-bdd0-ac189557e5f5}\InprocServer32 File not found
IE - HKLM\..\URLSearchHook: {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - SOFTWARE\Classes\CLSID\{e9911ec6-1bcc-40b0-9993-e0eea7f6953f}\InprocServer32 File not found
IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
 
 
 
 
 
 
IE - HKU\S-1-5-21-942126-2589959228-4272655218-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve
IE - HKU\S-1-5-21-942126-2589959228-4272655218-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.at/
IE - HKU\S-1-5-21-942126-2589959228-4272655218-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-942126-2589959228-4272655218-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-942126-2589959228-4272655218-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
IE - HKU\S-1-5-21-942126-2589959228-4272655218-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKU\S-1-5-21-942126-2589959228-4272655218-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local
 
 
========== FireFox ==========
 
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=:  File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.116.0: C:\Program Files\Battlelog Web Plugins\1.116.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=1.118.0: C:\Program Files\Battlelog Web Plugins\1.118.0\npesnlaunch.dll (ESN Social Software AB)
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Christopher\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Christopher\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Christopher\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
 
 
 
O1 HOSTS File: ([2009.07.05 10:25:28 | 000,000,794 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1       localhost
O1 - Hosts: ::1             localhost
O1 - Hosts: 127.0.0.1				activate.adobe.com
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\tbDVDV.dll File not found
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (DVDVideoSoft Toolbar) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll File not found
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files\DVDVideoSoftTB\tbDVDV.dll File not found
O3 - HKLM\..\Toolbar: (DVDVideoSoft Toolbar) - {e9911ec6-1bcc-40b0-9993-e0eea7f6953f} - C:\Program Files\DVDVideoSoft\tbDVDV.dll File not found
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKU\S-1-5-21-942126-2589959228-4272655218-1000\..\Toolbar\WebBrowser: (no name) - {7A5F72D2-9BBF-443F-9D35-26FC7E858E77} - No CLSID value found.
O3 - HKU\S-1-5-21-942126-2589959228-4272655218-1000\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files\DVDVideoSoftTB\tbDVDV.dll File not found
O3 - HKU\S-1-5-21-942126-2589959228-4272655218-1000\..\Toolbar\WebBrowser: (DVDVideoSoft Toolbar) - {E9911EC6-1BCC-40B0-9993-E0EEA7F6953F} - C:\Program Files\DVDVideoSoft\tbDVDV.dll File not found
O4 - HKLM..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe (Alpha Networks Inc.)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [atwtusb] C:\Windows\System32\ATWTUSB.EXE ()
O4 - HKLM..\Run: [CanonSolutionMenu] C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe (CANON INC.)
O4 - HKLM..\Run: [EvtMgr6] C:\Program Files\Logitech\SetPointP\SetPoint.exe (Logitech, Inc.)
O4 - HKLM..\Run: [FSCRecovery] c:\Program Files\Fujitsu Siemens Computers\Fujitsu Siemens Computers Recovery\FSCRecoveryReminder.exe (Fujitsu Siemens Computers GmbH)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] D:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [Norman ZANDA] "C:\Program Files\Norman\Npm\bin\ZLH.EXE" /LOAD /SPLASH File not found
O4 - HKLM..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxWatchTray10.exe" File not found
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [Start WingMan Profiler] C:\Program Files\Logitech\Gaming Software\LWEMon.exe (Logitech Inc.)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-942126-2589959228-4272655218-1000\Software\Policies\Microsoft\Internet Explorer\Recovery present
O7 - HKU\S-1-5-21-942126-2589959228-4272655218-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-942126-2589959228-4272655218-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: LogonHoursAction = 2
O7 - HKU\S-1-5-21-942126-2589959228-4272655218-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DontDisplayLogonHoursWarnings = 1
O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O16 - DPF: {0067DBFC-A752-458C-AE6E-B9C7E63D4824} hxxp://www.logitech.com/devicedetector/plugins/LogitechDeviceDetection32.cab (Geräteerkennung)
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab (Shockwave ActiveX Control)
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262F} hxxp://www.nvidia.com/content/DriverDownload/srl/3.0.0.4/srl_bin/sysreqlab_nvd.cab (System Requirements Lab Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-0016-0000-0025-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_25-windows-i586.cab (Java Plug-in 1.6.0_25)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{875C0B25-57BA-4D01-9AC4-A7570CBA5297}: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - Winlogon\Notify\LBTWlgn: DllName - (c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll) - c:\Program Files\Common Files\Logishrd\Bluetooth\LBTWLgn.dll (Logitech, Inc.)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O24 - Desktop WallPaper: C:\Users\Christopher\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O24 - Desktop BackupWallPaper: C:\Users\Christopher\AppData\Roaming\Microsoft\Internet Explorer\Internet Explorer Wallpaper.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009.06.10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O33 - MountPoints2\{14c4f423-68c4-11de-82c9-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{14c4f423-68c4-11de-82c9-806e6f6e6963}\Shell\AutoRun\command - "" = E:\Setup.exe
O33 - MountPoints2\{2ecba55b-aa26-11e0-8b11-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{2ecba55b-aa26-11e0-8b11-002185fbc14f}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{2f9341e5-ffeb-11e0-8e2a-001e101f82a0}\Shell - "" = AutoRun
O33 - MountPoints2\{2f9341e5-ffeb-11e0-8e2a-001e101f82a0}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{32db9cdd-42a1-11e0-8095-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{32db9cdd-42a1-11e0-8095-002185fbc14f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{33ceb440-9fbd-11df-aa45-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{33ceb440-9fbd-11df-aa45-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{33ceb44c-9fbd-11df-aa45-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{33ceb44c-9fbd-11df-aa45-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{33ceb458-9fbd-11df-aa45-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{33ceb458-9fbd-11df-aa45-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{34519137-3145-11e0-aa57-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{34519137-3145-11e0-aa57-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{34519145-3145-11e0-aa57-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{34519145-3145-11e0-aa57-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{34519150-3145-11e0-aa57-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{34519150-3145-11e0-aa57-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{3451916b-3145-11e0-aa57-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{3451916b-3145-11e0-aa57-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{34519178-3145-11e0-aa57-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{34519178-3145-11e0-aa57-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{34e35eca-29e2-11df-85cc-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{34e35eca-29e2-11df-85cc-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{34e35ecd-29e2-11df-85cc-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{34e35ecd-29e2-11df-85cc-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{448c03c1-43e3-11df-8d8b-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{448c03c1-43e3-11df-8d8b-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{599080f4-02d7-11e1-a623-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{599080f4-02d7-11e1-a623-002185fbc14f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{75ce56ef-3843-11e0-bbf7-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{75ce56ef-3843-11e0-bbf7-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{76b679cd-3060-11df-974d-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{76b679cd-3060-11df-974d-002185fbc14f}\Shell\AutoRun\command - "" = M:\AutoRun.exe
O33 - MountPoints2\{76b679cf-3060-11df-974d-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{76b679cf-3060-11df-974d-002185fbc14f}\Shell\AutoRun\command - "" = M:\AutoRun.exe
O33 - MountPoints2\{7b59305d-2f83-11df-ab2a-001167ca6ef4}\Shell - "" = AutoRun
O33 - MountPoints2\{7b59305d-2f83-11df-ab2a-001167ca6ef4}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7b593060-2f83-11df-ab2a-001167ca6ef4}\Shell - "" = AutoRun
O33 - MountPoints2\{7b593060-2f83-11df-ab2a-001167ca6ef4}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7b593075-2f83-11df-ab2a-001167ca6ef4}\Shell - "" = AutoRun
O33 - MountPoints2\{7b593075-2f83-11df-ab2a-001167ca6ef4}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7b593076-2f83-11df-ab2a-001167ca6ef4}\Shell - "" = AutoRun
O33 - MountPoints2\{7b593076-2f83-11df-ab2a-001167ca6ef4}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{7b59307f-2f83-11df-ab2a-001167ca6ef4}\Shell - "" = AutoRun
O33 - MountPoints2\{7b59307f-2f83-11df-ab2a-001167ca6ef4}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7b5930a3-2f83-11df-ab2a-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{7b5930a3-2f83-11df-ab2a-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{7b5930a6-2f83-11df-ab2a-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{7b5930a6-2f83-11df-ab2a-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{814061fe-315b-11e0-904c-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{814061fe-315b-11e0-904c-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{8a3b4b29-a24a-11e0-8da4-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{8a3b4b29-a24a-11e0-8da4-002185fbc14f}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{8d509f48-a313-11e0-8e65-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{8d509f48-a313-11e0-8e65-002185fbc14f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{94776ecf-cfb7-11df-b924-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{94776ecf-cfb7-11df-b924-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{94776ed8-cfb7-11df-b924-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{94776ed8-cfb7-11df-b924-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{94776ee5-cfb7-11df-b924-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{94776ee5-cfb7-11df-b924-002185fbc14f}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\{94776ef4-cfb7-11df-b924-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{94776ef4-cfb7-11df-b924-002185fbc14f}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{ab8d894e-abb6-11e0-8adb-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{ab8d894e-abb6-11e0-8adb-002185fbc14f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{ae1b492c-3077-11e0-b972-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{ae1b492c-3077-11e0-b972-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{ae1b492f-3077-11e0-b972-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{ae1b492f-3077-11e0-b972-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{b7d61300-3f5a-11e1-afe5-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{b7d61300-3f5a-11e1-afe5-002185fbc14f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{bed1277d-3f70-11e0-80a7-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{bed1277d-3f70-11e0-80a7-002185fbc14f}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{c5b46bfb-3127-11e0-b3ae-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{c5b46bfb-3127-11e0-b3ae-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{c5b46c04-3127-11e0-b3ae-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{c5b46c04-3127-11e0-b3ae-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{c5b46c1c-3127-11e0-b3ae-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{c5b46c1c-3127-11e0-b3ae-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{e3711333-7df4-11de-9db1-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{e3711333-7df4-11de-9db1-002185fbc14f}\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\{e6b4d1e2-3108-11e0-ba71-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{e6b4d1e2-3108-11e0-ba71-002185fbc14f}\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\{ed415f2c-464b-11df-b8b3-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{ed415f2c-464b-11df-b8b3-002185fbc14f}\Shell\AutoRun\command - "" = M:\AutoRun.exe
O33 - MountPoints2\{f299ea78-a006-11e0-b537-001e101f8924}\Shell - "" = AutoRun
O33 - MountPoints2\{f299ea78-a006-11e0-b537-001e101f8924}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{f4c23ccb-37d7-11e1-85de-002185fbc14f}\Shell - "" = AutoRun
O33 - MountPoints2\{f4c23ccb-37d7-11e1-85de-002185fbc14f}\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\{ffa43d4a-6971-11de-a824-806e6f6e6963}\Shell - "" = AutoRun
O33 - MountPoints2\{ffa43d4a-6971-11de-a824-806e6f6e6963}\Shell\AutoRun\command - "" = F:\AutoRun.exe
O33 - MountPoints2\E\Shell - "" = AutoRun
O33 - MountPoints2\E\Shell\AutoRun\command - "" = E:\ZToolBar.exe
O33 - MountPoints2\G\Shell - "" = AutoRun
O33 - MountPoints2\G\Shell\AutoRun\command - "" = G:\AutoRun.exe
O33 - MountPoints2\K\Shell - "" = AutoRun
O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\AutoRun.exe
O33 - MountPoints2\L\Shell - "" = AutoRun
O33 - MountPoints2\L\Shell\AutoRun\command - "" = L:\AutoRun.exe
O33 - MountPoints2\M\Shell - "" = AutoRun
O33 - MountPoints2\M\Shell\AutoRun\command - "" = M:\AutoRun.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.04.14 18:45:31 | 000,399,264 | ---- | C] (Bleeping Computer, LLC) -- C:\Users\Christopher\Desktop\unhide.exe
[2012.04.14 18:14:40 | 000,000,000 | ---D | C] -- C:\Users\Christopher\AppData\Roaming\Malwarebytes
[2012.04.14 18:14:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012.04.14 18:14:28 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012.04.14 17:56:16 | 000,000,000 | ---D | C] -- C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SMART HDD
[2012.04.14 17:52:26 | 000,000,000 | ---D | C] -- C:\Users\Christopher\Desktop\nw ref
[2012.04.07 10:29:36 | 000,000,000 | ---D | C] -- C:\Users\Christopher\AppData\Local\Apple Computer
[2012.04.07 10:29:35 | 000,000,000 | ---D | C] -- C:\Users\Christopher\AppData\Roaming\Apple Computer
[2012.04.07 10:29:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012.04.07 10:29:13 | 000,000,000 | ---D | C] -- C:\Windows\System32\DRVSTORE
[2012.04.07 10:28:17 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012.04.07 10:28:17 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012.04.07 10:28:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer
[2012.04.07 10:28:17 | 000,000,000 | ---D | C] -- C:\ProgramData\{429CAD59-35B1-4DBC-BB6D-1DB246563521}
[2012.04.07 10:27:36 | 000,000,000 | ---D | C] -- C:\Users\Christopher\AppData\Local\Apple
[2012.04.07 10:27:34 | 000,000,000 | ---D | C] -- C:\Program Files\Apple Software Update
[2012.04.07 10:27:15 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2012.04.07 10:27:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple
[2012.04.07 10:27:00 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Apple
[2012.04.07 10:24:40 | 000,000,000 | ---D | C] -- C:\Users\Christopher\Documents\Rainmeter
[2012.04.07 10:24:40 | 000,000,000 | ---D | C] -- C:\Users\Christopher\AppData\Roaming\Rainmeter
[2012.04.07 10:24:36 | 000,000,000 | ---D | C] -- C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rainmeter
[2012.03.25 15:27:43 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip
[2012.03.25 15:27:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
[2012.03.23 19:18:23 | 000,000,000 | ---D | C] -- C:\Users\Christopher\AppData\Roaming\wargaming.net
[2012.03.23 19:18:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Tanks
[2012.03.19 15:42:49 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
[2012.03.19 15:41:01 | 000,061,248 | ---- | C] (Khronos Group) -- C:\Windows\System32\OpenCL.dll
[2011.01.04 11:37:52 | 000,047,360 | ---- | C] (VSO Software) -- C:\Users\Christopher\AppData\Roaming\pcouffin.sys
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Users\Christopher\*.tmp files -> C:\Users\Christopher\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.04.14 19:03:02 | 000,001,144 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-942126-2589959228-4272655218-1000UA.job
[2012.04.14 18:56:01 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.04.14 18:48:02 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.04.14 18:45:15 | 000,399,264 | ---- | M] (Bleeping Computer, LLC) -- C:\Users\Christopher\Desktop\unhide.exe
[2012.04.14 18:30:53 | 000,015,120 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.04.14 18:30:53 | 000,015,120 | ---- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.04.14 18:23:56 | 000,001,104 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.04.14 18:23:41 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.04.14 18:23:34 | 2616,696,832 | -HS- | M] () -- C:\hiberfil.sys
[2012.04.14 18:14:29 | 000,000,760 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.04.14 18:03:22 | 000,000,256 | ---- | M] () -- C:\ProgramData\KAqrhr6E5yneA3
[2012.04.14 18:00:21 | 000,000,168 | ---- | M] () -- C:\ProgramData\-KAqrhr6E5yneA3r
[2012.04.14 18:00:21 | 000,000,000 | ---- | M] () -- C:\ProgramData\-KAqrhr6E5yneA3
[2012.04.14 17:56:07 | 000,244,224 | ---- | M] ( ) -- C:\ProgramData\KAqrhr6E5yneA3.exe
[2012.04.14 14:23:55 | 000,140,800 | ---- | M] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2012.04.14 14:23:47 | 000,283,304 | ---- | M] () -- C:\Windows\System32\PnkBstrB.xtr
[2012.04.14 14:23:35 | 000,280,904 | ---- | M] () -- C:\Windows\System32\PnkBstrB.ex0
[2012.04.11 20:15:31 | 000,001,092 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-942126-2589959228-4272655218-1000Core.job
[2012.04.09 17:01:30 | 002,418,712 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012.04.07 12:59:26 | 000,664,396 | ---- | M] () -- C:\Windows\System32\perfh007.dat
[2012.04.07 12:59:26 | 000,624,578 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012.04.07 12:59:26 | 000,134,564 | ---- | M] () -- C:\Windows\System32\perfc007.dat
[2012.04.07 12:59:26 | 000,110,216 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012.04.07 10:30:36 | 000,054,156 | ---- | M] () -- C:\Windows\QTFont.qfn
[2012.04.07 10:25:36 | 000,000,776 | ---- | M] () -- C:\Users\Christopher\Desktop\Rainmeter.lnk
[2012.03.23 19:18:02 | 000,000,681 | ---- | M] () -- C:\Users\Public\Desktop\World of Tanks.lnk
[2012.03.19 15:44:50 | 000,007,655 | ---- | M] () -- C:\Users\Christopher\AppData\Local\Resmon.ResmonCfg
[2012.03.19 15:42:49 | 000,002,134 | ---- | M] () -- C:\Users\Christopher\Desktop\3D Vision deaktivieren.lnk
[2012.03.19 15:42:49 | 000,002,132 | ---- | M] () -- C:\Users\Christopher\Desktop\3D Vision aktivieren.lnk
[2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Windows\System32\*.tmp files -> C:\Windows\System32\*.tmp -> ]
[1 C:\Users\Christopher\*.tmp files -> C:\Users\Christopher\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.04.14 18:50:24 | 000,000,911 | ---- | C] () -- C:\Users\Public\Desktop\DS3 Tool.lnk
[2012.04.14 18:50:24 | 000,000,856 | ---- | C] () -- C:\Users\Public\Desktop\Battlefield 3.lnk
[2012.04.14 18:50:24 | 000,000,681 | ---- | C] () -- C:\Users\Public\Desktop\World of Tanks.lnk
[2012.04.14 18:50:23 | 000,002,125 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TuneUp Utilities.lnk
[2012.04.14 18:50:23 | 000,001,738 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Journal.lnk
[2012.04.14 18:50:23 | 000,001,352 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
[2012.04.14 18:50:23 | 000,001,246 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
[2012.04.14 18:50:23 | 000,001,210 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
[2012.04.14 18:50:21 | 000,001,936 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office PowerPoint Viewer 2007.lnk
[2012.04.14 18:50:21 | 000,001,345 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
[2012.04.14 18:50:21 | 000,001,064 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Works-Start.lnk
[2012.04.14 18:50:21 | 000,000,927 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Basic 2008 Express Edition.lnk
[2012.04.14 18:50:20 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
[2012.04.14 18:50:19 | 000,001,804 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader 9.lnk
[2012.04.14 18:50:19 | 000,001,439 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator CS4.lnk
[2012.04.14 18:50:19 | 000,001,299 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Drive CS4.lnk
[2012.04.14 18:50:19 | 000,001,274 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS4.lnk
[2012.04.14 18:50:19 | 000,001,154 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS4.lnk
[2012.04.14 18:50:19 | 000,001,063 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Device Central CS4.lnk
[2012.04.14 18:50:19 | 000,001,008 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS4.lnk
[2012.04.14 18:50:19 | 000,000,970 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS4.lnk
[2012.04.14 18:14:29 | 000,000,760 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2012.04.14 17:56:18 | 000,000,168 | ---- | C] () -- C:\ProgramData\-KAqrhr6E5yneA3r
[2012.04.14 17:56:17 | 000,000,000 | ---- | C] () -- C:\ProgramData\-KAqrhr6E5yneA3
[2012.04.14 17:56:13 | 000,000,256 | ---- | C] () -- C:\ProgramData\KAqrhr6E5yneA3
[2012.04.14 17:56:07 | 000,244,224 | ---- | C] ( ) -- C:\ProgramData\KAqrhr6E5yneA3.exe
[2012.04.07 10:25:36 | 000,000,776 | ---- | C] () -- C:\Users\Christopher\Desktop\Rainmeter.lnk
[2012.03.31 19:40:00 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.03.22 18:18:07 | 000,002,132 | ---- | C] () -- C:\Users\Christopher\Desktop\3D Vision aktivieren.lnk
[2012.03.19 15:42:49 | 000,002,134 | ---- | C] () -- C:\Users\Christopher\Desktop\3D Vision deaktivieren.lnk
[2012.03.13 19:34:25 | 000,000,015 | ---- | C] () -- C:\Windows\Firestorm.INI
[2012.02.29 14:26:56 | 000,416,064 | ---- | C] () -- C:\Windows\System32\nvStreaming.exe
[2012.02.25 14:02:00 | 002,515,790 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin
[2012.02.02 17:18:28 | 000,138,056 | ---- | C] () -- C:\Users\Christopher\AppData\Roaming\PnkBstrK.sys
[2012.01.25 19:59:39 | 000,451,072 | ---- | C] () -- C:\Windows\System32\ISSRemoveSP.exe
[2011.11.02 14:34:36 | 000,000,000 | ---- | C] () -- C:\Users\Christopher\AppData\Local\{80ACD7BD-C9A3-4C42-B8D5-5BEA82B7F54F}
[2011.10.07 15:37:31 | 000,140,800 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2011.10.07 15:36:50 | 000,283,304 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2011.10.07 15:36:28 | 000,076,888 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2011.09.16 18:27:42 | 000,765,952 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2011.09.16 18:27:42 | 000,180,224 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2011.05.14 19:04:38 | 000,110,592 | ---- | C] () -- C:\Windows\System32\FsUsbExDevice.Dll
[2011.05.14 19:04:38 | 000,036,608 | ---- | C] () -- C:\Windows\System32\FsUsbExDisk.Sys
[2011.04.09 13:40:56 | 000,122,880 | ---- | C] () -- C:\Windows\System32\toilet2.dll
[2011.03.08 16:03:09 | 000,000,048 | ---- | C] () -- C:\Windows\scmate.ini
[2011.01.30 14:50:11 | 000,049,152 | ---- | C] () -- C:\Windows\System32\JJAKEn.dll
[2011.01.25 19:29:11 | 000,007,655 | ---- | C] () -- C:\Users\Christopher\AppData\Local\Resmon.ResmonCfg
[2011.01.06 14:53:58 | 000,000,056 | ---- | C] () -- C:\Windows\System32\ezsidmv.dat
[2011.01.04 11:38:27 | 000,000,668 | ---- | C] () -- C:\Users\Christopher\AppData\Roaming\vso_ts_preview.xml
[2011.01.04 11:37:52 | 000,087,608 | ---- | C] () -- C:\Users\Christopher\AppData\Roaming\inst.exe
[2011.01.04 11:37:52 | 000,007,887 | ---- | C] () -- C:\Users\Christopher\AppData\Roaming\pcouffin.cat
[2011.01.04 11:37:52 | 000,001,144 | ---- | C] () -- C:\Users\Christopher\AppData\Roaming\pcouffin.inf
[2010.06.08 15:19:24 | 000,692,224 | ---- | C] () -- C:\Windows\System32\libeay32.dll
[2010.06.08 15:19:24 | 000,151,552 | ---- | C] () -- C:\Windows\System32\ssleay32.dll
[2010.05.25 08:45:24 | 000,974,848 | ---- | C] () -- C:\Windows\System32\cis-2.4.dll
[2010.05.25 08:45:24 | 000,081,920 | ---- | C] () -- C:\Windows\System32\issacapi_bs-2.3.dll
[2010.05.25 08:45:24 | 000,065,536 | ---- | C] () -- C:\Windows\System32\issacapi_pe-2.3.dll
[2010.05.25 08:45:24 | 000,057,344 | ---- | C] () -- C:\Windows\System32\issacapi_se-2.3.dll
[2010.04.20 16:31:43 | 000,936,832 | ---- | C] () -- C:\Windows\System32\M2ElevatedCalls.dll
 
========== LOP Check ==========
 
[2011.10.23 18:18:09 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\.minecraft
[2010.04.08 14:38:15 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Canon
[2010.01.31 19:57:55 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\concept design
[2011.10.09 20:00:12 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\DVDVideoSoft
[2011.10.09 20:00:07 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\DVDVideoSoftIEHelpers
[2011.05.14 18:20:31 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\FileZilla
[2010.06.17 15:02:48 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\flightgear.org
[2010.06.17 15:38:43 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\fltk.org
[2011.05.14 19:25:30 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\GetRightToGo
[2012.02.23 16:46:27 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Leadertech
[2010.02.06 17:54:01 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\MAXON
[2012.02.25 14:01:10 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\MotionDSP
[2012.02.24 19:01:43 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\MotioninJoy
[2012.02.02 16:24:28 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Origin
[2012.04.07 10:24:40 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Rainmeter
[2011.05.14 19:01:56 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Samsung
[2011.11.30 20:18:48 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Teeworlds
[2010.11.05 16:16:25 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Template
[2011.04.21 11:40:35 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Ubisoft
[2009.12.14 19:32:24 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Ulead Systems
[2011.03.15 14:55:42 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Unity
[2011.04.07 16:43:51 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\Vso
[2012.03.25 16:52:43 | 000,000,000 | ---D | M] -- C:\Users\Christopher\AppData\Roaming\wargaming.net
[2012.04.08 12:50:51 | 000,000,000 | ---D | M] -- C:\Users\Familie\AppData\Roaming\.minecraft
[2011.10.09 20:03:02 | 000,000,000 | ---D | M] -- C:\Users\Familie\AppData\Roaming\DVDVideoSoft
[2010.06.21 16:24:55 | 000,000,000 | ---D | M] -- C:\Users\Familie\AppData\Roaming\flightgear.org
[2010.06.21 16:24:03 | 000,000,000 | ---D | M] -- C:\Users\Familie\AppData\Roaming\fltk.org
[2010.09.06 17:39:41 | 000,000,000 | ---D | M] -- C:\Users\Familie\AppData\Roaming\ProtectDisc
[2012.04.11 14:01:10 | 000,032,640 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 
 
========== Alternate Data Streams ==========
 
@Alternate Data Stream - 147 bytes -> C:\ProgramData\TEMP:890CC2F3

< End of report >