Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Neuer laptop dauert ziemlich lange bis er hochgefahren ist

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 24.06.2012, 23:39   #1
Adriana91
 
Neuer laptop dauert ziemlich lange bis er hochgefahren ist - Standard

Neuer laptop dauert ziemlich lange bis er hochgefahren ist



Hallo liebe user

Habe da mal eine frage an euch

hae mir vor zwei wochen ein Asus laptop gekauft
nur wenn ich den hochfahre dauert es ziemlich lange bis ich
damit arbeiten kann kann mir jemand helfen weil ich leider
keine ahnung habe

vieleicht kann mann ja paar sachen deinstalieren die vom werk drauf sind
und wenn ich den task manager starte sind ca 80 prozesse auf kann

vielen dank schonmal für die hilfe

liebe grüsse adriana

Zitat:
Zitat von Adriana91 Beitrag anzeigen
Hallo liebe user

Habe da mal eine frage an euch

hae mir vor zwei wochen ein Asus laptop gekauft
nur wenn ich den hochfahre dauert es ziemlich lange bis ich
damit arbeiten kann kann mir jemand helfen weil ich leider
keine ahnung habe

vieleicht kann mann ja paar sachen deinstalieren die vom werk drauf sind
und wenn ich den task manager starte sind ca 80 prozesse auf kann

vielen dank schonmal für die hilfe

liebe grüsse adriana

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 01:13 on 25/06/2012 (adriana)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-

Alt 25.06.2012, 00:58   #2
Adriana91
 
Neuer laptop dauert ziemlich lange bis er hochgefahren ist - Standard

Neuer laptop dauert ziemlich lange bis er hochgefahren ist



Zitat:
Zitat von Adriana91 Beitrag anzeigen
Hallo liebe user

Habe da mal eine frage an euch

hae mir vor zwei wochen ein Asus laptop gekauft
nur wenn ich den hochfahre dauert es ziemlich lange bis ich
damit arbeiten kann kann mir jemand helfen weil ich leider
keine ahnung habe

vieleicht kann mann ja paar sachen deinstalieren die vom werk drauf sind
und wenn ich den task manager starte sind ca 80 prozesse auf kann

vielen dank schonmal für die hilfe

liebe grüsse adriana




defogger_disable by jpshortstuff (23.02.10.1)
Log created at 01:13 on 25/06/2012 (adriana)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
OTL Logfile:
Code:
ATTFilter
OTL logfile created on: 25.06.2012 01:20:48 - Run 1
OTL by OldTimer - Version 3.2.53.0     Folder = C:\Users\adriana\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 6,46 Gb Available Physical Memory | 81,00% Memory free
15,96 Gb Paging File | 14,24 Gb Available in Paging File | 89,22% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 128,18 Gb Total Space | 72,67 Gb Free Space | 56,69% Space Free | Partition Type: NTFS
Drive D: | 144,91 Gb Total Space | 144,64 Gb Free Space | 99,81% Space Free | Partition Type: NTFS
Drive E: | 4,38 Gb Total Space | 3,06 Gb Free Space | 69,91% Space Free | Partition Type: UDF
 
Computer Name: ADRIANA-PC | User Name: adriana | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Processes (SafeList) ==========
 
PRC - [2012.06.25 01:18:22 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\adriana\Desktop\OTL.exe
PRC - [2012.06.18 20:36:14 | 001,564,368 | ---- | M] () -- C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
PRC - [2012.05.03 18:37:54 | 001,226,096 | ---- | M] (Lavasoft Limited) -- C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe
PRC - [2012.04.27 13:41:02 | 001,073,744 | ---- | M] (Iminent) -- C:\Program Files (x86)\Iminent\Iminent.exe
PRC - [2012.04.27 13:41:02 | 000,884,816 | ---- | M] (Iminent) -- C:\Program Files (x86)\Iminent\Iminent.Messengers.exe
PRC - [2012.03.19 13:38:47 | 002,666,880 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2012.03.07 01:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe
PRC - [2012.03.07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe
PRC - [2012.03.04 14:29:16 | 003,058,304 | ---- | M] (ASUS) -- C:\Windows\AsScrPro.exe
PRC - [2012.02.16 16:01:36 | 000,473,728 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\FaceLogon\sensorsrv.exe
PRC - [2012.02.16 11:37:16 | 000,322,176 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
PRC - [2012.02.15 17:38:10 | 000,174,720 | ---- | M] (ASUSTek Computer Inc.) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
PRC - [2012.02.02 16:33:32 | 002,321,072 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
PRC - [2012.01.09 10:09:56 | 001,556,128 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
PRC - [2011.12.19 13:20:06 | 003,289,032 | ---- | M] (GFI Software) -- C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe
PRC - [2011.11.21 14:22:08 | 000,080,512 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
PRC - [2011.11.21 14:19:50 | 000,096,896 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
PRC - [2011.10.24 17:20:38 | 000,174,720 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
PRC - [2011.02.25 19:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
PRC - [2010.08.20 19:57:06 | 000,107,816 | ---- | M] (CyberLink) -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
PRC - [2010.07.10 08:45:00 | 000,984,400 | ---- | M] (Virage Logic Corporation / Sonic Focus) -- C:\Program Files (x86)\ASUS\ASUS Sonic Focus\SonicFocusTray.exe
PRC - [2009.06.19 10:29:42 | 000,105,016 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
PRC - [2009.06.19 10:29:26 | 002,488,888 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
PRC - [2008.12.22 17:15:34 | 000,174,648 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\WDC.exe
PRC - [2008.08.13 21:00:08 | 000,113,208 | ---- | M] (ASUS) -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
 
 
========== Modules (No Company Name) ==========
 
MOD - [2012.06.18 20:36:14 | 001,564,368 | ---- | M] () -- C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
MOD - [2012.06.16 01:27:17 | 000,253,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsFormsIntegra#\44752ffa92ebb7170951a41898d8b9c6\WindowsFormsIntegration.ni.dll
MOD - [2012.06.16 01:24:58 | 001,072,640 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.IdentityModel\bd28f26b18b8ffeee1a0fbaa98f5810e\System.IdentityModel.ni.dll
MOD - [2012.06.16 01:24:55 | 018,058,752 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\cfece6f67593b4d8bb58d23b7fdcc470\System.ServiceModel.ni.dll
MOD - [2012.06.16 01:20:54 | 000,148,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuratio#\c7d60a49e43964b1ae17e9a080376c6d\System.Configuration.Install.ni.dll
MOD - [2012.06.16 01:20:47 | 001,925,632 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\dbe597aa9c12df5d08fb2f3f9872b834\System.Web.Services.ni.dll
MOD - [2012.06.16 01:20:18 | 000,787,456 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.ni.dll
MOD - [2012.06.16 01:20:18 | 000,236,032 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.EnterpriseSe#\bb40644f323a93fa9bc09be350918ef3\System.EnterpriseServices.Wrapper.dll
MOD - [2012.06.16 01:20:16 | 000,649,728 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Transactions\67a386434938003bceb0752e979dabb3\System.Transactions.ni.dll
MOD - [2012.06.16 01:20:14 | 001,021,952 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Dura#\79ac99fe5274fb82ffcff2c15f71854c\System.Runtime.DurableInstancing.ni.dll
MOD - [2012.06.16 01:20:12 | 000,143,360 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\bb97517e4ca64e02282fca24612ce8ad\SMDiagnostics.ni.dll
MOD - [2012.06.16 01:20:11 | 002,647,040 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runtime.Seri#\8a9fac9cb825b5d2db0bdb867fff940e\System.Runtime.Serialization.ni.dll
MOD - [2012.06.16 01:18:48 | 001,782,272 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\d234eceae699d070b5a5712ce776c01f\System.Xaml.ni.dll
MOD - [2012.06.15 12:06:54 | 000,368,128 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\8e56489276063ededde74e597a121df3\PresentationFramework.Aero.ni.dll
MOD - [2012.06.15 12:05:38 | 014,340,608 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\e717a230496832656b05b515eb9f3bc5\PresentationFramework.ni.dll
MOD - [2012.06.15 12:04:54 | 012,436,480 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\7b7fbe651c6e72f12099a298654c9594\System.Windows.Forms.ni.dll
MOD - [2012.06.15 12:04:34 | 001,591,808 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\6bb439b3f87736d3248ae27d43e2c0d6\System.Drawing.ni.dll
MOD - [2012.06.15 12:04:27 | 012,237,824 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\14a87218ea49639f38097e278b98a3da\PresentationCore.ni.dll
MOD - [2012.06.15 12:03:35 | 003,347,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\46fce56db7685a586d3eeb7c373e3c1c\WindowsBase.ni.dll
MOD - [2012.06.15 12:03:18 | 005,452,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\ba3d70b651454c7d49b407b93663bfed\System.Xml.ni.dll
MOD - [2012.06.15 12:03:08 | 000,971,264 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\cfa9c506bfb9254c89dace7b83bc9f9d\System.Configuration.ni.dll
MOD - [2012.06.15 12:03:06 | 007,967,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\ce9ff6baf9053ed2ed673d948179195c\System.ni.dll
MOD - [2012.06.15 12:02:53 | 011,492,864 | ---- | M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\acfc1391e45fedd2a359778ea57d914c\mscorlib.ni.dll
MOD - [2012.06.15 02:56:38 | 018,000,896 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\199683f6e79076b634ee6cc0a82c0654\PresentationFramework.ni.dll
MOD - [2012.06.15 02:56:03 | 011,451,904 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\e7dc084827f8df2dbdc819db5c633a0d\PresentationCore.ni.dll
MOD - [2012.06.15 02:55:55 | 013,198,336 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\3971e166cf827b6726e142f344061dc9\System.Windows.Forms.ni.dll
MOD - [2012.06.15 02:55:38 | 003,858,432 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\21f37f9f5162af7efb52169012bd111e\WindowsBase.ni.dll
MOD - [2012.06.15 02:55:35 | 001,666,048 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\8c40f40ef36622109793788049fbe9ab\System.Drawing.ni.dll
MOD - [2012.06.15 02:48:55 | 006,815,232 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Data\99d0f7ba920eea1117e45dcd9fec0eb5\System.Data.ni.dll
MOD - [2012.06.15 02:48:34 | 000,595,968 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationFramewo#\a5fa2a1cfc6e9fdc39d9a8f2baa57bc9\PresentationFramework.Aero.ni.dll
MOD - [2012.06.15 02:48:01 | 005,617,664 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d1f299160424bad90fe9f658661389e2\System.Xml.ni.dll
MOD - [2012.06.15 02:47:52 | 000,982,528 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\623d2a0f11dd82bb9bc13d1cb981b239\System.Configuration.ni.dll
MOD - [2012.06.15 02:47:40 | 007,069,184 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\ed91b57205429a23bb91f4499059a459\System.Core.ni.dll
MOD - [2012.06.15 02:47:14 | 009,091,584 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\6f9f0467e8b2dd3f69b015c8e30ac945\System.ni.dll
MOD - [2012.06.15 02:41:48 | 014,412,800 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\3953b1d8b9b57e4957bff8f58145384e\mscorlib.ni.dll
MOD - [2012.01.31 09:25:12 | 001,163,264 | ---- | M] () -- C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll
MOD - [2011.02.19 06:23:39 | 000,249,856 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationFramework.resources\3.0.0.0_de_31bf3856ad364e35\PresentationFramework.resources.dll
MOD - [2011.02.19 06:23:39 | 000,110,592 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\PresentationCore.resources\3.0.0.0_de_31bf3856ad364e35\PresentationCore.resources.dll
MOD - [2011.02.19 06:23:39 | 000,090,112 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\WindowsBase.resources\3.0.0.0_de_31bf3856ad364e35\WindowsBase.resources.dll
MOD - [2010.11.13 01:26:08 | 000,315,392 | ---- | M] () -- C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_de_b77a5c561934e089\mscorlib.resources.dll
MOD - [2010.08.20 19:57:06 | 000,619,816 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll
MOD - [2010.08.20 19:57:00 | 000,013,096 | ---- | M] () -- C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll
 
 
========== Win32 Services (SafeList) ==========
 
SRV:64bit: - File not found [On_Demand | Stopped] -- C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe coreFrameworkHost.exe -- (Amsp)
SRV:64bit: - [2012.03.26 18:49:56 | 000,291,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Security Client\NisSrv.exe -- (NisSrv)
SRV:64bit: - [2012.03.26 18:49:56 | 000,012,600 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Microsoft Security Client\MsMpEng.exe -- (MsMpSvc)
SRV:64bit: - [2012.03.22 10:19:48 | 000,235,520 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2012.03.21 22:30:00 | 000,361,984 | ---- | M] (Advanced Micro Devices, Inc.) [Auto | Running] -- C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe -- (AMD FUEL Service)
SRV:64bit: - [2012.03.07 01:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV:64bit: - [2011.01.26 00:11:56 | 000,379,520 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Windows\SysNative\FBAgent.exe -- (AFBAgent)
SRV:64bit: - [2010.09.17 10:32:56 | 000,241,488 | ---- | M] (Trend Micro Inc.) [Auto | Stopped] -- C:\Program Files\Trend Micro\Titanium\TiMiniService.exe -- (TiMiniService)
SRV:64bit: - [2009.07.14 03:41:27 | 001,011,712 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2012.06.24 13:15:02 | 000,250,056 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012.06.18 20:36:14 | 001,564,368 | ---- | M] () [Auto | Running] -- C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe -- (Guard.Mail.ru)
SRV - [2012.05.03 18:37:54 | 001,226,096 | ---- | M] (Lavasoft Limited) [Auto | Running] -- C:\Program Files (x86)\Ad-Aware Antivirus\AdAwareService.exe -- (Ad-Aware Service)
SRV - [2012.03.20 11:16:08 | 000,247,872 | ---- | M] () [Disabled | Stopped] -- C:\PROGRA~2\ICQ6TO~1\ICQSER~1.EXE -- (ICQ Service)
SRV - [2012.03.19 13:38:47 | 002,666,880 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2011.12.19 13:20:06 | 003,289,032 | ---- | M] (GFI Software) [Auto | Running] -- C:\Program Files (x86)\Ad-Aware Antivirus\SBAMSvc.exe -- (SBAMSvc)
SRV - [2011.11.21 14:22:08 | 000,080,512 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe -- (ASLDRService)
SRV - [2011.11.21 14:19:50 | 000,096,896 | ---- | M] (ASUS) [Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe -- (ATKGFNEXSrv)
SRV - [2011.03.02 06:23:36 | 000,183,560 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.02.25 19:46:22 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE -- (SeaPort)
SRV - [2010.03.18 22:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009.06.10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - [2012.03.22 19:52:08 | 010,721,280 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2012.03.22 09:26:34 | 000,327,168 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2012.03.20 20:44:12 | 000,098,688 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv)
DRV:64bit: - [2012.03.07 01:04:06 | 000,819,032 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx)
DRV:64bit: - [2012.03.07 01:04:04 | 000,337,240 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP)
DRV:64bit: - [2012.03.07 01:02:20 | 000,053,080 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr)
DRV:64bit: - [2012.03.07 01:01:57 | 000,059,224 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi)
DRV:64bit: - [2012.03.07 01:01:52 | 000,069,976 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt)
DRV:64bit: - [2012.03.07 01:01:32 | 000,024,408 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV:64bit: - [2012.03.01 08:46:16 | 000,023,408 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012.02.23 20:32:04 | 000,095,760 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\AtihdW76.sys -- (AtiHDAudioService)
DRV:64bit: - [2011.12.19 12:44:24 | 000,256,632 | ---- | M] (GFI Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\SbFw.sys -- (SbFw)
DRV:64bit: - [2011.12.19 12:44:24 | 000,084,600 | ---- | M] (GFI Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sbwtis.sys -- (sbwtis)
DRV:64bit: - [2011.12.19 12:44:24 | 000,060,536 | ---- | M] (GFI Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\sbhips.sys -- (sbhips)
DRV:64bit: - [2011.11.29 06:59:46 | 000,074,872 | ---- | M] (GFI Software) [File_System | Auto | Running] -- C:\Windows\SysNative\drivers\sbapifs.sys -- (sbapifs)
DRV:64bit: - [2011.10.26 14:23:36 | 000,057,976 | ---- | M] (GFI Software) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\sbredrv.sys -- (SBRE)
DRV:64bit: - [2011.10.19 04:56:00 | 000,107,904 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2011.10.19 04:56:00 | 000,027,008 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2011.09.29 12:16:18 | 000,119,416 | ---- | M] (GFI Software) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\SbFwIm.sys -- (SBFWIMCLMP)
DRV:64bit: - [2011.09.29 12:16:18 | 000,119,416 | ---- | M] (GFI Software) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SbFwIm.sys -- (SBFWIMCL)
DRV:64bit: - [2011.03.07 21:21:16 | 001,594,368 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr)
DRV:64bit: - [2011.03.04 17:16:20 | 000,436,840 | ---- | M] (Realtek                                            ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2011.01.18 11:16:46 | 000,250,984 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV:64bit: - [2010.12.31 12:30:10 | 000,138,024 | ---- | M] (ELAN Microelectronics Corp.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\ETD.sys -- (ETD)
DRV:64bit: - [2010.11.29 16:50:38 | 000,044,672 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\usbfilter.sys -- (usbfilter)
DRV:64bit: - [2010.11.20 15:33:36 | 000,078,720 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2010.11.20 13:07:06 | 000,059,392 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV:64bit: - [2010.11.20 13:07:06 | 000,031,232 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\TsUsbGD.sys -- (TsUsbGD)
DRV:64bit: - [2010.11.04 12:52:54 | 000,038,016 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_xata.sys -- (amd_xata)
DRV:64bit: - [2010.11.04 12:52:52 | 000,075,904 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amd_sata.sys -- (amd_sata)
DRV:64bit: - [2010.09.17 10:52:28 | 000,144,464 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmcomm.sys -- (tmcomm)
DRV:64bit: - [2010.09.17 10:52:28 | 000,105,552 | ---- | M] (Trend Micro Inc.) [Kernel | System | Running] -- C:\Windows\SysNative\drivers\tmtdi.sys -- (tmtdi)
DRV:64bit: - [2010.09.17 10:52:28 | 000,090,704 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmactmon.sys -- (tmactmon)
DRV:64bit: - [2010.09.17 10:52:28 | 000,067,664 | ---- | M] (Trend Micro Inc.) [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\tmevtmgr.sys -- (tmevtmgr)
DRV:64bit: - [2010.02.18 19:18:24 | 000,046,136 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\amdiox64.sys -- (amdiox64)
DRV:64bit: - [2009.07.20 11:29:40 | 000,015,416 | ---- | M] ( ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\kbfiltr.sys -- (kbfiltr)
DRV:64bit: - [2009.07.14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009.07.14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009.07.14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009.07.14 01:21:48 | 000,038,400 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\tpm.sys -- (TPM)
DRV:64bit: - [2009.06.10 22:35:57 | 000,056,832 | ---- | M] (Silicon Integrated Systems Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\SiSG664.sys -- (SiSGbeLH)
DRV:64bit: - [2009.06.10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009.06.10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009.06.10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009.06.10 22:34:18 | 000,057,344 | ---- | M] (Atheros Communications, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20)
DRV:64bit: - [2009.06.10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV:64bit: - [2008.05.23 17:27:28 | 000,154,168 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\WimFltr.sys -- (WimFltr)
DRV - [2011.10.26 14:23:40 | 000,101,112 | ---- | M] (GFI Software) [Kernel | System | Running] -- C:\Windows\SysWOW64\drivers\SBREDrv.sys -- (SBRE)
DRV - [2011.09.07 09:55:04 | 000,017,536 | ---- | M] (ASUS) [Kernel | System | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys -- (ATKWMIACPIIO)
DRV - [2009.07.14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2009.07.02 17:36:14 | 000,015,416 | ---- | M] (ASUS) [Kernel | Auto | Running] -- C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys -- (ASMMAP64)
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus.msn.com
IE - HKLM\..\URLSearchHook:  - No CLSID value found
IE - HKLM\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKLM\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&form=ASUTDF&pc=NP06&src=IE-SearchBox
IE - HKLM\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = hxxp://search.iminent.com/?appId=&ref=toolbox&q={searchTerms}
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus.msn.com
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = hxxp://start.icq.com/
IE - HKCU\..\URLSearchHook:  - No CLSID value found
IE - HKCU\..\URLSearchHook: {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found
IE - HKCU\..\URLSearchHook: {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{6552C7DD-90A4-4387-B795-F8F96747DE19}: "URL" = hxxp://search.icq.com/search/results.php?q={searchTerms}&ch_id=osd
IE - HKCU\..\SearchScopes\{BFFED5CA-8BDF-47CC-AED0-23F4E6D77732}: "URL" = hxxp://search.iminent.com/?appId=&ref=toolbox&q={searchTerms}
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
 
 
========== FireFox ==========
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_3_300_262.dll File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_3_300_262.dll ()
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll File not found
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\adriana\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{22C7F6C6-8D67-4534-92B5-529A0EC09405}: C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension\ [2011.10.19 06:36:18 | 000,000,000 | ---D | M]
 
[2012.06.13 16:59:36 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
O2 - BHO: (ICQ Sparberater) - {0766C1B9-B2DC-46E5-8934-4F3D6B42B1BD} - C:\Program Files (x86)\icq\Internet Explorer\icq.dll (solute gmbh)
O2 - BHO: (TmIEPlugInBHO Class) - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
O2 - BHO: (TBSB01620 Class) - {58124A0B-DC32-4180-9BFF-E0E21AE34026} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (no name) - {84FF7BD6-B47F-46F8-9130-01B2696B36CB} - No CLSID value found.
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (IMinent WebBooster (BHO)) - {A09AB6EB-31B5-454C-97EC-9B294D92EE2A} - C:\Program Files (x86)\Iminent\Iminent.WebBooster.InternetExplorer.dll (Iminent)
O2 - BHO: (TmBpIeBHO Class) - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM\..\Toolbar: (ICQToolBar) - {855F3B16-6D32-4FE6-8A56-BBB695989046} - C:\Program Files (x86)\ICQ6Toolbar\ICQToolBar.dll (ICQ)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (Reg Error: Value error.) - Locked - Reg Error: Value error. File not found
O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Program Files (x86)\DVDVideoSoftTB\prxtbDVD0.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (IMinent Toolbar) - {977AE9CC-AF83-45E8-9E03-E2798216E2D5} - C:\Program Files (x86)\IMinent Toolbar\tbcore3.dll ()
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Program Files\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
O4:64bit: - HKLM..\Run: [RtHDVBg] C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [Trend Micro Client Framework] C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe (Trend Micro Inc.)
O4:64bit: - HKLM..\Run: [Trend Micro Titanium] C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe (Trend Micro Inc.)
O4:64bit: - HKLM..\Run: [VizorHtmlDialog.exe] C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe (Trend Micro Inc.)
O4 - HKLM..\Run: [ASUSPRP] C:\Program Files (x86)\ASUS\APRP\APRP.EXE (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\AsusWSPanel.exe (ecareme)
O4 - HKLM..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUS)
O4 - HKLM..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (ASUSTek Computer Inc.)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Guard.Mail.ru.gui] C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe ()
O4 - HKLM..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe (ASUS)
O4 - HKLM..\Run: [Iminent] C:\Program Files (x86)\Iminent\Iminent.exe (Iminent)
O4 - HKLM..\Run: [IminentMessenger] C:\Program Files (x86)\Iminent\Iminent.Messengers.exe (Iminent)
O4 - HKLM..\Run: [Nuance PDF Reader-reminder] C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe (Nuance Communications, Inc.)
O4 - HKLM..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\ASUS Sonic Focus\SonicFocusTray.exe (Virage Logic Corporation / Sonic Focus)
O4 - HKLM..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe (ASUSTeK Computer Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O8:64bit: - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\adriana\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\adriana\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe (ICQ, LLC.)
O9 - Extra 'Tools' menuitem : ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe (ICQ, LLC.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 83.169.186.161 83.169.186.225
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A993A85B-AF32-4B5A-8DB1-96E9AE362EF9}: DhcpNameServer = 192.168.0.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F79EC98F-AB0B-4104-AF01-EAEEC5721F6A}: DhcpNameServer = 83.169.186.161 83.169.186.225
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll (Trend Micro Inc.)
O18:64bit: - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll (Trend Micro Inc.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
O18 - Protocol\Handler\tmbp {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll (Trend Micro Inc.)
O18 - Protocol\Handler\tmpx {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll (Trend Micro Inc.)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) -  File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012.06.24 21:32:57 | 000,000,000 | RH-- | M] () - E:\autorun.wbcat -- [ UDF ]
O32 - AutoRun File - [2012.06.24 21:32:57 | 000,000,132 | ---- | M] () - E:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 30 Days ==========
 
[2012.06.25 01:17:52 | 000,596,992 | ---- | C] (OldTimer Tools) -- C:\Users\adriana\Desktop\OTL.exe
[2012.06.24 20:51:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\avast! Free Antivirus
[2012.06.24 19:48:24 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
[2012.06.24 19:39:20 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Google
[2012.06.24 19:39:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
[2012.06.24 19:39:13 | 000,337,240 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys
[2012.06.24 19:39:13 | 000,024,408 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys
[2012.06.24 19:39:10 | 000,053,080 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys
[2012.06.24 19:39:09 | 000,059,224 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys
[2012.06.24 19:39:08 | 000,819,032 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys
[2012.06.24 19:39:07 | 000,069,976 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys
[2012.06.24 19:39:06 | 000,258,520 | ---- | C] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe
[2012.06.24 19:37:11 | 000,041,184 | ---- | C] (AVAST Software) -- C:\Windows\avastSS.scr
[2012.06.24 19:37:09 | 000,201,352 | ---- | C] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe
[2012.06.24 19:36:40 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
[2012.06.24 19:36:40 | 000,000,000 | ---D | C] -- C:\Program Files\AVAST Software
[2012.06.24 18:57:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AMD APP
[2012.06.24 18:57:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\ATI Technologies
[2012.06.24 18:57:09 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\ATI Technologies
[2012.06.24 18:56:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD VISION Engine Control Center
[2012.06.24 18:52:46 | 000,000,000 | ---D | C] -- C:\Program Files\ATI Technologies
[2012.06.24 18:46:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ATI Technologies
[2012.06.24 18:30:33 | 000,000,000 | ---D | C] -- C:\Users\adriana\Desktop\data
[2012.06.24 18:30:08 | 000,000,000 | ---D | C] -- C:\Users\adriana\Desktop\Neuer Ordner
[2012.06.23 13:01:06 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\MigWiz
[2012.06.22 23:01:37 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\ElevatedDiagnostics
[2012.06.22 14:54:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSXML 4.0
[2012.06.21 15:43:53 | 000,000,000 | ---D | C] -- C:\BigFishGamesCache
[2012.06.20 18:01:26 | 000,000,000 | ---D | C] -- C:\Windows\pss
[2012.06.20 16:49:31 | 000,000,000 | ---D | C] -- C:\Users\adriana\Desktop\Asus
[2012.06.20 15:56:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad-Aware Antivirus
[2012.06.20 15:55:41 | 000,060,536 | ---- | C] (GFI Software) -- C:\Windows\SysNative\drivers\sbhips.sys
[2012.06.20 15:55:19 | 000,119,416 | ---- | C] (GFI Software) -- C:\Windows\SysNative\drivers\SbFwIm.sys
[2012.06.20 15:55:18 | 000,256,632 | ---- | C] (GFI Software) -- C:\Windows\SysNative\drivers\SbFw.sys
[2012.06.20 15:55:15 | 000,057,976 | ---- | C] (GFI Software) -- C:\Windows\SysNative\drivers\sbredrv.sys
[2012.06.20 15:55:15 | 000,045,936 | ---- | C] (GFI Software) -- C:\Windows\SysNative\sbbd.exe
[2012.06.20 15:55:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Lavasoft
[2012.06.20 15:55:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Ad-Aware Antivirus
[2012.06.20 15:54:12 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Ad-Aware Antivirus
[2012.06.20 00:43:06 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Canneverbe Limited
[2012.06.20 00:43:06 | 000,000,000 | ---D | C] -- C:\ProgramData\Canneverbe Limited
[2012.06.20 00:35:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CDBurnerXP
[2012.06.19 14:58:18 | 000,000,000 | ---D | C] -- C:\Users\Public\Documents\microsoft
[2012.06.19 14:58:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Windows Live SkyDrive
[2012.06.19 14:57:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
[2012.06.19 14:57:10 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2012.06.19 14:22:08 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Windows Live Writer
[2012.06.19 14:22:08 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Windows Live Writer
[2012.06.19 13:50:44 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TeamViewer
[2012.06.19 13:12:14 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\{7E9E7B94-2C85-4289-B0AD-76EBFBBCDC0E}
[2012.06.19 13:12:01 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\{3F9EAC3D-DAC9-4DCA-9C1B-9DC757DB2B2E}
[2012.06.18 21:40:28 | 000,000,000 | ---D | C] -- C:\Users\adriana\Documents\ICQ
[2012.06.18 20:37:00 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\ICQ Search
[2012.06.18 20:36:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ICQ7M
[2012.06.18 20:36:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\icq
[2012.06.18 20:36:16 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQ6Toolbar
[2012.06.18 20:36:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Guard-ICQ
[2012.06.18 20:36:11 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Mozilla
[2012.06.18 20:36:10 | 000,000,000 | ---D | C] -- C:\ProgramData\ICQ
[2012.06.18 20:35:48 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\ICQ
[2012.06.18 20:35:24 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ICQ7M
[2012.06.16 16:04:47 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Iminent
[2012.06.16 16:04:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Iminent
[2012.06.16 16:04:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\IMinent Toolbar
[2012.06.16 16:04:31 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\WMTools Downloaded Files
[2012.06.16 16:04:19 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Iminent
[2012.06.16 16:04:11 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Iminent
[2012.06.16 16:00:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Movie Maker 2.6
[2012.06.16 15:54:19 | 000,000,000 | ---D | C] -- C:\Users\adriana\Tracing
[2012.06.16 14:18:52 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\FLEXnet
[2012.06.16 14:18:49 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Nuance
[2012.06.16 14:18:41 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Zeon
[2012.06.16 00:48:38 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\{2BE75530-0CB8-43DA-92AD-C05CD8E6D2CE}
[2012.06.16 00:36:51 | 000,000,000 | ---D | C] -- C:\ProgramData\P4G
[2012.06.16 00:29:52 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\ATI
[2012.06.16 00:29:52 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\ATI
[2012.06.16 00:25:15 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.06.16 00:25:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2012.06.16 00:25:07 | 000,405,176 | ---- | C] (Newtonsoft) -- C:\Windows\SysWow64\Newtonsoft.Json.Net20.dll
[2012.06.16 00:24:49 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVDVideoSoft
[2012.06.16 00:24:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoft
[2012.06.16 00:12:08 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\TuneUp Software
[2012.06.16 00:11:52 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
[2012.06.16 00:11:45 | 000,000,000 | -HSD | C] -- C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
[2012.06.16 00:11:44 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
[2012.06.16 00:11:21 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\OpenCandy
[2012.06.16 00:10:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Conduit
[2012.06.16 00:10:49 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Conduit
[2012.06.16 00:10:47 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVDVideoSoftTB
[2012.06.16 00:09:35 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\DVDVideoSoft
[2012.06.16 00:01:59 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\{D0CEBB68-AB3C-493F-A4BA-EE402E0AD9E0}
[2012.06.15 23:59:16 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\{BB34F6EB-F870-4876-9DD7-AC2E0574CC6A}
[2012.06.15 14:07:10 | 000,000,000 | ---D | C] -- C:\Users\adriana\Documents\ASUS
[2012.06.15 14:07:01 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\ASUS
[2012.06.15 00:27:25 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Macromed
[2012.06.14 19:49:13 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft Security Client
[2012.06.14 19:49:07 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Security Client
[2012.06.14 19:44:01 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\WinRAR
[2012.06.14 19:44:01 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012.06.14 19:44:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2012.06.14 19:43:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\WinRAR
[2012.06.14 19:06:59 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Diagnostics
[2012.06.13 20:45:24 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\ASUS WebStorage
[2012.06.13 19:25:10 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Facebook
[2012.06.13 18:58:03 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\{C6BCC763-94E1-4081-BB4B-E82211C21B8A}
[2012.06.13 18:54:35 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\{FE75EAB2-A95D-4691-8B03-55C370C74918}
[2012.06.13 18:52:59 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Microsoft Games
[2012.06.13 17:03:23 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Opera
[2012.06.13 17:03:23 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Opera
[2012.06.13 17:03:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Opera
[2012.06.13 16:59:38 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Incredibar.com
[2012.06.13 16:59:36 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2012.06.13 16:59:31 | 000,000,000 | ---D | C] -- C:\Program Files\Web Assistant
[2012.06.13 16:56:17 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Windows Live
[2012.06.13 16:48:24 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Macromedia
[2012.06.13 16:48:19 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Adobe
[2012.06.13 16:43:49 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Trend Micro Titanium Internet Security
[2012.06.13 16:42:02 | 000,000,000 | R--D | C] -- C:\Users\adriana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
[2012.06.13 16:42:02 | 000,000,000 | R--D | C] -- C:\Users\adriana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
[2012.06.13 16:42:01 | 000,000,000 | R--D | C] -- C:\Users\adriana\Searches
[2012.06.13 16:41:51 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Identities
[2012.06.13 16:41:47 | 000,000,000 | R--D | C] -- C:\Users\adriana\Contacts
[2012.06.13 16:41:21 | 000,000,000 | ---D | C] -- C:\ProgramData\FolderView
[2012.06.13 16:40:51 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Power2Go
[2012.06.13 16:40:46 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\VirtualStore
[2012.06.13 16:40:35 | 000,000,000 | --SD | C] -- C:\Users\adriana\AppData\Roaming\Microsoft
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Videos
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Saved Games
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Pictures
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Music
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Links
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Favorites
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Downloads
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Documents
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\Desktop
[2012.06.13 16:40:35 | 000,000,000 | R--D | C] -- C:\Users\adriana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Vorlagen
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\AppData\Local\Verlauf
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\AppData\Local\Temporary Internet Files
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Startmenü
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\SendTo
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Recent
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Netzwerkumgebung
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Lokale Einstellungen
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Documents\Eigene Videos
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Documents\Eigene Musik
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Eigene Dateien
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Documents\Eigene Bilder
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Druckumgebung
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Cookies
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\AppData\Local\Anwendungsdaten
[2012.06.13 16:40:35 | 000,000,000 | -HSD | C] -- C:\Users\adriana\Anwendungsdaten
[2012.06.13 16:40:35 | 000,000,000 | -H-D | C] -- C:\Users\adriana\AppData
[2012.06.13 16:40:35 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Temp
[2012.06.13 16:40:35 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Local\Microsoft
[2012.06.13 16:40:35 | 000,000,000 | ---D | C] -- C:\Users\adriana\AppData\Roaming\Media Center Programs
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
 
========== Files - Modified Within 30 Days ==========
 
[2012.06.25 01:18:22 | 000,596,992 | ---- | M] (OldTimer Tools) -- C:\Users\adriana\Desktop\OTL.exe
[2012.06.25 01:14:01 | 000,000,884 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.06.25 01:13:25 | 000,000,000 | ---- | M] () -- C:\Users\adriana\defogger_reenable
[2012.06.25 01:11:37 | 000,050,477 | ---- | M] () -- C:\Users\adriana\Desktop\Defogger.exe
[2012.06.25 01:07:04 | 000,001,112 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.06.25 01:07:03 | 000,001,108 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.06.25 00:32:44 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012.06.25 00:32:44 | 000,009,696 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012.06.25 00:23:01 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012.06.25 00:22:51 | 2131,529,727 | -HS- | M] () -- C:\hiberfil.sys
[2012.06.24 22:28:26 | 000,007,597 | ---- | M] () -- C:\Users\adriana\AppData\Local\Resmon.ResmonCfg
[2012.06.24 22:11:33 | 000,001,188 | ---- | M] () -- C:\Windows\SysWow64\ServiceConfig.xml
[2012.06.24 22:11:33 | 000,000,438 | ---- | M] () -- C:\Windows\SysWow64\WSCConfig.xml
[2012.06.24 20:51:31 | 000,001,843 | ---- | M] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.06.24 20:51:29 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
[2012.06.24 20:28:11 | 000,000,936 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3588074369-1261094044-2595774120-1002UA.job
[2012.06.24 20:28:05 | 000,000,914 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3588074369-1261094044-2595774120-1002Core.job
[2012.06.24 19:50:39 | 000,001,974 | ---- | M] () -- C:\Windows\SysNative\AutoRunFilter.ini
[2012.06.24 19:49:07 | 000,001,274 | ---- | M] () -- C:\Windows\SysNative\ServiceFilter.ini
[2012.06.24 19:48:10 | 684,125,770 | ---- | M] () -- C:\Windows\MEMORY.DMP
[2012.06.24 19:33:36 | 074,761,776 | ---- | M] () -- C:\Users\adriana\Desktop\avast_free1426_antivirus_setup.exe
[2012.06.24 18:26:04 | 008,770,890 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012.06.24 18:26:04 | 000,748,768 | ---- | M] () -- C:\Windows\SysNative\perfh00C.dat
[2012.06.24 18:26:04 | 000,748,612 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat
[2012.06.24 18:26:04 | 000,746,482 | ---- | M] () -- C:\Windows\SysNative\perfh013.dat
[2012.06.24 18:26:04 | 000,743,304 | ---- | M] () -- C:\Windows\SysNative\perfh010.dat
[2012.06.24 18:26:04 | 000,732,304 | ---- | M] () -- C:\Windows\SysNative\prfh0816.dat
[2012.06.24 18:26:04 | 000,727,836 | ---- | M] () -- C:\Windows\SysNative\perfh019.dat
[2012.06.24 18:26:04 | 000,710,382 | ---- | M] () -- C:\Windows\SysNative\perfh007.dat
[2012.06.24 18:26:04 | 000,665,660 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012.06.24 18:26:04 | 000,609,988 | ---- | M] () -- C:\Windows\SysNative\perfh008.dat
[2012.06.24 18:26:04 | 000,412,970 | ---- | M] () -- C:\Windows\SysNative\prfh0404.dat
[2012.06.24 18:26:04 | 000,396,096 | ---- | M] () -- C:\Windows\SysNative\perfh00D.dat
[2012.06.24 18:26:04 | 000,161,962 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat
[2012.06.24 18:26:04 | 000,156,554 | ---- | M] () -- C:\Windows\SysNative\perfc013.dat
[2012.06.24 18:26:04 | 000,156,526 | ---- | M] () -- C:\Windows\SysNative\prfc0816.dat
[2012.06.24 18:26:04 | 000,154,118 | ---- | M] () -- C:\Windows\SysNative\perfc019.dat
[2012.06.24 18:26:04 | 000,152,930 | ---- | M] () -- C:\Windows\SysNative\perfc00C.dat
[2012.06.24 18:26:04 | 000,152,886 | ---- | M] () -- C:\Windows\SysNative\perfc007.dat
[2012.06.24 18:26:04 | 000,150,426 | ---- | M] () -- C:\Windows\SysNative\perfc010.dat
[2012.06.24 18:26:04 | 000,125,832 | ---- | M] () -- C:\Windows\SysNative\prfc0404.dat
[2012.06.24 18:26:04 | 000,125,832 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012.06.24 18:26:04 | 000,114,630 | ---- | M] () -- C:\Windows\SysNative\perfc008.dat
[2012.06.24 18:26:04 | 000,088,538 | ---- | M] () -- C:\Windows\SysNative\perfc00D.dat
[2012.06.24 18:23:38 | 000,001,172 | ---- | M] () -- C:\Users\Public\Desktop\Microsoft IntelliPoint installieren.lnk
[2012.06.24 15:09:44 | 000,042,947 | ---- | M] () -- C:\Users\adriana\Desktop\181796_335867356493459_792721522_n.jpg
[2012.06.24 15:07:15 | 000,051,166 | ---- | M] () -- C:\Users\adriana\Desktop\556089_335867043160157_725424985_n.jpg
[2012.06.20 17:55:38 | 000,001,870 | ---- | M] () -- C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
[2012.06.20 00:35:47 | 000,001,955 | ---- | M] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk
[2012.06.19 19:40:51 | 000,000,216 | ---- | M] () -- C:\Users\adriana\Desktop\ICQ Spiele.url
[2012.06.19 13:50:57 | 000,001,168 | ---- | M] () -- C:\Users\Public\Desktop\TeamViewer 7.lnk
[2012.06.18 22:53:42 | 000,000,697 | ---- | M] () -- C:\Users\adriana\Desktop\adriana - Verknüpfung.lnk
[2012.06.18 20:37:00 | 000,001,819 | ---- | M] () -- C:\Users\Public\Desktop\ICQ7M.lnk
[2012.06.17 22:41:32 | 000,005,632 | ---- | M] () -- C:\Users\adriana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.06.16 16:04:36 | 000,000,620 | ---- | M] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2012.06.16 00:25:11 | 000,001,404 | ---- | M] () -- C:\Users\adriana\Desktop\Free YouTube to MP3 Converter.lnk
[2012.06.15 19:33:30 | 000,045,056 | ---- | M] () -- C:\Windows\SysWow64\acovcnt.exe
[2012.06.15 14:05:53 | 000,001,835 | ---- | M] () -- C:\Users\Public\Desktop\Opera.lnk
[2012.06.15 11:48:01 | 000,274,464 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012.06.15 02:51:14 | 009,168,368 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012.06.15 01:03:16 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.06.14 19:49:32 | 000,001,945 | ---- | M] () -- C:\Windows\epplauncher.mif
[2012.06.14 19:31:02 | 000,000,080 | ---- | M] () -- C:\Windows\SysNative\Defrag.ini
[2012.06.14 07:37:14 | 000,159,772 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
[2012.06.14 07:37:14 | 000,159,772 | ---- | M] () -- C:\Windows\SysNative\license.rtf
[2 C:\Program Files (x86)\*.tmp files -> C:\Program Files (x86)\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2012.06.25 01:13:25 | 000,000,000 | ---- | C] () -- C:\Users\adriana\defogger_reenable
[2012.06.25 01:11:37 | 000,050,477 | ---- | C] () -- C:\Users\adriana\Desktop\Defogger.exe
[2012.06.24 22:28:26 | 000,007,597 | ---- | C] () -- C:\Users\adriana\AppData\Local\Resmon.ResmonCfg
[2012.06.24 22:11:33 | 000,001,188 | ---- | C] () -- C:\Windows\SysWow64\ServiceConfig.xml
[2012.06.24 22:11:33 | 000,000,438 | ---- | C] () -- C:\Windows\SysWow64\WSCConfig.xml
[2012.06.24 20:51:58 | 000,001,112 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012.06.24 20:51:57 | 000,001,108 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012.06.24 19:48:10 | 684,125,770 | ---- | C] () -- C:\Windows\MEMORY.DMP
[2012.06.24 19:39:14 | 000,001,843 | ---- | C] () -- C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012.06.24 19:39:06 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
[2012.06.24 19:29:00 | 074,761,776 | ---- | C] () -- C:\Users\adriana\Desktop\avast_free1426_antivirus_setup.exe
[2012.06.24 18:23:38 | 000,001,172 | ---- | C] () -- C:\Users\Public\Desktop\Microsoft IntelliPoint installieren.lnk
[2012.06.24 15:09:44 | 000,042,947 | ---- | C] () -- C:\Users\adriana\Desktop\181796_335867356493459_792721522_n.jpg
[2012.06.24 15:07:15 | 000,051,166 | ---- | C] () -- C:\Users\adriana\Desktop\556089_335867043160157_725424985_n.jpg
[2012.06.20 15:56:31 | 000,001,870 | ---- | C] () -- C:\Users\Public\Desktop\Ad-Aware Antivirus.lnk
[2012.06.20 00:35:47 | 000,001,955 | ---- | C] () -- C:\Users\Public\Desktop\CDBurnerXP.lnk
[2012.06.20 00:35:47 | 000,001,905 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
[2012.06.19 19:40:51 | 000,000,216 | ---- | C] () -- C:\Users\adriana\Desktop\ICQ Spiele.url
[2012.06.19 13:50:57 | 000,001,180 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 7.lnk
[2012.06.19 13:50:57 | 000,001,168 | ---- | C] () -- C:\Users\Public\Desktop\TeamViewer 7.lnk
[2012.06.18 22:53:42 | 000,000,697 | ---- | C] () -- C:\Users\adriana\Desktop\adriana - Verknüpfung.lnk
[2012.06.18 20:37:00 | 000,001,819 | ---- | C] () -- C:\Users\Public\Desktop\ICQ7M.lnk
[2012.06.18 20:23:57 | 000,000,936 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3588074369-1261094044-2595774120-1002UA.job
[2012.06.18 20:23:56 | 000,000,914 | ---- | C] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-3588074369-1261094044-2595774120-1002Core.job
[2012.06.16 16:04:34 | 000,000,620 | ---- | C] () -- C:\Windows\SysWow64\InstallUtil.InstallLog
[2012.06.16 16:00:34 | 000,002,507 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker 2.6.lnk
[2012.06.16 00:25:11 | 000,001,404 | ---- | C] () -- C:\Users\adriana\Desktop\Free YouTube to MP3 Converter.lnk
[2012.06.15 22:46:19 | 000,005,632 | ---- | C] () -- C:\Users\adriana\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2012.06.15 14:05:53 | 000,001,835 | ---- | C] () -- C:\Users\Public\Desktop\Opera.lnk
[2012.06.15 01:03:16 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
[2012.06.15 00:27:45 | 000,000,884 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2012.06.14 19:49:32 | 000,001,945 | ---- | C] () -- C:\Windows\epplauncher.mif
[2012.06.14 19:49:27 | 000,001,917 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
[2012.06.13 16:42:57 | 000,001,411 | ---- | C] () -- C:\Users\adriana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
[2012.06.13 16:42:09 | 000,001,445 | ---- | C] () -- C:\Users\adriana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[2012.06.13 16:41:02 | 000,045,056 | ---- | C] () -- C:\Windows\SysWow64\acovcnt.exe
[2012.03.22 09:50:34 | 000,204,960 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat
[2012.03.22 09:50:34 | 000,157,152 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat
[2012.03.21 22:54:32 | 000,059,904 | ---- | C] () -- C:\Windows\SysWow64\OpenVideo.dll
[2012.03.21 22:54:22 | 000,054,784 | ---- | C] () -- C:\Windows\SysWow64\OVDecode.dll
[2012.03.04 14:23:40 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2011.10.19 06:26:32 | 000,131,984 | ---- | C] () -- C:\ProgramData\FullRemove.exe
[2011.10.19 06:11:04 | 009,168,368 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2011.09.13 06:06:18 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
 
========== LOP Check ==========
 
[2012.06.20 17:11:35 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\Ad-Aware Antivirus
[2012.06.13 20:45:24 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\ASUS WebStorage
[2012.06.20 00:43:06 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\Canneverbe Limited
[2012.06.16 00:25:36 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\DVDVideoSoft
[2012.06.16 00:25:15 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\DVDVideoSoftIEHelpers
[2012.06.21 15:41:28 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\ICQ
[2012.06.18 20:37:00 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\ICQ Search
[2012.06.16 16:04:47 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\Iminent
[2012.06.16 14:18:49 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\Nuance
[2012.06.16 00:11:25 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\OpenCandy
[2012.06.13 17:03:23 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\Opera
[2012.06.16 00:12:08 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\TuneUp Software
[2012.06.19 14:22:08 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\Windows Live Writer
[2012.06.16 14:18:41 | 000,000,000 | ---D | M] -- C:\Users\adriana\AppData\Roaming\Zeon
[2012.06.24 20:28:05 | 000,000,914 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3588074369-1261094044-2595774120-1002Core.job
[2012.06.24 20:28:11 | 000,000,936 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3588074369-1261094044-2595774120-1002UA.job
[2009.07.14 07:08:49 | 000,015,982 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT
 
========== Purity Check ==========
 
 

< End of report >
         
--- --- ---


OTL Logfile:
Code:
ATTFilter
OTL Extras logfile created on: 25.06.2012 01:20:48 - Run 1
OTL by OldTimer - Version 3.2.53.0     Folder = C:\Users\adriana\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
7,98 Gb Total Physical Memory | 6,46 Gb Available Physical Memory | 81,00% Memory free
15,96 Gb Paging File | 14,24 Gb Available in Paging File | 89,22% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 128,18 Gb Total Space | 72,67 Gb Free Space | 56,69% Space Free | Partition Type: NTFS
Drive D: | 144,91 Gb Total Space | 144,64 Gb Free Space | 99,81% Space Free | Partition Type: NTFS
Drive E: | 4,38 Gb Total Space | 3,06 Gb Free Space | 69,91% Space Free | Partition Type: UDF
 
Computer Name: ADRIANA-PC | User Name: adriana | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan | Include 64bit Scans
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
.url[@ = InternetShortcut] -- C:\Windows\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\SysWow64\control.exe (Microsoft Corporation)
.html [@ = Opera.HTML] -- C:\Program Files (x86)\Opera\Opera.exe (Opera Software)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [print] -- rundll32.exe %windir%\system32\mshtml.dll,PrintHTML "%1"
http [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
https [open] -- "C:\Program Files (x86)\Opera\Opera.exe" "%1" (Opera Software)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01  [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{1BD4BF24-AC95-46BD-BC0C-A75AC581A952}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{1CD30ED2-FFFD-4A2E-959F-26464A49C8CC}" = lport=138 | protocol=17 | dir=in | app=system | 
"{2189AD48-D1DE-4C00-91B9-F8A3387935A4}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe | 
"{3FD419C9-7CC2-4A74-8DF0-1ABAAF5BDAE0}" = lport=2177 | protocol=17 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{5EE5BEE1-5841-4D2B-BD75-CBD2E4D49AD0}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{64C40323-57A3-4CA5-A9B2-4FD970516295}" = lport=137 | protocol=17 | dir=in | app=system | 
"{6865F3A4-5DA3-4B85-8D37-186F468D1F9E}" = rport=2177 | protocol=17 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{7415A834-D97E-409B-9F27-D811B2A91F3D}" = rport=10243 | protocol=6 | dir=out | app=system | 
"{74FA13B4-F163-4912-92C0-CC8D4B8472CC}" = rport=139 | protocol=6 | dir=out | app=system | 
"{79C71671-3956-48B6-9A1F-2E12B61793DB}" = rport=138 | protocol=17 | dir=out | app=system | 
"{7E872825-AB9B-4159-B8B0-C8DDD0257046}" = rport=137 | protocol=17 | dir=out | app=system | 
"{80E723C7-4BAB-4F70-866E-602C10535D4C}" = lport=10243 | protocol=6 | dir=in | app=system | 
"{9E6FCC28-66E0-4BD5-A5F5-1E76838C8CEE}" = lport=445 | protocol=6 | dir=in | app=system | 
"{B03C009E-0663-4405-A813-AD41DE283954}" = rport=445 | protocol=6 | dir=out | app=system | 
"{BC7FEE4A-2C3F-4322-AB21-08517A5A3941}" = rport=2177 | protocol=6 | dir=out | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D2ADCAD5-B848-46CF-A297-84850188EBA5}" = lport=2177 | protocol=6 | dir=in | svc=qwave | app=%systemroot%\system32\svchost.exe | 
"{D4219798-C70E-4FF9-BC16-9F94AE61B234}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 
"{E53A14AB-4955-4221-B126-57F2B00E1A91}" = lport=139 | protocol=6 | dir=in | app=system | 
"{E5923C30-BE1F-48B5-BB31-2D1C8E5E0F4C}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
"{EEC8BC32-3218-49F4-9DD8-9685EEDFBD88}" = lport=2869 | protocol=6 | dir=in | app=system | 
"{FB4FEBA9-4C91-43AB-85CD-040A88F48152}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | name=@firewallapi.dll,-28539 | 
"{FC9516E8-C2F8-456D-A282-8E2E72010573}" = rport=1900 | protocol=17 | dir=out | svc=ssdpsrv | app=%systemroot%\system32\svchost.exe | 
"{FEF6E6E9-6C81-4FEB-B97A-151CA4DE147F}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{02C4C21F-4BBD-4717-B8A3-7EA361D2AE55}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{0ABA5AB6-5496-44B8-B603-F7E3B9610F8F}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe | 
"{16D0B5C9-27FD-4E42-947A-F3C44857F012}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | 
"{18CEBBE5-5632-4B08-A88C-5EC4354E149C}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | 
"{196F5BE8-5526-48FB-9583-9017C6DA938D}" = protocol=6 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{19E396DD-FCB1-4764-A075-1B2175B60CC6}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7m\icq.exe | 
"{2678C201-E347-4ECC-9DBF-28A70957385E}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{26828DEB-399C-4086-A049-3479DD53D469}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{366E0AF6-17E2-41B8-B871-F26831228046}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\pluginwrapper\opera_plugin_wrapper.exe | 
"{386D0CAC-0382-4660-BB6D-8C3695F79C58}" = dir=in | app=c:\program files (x86)\iminent\iminent.exe | 
"{466242A7-6D09-4DB9-BA8F-CABB32F6EC68}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7m\icq.exe | 
"{49064225-91D8-4B23-BEDB-17E771B387B0}" = protocol=17 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{4B534AB9-A911-4302-8494-EB7B8B4745F7}" = protocol=6 | dir=out | app=system | 
"{68688DCE-DE80-40F8-BC27-AB025DDFA81A}" = protocol=1 | dir=out | name=@firewallapi.dll,-28544 | 
"{69FBA501-251A-4A7B-BD80-C175184E5A49}" = dir=in | app=c:\users\adriana\appdata\local\facebook\video\skype\facebookvideocalling.exe | 
"{6AF643AE-1C62-4625-8CA5-986319AB0518}" = protocol=58 | dir=in | app=system | 
"{76D63945-7B9D-47F7-AFD0-7C78C3055D31}" = protocol=6 | dir=in | app=c:\program files (x86)\opera\opera.exe | 
"{773A6D42-8D81-43DC-83E0-7A842031858B}" = dir=in | app=c:\program files (x86)\windows live\messenger\wlcsdk.exe | 
"{86F26F33-8CC5-44F7-A965-CCC743BF4791}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9962875C-F8B2-4EDC-B8D8-B0FD978D17BC}" = protocol=17 | dir=in | app=c:\program files (x86)\icq7m\icq.exe | 
"{9BB6AD8D-02DC-449F-ACEF-ED0AFD443473}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{9F203CD8-8F23-4F5C-9587-6122C48F2738}" = dir=in | app=c:\program files (x86)\windows live\messenger\msnmsgr.exe | 
"{A22013B1-D383-4579-8D4C-D9F6E457CFA2}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7m\icq.exe | 
"{A3E2FA32-8417-4BAA-A5D8-54FE923C3070}" = protocol=17 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer_service.exe | 
"{A98FD876-0F84-4849-B0C5-34891E3FD099}" = protocol=6 | dir=out | app=%programfiles%\windows media player\wmplayer.exe | 
"{AF506177-7CB6-4786-8055-1E8F3E31483D}" = protocol=17 | dir=in | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{B683DDF8-5AF6-43B0-8E3B-6B8C64BFA613}" = protocol=58 | dir=out | name=@firewallapi.dll,-28546 | 
"{B72B7B6E-CA56-4ED6-8C4E-8474D8FA6A86}" = protocol=17 | dir=in | app=c:\program files (x86)\opera\opera.exe | 
"{B7A0B7B8-7965-4AED-921A-15DFB24BB9D6}" = protocol=6 | dir=out | app=%programfiles(x86)%\windows media player\wmplayer.exe | 
"{B97D82E4-A221-4D3D-9635-6EAEFD5D37E1}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmplayer.exe | 
"{BF2E6392-3CEA-41C0-A063-C30C1B5B68BF}" = protocol=17 | dir=in | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{C3104AA0-8E47-49B2-8F88-5A2319673740}" = protocol=58 | dir=in | name=@firewallapi.dll,-28545 | 
"{C5156004-FA62-4923-9C07-7688A09D4868}" = dir=in | app=c:\program files (x86)\iminent\iminent.messengers.exe | 
"{CF9C880E-2035-4383-989D-FACBEE370738}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7m\icq.exe | 
"{D9446458-6156-46C2-9063-F0335C8CF4FB}" = protocol=17 | dir=out | app=%programfiles%\windows media player\wmpnetwk.exe | 
"{E0DD5C87-879B-42F8-80EB-328DA6E220CC}" = protocol=6 | dir=in | app=c:\program files (x86)\icq7m\icq.exe | 
"{E2FB83E2-19AF-4D3E-ACB2-13C32C2B4641}" = protocol=6 | dir=in | app=c:\program files (x86)\teamviewer\version7\teamviewer.exe | 
"{F47715B2-308E-4819-9730-AB1339AD5046}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | 
"{FE8B1E05-2F53-437A-94B4-493D8948F520}" = protocol=6 | dir=out | svc=upnphost | app=%systemroot%\system32\svchost.exe | 
"{FEF18402-F60C-470F-B921-D26AF415D7D5}" = protocol=1 | dir=in | name=@firewallapi.dll,-28543 | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{071c9b48-7c32-4621-a0ac-3f809523288f}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{13F4A7F3-EABC-4261-AF6B-1317777F0755}" = Fast Boot
"{4572399F-5B78-3C50-7281-4AB6248FC1F0}" = AMD Catalyst Install Manager
"{503F672D-6C84-448A-8F8F-4BC35AC83441}" = AMD APP SDK Runtime
"{6B724485-AC7C-856B-357E-DC7E4AEE6491}" = AMD Media Foundation Decoders
"{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{8E34682C-8118-31F1-BC4C-98CD9675E1C2}" = Microsoft .NET Framework 4 Extended
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}" = ASUS Power4Gear Hybrid
"{9D046B26-7978-47CD-91E6-AC3C1DFBC3D0}" = Microsoft Security Client
"{ABBD4BA8-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Titanium Internet Security
"{ABBD4BA9-6703-40D2-AB1E-5BB1F7DB49A4}" = Trend Micro Titanium Internet Security
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.30319
"{E9117178-6A0D-C220-E0B2-DC80168E6139}" = AMD Fuel
"{E9FF60F2-A2B0-0306-FAAE-770F01D2A719}" = ccc-utility64
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Elantech" = ETDWare PS/2-X64 8.0.5.1_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Microsoft Security Client" = Microsoft Security Essentials
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{04668DF2-D32F-4555-9C7E-35523DCD6544}" = Control ActiveX de Windows Live Mesh para conexiones remotas
"{04BC5330-A4F6-F3B5-A503-0D17FC4DEEC3}" = CCC Help Czech
"{0766C1B9-B2DC-46E5-8934-4F3D6B42B1BD}" = ICQ Sparberater
"{0EDCD03D-BA65-7428-0C1C-8AFDEE962C10}" = CCC Help Finnish
"{12A0F057-9F6E-29F9-4F5D-FB6AC31E94D9}" = Catalyst Control Center Profiles Mobile
"{1795847E-83E1-E20B-35BF-248D50D94D22}" = Catalyst Control Center Graphics Previews Common
"{19EA33FB-B34E-40EA-8B8A-61743AEB795A}" = Wireless Console 3
"{1ABEB415-7C33-2F4D-5BEA-2E1CBCFE6E51}" = CCC Help Korean
"{1ADB965A-F126-85EB-535B-AAC6E6616DE8}" = AMD VISION Engine Control Center
"{1DBD1F12-ED93-49C0-A7CC-56CBDE488158}" = ASUS LifeFrame3
"{1E03DB52-D5CB-4338-A338-E526DD4D4DB1}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live-Uploadtool
"{20774570-B800-143A-B646-EBB761DAD632}" = CCC Help Japanese
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2537426F-389E-8216-EEFD-03486B34C654}" = CCC Help Polish
"{27CEA406-0CA0-19F2-18BF-6EDDD1473B3E}" = CCC Help Chinese Standard
"{286500E1-6F08-7EA0-627D-10278266CDA3}" = CCC Help Dutch
"{2902F983-B4C1-44BA-B85D-5C6D52E2C441}" = Windows Live Mesh ActiveX Control for Remote Connections
"{29F192A3-75A6-4733-DD08-BD0D71356B2D}" = CCC Help German
"{2A242806-A55C-C158-5350-7B843AA36383}" = Catalyst Control Center InstallProxy
"{2E61358C-8F7F-BDC7-1124-26DDFC2022F1}" = CCC Help Greek
"{2F27A663-6A9E-F9B1-7875-9AC585E4E2DB}" = Catalyst Control Center Profiles Mobile
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{3C1608B8-8743-2F73-A9B5-0E29B56909EE}" = CCC Help Chinese Traditional
"{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"{4662E3C5-356C-6C51-12A1-119964C3F19E}" = CCC Help Swedish
"{46F5A007-797E-456A-1C6D-2AC6851F9580}" = CCC Help French
"{4E4497CF-8B9E-3769-8AD4-0E3565BBB93D}" = CCC Help Portuguese
"{52B97218-98CB-4B8B-9283-D213C85E1AA4}" = Windows Live Anmelde-Assistent
"{55D003F4-9599-44BF-BA9E-95D060730DD3}" = Contrôle ActiveX Windows Live Mesh pour connexions à distance
"{622DE1BE-9EDE-49D3-B349-29D64760342A}" = 適用遠端連線的 Windows Live Mesh ActiveX 控制項
"{64452561-169F-4A36-A2FF-B5E118EC65F5}" = ASUS FaceLogon
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7132917B-2D16-7395-C4A1-1F08869BF533}" = CCC Help Italian
"{73E341F6-62E1-42A8-214A-59651F4649FA}" = CCC Help Korean
"{781B39EC-2E18-41FC-9B00-B84E4FFCA85F}" = ICQ7M
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111249233}" = Dream Vacation Solitaire
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113832110}" = Dream Day First Home
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-115320460}" = Turbo Fiesta
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-117080787}" = Plants vs Zombies
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-118716773}" = Deadtime Stories
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver
"{89C6C836-AFBE-8F4A-3EB6-4BB8F5D9B2B5}" = Catalyst Control Center Localization All
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8D806058-2530-4FC9-A4B5-9B80165BD138}" = CCC Help Russian
"{8DEE4371-EECC-8266-160B-881BCA18C242}" = CCC Help Polish
"{8F21291E-0444-4B1D-B9F9-4370A73E346D}" = WinFlash
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{96AE7E41-E34E-47D0-AC07-1091A8127911}" = Realtek USB 2.0 Card Reader
"{96B88A3E-449C-B976-4C21-F9B97E00E1F0}" = CCC Help French
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D4C7DFA-CBBB-4F06-BDAC-94D831406DF0}" = פקד ActiveX של Windows Live Mesh עבור חיבורים מרוחקים
"{9DFD3FE7-7378-5405-4EBA-762DF95D19EC}" = CCC Help Turkish
"{A09F1378-BD95-F125-18C7-1DF13B970C6D}" = Catalyst Control Center Localization All
"{A0C690DD-FAD2-7234-45B8-4DF7466FE93C}" = CCC Help Thai
"{A0D1F214-F938-BABF-097F-E70233F7737E}" = CCC Help Italian
"{A368CC4F-B417-A9E6-D72C-C874D644CEDF}" = CCC Help Norwegian
"{A62015B5-5510-9893-2AD8-D8E303857147}" = CCC Help Portuguese
"{A6CD541A-2A16-026B-BD94-199288B4251C}" = CCC Help Hungarian
"{A76AA284-E52D-47E6-9E4F-B85DBF8E35C3}" = IMinent Toolbar
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}" = ATK Package
"{AE6443AB-38CA-EEB5-8168-5D3871C2D5BE}" = CCC Help Dutch
"{AED2DD42-9853-407E-A6BC-8A1D6B715909}" = Windows Live Messenger
"{B0002707-4F7E-4745-88A7-852DA8A88635}" = ASUS Sonic Focus
"{B0A6D594-DAA5-87D6-2C37-2804B3A0C198}" = CCC Help Japanese
"{B3DAF54F-DB25-4586-9EF1-96D24BB14088}" = Windows Movie Maker 2.6
"{B480904D-F73F-4673-B034-8A5F492C9184}" = Nuance PDF Reader
"{BCB0D6F7-7EAB-4009-A6F2-8E0E7F317773}" = Элемент управления Windows Live Mesh ActiveX для удаленных подключений
"{C32CE55C-12BA-4951-8797-0967FDEF556F}" = Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen
"{C4A31CC0-9DB3-CD63-F71A-93C9242FCF80}" = CCC Help Hungarian
"{C5398A89-516C-4DAF-BA07-EE7949090E56}" = Windows Live Mesh ActiveX control for remote connections
"{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}" = Windows Live Mesh ActiveX Control for Remote Connections
"{C9200AD6-313C-4DCE-AC4D-0EA3795563FA}" = CCC Help Turkish
"{CAFA57E8-8927-4912-AFCF-B0AA3837E989}" = Windows Live Essentials
"{CBC2D797-3FD0-3B46-ED28-CF7F205E4402}" = CCC Help Thai
"{CD5B7679-12CF-DD7A-9A55-7D803C90D03E}" = CCC Help Danish
"{CD70FB8F-A63C-DD46-49B8-D769754E191B}" = CCC Help Russian
"{D2041A37-5FEC-49F0-AE5C-3F2FFDFAA4F4}" = Windows Live Call
"{D3694B69-6F8C-42D3-8A0A-EB2AB528C02C}" = Atheros Client Installation Program
"{D39F0676-163E-4595-A917-E28F99BBD4D2}" = ASUS AI Recovery
"{D92302B0-F400-DCD1-B2CC-3434CD49BFE1}" = CCC Help Spanish
"{DF9ABEE2-E295-0C3F-52E7-ACDD161D4D90}" = CCC Help Norwegian
"{E18B30AA-6E2D-480C-B918-AF61009F4010}" = عنصر تحكم ActiveX الخاص بـ Windows Live Mesh للاتصالات البعيدة
"{E54EEB5D-41ED-40FE-B4A8-8565DB81469B}" = Controlo ActiveX do Windows Live Mesh para Ligações Remotas
"{E7667BC5-E028-5946-2D9F-F96ED37A8EFE}" = CCC Help English
"{E829F209-62EA-4D95-8639-50AF27D84798}" = CCC Help Swedish
"{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}" = ASUS Virtual Camera
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F1132A32-7F8C-C85B-4811-9D3B879468E4}" = CCC Help Chinese Traditional
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F665F3B8-01B4-46A9-8E47-FF8DC2208C9F}" = Στοιχείο ελέγχου ActiveX του Windows Live Mesh για απομακρυσμένες συνδέσεις
"{F7CF0E9A-D48B-4942-9537-259ED0568DF4}" = Iminent
"{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}" = ASUS Live Update
"{FC5C4105-7B1A-3210-C11A-F522F25FDCFA}" = CCC Help Chinese Standard
"{fc8208f2-b1c1-4253-9e89-d518e983b7bb}" = Ad-Aware Antivirus
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Asus Vibe2.0" = AsusVibe2.0
"ASUS WebStorage" = ASUS WebStorage
"ASUS_Screensaver" = ASUS_Screensaver
"avast" = avast! Free Antivirus
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.11.24.608
"Game Park Console" = Game Park Console
"Guard.Mail.ru" = Guard.ICQ
"ICQToolbar" = ICQ Toolbar
"IMBoosterARP" = Iminent
"InstallShield_{1FBF6C24-C1FD-4101-A42B-0C564F9E8E79}" = CyberLink Media Suite
"InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}" = CyberLink Power2Go
"InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}" = CyberLink LabelPrint
"Opera 12.00.1467" = Opera 12.00
"TeamViewer 7" = TeamViewer 7
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.11 (32-Bit)
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 15.06.2012 18:30:54 | Computer Name = adriana-pc | Source = MsiInstaller | ID = 11719
Description = 
 
Error - 15.06.2012 18:37:47 | Computer Name = adriana-pc | Source = MsiInstaller | ID = 11722
Description = 
 
Error - 16.06.2012 09:58:44 | Computer Name = adriana-pc | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\adriana\Desktop\SoftonicDownloader_fuer_windows-movie-maker.exe".
 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche
 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.
In
 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
Error - 16.06.2012 09:58:47 | Computer Name = adriana-pc | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\adriana\Desktop\SoftonicDownloader_fuer_windows-movie-maker.exe".
 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche
 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.
In
 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
Error - 16.06.2012 09:58:50 | Computer Name = adriana-pc | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\adriana\Desktop\SoftonicDownloader_fuer_windows-movie-maker.exe".
 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche
 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.
In
 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
Error - 16.06.2012 09:58:56 | Computer Name = adriana-pc | Source = SideBySide | ID = 16842832
Description = Fehler beim Generieren des Aktivierungskontexts für "C:\Users\adriana\Desktop\SoftonicDownloader_fuer_windows-movie-maker.exe".
 Fehler in  Manifest- oder Richtliniendatei "" in Zeile .  Eine für die Anwendung erforderliche
 Komponentenversion steht in Konflikt mit  einer anderen, bereits aktiven Komponentenversion.
In
 Konflikt stehende Komponenten:.  Komponente 1: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest.
Komponente
 2: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest.
 
Error - 17.06.2012 11:34:51 | Computer Name = adriana-pc | Source = Application Hang | ID = 1002
Description = Programm iexplore.exe, Version 9.0.8112.16446 kann nicht mehr unter
 Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf 
in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem
 zu suchen.    Prozess-ID: e5c    Startzeit: 01cd4c9df43fba52    Endzeit: 40    Anwendungspfad: 
C:\Program Files (x86)\Internet Explorer\iexplore.exe    Berichts-ID:   
 
Error - 17.06.2012 14:08:32 | Computer Name = adriana-pc | Source = Iminent | ID = 0
Description = 
 
Error - 17.06.2012 18:17:13 | Computer Name = adriana-pc | Source = MsiInstaller | ID = 11722
Description = 
 
Error - 18.06.2012 14:36:34 | Computer Name = adriana-pc | Source = Application Error | ID = 1000
Description = Name der fehlerhaften Anwendung: iexplore.exe, Version: 9.0.8112.16446,
 Zeitstempel: 0x4fb57c8f  Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0,
 Zeitstempel: 0x00000000  Ausnahmecode: 0xc0000005  Fehleroffset: 0x0053000a  ID des fehlerhaften
 Prozesses: 0x36c  Startzeit der fehlerhaften Anwendung: 0x01cd4d814245663e  Pfad der
 fehlerhaften Anwendung: C:\Program Files (x86)\Internet Explorer\iexplore.exe  Pfad
 des fehlerhaften Moduls: unknown  Berichtskennung: 873c427b-b974-11e1-9ed3-c86000d5f74a
 
[ System Events ]
Error - 21.06.2012 13:05:01 | Computer Name = adriana-pc | Source = Microsoft-Windows-LanguagePackSetup | ID = 1043
Description = Das Sprachpaket für nl-NL kann von CBS nicht entfernt werden. Zurückgegebener
 CBS-Fehlercode: 0x80073701.
 
Error - 21.06.2012 13:11:17 | Computer Name = adriana-pc | Source = Microsoft-Windows-LanguagePackSetup | ID = 1003
Description = CBS-Fehler 0x80073701 '' bei Verwendung des Benutzeroberflächen-Sprachpakets
 für pt-PT.
 
Error - 21.06.2012 13:11:17 | Computer Name = adriana-pc | Source = Microsoft-Windows-LanguagePackSetup | ID = 1043
Description = Das Sprachpaket für pt-PT kann von CBS nicht entfernt werden. Zurückgegebener
 CBS-Fehlercode: 0x80073701.
 
Error - 21.06.2012 13:16:49 | Computer Name = adriana-pc | Source = Microsoft-Windows-LanguagePackSetup | ID = 1003
Description = CBS-Fehler 0x80073701 '' bei Verwendung des Benutzeroberflächen-Sprachpakets
 für ru-RU.
 
Error - 21.06.2012 13:16:49 | Computer Name = adriana-pc | Source = Microsoft-Windows-LanguagePackSetup | ID = 1043
Description = Das Sprachpaket für ru-RU kann von CBS nicht entfernt werden. Zurückgegebener
 CBS-Fehlercode: 0x80073701.
 
Error - 21.06.2012 13:22:12 | Computer Name = adriana-pc | Source = Microsoft-Windows-LanguagePackSetup | ID = 1003
Description = CBS-Fehler 0x80073701 '' bei Verwendung des Benutzeroberflächen-Sprachpakets
 für es-ES.
 
Error - 21.06.2012 13:22:12 | Computer Name = adriana-pc | Source = Microsoft-Windows-LanguagePackSetup | ID = 1043
Description = Das Sprachpaket für es-ES kann von CBS nicht entfernt werden. Zurückgegebener
 CBS-Fehlercode: 0x80073701.
 
Error - 21.06.2012 14:24:20 | Computer Name = adriana-pc | Source = DCOM | ID = 10010
Description = 
 
Error - 21.06.2012 16:00:21 | Computer Name = adriana-pc | Source = Microsoft Antimalware | ID = 2001
Description = Beim Aktualisieren der Signaturen wurde von %%860 ein Fehler festgestellt.

	Neue
 Signaturversion:      Vorherige Signaturversion: 1.129.117.0     Aktualisierungsquelle: %%859

	Aktualisierungsphase:
 %%852     Quellpfad: hxxp://www.microsoft.com     Signaturtyp: %%800     Aktualisierungstyp: %%803

	Benutzer:
 NT-AUTORITÄT\SYSTEM     Aktuelle Modulversion:      Vorherige Modulversion: 1.1.8502.0     Fehlercode:
 0x8024402c     Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates.
 Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie
 unter "Hilfe und Support". 
 
Error - 22.06.2012 08:57:25 | Computer Name = adriana-pc | Source = Microsoft Antimalware | ID = 2001
Description = Beim Aktualisieren der Signaturen wurde von %%860 ein Fehler festgestellt.

	Neue
 Signaturversion:      Vorherige Signaturversion: 1.129.117.0     Aktualisierungsquelle: %%859

	Aktualisierungsphase:
 %%852     Quellpfad: hxxp://www.microsoft.com     Signaturtyp: %%800     Aktualisierungstyp: %%803

	Benutzer:
 NT-AUTORITÄT\SYSTEM     Aktuelle Modulversion:      Vorherige Modulversion: 1.1.8502.0     Fehlercode:
 0x8024402c     Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates.
 Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie
 unter "Hilfe und Support". 
 
 
< End of report >
         
--- --- ---
__________________


Alt 26.06.2012, 20:23   #3
Adriana91
 
Neuer laptop dauert ziemlich lange bis er hochgefahren ist - Standard

Neuer laptop dauert ziemlich lange bis er hochgefahren ist



Kann mir den keiner helfen?
__________________

Antwort

Themen zu Neuer laptop dauert ziemlich lange bis er hochgefahren ist
ahnung, arbeiten, asus, dauert, deinstaliere, deinstalieren, frage, gekauft, hochgefahren, lange, laptop, liebe, manager, neuer, prozesse, sache, sachen, schonmal, starte, task manager, woche, wochen, ziemlich



Ähnliche Themen: Neuer laptop dauert ziemlich lange bis er hochgefahren ist


  1. Win7 64bit Pc-Start dauert lange
    Alles rund um Windows - 25.09.2014 (23)
  2. Firefox öffnet selbstständig Fenster und Hochfahren dauert lange
    Plagegeister aller Art und deren Bekämpfung - 25.05.2014 (17)
  3. Herunterfahren dauert zu lange. Virus/Trojaner?
    Log-Analyse und Auswertung - 17.10.2013 (5)
  4. Windows Vista 64 bit: IE, Skript dauert zu lange, delta-search
    Log-Analyse und Auswertung - 08.08.2013 (15)
  5. virenscan dauert lange?
    Antiviren-, Firewall- und andere Schutzprogramme - 24.06.2013 (2)
  6. Startzeit dauert sehr lange - Win7 Home Premium 64
    Log-Analyse und Auswertung - 30.05.2013 (3)
  7. Erstausführung des Rechtsklicks dauert zu lange Windows 8
    Alles rund um Windows - 14.04.2013 (2)
  8. Hochfahren, Runterfahren, Programmstarts - alles dauert extrem lange
    Plagegeister aller Art und deren Bekämpfung - 31.10.2011 (5)
  9. Windows Start dauert sehr lange
    Plagegeister aller Art und deren Bekämpfung - 01.10.2010 (6)
  10. Aufrufen von Ordnern und Links dauert sehr lange
    Alles rund um Windows - 17.05.2010 (16)
  11. Internetseiten-Aufbau dauert zu lange
    Log-Analyse und Auswertung - 14.02.2010 (11)
  12. System langsam, hochfahren dauert zu lange, sowie Programmausführungen!
    Plagegeister aller Art und deren Bekämpfung - 25.11.2009 (1)
  13. Windows Start dauert lange
    Log-Analyse und Auswertung - 30.01.2009 (0)
  14. Der Start von WinXP dauert viel zu lange ...
    Log-Analyse und Auswertung - 25.09.2008 (1)
  15. Windows wird gestartet dauert lange
    Alles rund um Windows - 11.03.2008 (2)
  16. Wie lange dauert es bis ein Trojaner den PC ausspioniert hat?
    Plagegeister aller Art und deren Bekämpfung - 26.04.2005 (5)
  17. Wie lange dauert eine Neuinstallation von Windows XP
    Alles rund um Windows - 05.01.2005 (4)

Zum Thema Neuer laptop dauert ziemlich lange bis er hochgefahren ist - Hallo liebe user Habe da mal eine frage an euch hae mir vor zwei wochen ein Asus laptop gekauft nur wenn ich den hochfahre dauert es ziemlich lange bis ich - Neuer laptop dauert ziemlich lange bis er hochgefahren ist...
Archiv
Du betrachtest: Neuer laptop dauert ziemlich lange bis er hochgefahren ist auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.